A billing manager finds a pattern of claims that may have been paid in error. The practice owner wants to refund the money immediately. The compliance officer wants to complete an investigation first. A consultant suggests reporting everything to the government under a newly announced program. Each instinct may be understandable; none is a substitute for identifying which legal problem the organization actually has.
November 4’s informal Use Your Common Sense Day is an apt moment to examine that distinction, particularly because the federal government changed the disclosure landscape only days ago. On October 22, 2026, the Department of Justice Civil Division and HHS announced a six-month Healthcare False Claims Act Self-Disclosure Pilot Program. The announcement should prompt healthcare counsel to revisit disclosure policies. It should not prompt the indiscriminate filing of every coding correction through the newest government inbox.
Start with the character of the underlying problem
Consider four different findings. A medical practice discovers a single duplicated claim. A laboratory finds a systematic ordering deficiency across several years. A hospice uncovers disputed certification documentation in a sampling of claims. A distributor learns that a sales arrangement may have involved prohibited remuneration connected with federal healthcare program business.
These findings differ in legal theory, potential exposure, scope of review, and remedy. Some may be ordinary payment errors. Others may involve the Civil False Claims Act, Anti-Kickback Statute, program-exclusion issues, or potentially criminal questions. A disclosure protocol is a resolution mechanism; it does not decide which statute was violated. That legal assessment must come first.
The federal False Claims Act, 31 U.S.C. §§ 3729–3733, reaches specified knowingly false claims and related conduct. The definition of knowledge includes actual knowledge, deliberate ignorance, and reckless disregard; it does not require specific intent to defraud. Equally important, not every mistake automatically becomes an actionable false claim. Counsel needs the payment rule, the facts, the claims data, and the applicable knowledge and materiality analysis.
What the October 2026 pilot actually offers
The DOJ–HHS pilot protocol states that eligible healthcare providers, suppliers, manufacturers, payors, and related organizations can seek a coordinated resolution of specified civil federal FCA and HHS administrative exposure by disclosing potential FCA violations that were previously unknown to the federal government. The deadline for a qualifying submission is April 22, 2027, at 11:59 p.m., according to the protocol. The announced program is temporary; its eligibility criteria and actual written terms, not its headline, govern.
Under the protocol, the company must describe the conduct and underlying binding requirements, produce supporting documents, explain remediation, submit sufficient financial information to calculate the relevant base amount, and provide an authorized representative’s certification of truthfulness and completeness. Partial or late submissions will not be reviewed. That is a substantial commitment, not a quick online notice that the company thinks something might be wrong.
The potential benefit is significant. DOJ describes a coordinated civil release for the disclosed potential FCA violations, with specified treatment under HHS administrative authorities. The program describes a 1.25-to-1.6-times multiplier of the Base Self-Disclosure Repayment. That base amount is not necessarily identical to every claim-paid amount or to a provider’s preliminary spreadsheet calculation. The protocol supplies examples involving a laboratory’s billing pattern and an acquisition involving potential Anti-Kickback Statute exposure. Counsel should review how the base is determined, possible aggravating factors, and what is—and is not—in the contemplated release.
Crucially, the pilot is not a guaranteed amnesty for allegations already known to federal officials. The protocol says a company whose potential FCA violation is already known to the government may still qualify for disclosure and cooperation consideration under Justice Manual § 4-4.112, but not for this pilot’s resolution mechanism. In an active UPIC investigation, payment-suspension matter, civil investigative demand, or subpoena response, a provider should not assume pilot eligibility without analyzing what the government knows.
The 60-day overpayment rule continues to operate
A new disclosure initiative does not cancel Medicare’s separate rule for identified overpayments. Under 42 C.F.R. § 401.305, a person who receives a Medicare overpayment generally must report and return it within 60 days after identification or by the applicable cost-report deadline, if later. The regulation incorporates the FCA’s knowledge standard and a six-year lookback for identified overpayments. Medicare contractors prescribe the available reporting mechanisms for claim adjustments, credit balances, and self-reported refunds.
The current rule also includes a specified suspension while a person who has identified an overpayment conducts a timely, good-faith investigation of related overpayments arising from the same or a similar cause. Under the regulation, that suspension runs until the investigation concludes and the aggregate is calculated, or until 180 days from identification of the initial overpayment, whichever occurs first. It is not a blanket right to ignore a confirmed error for six months, and it does not automatically extend unrelated deadlines.
An organization may need to manage both a refund clock and a disclosure decision at the same time. For example, if a review uncovers incorrect claims and a questionable compensation arrangement, counsel should decide which facts require a routine refund, which warrant a larger internal investigation, and whether one of the formal self-disclosure mechanisms is appropriate. Waiting until a pilot application is complete without examining existing legal duties is not a safe default.
Civil and criminal disclosure channels are different
The October 15, 2026 DOJ–HHS announcement separately addressed coordination of disclosures involving potential criminal healthcare fraud. That policy describes a pathway through the DOJ National Fraud Enforcement Division’s Health Care Fraud Section that can coordinate benefits under the DOJ Corporate Enforcement Policy and HHS OIG’s protocol. The October 22 civil pilot expressly directs companies with potential criminal conduct to that different channel.
The existence of these two programs illustrates why disclosure strategy requires privileged legal analysis. A CFO’s phrase “we may have billed wrong” does not answer whether the matter presents billing error, civil FCA, Stark Law, Anti-Kickback Statute, exclusion, or criminal exposure. A decision to communicate with DOJ or HHS can have serious consequences for affiliates, individuals, payer contracts, licensure, and future administrative actions. An internal investigation should distinguish factual findings from legal characterizations and should protect necessary evidence.
A defensible response to a newly identified issue
First, stop any ongoing practice reasonably believed to be noncompliant, without altering historical records. Second, preserve the claims universe and the underlying data. Third, assign an investigation owner who can identify the service dates, payers, billing policies, and clinicians involved. Fourth, determine the governing authority for each category of claims and whether the alleged deficiency is material to payment. Fifth, quantify exposure using a reproducible method that a reviewer could independently inspect. Sixth, document remediation and prevent recurrence through policy, training, systems changes, or contract revision.
The sequence should include periodic updates to legal counsel and management but avoid announcing conclusions before the evidence exists. Where statistical sampling or extrapolation is used, preserve the frame, selection method, error definitions, and calculations. The DOJ pilot contemplates substantive financial documentation; an unexplained total in a spreadsheet will rarely suffice.
The decision memo should then compare at least three pathways: contractor refund or adjustment, an established HHS disclosure mechanism, and the new pilot if its requirements are met. In some matters, other responses or a litigation defense are appropriate. Selection should turn on the actual facts and governing law, not an assumption that any self-disclosure is necessarily cheaper or safer.
Why ownership and acquisition structure matter
The pilot’s inclusion of an acquisition-related illustration is notable for companies buying practices, laboratories, or healthcare distributors. Due diligence may identify a legacy compensation arrangement, disputed coding practice, or deficient controls. A buyer’s contractual indemnity is not necessarily a government defense, and a purchase-price adjustment does not resolve federal claims exposure. Counsel should assess successor-liability concerns, who controls evidence, which entity can make a disclosure, and whether remediation began promptly. That analysis may affect both the transaction documents and the government’s approach to a proposed settlement.
For owner-operated practices, a sensible control is to use a simple compliance escalation protocol: an issue report, a privileged legal review where appropriate, an independently preserved transaction dataset, and a decision log explaining why a refund, further investigation, disclosure, or defense path was selected. BOLO’s earlier discussion of healthcare fraud referrals addresses a related but distinct scenario: the government contacting the practice first.
A cautious conclusion for healthcare leadership
The October 2026 pilot creates a potentially valuable resolution option, especially for organizations that discover a serious civil FCA problem before the government does. It does not make every overpayment a False Claims Act case. It does not erase the 60-day rule. It does not provide the same resolution mechanism for criminal conduct, and it does not assure eligibility when the facts are already known to federal investigators.
Common sense in this setting means diagnose the problem before selecting the remedy. The organization that preserves evidence, quantifies accurately, identifies the applicable law, and evaluates the available pathways is in a substantially better position than one that rushes either to silence or to an inadequately investigated disclosure.
Primary sources and further reading
- DOJ/HHS — October 22, 2026 Healthcare FCA Self-Disclosure Pilot Announcement
- DOJ/HHS — Healthcare Self-Disclosure Pilot Protocol (PDF)
- DOJ — October 15, 2026 Criminal Healthcare Self-Disclosure Coordination Policy
- Justice Manual § 4-4.112 — Disclosure, Cooperation, and Remediation
- 42 C.F.R. § 401.305 — Reporting and Returning Medicare Overpayments
- 31 U.S.C. § 3729 — False Claims Act
- HHS OIG — General Compliance Program Guidance