QRRXQR Rx
    Compliance

    Stark Law and Anti-Kickback Statute: Referral Compliance for Practices

    The Physician Self-Referral Law (Stark Law, 42 USC 1395nn) and the Anti-Kickback Statute (AKS, 42 USC 1320a-7b(b)) regulate financial relationships between healthcare providers. Violations carry penalties ranging from repayment of claims to criminal prosecution. Understanding the distinction between these two statutes, their exceptions, and their safe harbors is essential for any practice that refers patients, employs specialists, or enters vendor agreements.

    Stark Law: Prohibited Self-Referrals Under 42 USC 1395nn

    • The Stark Law prohibits a physician from referring Medicare or Medicaid patients for designated health services (DHS) to an entity with which the physician (or an immediate family member) has a financial relationship, unless a specific exception applies. DHS includes clinical laboratory services, physical therapy, radiology, durable medical equipment, outpatient prescription drugs, and inpatient and outpatient hospital services, among others. The full list is codified at 42 CFR 411.351.
    • Stark is a strict liability statute. Intent does not matter. If a financial relationship exists and no exception applies, the referral violates Stark regardless of whether the physician intended to gain from it. This contrasts with the Anti-Kickback Statute, which requires intent. CMS has stated in rulemaking (85 FR 77492, the 2020 Stark Final Rule) that even inadvertent violations trigger liability.
    • Penalties under Stark include denial of payment for DHS claims, refund of amounts collected, civil monetary penalties of up to $15,000 per service, and exclusion from Medicare and Medicaid. False Claims Act liability (31 USC 3729) can also attach if claims are submitted for services resulting from prohibited referrals, with treble damages and per-claim penalties of $11,181 to $27,894 (adjusted for inflation as of 2024).
    • Key Stark exceptions used by most practices include the in-office ancillary services exception (42 CFR 411.355(b)), the bona fide employment exception (42 CFR 411.357(c)), the personal services arrangements exception (42 CFR 411.357(d)), and the fair market value exception (42 CFR 411.357(l)). Each has specific requirements for compensation, written agreements, and the scope of services. The 2020 Stark Final Rule simplified several of these exceptions, removing the requirement for signatures to be obtained before services begin in some cases.

    Anti-Kickback Statute: Remuneration for Referrals

    • The Anti-Kickback Statute (42 USC 1320a-7b(b)) makes it a criminal offense to knowingly offer, pay, solicit, or receive anything of value to induce or reward referrals for services covered by federal healthcare programs. Unlike Stark, AKS applies to all healthcare services (not just DHS) and all federal healthcare programs (not just Medicare). Violation is a felony carrying up to 10 years imprisonment and $100,000 in fines per occurrence.
    • The OIG (Office of Inspector General) evaluates AKS cases under the 'one purpose' test: if even one purpose of the payment arrangement is to induce referrals, the arrangement violates AKS, even if there are other legitimate purposes. The Seventh Circuit established this standard in United States v. Greber (1985), and it has been adopted by most federal circuits.
    • Safe harbors (42 CFR 1001.952) protect arrangements that might otherwise violate AKS. The most frequently used safe harbors for physician practices include: employment (1001.952(i)), personal services and management contracts (1001.952(d)), space rental (1001.952(b)), equipment rental (1001.952(c)), and referral services (1001.952(f)). Each safe harbor has specific conditions: written agreements, fair market value compensation, compensation set in advance, and a term of at least one year.
    • The 2020 OIG Final Rule (85 FR 77684) added new safe harbors for value-based arrangements aligned with CMS value-based care models. These safe harbors protect certain care coordination payments between participants in value-based enterprises (VBEs), provided the arrangement is documented, commercially reasonable, and consistent with the value-based purpose. Practices participating in ACOs, bundled payment programs, or other CMS models should review these new protections with legal counsel.

    Common Compliance Pitfalls for Medical Practices

    • Below-market or above-market office lease rates between physicians who refer to each other. If Practice A leases space from Practice B at below fair market value, the rent discount can be characterized as remuneration for referrals. The OIG has issued multiple advisory opinions (e.g., OIG Advisory Opinion 06-02) flagging lease arrangements where the rental rate correlates with referral volume.
    • Free or discounted services to referring providers: providing free EMR access, free staff training, or free medical supplies to a referring practice can constitute illegal remuneration under AKS if one purpose is to generate referrals. This applies even if the services genuinely benefit patient care. The OIG addressed this in its 2013 Special Fraud Alert on physician-to-physician arrangements.
    • Compensation tied to referral volume or value. Paying a physician a bonus based on the number of patients referred to the practice, the revenue generated from those referrals, or the volume of ancillary services ordered violates both Stark and AKS. Compensation must be set in advance at fair market value and must not vary with the volume or value of referrals, per the requirements of multiple Stark exceptions and AKS safe harbors.
    • Marketing arrangements with patient navigators, care coordinators, or community health workers who direct patients to specific providers. If these individuals receive compensation (hourly or per-patient) for connecting patients to your practice, the arrangement must fit within an AKS safe harbor. The OIG has specifically scrutinized patient steering arrangements in its 2023 workplan priorities.

    Building a Compliance Program

    • The OIG Compliance Program Guidance for Individual and Small Group Physician Practices (65 FR 59434, published October 2000, still current) identifies seven core elements: written policies and procedures, compliance officer designation, training and education, internal monitoring and auditing, reporting mechanisms, disciplinary standards, and prompt response to detected offenses. Practices do not need a full-time compliance officer; designating an existing senior staff member is acceptable.
    • Conduct a financial relationship audit annually. Catalog every arrangement where a physician or family member has a financial interest in an entity to which the practice refers patients. For each arrangement, document which Stark exception or AKS safe harbor applies. If no exception or safe harbor fits, restructure or terminate the arrangement before the next claim submission.
    • Fair market value documentation is the foundation of defensible arrangements. Obtain independent FMV opinions for physician compensation, office leases, equipment rentals, and management services agreements. The OIG and CMS both rely heavily on FMV analysis when evaluating financial relationships. Valuation firms specializing in healthcare (BVR, HealthCare Appraisers, VMG Health) maintain compensation databases benchmarked to MGMA, AMGA, and SullivanCotter surveys.
    • Self-disclosure protocols: if a practice discovers a Stark or AKS violation, CMS operates the Self-Referral Disclosure Protocol (SRDP) for Stark violations, and the OIG operates the Self-Disclosure Protocol for AKS violations. Self-disclosure generally results in lower settlements than government-initiated investigations. CMS has settled SRDP cases at 1.0x to 1.5x the actual damages, compared to treble damages under the False Claims Act.
    Related
    HIPAA-Compliant Patient Communication: Channels, BAAs, and PHI RulesInformed Consent Documentation: Legal Requirements for ProvidersMedical Records Retention Requirements by State and Federal Law
    Frequently asked

    Questions patients ask.

    What is the difference between Stark Law and the Anti-Kickback Statute?

    Stark Law is a civil statute (no criminal penalties) that prohibits physician self-referrals for designated health services to entities with which they have financial relationships. It is strict liability: intent does not matter. The Anti-Kickback Statute is a criminal statute that prohibits offering or receiving anything of value to induce referrals for any federal healthcare program service. AKS requires knowing and willful intent. A single arrangement can violate both statutes simultaneously.

    Does the in-office ancillary services exception protect most small practices?

    The in-office ancillary services exception (42 CFR 411.355(b)) allows physicians to refer for DHS provided within the same building where they practice, supervised by the referring physician or a member of the same group practice, and billed by the referring physician or group. This exception protects common arrangements like in-office lab work, X-rays, and physical therapy. However, the supervision and location requirements are specific: services performed at satellite locations or by independent contractors may not qualify.

    How do I know if my vendor agreements comply with AKS?

    Vendor agreements must meet the personal services safe harbor requirements: written agreement signed by both parties, specifying the services to be provided, with compensation set in advance at fair market value, for a term of at least one year, and compensation that does not vary with the volume or value of referrals. If the vendor provides marketing, patient engagement, or care coordination services that could influence referral patterns, the arrangement requires careful AKS analysis.

    What triggers a Stark or AKS investigation?

    Common triggers include qui tam (whistleblower) lawsuits filed under the False Claims Act (the DOJ reported that 71% of healthcare fraud recoveries in FY2023 originated from whistleblower complaints), data analytics by CMS and OIG showing unusual referral patterns, audits by Medicare Administrative Contractors (MACs), and self-disclosures by the practice itself. Disgruntled former employees are the most common source of whistleblower complaints.

    For practices

    Bring this to your own practice.

    QR Rx turns every procedure into a branded recovery plan that keeps patients engaged and brings them back. Start free in minutes, or see it live in a 20-minute demo.

    Start free trial

    This blog provides general information about healthcare compliance and aftercare best practices. It does not constitute legal, medical, or regulatory advice. Consult qualified professionals for guidance specific to your practice.