Evaluation of Corporate Compliance Programs
Subscribe to Evaluation of Corporate Compliance Programs's Posts

How to Use the New OIG-HCCA Compliance Resource Guide in Your Compliance Program

Released on March 27, 2017, the Compliance Program Resource Guide (Resource Guide), jointly prepared by the US Department of Health and Human Services Office of Inspector General (OIG) and the Health Care Compliance Association (HCCA) reflects the result of a “roundtable” meeting on January 17, 2017, of OIG staff and compliance professionals “to discuss ways to measure the effectiveness of compliance programs.” The resulting Resource Guide document catalogues the roundtable’s brainstorming discussions to “…provide a large number of ideas for measuring the various elements of a compliance program…to give health care organizations as many ideas as possible, to be broad enough to help any type of organization, and let the organization choose which ones best suit its needs.”

Here are a few main takeaways from the Resource Guide:

  • Ideas for Auditing: The Resource Guide contributes to the critical conversation about how to evaluate compliance program effectiveness by listing additional ideas on what to audit and how to audit those areas. The items listed in the Resource Guide generally center on ideas on auditing and monitoring compliance program elements, such as periodically reviewing training and policies and procedures to ensure that they are up-to-date, understandable to staff and accurately reflect the business process as performed in practice. Legal and compliance can use this document to identify those particular elements that may be most applicable to their individual organization.

Organizations would also benefit from considering the questions listed in the new compliance program guidance issued in February by the US Department of Justice (DOJ) Criminal Division’s Fraud Section, “Evaluation of Corporate Compliance Programs” (DOJ Guidance), as part of examining compliance program effectiveness. (We covered the DOJ Guidance previously.) Health care organizations may also use the various provider-specific compliance program guidance documents created by OIG over the years as another source for ideas on what to measure.

  • Not a Mandate: The Resource Guide is very clear that it is not intended to be a “best practice”, a template, or a “‘checklist’ to be applied wholesale to assess a compliance program.” This clarification is an important one since there is the potential for the Resource Guide to be (incorrectly) viewed by qui tam relators or others as creating de facto compliance program requirements or OIG recommendations.
  • How to Measure: The Resource Guide does not delve into how or who should undertake or contribute to the effectiveness review. Who conducts the review is a question that may have legal significance given the nature of a particular issue. General counsel and the chief compliance officer should consider this issue as part of the organization’s ongoing compliance program review. It may be valuable to include the organization’s regular outside white collar counsel to comment on such critical, relevant legal considerations as the proper conduct of an internal investigation; preserving the attorney-client privilege in appropriate situations; coordinating communications between legal, compliance and internal audit personnel; and applying “lessons learned” from the practices of qui tam relators and their counsel. Outside consultants may [...]

    Continue Reading



DOJ Releases Detailed Criteria for Evaluating Compliance Programs

The Department of Justice (DOJ) doubled-down on emphasizing corporate compliance programs with new guidance from the Criminal Division Fraud Section with the “Evaluation of Corporate Compliance Programs” (Criteria).  This document, released February 8 without much fanfare, contains a long list of benchmarks that DOJ says it will use to evaluate the effectiveness of an organization’s compliance program.  The Criteria may publicize the factors Hui Chen, the Criminal Division’s 2015 compliance counsel hire, uses to evaluate compliance programs.  The Criteria also provides practical guidance on how organizations can evaluate their compliance programs.  This document operationalizes DOJ’s Principles of Federal Prosecution of Business Organizations (knows as the “Filip Factors”), which stated that the existence and effectiveness of a corporation’s preexisting compliance program is a factor that the DOJ will review in considering prosecution decisions.

The Guidance contains 11 topics that shift the analysis among examining how the alleged misconduct could have occurred, the organization’s response to the alleged misconduct, and the current state of the compliance program.  One entire category, titled “Analysis and Remediation of Underlying Misconduct,” has an obvious focus.  But, the other categories contain questions that touch on each of the three themes.  For example, the “Policies and Procedures” category asks questions about the process for implementing and designing new policies, whether existing policies addressed the alleged misconduct, what policies or processes could have prevented the alleged misconduct, and whether the policies/processes of the company have improved today.  Other categories examine the company’s historic and current risk assessment process and internal auditing, training and communications, internal reporting and investigations, and employee incentives and discipline.  DOJ also discusses management of third parties acting on behalf of the company and, in the case of a successor owner, the due diligence process and on-boarding of the new company into the broader organization. (more…)




BLOG EDITORS

STAY CONNECTED

TOPICS

ARCHIVES