interactions between healthcare companies, healthcare providers and other third parties, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. It is possible that governmental authorities may conclude that our business practices, including our consulting and other financial arrangements with physicians, do not comply with current or future statutes, regulations, agency guidance or case law involving applicable healthcare laws. Responding to investigations can be time and resource-consuming and can divert management’s attention from the business. Any such investigation or settlement could increase our costs or otherwise have an adverse effect on our business.
Ensuring that our business arrangements with third parties comply with applicable healthcare laws and regulations is costly. If our operations are found to be in violation of any of these laws or any other current or future governmental laws and regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, damages, fines, disgorgement, individual imprisonment, exclusion from government funded healthcare programs, such as Medicare and Medicaid, contractual damages, reputational harm, diminished profits and future earnings, additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws, and the curtailment or restructuring of our operations, any of which could substantially disrupt our operations. If any of the physicians or other healthcare providers or entities with whom we do business is found to be not in compliance with applicable laws, they may be subject to significant criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs.
We are subject to certain U.S. anti-corruption, anti-money laundering, export control, sanctions, and other trade laws and regulations and may become subject to their similar foreign equivalents. As a result, we can face serious consequences for violations.
U.S. and foreign anti-corruption, anti-money laundering, export control, sanctions, and other trade laws and regulations, or collectively, Trade Laws, prohibit, among other things, companies and their employees, agents, legal counsel, accountants, consultants, contractors, and other partners from authorizing, promising, offering, providing, soliciting, or receiving, directly or indirectly, corrupt or improper payments or anything else of value to or from recipients in the public or private sector. Violations of Trade Laws can result in substantial criminal fines and civil penalties, imprisonment, the loss of trade privileges, debarment, tax reassessments, breach of contract and fraud litigation, reputational harm, and other consequences. We have direct or indirect interactions with officials and employees of government agencies or government-affiliated hospitals, universities, and other organizations. We also expect that we may engage in non-U.S. activities over time. We expect to rely on third-party suppliers and/or third parties to obtain necessary permits, licenses, and patent registrations. We can be held liable for the corrupt or other illegal activities of our personnel, agents, or partners, even if we do not explicitly authorize or have prior knowledge of such activities. Any violations of the laws and regulations described above may result in substantial civil and criminal fines and penalties, imprisonment, the loss of export or import privileges, debarment, tax reassessments, breach of contract and fraud litigation, reputational harm and other consequences.
We may be required to comply with laws governing the transmission, security and privacy of health information that require significant compliance costs, and any failure to comply with these laws could result in material criminal and civil penalties.
Under the administrative simplification provisions of HIPAA, the U.S. Department of Health and Human Services, or HHS, has issued regulations which establish uniform standards governing the conduct of certain electronic healthcare transactions and the protection of individually identifiable health information, including protected health information, or PHI, by certain healthcare providers and other covered entities, and their “business associates,” which are persons or entities that perform certain services for, or on behalf of, a covered entity that involves creating, receiving, maintaining or transmitting PHI as well as their covered subcontractors.
The HIPAA privacy regulations regulate the use and disclosure of PHI by covered entities engaging in certain electronic transactions or “standard transactions.” They also set forth certain rights that an individual has
43