Tips: OIG Compliance for Medical Device Field Force
Medical device field representatives who know these OIG compliance rules protect themselves, their company, and their HCP relationships from enforcement exposure that ends careers and triggers corporate integrity agreements.
The OIG Compliance Program Guidance sets out the anti-kickback, transparency, and monitoring standards that medical device manufacturers must apply to their field sales and marketing operations. Field representatives are the primary enforcement risk in this framework: most OIG and DOJ enforcement actions against device manufacturers originate from field-level conduct that was not caught by the compliance function. This guide covers seven OIG compliance tips every medical device field representative must know before their next HCP interaction.
$150M+
Typical Medical Device Company Settlement Under the False Claims Act and AKS
Medical device companies have paid hundreds of millions in DOJ settlements for anti-kickback violations originating from field sales conduct: improper HCP consulting arrangements, meals and entertainment that exceeded fair market value, and off-label promotion. The field representative is both the company’s primary enforcement risk and the government’s primary witness. Source: DOJ: False Claims Act
2003
OIG Compliance Program Guidance for Pharmaceutical Manufacturers: Still Operative and Applied to Device Field Forces
The OIG’s 2003 Compliance Program Guidance for Pharmaceutical Manufacturers remains the primary OIG compliance framework applied to medical device manufacturers’ field operations. It identifies the seven risk areas most likely to generate False Claims Act and Anti-Kickback Statute violations in field sales and marketing activities. Source: OIG: CPG for Pharmaceutical Manufacturers, 2003
42 USC
1320a-7b(b): The Anti-Kickback Statute Field Representatives Must Understand Before Every HCP Interaction
The Anti-Kickback Statute prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals of items or services reimbursable by federal healthcare programmes. Medical device sales activities that provide value to HCPs who prescribe or use federally reimbursed devices operate within this framework. Intent is not required for criminal liability in all circuits. Source: OIG: Anti-Kickback Statute
7 OIG Compliance Program Guidance Tips for Medical Device Field Representatives
Quick Summary
1
Know the Anti-Kickback Statute safe harbours before structuring any HCP arrangement
2
Document every HCP consulting arrangement with a written agreement, FMV validation, and services actually rendered
3
Apply the company meals and entertainment policy strictly ; every exception creates enforcement exposure
4
Never promote off-label uses of any device ; the legal standard is stricter than most field representatives believe
5
Maintain sample documentation on the day of the transaction, not at end of quarter
6
Report compliance concerns through the designated channel immediately ; delay creates personal liability
7
Understand what Sunshine Act reporting covers and what it means for your HCP relationships
OIG Compliance Program Guidance Tips in Full
Tip 1: Know the Anti-Kickback Statute Safe Harbours Before Structuring Any HCP Arrangement
Why It Matters
The Anti-Kickback Statute (AKS) at 42 USC 1320a-7b(b) prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals of items or services covered by federal healthcare programmes. Violations are felonies with criminal penalties up to $100,000 per act and up to 10 years imprisonment. A device that is reimbursed by Medicare, Medicaid, or any other federal programme is covered, which includes virtually all implantable devices, durable medical equipment, and hospital-administered devices used in the US. Every HCP interaction that provides value to a physician who prescribes or uses federally reimbursed devices must be evaluated against this statute. Source: OIG: Anti-Kickback Statute Overview
What To Do
Before structuring any arrangement with an HCP (consulting agreement, speaker fee, educational grant, research collaboration), identify which AKS safe harbour the arrangement is intended to fit. The OIG’s safe harbours at 42 CFR Part 1001.952 protect arrangements that meet specific criteria: written agreement, FMV compensation, services actually rendered, no tie to referral volume. If an arrangement does not fit a safe harbour, it requires legal review before proceeding. Do not assume compliance because an arrangement resembles a past arrangement that was not challenged.
Common Mistake
Assuming that an arrangement is compliant because the HCP is genuinely providing a service. The AKS does not require that the value be purely gratuitous ; it applies even to arrangements for legitimate services if the compensation is above FMV or if the arrangement is structured in a way that a purpose of the compensation is to reward referrals. “We’re paying them to speak” does not establish compliance without FMV documentation and evidence that the services were actually delivered as described in the agreement.
Pro Tip
When in doubt, the question to ask your compliance department is not “is this allowed?” but “which safe harbour does this fit?” A specific safe harbour analysis is a far more useful starting point than a general compliance opinion, and it forces the conversation to the specific criteria the OIG would apply if the arrangement were examined in an enforcement context.
Tip 2: Document Every HCP Consulting Arrangement With a Written Agreement, FMV Validation, and Evidence of Services Rendered
Why It Matters
Consulting arrangements are one of the OIG’s identified high-risk areas in the 2003 CPG because they are easily structured to appear legitimate while functioning as inducements. The three documentation elements that distinguish a defensible arrangement from an enforcement target are: a written agreement signed before services begin specifying the nature and scope of services; an FMV assessment supporting the compensation rate performed by an independent valuation method; and documentation that the services were actually delivered as described (attendance records, presentation materials, deliverables received). Source: OIG CPG 2003, Section III.C.3
What To Do
Never initiate an HCP consulting arrangement without a fully executed written agreement on file before services begin. Confirm with your compliance team that an FMV assessment has been completed for the compensation rate in the agreement. After services are delivered, retain evidence: speaker evaluations, attendee lists, training material versions reviewed, meeting agendas with the HCP’s participation documented. If a contracted speaker cancels or does not deliver the contracted services, do not pay the fee ; payment without services is not a consulting arrangement, it is a gift.
Common Mistake
Processing a consulting fee payment retroactively after a verbal arrangement was made and services were “delivered” informally. Retroactive written agreements do not satisfy the safe harbour requirement that the agreement be in writing and signed before services commence. A retroactive agreement is evidence that the arrangement was not structured for compliance ; it is evidence of an attempt to create the appearance of compliance after the fact.
Pro Tip
The OIG looks at the total number of HCP arrangements a field representative initiates relative to the prescribing or device-use volume of those HCPs. An unusually high correlation between consulting arrangements and prescribing volume in a rep’s territory is a pattern that triggers audit. Know the aggregate picture of who you are nominating for arrangements and whether the nominee selection is defensible on criteria other than prescribing volume.
Tip 3: Apply the Company Meals and Entertainment Policy Strictly: Every Exception Creates Enforcement Exposure
Why It Matters
Meals provided to HCPs in connection with sales activities are one of the most frequently cited areas in OIG compliance guidance and one of the most common sources of corporate integrity agreement violations. The OIG’s guidance and the AdvaMed Code of Ethics for interactions with US health care professionals both establish that meals must be modest in value, occur in a setting conducive to the informational purpose of the interaction, and not extend to family members or other non-professional guests. The Sunshine Act (42 USC 1320a-7h) requires manufacturers to report all transfers of value to covered recipients, including meals, regardless of dollar amount. Source: CMS: Open Payments (Sunshine Act)
What To Do
Apply your company’s per-person meal cap without exception. Record every meal in the expense system on the day it occurs with the name and credential of every HCP attendee, the business purpose, and the product or indication discussed. Never invite spouses, family members, or office staff who are not direct decision-makers in device selection or use. Never hold a sales meal at a venue selected for its entertainment value rather than its suitability for an informational meeting. When an HCP asks to move a meal to a venue outside your policy, decline and offer an alternative that fits.
Common Mistake
Splitting a meal charge across multiple expense reports to keep each individual report below the per-person cap while the total cost of the interaction exceeds it. Expense system audits specifically look for this pattern. The per-person cap applies to the total cost of the meal divided by the number of HCP attendees ; it does not apply to the amount on each credit card transaction separately.
Pro Tip
Your Sunshine Act reporting is an audit trail that external investigators can access without a subpoena. Before any interaction with an HCP, know what your company’s Open Payments system will show for that HCP’s cumulative transfers of value. A physician who appears to receive a disproportionate share of field interactions and meals from your company relative to their patient volume or specialty mix is an audit flag for both internal compliance and for the OIG.
Tip 4: Never Promote Off-Label Uses of Any Device: The Legal Standard Is Stricter Than Most Field Representatives Believe
Why It Matters
FDA-cleared or approved medical devices have specific intended uses and indications defined in their 510(k) clearance or PMA approval. Promoting a device for uses or patient populations not covered by the cleared or approved indication is off-label promotion ; a violation of the Federal Food, Drug, and Cosmetic Act that creates FDA enforcement exposure and, because off-label claims can induce Medicare and Medicaid coverage for uncovered uses, also creates False Claims Act liability. Off-label promotion is one of the most frequently cited enforcement categories in DOJ and OIG actions against medical device companies. Source: FDA: Off-Label Use of Medical Devices
What To Do
Know the cleared or approved indication for every device in your portfolio before any sales call. If an HCP asks about an indication or patient type not covered by the label, do not answer substantively in a promotional context ; refer them to clinical or medical affairs. If an HCP raises off-label use voluntarily (as a treating physician describing their own practice), you may listen but must not respond with promotional language or materials. Document any off-label use questions you receive and the response you gave. Your company’s promotional materials have been reviewed for label compliance ; using unapproved materials, including peer-reviewed publications, without medical affairs review is not a safe alternative to approved label claims.
Common Mistake
Sharing a clinical publication with an HCP to “educate” them about off-label uses without realising that unsolicited distribution of off-label clinical data is itself promotional activity subject to FDA’s regulations. The distribution of peer-reviewed literature covering off-label uses is only permitted under FDA’s guidance on distributing scientific and medical publications, which requires specific conditions including that the publication be truthful and non-misleading and that it not be used as a substitute for the approved label. Providing literature that you selected because it supports an off-label use you want the HCP to adopt is promotional conduct.
Pro Tip
Off-label promotion enforcement actions almost always originate from field representative conduct ; a verbal claim in a sales call, a presentation slide used beyond its approved context, or a response to an HCP question that crossed the line. Because field conduct is what triggers enforcement, field representatives are routinely subpoenaed as witnesses or named as individuals in corporate investigations. Your personal compliance record is your personal protection in that environment.
Tip 5: Maintain Sample Documentation on the Day of the Transaction, Not at End of Quarter
Why It Matters
The Prescription Drug Marketing Act (PDMA) requirements and many medical device company sample policies require that sample and loaner documentation be completed at the time of the transaction. For devices subject to tracking requirements (Class III implantable devices under 21 CFR Part 821), the documentation obligation is a regulatory requirement, not just an internal policy. Incomplete or retroactively completed sample documentation is a compliance violation that creates both internal audit exposure and, where the devices are used in Medicare or Medicaid patients, potential False Claims Act exposure. Source: 21 CFR Part 821: Medical Device Tracking
What To Do
Complete every sample receipt, loaner agreement, or device transaction record at the time of the transaction ; before you leave the facility. Use your company’s designated system (CRM, mobile app, paper form) and do not defer to batch entry. For loaner devices, confirm that the facility receiving the device has completed their portion of the receipt documentation before you leave. For trial or evaluation devices, ensure a written trial agreement is in place before the device enters the facility. If a sample is returned, damaged, or unused, document the disposition immediately and through the designated return or destruction channel.
Common Mistake
Waiting until end-of-week or end-of-quarter to reconcile sample inventory documentation. Memory is unreliable over days and weeks, and gaps in sample documentation create inventory discrepancies that cannot be fully resolved retroactively. A device that is in a physician’s office with no documentation of how it got there is a missing device in the company’s inventory system, a potential violation of the company’s sample policy, and in some cases a potential diversion issue that requires a formal investigation.
Pro Tip
Run your own sample inventory reconciliation at the end of every month before your manager’s audit. Every device you cannot account for with documentation is a compliance finding. Self-identified discrepancies that you correct and document before an audit are treated very differently from discrepancies discovered during an audit ; proactive self-correction demonstrates compliance intent; discovered gaps demonstrate the opposite.
Tip 6: Report Compliance Concerns Through the Designated Channel Immediately ; Delay Creates Personal Liability
Why It Matters
The OIG’s compliance programme guidance specifically identifies a functioning reporting mechanism as one of the seven core elements of an effective compliance programme. From the field representative’s perspective, the reporting obligation is personal as well as corporate. A field representative who becomes aware of a potential compliance violation and does not report it through the company’s designated channel may face personal liability if the violation is later discovered. Under the False Claims Act, individuals who knowingly participate in or conceal violations can be named as defendants alongside the company. Reporting protects the company and protects the individual. Source: OIG CPG 2003, Section II.E
What To Do
Know your company’s reporting options before you ever need them: the compliance hotline number, the email address, and whether anonymous reporting is available. When you observe conduct you are uncertain about, report it immediately rather than waiting to see if it escalates. The report does not need to be a formal accusation ; it can be a question: “I observed X and I’m not sure whether it’s within policy.” The compliance function is responsible for the assessment; your responsibility is to report. Do not discuss the concern with colleagues before reporting ; corridor conversations about a compliance issue can compromise an investigation and create joint liability exposure.
Common Mistake
Deciding that a concern is “not my responsibility to report” because the conduct involves another representative, a manager, or an HCP relationship that someone else owns. The False Claims Act whistleblower provision (qui tam) rewards individuals who report fraud ; which means that if a colleague or competitor reports the same conduct you observed and chose not to report, your knowledge and inaction will be examined in the investigation that follows. Not reporting a known concern does not protect you; it creates exposure.
Pro Tip
Anti-retaliation protections for compliance reporters are written into the False Claims Act. Your company’s compliance programme is legally required to include non-retaliation protections. If you believe you have experienced retaliation for making a compliance report, that is itself a reportable event, and it is reportable to the OIG as well as through internal channels. Document the timeline of your report and the subsequent events in writing for your own records.
Tip 7: Understand What the Sunshine Act Reports and What It Means for Your HCP Relationships
Why It Matters
The Physician Payments Sunshine Act (42 USC 1320a-7h) requires medical device manufacturers to report annually to CMS all transfers of value to covered recipients: physicians, dentists, podiatrists, optometrists, chiropractors, physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anaesthetists, and certified nurse midwives. The reporting threshold is $10.82 per item and $109.18 in aggregate per covered recipient annually (2024 thresholds). All reported payments are published in the CMS Open Payments database, which is publicly searchable. HCPs, their hospital employers, professional bodies, insurance plans, and OIG investigators all use Open Payments data. Source: CMS: Open Payments Program
What To Do
Know your company’s Open Payments reporting process and what data is submitted on your behalf. If your company’s reporting system requires your input on the nature, purpose, or attendees of a reported interaction, provide accurate information. If an HCP asks you about their Open Payments record or disputes a reported amount, do not attempt to resolve the dispute yourself ; direct them to your company’s Open Payments contact and inform your compliance department. Review the CMS Open Payments database for your own reporting territory annually to confirm that what is reported matches the interactions you documented. Discrepancies between what was reported and what your documentation shows are a compliance and audit issue.
Common Mistake
Believing that unreported or improperly categorised payments in Open Payments protect an HCP relationship from scrutiny. Underreporting or miscategorising payments is a Sunshine Act violation that creates exposure for the manufacturer. HCPs who discover that interactions with your company appear in Open Payments at a level they were not expecting ; because you failed to tell them what would be reported ; become compliance liabilities rather than advocates. Transparency about what will be reported, before the interaction occurs, is the professional standard.
Pro Tip
Before initiating a high-value interaction with an HCP (a speaker programme, a paid advisory board, a research collaboration), search their name in the CMS Open Payments database to understand their existing relationship with the industry. An HCP who is already receiving significant payments from multiple manufacturers and whose practice patterns have drawn attention from compliance programmes will be a higher-risk relationship for your company regardless of how well you manage your individual interactions with them.
Pre-HCP Interaction Compliance Checklist
Sources: OIG CPG for Pharmaceutical Manufacturers, 2003 | CMS Open Payments
Key Takeaways
Field conduct is where most enforcement actions originate: and where they are also prevented
Corporate integrity agreements and DOJ settlements trace back to field-level conduct in the overwhelming majority of medical device enforcement actions. The field representative is both the company’s highest enforcement risk and the company’s most effective compliance control. Personal compliance discipline at the interaction level is not a bureaucratic obligation ; it is the primary prevention mechanism for corporate-level enforcement.
Documentation is personal protection, not just corporate compliance
In an investigation, the field representative’s documentation record is the primary evidence of their intent and their conduct. Complete, accurate, same-day documentation of every HCP interaction, meal, sample transaction, and consulting arrangement is the representative’s personal evidentiary record. Gaps in documentation are not just compliance violations ; they are evidentiary gaps that cannot be filled retroactively when an investigation begins.
The OIG compliance programme exists because field behaviour is the primary enforcement risk: this is how it is managed
The seven elements of an effective OIG compliance programme ; written standards, compliance officer, training, reporting mechanisms, auditing, enforcement, and corrective action ; are specifically designed to detect and correct field-level conduct before it becomes a government enforcement action. When the reporting mechanism works and field representatives use it, violations are addressed internally and remediated. When it does not work, the government’s investigative mechanism takes over, and the outcomes are significantly more costly for both the company and the individuals involved.
Frequently Asked Questions
What is the OIG Compliance Program Guidance and does it apply to medical device field representatives?
The OIG’s 2003 Compliance Program Guidance for Pharmaceutical Manufacturers is the primary OIG compliance framework applied to medical device manufacturers’ field operations. While issued for pharmaceutical manufacturers, its seven-element compliance programme structure and the seven risk areas it identifies (integrity of data submitted to government programmes, kickbacks, off-label promotion, gifts and entertainment, HCP consulting arrangements, clinical trials, and pharmaceutical education) map directly to medical device field force conduct. Medical device manufacturers routinely model their compliance programmes on this guidance and the parallel guidance for hospitals and other settings. Source: OIG CPG 2003
What is the Anti-Kickback Statute and how does it affect medical device sales activities?
The Anti-Kickback Statute at 42 USC 1320a-7b(b) prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals of items or services covered by federal healthcare programmes. For medical device field representatives, it applies whenever a sales activity provides value to an HCP who prescribes or uses devices that are reimbursed by Medicare, Medicaid, or other federal programmes. This includes meals, consulting fees, speaker honoraria, educational grants, research funding, and any other transfer of value. Violations carry criminal penalties of up to $100,000 per act and up to 10 years imprisonment. Source: OIG: Anti-Kickback Statute
What is fair market value (FMV) and why does it matter for HCP arrangements?
Fair market value is the compensation that a willing buyer would pay a willing seller in an arm’s-length transaction when neither is under compulsion to complete the transaction. In the HCP compliance context, FMV validation for consulting arrangements, speaker fees, and advisory board payments is required to demonstrate that the compensation reflects the value of the services provided, not the value of the HCP’s prescribing or device-use decisions. Compensation above FMV is a signal that the arrangement may be structured to reward referrals rather than to obtain legitimate services. FMV assessments must be performed by an independent method and documented before the arrangement begins. Source: OIG CPG 2003, Section III.C.3
What does the Sunshine Act require medical device representatives to report?
The Physician Payments Sunshine Act (42 USC 1320a-7h) requires applicable manufacturers of covered drugs, devices, biologicals, and medical supplies to report annually to CMS all transfers of value to covered recipients, including physicians, physician assistants, nurse practitioners, and clinical nurse specialists. Reportable transfers include meals, consulting fees, speaker honoraria, education, charitable contributions, research funding, grants, travel and entertainment, and gifts. The current reporting threshold is $10.82 per item and $109.18 in aggregate annually. All reports are published in the CMS Open Payments database and are publicly searchable. Source: CMS Open Payments
What happens if a medical device field representative engages in off-label promotion?
Off-label promotion by a field representative can create both corporate and individual liability. At the corporate level, it creates FDA misbranding exposure and, because off-label claims can induce Medicare and Medicaid coverage for non-covered uses, False Claims Act liability. At the individual level, a representative who knowingly engages in off-label promotion may face personal exclusion from participation in federal healthcare programmes, termination, and in cases involving knowing submission of false claims, personal criminal liability. Field representatives who are directed to promote off-label by a manager should report the instruction through the compliance hotline immediately rather than complying.
Can a medical device field representative be personally liable for compliance violations?
Yes. The False Claims Act imposes liability on any person who knowingly submits or causes the submission of false claims to the government. Field representatives who engage in conduct that generates false claims ; by promoting off-label use that results in Medicare coverage claims, or by providing kickbacks that induce government-reimbursed prescriptions or device uses ; can be named as individual defendants alongside the company. The Anti-Kickback Statute carries criminal penalties applicable to individuals as well as entities. OIG can also exclude individuals from participation in federal healthcare programmes based on field-level conduct. Source: DOJ: False Claims Act
What is a corporate integrity agreement and how does it affect field representatives?
A corporate integrity agreement (CIA) is a contract between the OIG and a company that has settled healthcare fraud allegations, requiring enhanced compliance programme obligations for a defined period, typically five years. CIAs typically require independent review of field sales conduct, mandatory compliance training, enhanced monitoring of HCP arrangements and payments, annual reports to OIG, and personal compliance certifications from field representatives and managers. Field representatives at a company operating under a CIA face significantly more intensive compliance monitoring than at a company not under a CIA, and violations during the CIA period can result in exclusion from federal healthcare programmes. Source: OIG: Corporate Integrity Agreements
Sources
Government and Regulatory Sources
- OIG: Compliance Program Guidance for Pharmaceutical Manufacturers (2003): the primary OIG compliance framework for pharmaceutical and medical device field force operations; source for the seven-element compliance programme structure and the seven high-risk field activity areas.
- OIG: Anti-Kickback Statute Overview: explanation of 42 USC 1320a-7b(b), the safe harbour framework at 42 CFR Part 1001.952, and the criminal and civil penalty structure for violations.
- CMS: Open Payments Program: the Sunshine Act reporting database; source for the 2024 reporting thresholds and the scope of covered recipients and reportable transfers of value.
- DOJ: False Claims Act: source for individual and corporate liability under the FCA, qui tam whistleblower provisions, and typical settlement context for medical device enforcement actions.
- FDA: Off-Label Use of Approved/Cleared Medical Devices: FDA’s regulatory framework for device indications and the definition of off-label promotion for 510(k)-cleared and PMA-approved devices.
- OIG: Corporate Integrity Agreements: CIA database, standard CIA elements, and the enhanced field monitoring requirements imposed on companies operating under active CIAs.
Industry Standards
- AdvaMed Code of Ethics on Interactions with US Health Care Professionals: the medical device industry’s voluntary code governing HCP interactions, meals and entertainment standards, and consulting arrangement criteria; widely adopted by medical device manufacturers as the field conduct standard.
Related VelSafe Articles
Tips
7 Medical Device Trial Investigator Obligations Tips
The seven investigator obligations for medical device clinical trials under IDE regulations: consent, UADE reporting, case histories, device accountability, and FDA inspection compliance for trial sites.
Guides
HCIR Credentialing and National Patient Safety Goals Guide
The credentialing, documentation, and access requirements healthcare industry representatives must meet before entering clinical facilities, including immunisation records, HIPAA training, background checks, and OIG exclusion clearance.
Tips
FDA Inspection Interviewing Techniques: 10 GMP Compliance Tips
How medical device and pharmaceutical personnel should prepare for and conduct themselves during FDA investigator interviews ; directly relevant to field representatives who may be interviewed during an FDA enforcement action triggered by field sales conduct.
Medical Device Sales and Marketing Compliance Tips
More Compliance Tips for Medical Device Field Representatives
VelSafe covers OIG compliance, FDA enforcement, and medical device regulatory requirements for field representatives, compliance managers, and legal teams. Browse tips, guides, and case studies built for the medical device industry’s specific compliance framework.
Browse All Tips
