By: Christopher Parrella, Esq., CPC, CHC, CPCO
Parrella Health Law, Boston, MA.
A Health Care Provider Defense and Compliance Firm.

The U.S. Department of Justice just sent a very clear message to healthcare companies and it’s one worth paying attention to. For the first time under its new, department-wide Corporate Enforcement Policy, DOJ declined to prosecute a company involved in a bribery scheme. That is the headline. The real takeaway is this: DOJ is showing you exactly how to avoid being charged and its doing it in a case that still resulted in criminal indictments against individuals.

The company, a medical device manufacturer, was involved in a multi-year scheme where payments were routed through a third-party consultant to influence purchasing decisions by a physician at a state-owned hospital. The structure will sound familiar to anyone who has dealt with fraud and abuse issues. Sham consulting agreements, inflated fees, off-channel communications, and money moving through intermediaries. The numbers were not insignificant. Roughly $600,000 in bribes generated over $1.6 million in revenue and more than $1.2 million in profit. This is exactly the type of conduct that historically leads to a corporate criminal resolution.

But that is not what happened here. Instead, DOJ declined to prosecute the company. Not because the conduct did not occur and not because it was immaterial, but because of what the company did once it discovered the problem. This is where the case becomes instructive. The company self-disclosed the misconduct while its internal investigation was still ongoing. It did not wait until it had every fact lined up. It went in early. That matters more than most organizations are comfortable admitting.

It then fully cooperated, which in DOJ terms means more than just responding to requests. It means identifying the individuals involved, turning over evidence and effectively helping the government build its case. At the same time, the company moved quickly on remediation. Employees were disciplined, third-party relationships were terminated and compliance controls were enhanced. In other words, the company did not just report the problem, it fixed it in a way that DOJ could point to as meaningful change.

And importantly, DOJ emphasized that there were no aggravating factors. That piece often gets overlooked, but it is critical. Even strong cooperation and remediation may not be enough if the underlying conduct is severe enough or tied to executive-level misconduct in a way that triggers those aggravating considerations.

From a provider perspective, there are several practical takeaways.

First, self-disclosure is not theoretical anymore. Organizations often debate whether to disclose, when to disclose, and how much to disclose. This case reinforces that timing matters. Waiting until the investigation is complete may not position you for the best outcome. Early disclosure, even with incomplete information, is clearly being rewarded.

Second, cooperation now means alignment with the government’s objectives. Identifying individuals, providing documents, and helping build the case is not optional if you are seeking a declination. That is a strategic decision and it has real implications internally.

Third, remediation has to be real. Policy updates and training modules are not enough. DOJ is looking for tangible actions such as terminating relationships, disciplining personnel and implementing controls that change how the business actually operates.

Fourth, individual accountability is not going away. In fact, it is being reinforced. The company avoided prosecution, but individuals were charged. That is the model. Corporate relief does not translate into individual protection.

Finally, this case underscores how common fact patterns still drive enforcement. Third-party relationships, consulting agreements and financial arrangements tied to referral sources remain at the center of risk. The only difference now is how DOJ is rewarding companies that address those issues proactively.

The bottom line is this. DOJ has made the off-ramp very clear. If you find a problem, disclose it early, cooperate fully, remediate aggressively and ensure there are no aggravating factors that undermine your position. If you do that, there is a path to avoiding corporate prosecution. If you do not, the traditional enforcement model still applies. If you have any questions or comments about the subject of this blog, please contact Parrella Health Law at 857.328.0382 or Chris directly at cparrella@parrellahealthlaw.com.