Self-disclosure (OIG/CMS)

When an orthopedic practice or health system uncovers a potential compliance violation—upcoding, billing for services rendered by an excluded or unlicensed provider, an improper financial arrangement under the Anti-Kickback Statute, or a prohibited Stark Law referral—it has two primary voluntary-disclosure pathways. The OIG Provider Self-Disclosure Protocol (SDP), in place since 1998, is the route for potential violations subject to Civil Monetary Penalties (CMP) authority, including Anti-Kickback Statute and False Claims Act exposure. The CMS Self-Referral Disclosure Protocol (SRDP), created under the Affordable Care Act, is reserved specifically for actual or potential Stark Law violations. These are parallel but distinct programs: conduct that implicates only Stark goes to CMS; conduct that implicates broader fraud and abuse—or both statutes simultaneously—may require OIG disclosure or a coordinated dual-pathway strategy.

The financial mechanics differ meaningfully between the two programs. Under the OIG SDP, the standard damages multiplier is reduced from the statutory treble (3×) to 1.5× for good-faith disclosers, and permissive exclusion from federal programs is typically released without integrity measures attached. Under the CMS SRDP, CMS has authority to reduce the total overpayment amount based on the provider's cooperation and the totality of circumstances. Both programs suspend the 60-day overpayment repayment clock—meaning the deadline to return identified Medicare or Medicaid overpayments is tolled while the disclosure is pending settlement, preventing an automatic False Claims Act violation from accruing during the resolution period.

For orthopedic practices specifically, recurring self-disclosure triggers include employment or contracting with OIG-excluded individuals, billing under a surgeon's NPI for procedures actually performed by an uncredentialed or unlicensed provider, compensation arrangements with referring physicians that lack fair-market-value support, and systematic upcoding discovered during internal audit. The OIG maintains a public database of self-disclosure settlement summaries; reviewing it reveals that musculoskeletal and surgical specialties appear with regularity, underscoring that these issues are not hypothetical for orthopedic compliance officers.

Failing to self-disclose a known violation—or disclosing too late—transforms a correctable compliance problem into potential False Claims Act liability. Under the 60-day rule, once a provider has 'identified' an overpayment (meaning reasonable diligence would have quantified it), the clock starts. Missing that deadline converts the retained overpayment into a reverse false claim carrying penalties of up to $27,894 per claim plus treble damages. For an orthopedic group that discovers three years of systematic coding errors affecting hundreds of Medicare claims, the difference between proactive OIG self-disclosure (1.5× multiplier, no exclusion) and a government-initiated investigation (3× multiplier, potential exclusion, reputational damage) can be existential. Additionally, practices operating under a Corporate Integrity Agreement that discover a new violation must disclose it or risk CIA breach.