1. Pressures on Health Care Staff Increase Whistleblower Potential Beyond the Norm

The pressure of the COVID-19 public health emergency has prompted organizational providers to rapidly expand capacity in the face of supply and staffing shortages or, conversely, to cut costs drastically in an effort to stay afloat as elective (and typically more profitable) services are limited, delayed or canceled. This creates a unique workload and financial pressures on health care workers. Widespread employee dissatisfaction in the wake of COVID-19 will fuel a range of lawsuits, including the potential for fraud litigation, with overworked, furloughed, or terminated employees blowing the whistle on practices perceived to be noncompliant both during and pre-dating the public health emergency.[1] The sheer increase in the volume of laid-off or financially disadvantaged providers will likely increase the number of whistleblower actions.

Also, the confusion and constant evolution of legal requirements in the COVID-19 environment may independently trigger a deluge of whistleblower activity. Health care workers with legitimate concerns about the lack of appropriate PPE may not realize that their concerns are not the result of noncompliance or negligence on the part of their organization. The ever-changing regulatory flexibilities and associated guidance mean that previously recognized “best practices” or prohibited conduct may frequently change or be temporarily permitted, leading health care workers to question organizational practices. Disagreements will continue to arise between health care organizations and their workers related to tough choices necessary to effectively respond to COVID-19 financial and patient care pressures. In short, even compliant practices may trigger whistleblower activity if there is confusion and miscommunication about changed practices.

1. Regulatory Flexibility and Relief Funding Are Separate: Don’t Confuse Them

Providers should not confuse regulatory flexibility with relief funding: the remedy for a strained operational response is regulatory flexibility, and the chief remedy for significant financial loss is relief funding. Providers do not necessarily have carte blanche to take advantage of every regulatory flexibility for any and all patient care scenarios, and liberal interpretations of the scope of these flexibilities may create additional liability. It is reasonable to anticipate the health care industry’s response will be second-guessed at some point.

The False Claims Act (“FCA”) is the federal government’s primary vehicle for imposing civil penalties on health care providers who knowingly submit claims to Medicare or state Medicaid programs that do not meet the conditions of payment. During this public health emergency, several of these conditions have been altered or waived through regulatory flexibilities.[2] Generally speaking, a waiver is appropriate only as needed to respond to the public health emergency. Depending on the scenario, if a provider uses regulatory flexibility beyond what is necessary to respond to COVID-19, the provider may not meet the applicable conditions of payment and may be exposed to FCA liability.

1. There Is No Immunity from Fraud

Even the broadest, most encompassing immunity available during the public health emergency does not protect against willful misconduct. Additionally, the confusion and fear of a pandemic creates an ideal situation for bad actors to engage in fraud. Fraudulent submission of claims can trigger both criminal and civil penalties, and the government is moving swiftly in this regard. State attorneys general have begun forming joint task forces with U.S. Attorneys with the specific purpose of targeting COVID-19 related health care fraud.[3] Already, the U.S. Attorney’s Office for the District of Rhode Island announced it had filed federal criminal charges in response to a fraudulent application for a Paycheck Protection Program (“PPP”) loan.[4]

1. Scope, Scope, Scope!

It cannot be stressed enough: every government action limits risk in different ways. The term “blanket” waiver can be misleading.[5] Every regulatory flexibility is limited by:

• The jurisdiction and authority of the government branch or agency that issued it;
• The provider type to which it applies;
• The conduct it protects or permits;[6]
• The geographic area to which it applies;
• The timeframe of its applicability;[7] and
• The specific relief it provides.

For example, some states have issued executive orders protecting health care entities and individual providers from professional liability under state negligence laws for services rendered in response to the public health emergency. Some states recognize that providers operating under an expanded scope of practice or license, and with limited resources available, might not meet the pre-COVID-19 standards of care. But immunity from patients’ medical malpractice claims in state court does not preclude the U.S. from imposing penalties when the same conduct violates un-waived conditions of payment for claims related to that treatment. This is particularly true for allegations that services were not medically necessary. Moreover, while negligence may be excused under state immunities, most levels of culpability beyond that (e.g., recklessness or gross negligence) are not waived.

Failure to attend to the scope and time-limited nature of regulatory flexibilities may form the foundation of a whistleblower’s argument that the provider knowingly submitted a false claim. Providers that affirmatively modify operational processes in reliance on regulatory flexibilities will be ascribed with knowledge of the applicable limitations and timeframe, and it may be difficult to establish that the submission of noncompliant claims was an unknowing mistake rather than knowing fraud, particularly once the emergency expires.

1. Today’s Relief is Tomorrow’s FCA Investigation

The relief funds authorized under the CARES Act, such as the Provider Relief Fund and the PPP, are built-in sources of FCA liability. Federal and state fraud investigations and enforcement are certain to arise from pervasive audits related to relief funds. The Provider Relief Fund website[8] explicitly states that the terms and conditions for the funds are intended to combat fraud and that “[t]here will be significant anti- fraud and auditing work done by HHS, including the work of the Office of the Inspector General.” Unfortunately, the terms and conditions attendant to the various relief funds are constantly evolving, making it difficult for providers to evaluate their ability to comply with the terms and the risks of accepting the funds.

Applications to obtain relief funds or enroll in new payment programs likely constitute a “statement” for purposes of the FCA and often include a tick-the-box certification of eligibility for the funds and compliance with the terms and conditions. If any part of the certification of eligibility for funds or compliance with the terms and conditions is knowingly or carelessly[9] false, the entire amount provided under the grant, loan or program may be clawed back, with penalties. The risk of accepting relief funds without monitoring for updates to the terms and conditions can be significant. For example, large publicly-traded companies who received PPP loans were given a deadline to return the funds after the agency updated guidance defining the term “necessary” in the loan applications.[10] Providers who fail to understand the scope and limits of each relief mechanism, whether regulatory or financial, risk civil and criminal penalties. 

1. Immunity from Liability does not Mean Freedom from Suit

As discussed above, regulatory flexibilities offer limited protection when providers comply with the specific language, scope and applicability of a waiver or interim rule. Provider relief funds are available if providers meet all of the eligibility requirements for the assistance type and amount awarded. But even when organizations act diligently and in good faith to comply with all the elements required, whistleblowers and the government alike can contest the organization’s good faith as it applies to each element. This is further complicated by a lack of available guidance when taking advantage of regulatory flexibilities.

Appropriate documentation will be the provider’s best evidence against fraud. However, a favorable decision may not come until the summary judgment stage, after discovery and pre-trial litigation which is extensive, expensive and intrusive. Depending on the nature of the suit, the cost of a successful defense can rival the avoided damage award.

Practical Takeaways

Providers should only use regulatory flexibilities and relief funds that are reasonably needed and should document good faith decision-making when they do use them.

• Perhaps challenging under the circumstances, the best way to avoid litigation is to minimize reliance on regulatory flexibilities and relief funds. When needed, providers should document that their decision to use a regulatory flexibility was appropriate or necessitated by their COVID-19 response effort, as supported by the testing numbers, projections in their community, resource strain or availability, and other relevant considerations.
• Not only will diligent documentation assist with any future audit, but it should also assist the decision-making process itself and aid the organization in determining how to phase out reliance on regulatory flexibility.
• As a practical tip, providers should save copies of guidance documents that influence their decision-making processes. As these documents are updated, older versions are typically removed from the agency’s website. Obsolete documents may be evidence that compliance efforts were undertaken in good faith even if they fall short.

Providers should act with an eye towards the optics. 

• The perception that a provider is needlessly cutting costs, does not support frontline workers or is trying to silence health care workers who are speaking out will only prompt additional scrutiny and increase the likelihood of whistleblower action, regardless of whether the organization’s efforts are undertaken in good faith.
• Providers should communicate to health care workers, patients and the community about the organization’s commitment to providing high-quality patient care, compliance efforts, the reason for changes in policies or staffing due to regulatory flexibilities and financial concerns, and the organization’s support for frontline workers.

Providers should dedicate sufficient resources to compliance with regulatory flexibilities and relief funding programs.

• Know the applicable conditions and adapt to any later issued changes in guidance.
• Make sure key personnel understand the timeline for returning to normal when each regulatory flexibility expires.
• For processes that may be permitted post-public health emergency (for example, telemedicine and in-home health care services), start shifting waived requirements into compliant processes in advance of the expiration of the waiver or temporary flexibility.
• Always ensure that conditions of payment known and applicable at the time of treatment are met before submitting claims to government payors.

Providers should actively monitor updates to regulatory flexibilities and relief funds terms and conditions.

• Senate Majority Leader Mitch McConnell recently stated that legislation may be introduced providing liability protections for organizations acting in accordance with public health guidance.[11] This may provide broader liability protections than may otherwise be available under the regulatory flexibilities, but until details about the scope and applicability of such protections are released, providers should continue to act with an eye towards compliance.
• Regularly monitor agency websites for guidance documents, such as “Frequently Asked Questions” (“FAQ”), on existing flexibilities and programs.
• Monitor legal alerts issued directly from the relevant state and federal agencies.
• Monitor legal alerts from your state hospital association and other state and federal provider associations.

Author Biographies:

 Heather D. Mogden is a litigation associate in the Milwaukee office of Hall, Render, Killian, Heath & Lyman, P.C. She represents health care providers in state and federal courts and administrative proceedings on a wide variety of issues ranging from tax exemption and contract disputes to False Claims Act violations and Medicare reimbursement appeals. Heather earned her B.B.A. in 2007 from the University of Wisconsin-Madison and her J.D., cum laude, in 2012 from Marquette University Law School. Heather is admitted to practice in Wisconsin state and federal courts and in the U.S. District Court for the District of Columbia, and is a member of the American Health Law Association and the Wisconsin Defense Counsel.

Kathryn M. Costanza is an associate in the Denver office of Hall, Render, Killian, Heath & Lyman, P.C. Kathryn counsels her health care clients in state and federal regulatory and compliance matters, including licensure, conditions of participation, change of ownership, reimbursement matters and enrollment appeals. Kathryn received her bachelor’s degree in 2010 from Colorado State University and her J.D., Order of the Coif, in 2019 from the University of Colorado Law School. She is admitted to practice in Colorado, is a member of the American Health Law Association, and is a Certified Neurologic Music Therapist.

David B. Honig is a shareholder in the Indianapolis office of Hall, Render, Killian, Heath & Lyman, P.C. Leading the firm’s National Health Care Litigation team, David focuses his practice on complex litigation with particular emphasis on the False Claims Act (“FCA”). He has more than 20 years of FCA and health care experience, including playing an integral role in the creation of the nation’s first Medicaid Fraud Major Case Unit for the state of Florida. David is admitted to practice in multiple state and federal courts nationwide, including the U.S. Supreme Court, and is a member of the American Health Law Association and the lead author of Healthcare and the False Claims Act, Second Edition, Healthlaw Publishing (2019). David serves as an adjunct professor at Indiana University Robert H. McKinney School of Law, teaching about the art of negotiations, and has spoken nationally and internationally about negotiations. He also serves as a Registered Civil Mediator in the state of Indiana.

[1] Furloughed employees are as disgruntled as overworked employees in hot spots. The Department of Labor issued COVID-19 guidance notifying employers that it was not waiving the WARN Act requirement that employers give 60 days’ notice of mass layoffs, and at least one employer who failed to comply has already been named in a class action suit. “DOL Issues New WARN Act COVID-19 Frequently Asked Questions,” Hall Render (May 8, 2020), available at https://www.hallrender.com/2020/05/08/dol-issues-new-warn-act-covid-19-frequently-asked-questions/.

[2] See CMS, Medicare and Medicaid Programs, Basic Health Program, and Exchanges; Additional Policy and Regulatory Revisions in Response to the COVID-19 Public Health Emergency and Delay of Certain Reporting Requirements for the Skilled Nursing Facility Quality Reporting Program, Interim Final Rule, 85 Fed. Reg. 27550 (May 8, 2020); CMS, Explanatory Guidance, March 30, 2020 Blanket Waivers of Section 1877(g) of the Social Security Act(April 21, 2020), available at https://www.cms.gov/files/document/explanatory-gui....

[3] See Connecticut Announces Joint Federal-State COVID-19 Fraud Task Force, U.S. Attorney’s Office, Dist. Connecticut, Press Release (May 6, 2020), available at https://www.justice.gov/usao-ct/pr/connecticut-ann....

[4] Two Charged with Stimulus Fraud: First in the nation to be charged with fraudulently seeking CARES Act SBA Paycheck Protection Loans, U.S. Attorney’s Office, Dist. Rhode Island, Press Release (May 4, 2020), available athttps://www.justice.gov/usao-ri/pr/two-charged-sti....

[5] For example, the Stark “blanket waivers” are quite limited. See Wallander, Gregg M., et al., CMS Issues New Blanket Stark Waivers for COVID-19 Purposes, Hall Render (Mar. 31, 2020), available athttps://www.hallrender.com/2020/03/31/cms-issues-n...; Wallander, Gregg M., et al., CMS Explains Stark Waivers – Consider Any Needed Action Now, Hall Render (Apr. 24, 2020), available athttps://www.hallrender.com/2020/04/24/cms-explains-stark-waivers-consider-any-needed-action-now/.

[6] For example, the PREP Act protects against civil liability for development, clinical testing, distribution, purchase, use, prescribing, dispensing, and administering “covered countermeasures” like tests and treatment for COVID-19. Guidance for Licensed Pharmacists, COVID-19 Testing, and Immunity under the PREP Act, U.S. Dept. Health & Human Services (Apr. 8, 2020), available at https://www.hhs.gov/sites/default/files/authorizin.... The PREP Act does not protect providers who are treating positive-tested patients for conditions unrelated to their COVID-19 diagnosis, nor does it protect providers applying the Act’s otherwise “covered countermeasures” to patients with a different respiratory disease.

[7] Every waiver, executive order, emergency declaration, and enforcement discretion has an expiration date. The effective period of each of these regulatory flexibilities depends on the language itself and the authority under which it was issued, which means that there will not a be a single deadline for all operations to revert to normal. Many states have built cushions into their emergency orders, allowing providers an additional thirty days or so after the declared public emergency ends to wind down their response efforts and return to normal regulatory compliance. This applies only to compliance with state regulations. Most federal regulatory flexibilities lack this cushion, however, and emergency operational processes must return to normal compliance immediately when the emergency ends. This necessitates adequate planning.

[8] CARES Act Provider Relief Fund, U.S. Dept. Health & Human Services, available athttps://www.hhs.gov/coronavirus/cares-act-provider... (last visited June 9, 2020).

[9] The FCA defines “knowing” as “actual knowledge, … deliberate ignorance, … or reckless disregard.” 31 U.S.C. § 3729(b)(1).

[10] Honig, David B., et al., PPP Loans and FCA Liability, Hall Render (April 24, 2020), available athttps://www.hallrender.com/2020/04/24/ppp-loans-an....

[11] David Morgan, McConnell says he is spearheading broad coronavirus liability bill, Reuters.com (May 12, 2020), available at https://www.reuters.com/article/us-health-coronavi....