---

name: healthcare-law description: Healthcare law skill for medical and health industry legal matters. Use when the user needs assistance with HIPAA compliance, healthcare regulations, medical malpractice, FDA matters, healthcare transactions, or provider licensing. Triggers on keywords like "HIPAA", "healthcare", "medical", "hospital", "physician", "malpractice", "FDA", "PHI", "patient", "provider", "Medicare", "Medicaid", "Stark", "Anti-Kickback".

Healthcare Law

This skill provides expert guidance for healthcare regulatory compliance, transactions, and litigation.

Core Capabilities

1. Regulatory Compliance

• HIPAA Privacy and Security
• Fraud and abuse laws
• Licensing and credentialing
• Medicare/Medicaid compliance

2. Healthcare Transactions

• Provider acquisitions
• Joint ventures
• Management agreements
• Ancillary service arrangements

3. Litigation

• Medical malpractice defense
• Regulatory investigations
• Qui tam defense
• Peer review matters

4. Life Sciences

• FDA compliance
• Clinical trials
• Drug/device approvals
• Product liability

HIPAA Compliance

HIPAA Components

Rule	Scope	Key Requirements
Privacy Rule	Use/disclosure of PHI	Notice, authorization, minimum necessary
Security Rule	Electronic PHI safeguards	Administrative, physical, technical
Breach Notification	Notification requirements	Individual, HHS, media notification
Enforcement Rule	Penalties and procedures	Civil and criminal penalties

Protected Health Information (PHI)

Individually Identifiable Health Information:

• Past, present, or future physical/mental health
• Provision of healthcare
• Payment for healthcare
• Identifies individual or reasonable basis to identify

18 HIPAA Identifiers:

1. Names
2. Geographic data
3. Dates (except year)
4. Phone numbers
5. Fax numbers
6. Email addresses
7. Social Security numbers
8. Medical record numbers
9. Health plan beneficiary numbers
10. Account numbers
11. Certificate/license numbers
12. Vehicle identifiers
13. Device identifiers
14. Web URLs
15. IP addresses
16. Biometric identifiers
17. Full-face photographs
18. Any other unique identifying number

Privacy Rule Requirements

Permitted Uses Without Authorization:

• Treatment, payment, healthcare operations (TPO)
• Required by law
• Public health activities
• Abuse/neglect reporting
• Health oversight activities
• Judicial proceedings
• Law enforcement (limited)
• Research (with IRB/Privacy Board approval)

Patient Rights:

• Access to PHI
• Amendment of PHI
• Accounting of disclosures
• Request restrictions
• Confidential communications
• Notice of privacy practices

Security Rule Safeguards

Administrative Safeguards:

• Risk analysis and management
• Workforce training
• Access management
• Security incident procedures
• Contingency planning
• Business associate agreements

Physical Safeguards:

• Facility access controls
• Workstation use policies
• Workstation security
• Device and media controls

Technical Safeguards:

• Access controls
• Audit controls
• Integrity controls
• Transmission security

Breach Notification Requirements

Affected Individuals	Notification Deadline
1-499	60 days of discovery
500+	60 days (immediate to media/HHS)
HHS	Annual log (under 500); immediate (500+)

HIPAA Penalties

Violation Level	Per Violation	Annual Maximum
Did not know	$137-$68,928	$2,067,813
Reasonable cause	$1,379-$68,928	$2,067,813
Willful neglect (corrected)	$13,785-$68,928	$2,067,813
Willful neglect (not corrected)	$68,928	$2,067,813

Healthcare Fraud and Abuse

False Claims Act (31 U.S.C. §3729)

Prohibited Conduct:

• Knowingly presenting false claims
• Knowingly making false statements
• Concealing/avoiding obligation to pay

Scienter: Actual knowledge, deliberate ignorance, or reckless disregard

Penalties:

• Civil penalties: $13,946-$27,894 per claim (2024)
• Treble damages
• Exclusion from federal programs

Anti-Kickback Statute (42 U.S.C. §1320a-7b)

Prohibited: Knowingly and willfully offering, paying, soliciting, or receiving remuneration to induce referrals for services covered by federal healthcare programs.

Elements:

1. Remuneration (anything of value)
2. Knowingly and willfully
3. To induce referrals
4. For items/services covered by federal programs

Safe Harbors (Selected):

Safe Harbor	Key Requirements
Employment	Bona fide employment relationship
Personal services	Written agreement, FMV, specified services
Space rental	Written agreement, FMV, one year term
Equipment rental	Written agreement, FMV, one year term
Discounts	Properly disclosed and reflected
EHR	ONC-certified technology, conditions met
Referral services	Written agreement, conditions met

Stark Law (42 U.S.C. §1395nn)

Prohibited: Physician referral of designated health services (DHS) to entities with which physician (or family member) has financial relationship, unless exception applies.

Designated Health Services:

1. Clinical laboratory services
2. Physical therapy
3. Occupational therapy
4. Radiology and imaging
5. Radiation therapy
6. Durable medical equipment
7. Parenteral and enteral nutrients
8. Prosthetics, orthotics, prosthetic devices
9. Home health services
10. Outpatient prescription drugs
11. Inpatient and outpatient hospital services

Exceptions (Selected):

Exception	Key Requirements
In-office ancillary	Services in same building, supervised
Employment	Bona fide employment, FMV compensation
Personal services	Written agreement, FMV, commercially reasonable
Rental	Written agreement, FMV, exclusive use
Isolated transactions	One-time payment, FMV, commercially reasonable
Group practice	Meeting all group practice requirements

Civil Monetary Penalties

Violation	Per-Violation Penalty
False claim	$11,000-$22,000
Anti-kickback	$100,000
Stark violation	$15,000-$100,000
EMTALA violation	$50,000-$100,000

Compliance Programs

OIG Compliance Program Elements

1. Written policies and procedures
2. Compliance officer and committee
3. Training and education
4. Communication lines (hotline)
5. Internal monitoring and auditing
6. Enforcement and discipline
7. Response to detected offenses

Compliance Risk Areas

• Billing and coding accuracy
• Medical necessity documentation
• Stark/Anti-Kickback arrangements
• EMTALA compliance
• HIPAA privacy and security
• Credentialing verification
• Quality of care
• Marketing practices
• Kickback arrangements

Medical Malpractice

Elements of Medical Malpractice

1. Duty: Physician-patient relationship
2. Breach: Violation of standard of care
3. Causation: Breach caused injury
4. Damages: Compensable harm

Standard of Care

• Care that a reasonably prudent healthcare provider would provide
• Same or similar circumstances
• Same specialty and training level
• Expert testimony typically required

Common Defenses

• No breach of standard of care
• No causation (injury would have occurred anyway)
• Comparative negligence
• Statute of limitations
• Assumption of risk
• Good Samaritan laws
• Peer review immunity

Damages

Type	Description
Economic	Medical expenses, lost wages, future care
Non-economic	Pain and suffering, loss of consortium
Punitive	Gross negligence or intentional misconduct

FDA Regulatory Framework

Product Categories

Category	Regulation	Key Requirements
Drugs	FDCA, NDA/ANDA	Safety and efficacy
Biologics	PHSA, BLA	Same + manufacturing
Medical devices	FDCA, Class I/II/III	Risk-based regulation
Food	FDCA	Safety, labeling
Cosmetics	FDCA	Safety, no disease claims

Drug Approval Process

Preclinical Testing → IND Application →
Phase 1 (Safety) → Phase 2 (Efficacy) → Phase 3 (Confirmation) →
NDA Submission → FDA Review → Approval

Medical Device Classification

Class	Risk	Regulatory Pathway
I	Low	General controls, most exempt
II	Moderate	510(k) premarket notification
III	High	PMA (premarket approval)

Integration with Other Skills

• compliance-tracking: Healthcare regulatory monitoring
• litigation: Medical malpractice, regulatory defense
• corporate-ma: Healthcare transactions
• contract-lifecycle: Provider agreements
• employment-labor: Credentialing, employment matters

Reference Files

For detailed guidance:

• references/hipaa-compliance.md - HIPAA implementation guide
• references/stark-analysis.md - Stark exception checklist
• references/fda-pathways.md - FDA approval processes