Skip to main content
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it
Can We Really Cut Our FCA Fine in Half by Self-Reporting?Whistleblowing & Reporting
4 min readFor Third-Party Risk Managers

Can We Really Cut Our FCA Fine in Half by Self-Reporting?

The DOJ and HHS have introduced a pilot program that's raising eyebrows in healthcare compliance teams. Can voluntary disclosure really reduce False Claims Act (FCA) fines to less than half? After years of facing steep penalties, this sounds almost too good to be true.

These questions stem from the gap between what a press release promises and the reality of dealing with investigators. Let's explore what this pilot program means for your risk management strategy.

Understanding the "Less Than Half" Promise

The DOJ announcement suggests healthcare entities "may be able to pay less than half the steep fines" by voluntarily reporting. This isn't a fixed formula; it's negotiated case-by-case.

Typically, FCA penalties include treble damages (three times the government's loss) plus statutory penalties. For $1 million in improper Medicare payments, you're looking at $3 million in damages before per-claim penalties.

"Less than half" likely means you'd pay between single and double damages, depending on factors like how quickly you disclosed, the thoroughness of your internal investigation, and whether you've implemented fixes. The exact amount is determined during settlement discussions.

The real question is whether the discount is worth the risk of inviting scrutiny you might have avoided.

What Constitutes "Voluntary" Disclosure?

Voluntary means you discovered the issue through your own monitoring and reported it before the government got involved. If HHS auditors have already requested documents, a whistleblower has filed a qui tam suit, or you're responding to a subpoena, you've missed the window.

Your team needs to:

  • Confirm the violation through an internal investigation
  • Quantify the scope and financial impact
  • Identify root causes
  • Begin remediation

You must do this quickly enough to stay ahead of any external investigation. This requires robust internal monitoring systems or a bit of luck.

One challenge: what if you suspect a problem but aren't sure yet? The pilot doesn't clarify if you can disclose preliminary findings while still investigating. Disclosing too early might overstate the problem, while waiting too long could mean losing the voluntary disclosure benefit.

When to Self-Disclose FCA Issues

Self-disclosure is advisable when:

  • The violation is clear and quantifiable
  • The financial exposure is significant
  • Your investigation shows systemic issues
  • There's evidence the problem would surface through external audit or whistleblower report

It's riskier when:

  • The legal question is ambiguous (like billing interpretation disputes)
  • The exposure is small
  • You've already fixed the root cause and the issue was isolated
  • Disclosure would trigger mandatory reporting to other agencies

The pilot program doesn't change the fact that you're inviting a government investigation. Even with a discount, it will be thorough, expensive, and disruptive. The discount has to justify that cost.

Enhancing Internal Monitoring

To benefit from voluntary disclosure, you need to identify problems before anyone else does.

Your compliance monitoring should catch issues at the trend level, not just the crisis level. Look for patterns in claim denials, unusual billing volumes, or systematic coding errors. By the time a problem is obvious, it might be too late to claim voluntary disclosure.

Consider:

  • More frequent sampling of high-risk billing areas
  • Automated flags for statistical anomalies in claim patterns
  • Stronger first-line monitoring by billing staff
  • Clear escalation protocols so potential issues reach compliance quickly

The goal is to find problems early enough to fix quietly, but serious enough that voluntary disclosure makes sense if they've caused measurable harm.

Challenges for Small Providers

Smaller organizations face unique challenges. Conducting a thorough internal investigation requires legal support, data analysis, and often outside counsel, which can be costly.

If you're a small provider, assess whether you have the infrastructure to detect FCA issues reliably. If not, the pilot program highlights a gap you need to address.

Managing Vendor and Contractor Oversight

Healthcare entities are liable for FCA violations by contractors and third-party intermediaries. The pilot program doesn't exempt third-party conduct, meaning you could self-disclose issues you didn't directly cause but are responsible for.

You need:

  • Contractual rights to audit billing practices
  • Regular testing of contractor compliance with Medicare/Medicaid rules
  • Clear reporting obligations when contractors identify potential violations
  • Documented oversight showing active monitoring

Ensure your contracts allow you to find out about violations early.

Next Steps

The DOJ and HHS haven't published detailed program guidelines yet. Before making any disclosure decision, consult legal counsel experienced in FCA defense and settlement negotiations.

Review your current monitoring systems. Can you detect the billing errors that lead to FCA exposure? How quickly would you know? The pilot program incentivizes early detection, but only if you can act on what you find.

The program signals that DOJ and HHS want to encourage self-policing in healthcare. Whether it's worth the risk depends on what you find when you look.

DOJ FCA Guidance

Promotional banner for the Pentest Readiness checklist download

You Might Also Like