Anti-Kickback Safe Harbor Analysis
Step-by-step workflow for analyzing whether a healthcare arrangement fits an Anti-Kickback Statute safe harbor. Based on the federal Anti-Kickback Statute (42 U.S.C. section 1320a-7b(b)) and safe harbor regulations (42 C.F.R. Part 1001).
Criminal Statute
The Anti-Kickback Statute is a criminal statute. Violations can result in criminal fines up to $100,000 per violation, up to 10 years imprisonment, mandatory exclusion from federal healthcare programs, and civil monetary penalties up to $100,000 per violation plus treble damages. Unlike the Stark Law, the AKS requires proof of intent, but the "one purpose" test means the government only needs to prove that inducing referrals was one purpose of the payment, even if legitimate purposes also existed.
Step 1: Identify the Arrangement or Payment
Describe the arrangement in plain terms: who is paying whom, how much, for what, and why
Identify all parties involved (providers, referral sources, vendors, consultants, patients, device/pharma companies)
Determine what federal healthcare program business (Medicare, Medicaid, TRICARE, CHIP) is potentially connected to the arrangement
Map the flow of patients or referrals: does this arrangement create a pathway for federal healthcare program business?
Identify the consideration exchanged (cash, in-kind services, below-market rent, free staff, meals, gifts, entertainment, travel, education sponsorships)
Document the timeline: when does the arrangement begin, what are the payment intervals, and when does it end?
Compliance tip: The AKS is broader than most people realize. 'Remuneration' means anything of value, directly or indirectly, overtly or covertly, in cash or in kind. Free office space, below-market equipment leases, exclusive referral arrangements, and even patient transportation can constitute remuneration. Map everything before analyzing.
Step 2: Determine if Remuneration Is Involved
Ask: Is anything of value being offered, paid, solicited, or received? If yes, remuneration exists.
Check both directions: the AKS prohibits BOTH offering/paying (subsection (b)(2)) AND soliciting/receiving (subsection (b)(1)) remuneration
Evaluate whether any part of the remuneration is intended to induce or reward referrals of federal healthcare program business
Apply the 'one purpose' test: under current case law, if even ONE purpose of the payment is to induce referrals, the AKS is implicated (even if there are other legitimate purposes)
Consider indirect remuneration: does the arrangement create economic value for the referral source even if no direct payment flows? (e.g., providing free EHR access, subsidized staff, marketing support)
Document your analysis of whether the arrangement involves federal healthcare program beneficiaries or business
Compliance tip: Unlike Stark, the AKS is an intent-based statute. The government must prove that at least one purpose of the remuneration was to induce or reward referrals. However, the 'one purpose' test sets a low bar. If the arrangement would not exist 'but for' the referral relationship, assume the AKS applies and find a safe harbor.
Step 3: Check if a Safe Harbor Applies
Review the full list of safe harbors at 42 C.F.R. § 1001.952 (there are 30+, including those added by the 2020 regulatory updates)
Common safe harbors to evaluate: personal services and management contracts (§ 1001.952(d)), space rental (§ 1001.952(b)), equipment rental (§ 1001.952(c)), bona fide employment (§ 1001.952(i)), discount (§ 1001.952(h)), group purchasing organization (§ 1001.952(j))
For value-based arrangements: evaluate the three value-based safe harbors added in 2020 (care coordination, value-based outcomes, full financial risk)
Map EVERY element of the candidate safe harbor. Like Stark exceptions, every element must be met. Substantial compliance is not enough.
If the arrangement involves physician investment: evaluate the small entity investment safe harbor (§ 1001.952(a)) and its strict requirements (60/40 tests, no required referrals, etc.)
Document which safe harbor(s) you are relying on and how each element is satisfied with specific evidence
Compliance tip: Safe harbors are voluntary. Failing to meet a safe harbor does not mean the arrangement violates the AKS. It means you lose the automatic protection, and the arrangement will be evaluated based on totality of the circumstances. However, structuring arrangements to fit a safe harbor is always the recommended approach. Do not rely on the argument that 'it doesn't fit a safe harbor but it's fine.'
Step 4: Document the Business Purpose
Articulate the legitimate, non-referral business purpose for the arrangement in writing
Would this arrangement exist if the other party never referred a single patient? If not, the business purpose is suspect.
For consulting/advisory arrangements: document the specific deliverables, hours, and why this person's expertise is needed (not just their referral capacity)
For space/equipment leases: demonstrate the space or equipment is necessary for your operations and the arrangement is not a disguised referral fee
For co-marketing or joint ventures: document the operational rationale, capital contributions, profit-sharing methodology, and governance structure
Maintain contemporaneous records: the business purpose documentation should be created at the time of the arrangement, not retrospectively during an investigation
Compliance tip: The OIG looks at the 'totality of facts and circumstances.' A well-documented business purpose does not immunize an arrangement, but it shifts the narrative from 'referral inducement' to 'legitimate business transaction.' The absence of contemporaneous documentation of business purpose is one of the strongest indicators of AKS risk.
Step 5: Assess Risk if No Safe Harbor Fits
If no safe harbor fits, perform a risk assessment using the OIG's published factors: (1) Does the arrangement increase access to care? (2) Does it improve quality? (3) Does it reduce cost? (4) Is there potential for overutilization or patient steering?
Review relevant OIG Advisory Opinions for similar arrangements (searchable at oig.hhs.gov/compliance/advisory-opinions/). These are fact-specific but indicate enforcement posture.
Evaluate the OIG Special Fraud Alerts and Bulletins for your arrangement type (e.g., physician-to-physician referral arrangements, lab specimen processing arrangements, telehealth company arrangements)
Consider requesting your own OIG Advisory Opinion if the arrangement is novel and high-value (processing takes 6-12 months, fee is based on cost recovery)
Quantify the financial exposure: AKS criminal penalties include fines up to $100,000 per violation and up to 10 years imprisonment. Civil monetary penalties up to $100,000 per violation plus 3x damages. Exclusion from federal programs.
Obtain a legal opinion from experienced healthcare fraud and abuse counsel before proceeding
Compliance tip: The OIG has stated repeatedly that arrangements with the following characteristics are high-risk: compensation that varies with referral volume, exclusive referral arrangements, arrangements with the physician's practice rather than the physician individually, and arrangements where the aggregate compensation exceeds fair market value even if individual components appear reasonable.
Step 6: Implement Compliance Controls
Ensure the arrangement is documented in a written agreement signed by all parties before services begin
Set compensation at fair market value as determined by independent valuation (not tied to referral volume or value)
Establish a contract management system: track expiration dates, renewal terms, amendment requirements, and auto-renewal provisions
Train relevant staff on the AKS and their obligations under the specific arrangement (what they can and cannot say to referral sources)
Implement monitoring: track referral patterns, compensation payments, and deliverable completion on at least a quarterly basis
Create a process for reporting suspected AKS violations to your compliance officer and, if warranted, to the OIG Self-Disclosure Protocol (different from CMS SRDP for Stark)
Conduct annual compliance audits of all high-risk arrangements
Compliance tip: The OIG has consistently stated that a robust compliance program is a mitigating factor in enforcement decisions. Key elements for AKS compliance: written policies, training, monitoring, a hotline for reporting, prompt investigation of issues, and documented corrective action. If you find a problem, the OIG Self-Disclosure Protocol (not the CMS SRDP used for Stark) is the appropriate mechanism.
Does This Arrangement Fit a Safe Harbor?
Does the arrangement involve remuneration (anything of value) between parties who are in a position to generate federal healthcare program business for each other?
Continue to next question
AKS likely does not apply. Document your analysis.
Is the remuneration potentially connected to referrals, recommendations, or arrangements for items or services reimbursable by a federal healthcare program?
Continue to next question
AKS likely does not apply. However, state law equivalents may still apply. Check your state's anti-kickback or fee-splitting statutes.
Does the arrangement meet every element of an applicable safe harbor under 42 C.F.R. section 1001.952? (Substantial compliance is not enough. Every element must be satisfied.)
Safe harbor protects the arrangement. Document which safe harbor applies, how each element is met, and retain supporting evidence. Re-verify at renewal.
Continue to next question
Can the arrangement be restructured to fit a safe harbor? (e.g., fix compensation to FMV, add aggregate cap, remove volume-based components, add written agreement with required terms)
Restructure before executing. Do not proceed with the current structure.
Arrangement falls outside safe harbors. This does NOT automatically mean it violates the AKS, but it will be evaluated on totality of circumstances. Obtain legal counsel. Consider an OIG Advisory Opinion for high-value arrangements.