What makes CRUSH particularly interesting is the breadth of who and what it could impact. This isn't just about DME fraud. The ideas CMS is considering potentially touch hospitals, laboratories, Medicare Advantage and Part D plans, Medicaid and CHIP, DMEPOS suppliers, provider enrollment, billing, AI, payment suspensions, ownership disclosure, beneficiary solicitation and more.

This White Paper suggests enrollment information, ownership records, physician orders, proof of delivery, medical necessity documentation, beneficiary information, and billing patterns are likely to receive increasing attention.

Federal agencies are investing heavily in real-time analytics and cross-agency data sharing. Compliance programs that rely exclusively on retrospective audits and documentation reviews risk missing the very patterns regulators are now designed to detect.

Private equity and other forms of outside investment have become an increasingly visible part of healthcare. Investment can bring capital, infrastructure, technology, and opportunities for growth, but it also creates compliance considerations that healthcare organizations need to address directly.

As healthcare continues its shift toward value-based care, providers need partners who can help both the technical and regulatory sides of quality reporting. Learn about why I partner with Comprise Health to navigate both the technical and regulatory side of quality reporting.

This case is not simply about controlled substances. It is about governance. An effective compliance program is not measured by the number of policies it maintains or the sophistication of its hotline. It is measured by what leadership does when uncomfortable information arrives.

The Methodist settlement serves as a sobering reminder that EMTALA compliance is no longer judged solely by what happens in the treatment room. It is judged by the entire patient journey from the moment the individual arrives at the emergency department doors.

Healthcare organizations often enter new Medicaid initiatives with a strong understanding of regulatory requirements. The reality is that California healthcare compliance also depends on whether your operational model can consistently deliver the services those regulations are designed to support.

At first glance, the proposed 2027 Home Health Prospective Payment System rule appears to be a routine update. But buried within the proposed rule is something far more significant. Read more to understand the compliance implications.

Provider directories are no longer simply member-facing tools. They are increasingly being viewed as evidence of network adequacy, access to care, and organizational accountability.

The recent $30 million settlement involving Advanced Pathology Solutions (APS) is being reported as another kickback case. While that's true, focusing only on the Anti-Kickback Statute misses the bigger compliance lesson.

An important reminder that clinical judgement cannot be delegated, automated, or subordinated to business objectives.

A small hospital demonstrated that effective cybersecurity is achievable when organizations focus on prevention, detection, and response as part of their operational culture.

The future of healthcare enforcement is increasingly data-driven. OIG is no longer looking for a needle in a haystack. Analytics helps them identify the haystack before they ever ask for the needle. The organizations best positioned for the future will be those that review their data with the same level of scrutiny as the government.

Interest in GLP-1 medications has grown rapidly, and with that growth has come an increase in organizations offering prescriptions through online platforms. GLP-1 telehealth has created new opportunities for patients to access care, particularly for those who face transportation barriers or limited provider availability. The reality is that convenience should never come at the expense of patient safety, regulatory compliance, or sound clinical judgment.

Healthcare organizations are increasingly using technology to streamline referrals, improve care coordination, and reduce administrative burden. This article highlights how responsible compliance professionals must balance these benefits with how they influence referral patterns and financial relationships between parties.

California has adopted its first comprehensive hospice licensing regulations, which include a sweeping set of operational requirements that touch everything from staffing ratios and administrator qualifications to geographic service areas and response times. Here's why compliance professionals across the country should be paying attention.

When organizations talk about strengthening compliance, the conversation often begins with policies, training requirements, audits, and reporting structures. Those elements matter, but they are rarely what determines whether a compliance program succeeds or struggles. The reality is that compliance culture is built through relationships.

When healthcare organizations discuss compliance, the conversation often centers around regulations, policies, audits, and corrective action plans. Those elements are important, but compliance programs ultimately succeed or struggle based on something much more fundamental: trust. The reality is that employees are far more likely to raise concerns, ask questions, and report potential issues when they trust the people leading compliance efforts.

One of the most common conversations I have with healthcare organizations, vendors, and business associates revolves around a simple question: "How do we become HIPAA certified?" The reality is that HIPAA certification does not exist in the way many organizations believe it does.