Six-Month Window: DOJ and HHS Launch Healthcare FCA Self-Disclosure Pilot

On October 22, 2026, the DOJ Civil Division and the Department of Health and Human Services (HHS) announced a six-month pilot program that offers “legitimate American healthcare businesses” a defined path to come clean on potential False Claims Act (FCA) violations, in exchange for a coordinated civil release and a repayment within a set multiplier range. This False Claims Act Self-Disclosure Pilot Program, or FCA SDPP for short, comes on the heels of recent pronouncements from DOJ about prioritizing criminal healthcare fraud enforcement and from HHS about granting CMS parallel exclusion authority; for more detail, see our posts here and here.  The stated goal of this latest self-disclosure program is to allow companies to quickly move forward with a clean slate on civil FCA liability, rather than undergo years of investigation and negotiation. But, as discussed further below, this program has some serious limitations that life sciences companies must consider carefully.

Who is Eligible for FCA Leniency?

Eligibility for companies is broad on paper: healthcare providers, suppliers, manufacturers, payors, and related entities whose items or services are reimbursed, subsidized, or otherwise paid for, directly or indirectly, by HHS federal health care programs can participate. The gating requirement is that the disclosure describe “a potential violation of the FCA previously unknown to the federal government”; if the government already knows about the conduct, the company can still seek self-disclosure and cooperation credit under Justice Manual Section 4-4.112, but it is not eligible for a pilot resolution. Submissions must be filed by 11:59 PM on April 22, 2027, and the protocol requires a detailed written description of the conduct and the laws violated, exhibits sufficient to show how the conduct worked, a description of remediation, financial information adequate for DOJ to calculate the Base Self-Disclosure Repayment, and a certification from an authorized representative.

Is Self-Disclosure Worth the Risk?

For companies that qualify, the benefits package could be meaningful: a coordinated civil release with no factual admissions, no Corporate Integrity Agreement from HHS-OIG, no civil monetary penalties or revocation from CMS, and relief from the need to submit the same conduct separately under the HHS-OIG Health Care Fraud Self-Disclosure Protocol or the CMS Self-Referral Disclosure Protocol. Note that the announcement makes no specific reference to the newly delegated Section 1128(b) exclusion authority to CMS; it only references the CMS authority for revocation of enrollment.  Any company that offers a self-disclosure will need to ensure that there is no remaining exclusion exposure under CMS’s new exclusion authority.

Another key potential benefit is the fixed financial resolution.  The SDPP sets the multiplier at 1.25 to 1.6 times the Base Self-Disclosure Repayment, and weighs factors such as the timeliness of the disclosure, the duration and scope of the misconduct, the involvement of senior leadership, the financial benefit to the company, and whether the conduct was inherited through a transaction and promptly remediated. That is a far more predictable range than the open-ended up-to-treble damages posture companies normally face in FCA negotiations, and it is coupled with the kind of collateral relief (no CIA and no CMPs) that typically takes months of separate negotiation.

Practical Takeaways

For FDA- and DEA-regulated companies, the practical takeaways track the themes we have been flagging the last few months. The April 22, 2027 deadline is a hard cutoff (although the pilot could be extended or even made permanent), and the “previously unknown” threshold means timing will often turn on whether a whistleblower, a data analytics hit, or an existing agency inquiry has already surfaced the issue: a real risk given DOJ’s recent push on whistleblower incentives and the National Fraud Detection Center.

Companies should think carefully about scope: the published materials describe a release for the company under the federal FCA and specified HHS authorities.  The involvement of senior leadership will be scrutinized as part of any resolution through the pilot, and there is no apparent provision for global FCA resolution for individuals.  Moreover, the announcement makes clear that civil FCA resolution does not address potential federal criminal exposure.  If potential criminal exposure exists, the self-disclosure protocol for criminal healthcare fraud trumps this civil pilot program.  Because the FDC Act is a strict liability criminal statute for regulated companies and their responsible corporate officers, the decision tree about whether to disclose to NFED, pursue the civil pilot, or do both, and in what order, requires careful consideration by any company considering participation in these programs.

It is clear that the Administration is simultaneously tightening the enforcement posture and offering a more structured path to resolution; the companies that benefit will be the ones that are actively conducting compliance activities to identify potential violations, promptly assessing the benefits and risks associated with disclosures, and timely making an informed decision regarding appropriate disclosures.