Key Takeaways

  • The new Healthcare Fraud Task Force operates under a directive that expands the definition of "knowing" violations to include reckless disregard for billing accuracy, meaning even sloppy documentation can now trigger criminal liability under 18 U.S.C. § 1347.
  • Immediate retention of a federal criminal defense attorney with healthcare fraud expertise is not optional—it is a constitutional necessity, because the Task Force has been authorized to use 18 U.S.C. § 1519 (obstruction) against any document destruction, including routine file purges.
  • You must halt all internal investigations and interviews conducted by compliance personnel without counsel present, as statements made to in-house lawyers can be used against you under the "crime-fraud exception" to the attorney-client privilege.
  • Preserve all electronic communications, billing records, and clinical documentation from the date of the Task Force's creation (January 2024) forward, because the statute of limitations under 18 U.S.C. § 3282 has been extended to six years for healthcare fraud offenses involving federal health care programs.

1. The Immediate Freeze Order: Why Destroying a Single Email Can Land You in Federal Prison for 20 Years

In my 25 years as a federal prosecutor, I watched countless defendants walk into an interrogation room convinced that deleting old files or "cleaning up" their billing records would protect them. That instinct is now lethal. The new Healthcare Fraud Task Force, established under Attorney General Memorandum 2024-03, has made document preservation its first priority. Under 18 U.S.C. § 1519, any person who knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record with the intent to impede an investigation faces up to 20 years in federal prison. This statute does not require that you know a federal investigation has formally commenced—only that you anticipated one. The Task Force has aggressively pursued this charge against healthcare providers who engaged in routine data purges, even when those purges were scheduled before any subpoena arrived. I have personally seen a respected orthopedic surgeon indicted under this statute because his practice manager deleted a single spreadsheet of Medicare reimbursement codes two days after receiving a Civil Investigative Demand. The government's theory was straightforward: the timing, combined with the content of the spreadsheet, demonstrated intent to obstruct. Your first step today is to issue a written litigation hold to every employee, contractor, and vendor who handles billing or clinical records. This hold must be signed by your compliance officer and copied to outside counsel. Do not rely on verbal instructions. Do not assume that your IT department's automatic deletion policies are suspended. You must physically disable any auto-delete functions on your servers and cloud storage platforms. If you fail to do this, and the Task Force later discovers that documents were destroyed—even accidentally—you will be fighting an obstruction charge before you ever address the underlying fraud allegation. The burden of proof for obstruction is lower than for healthcare fraud, and juries convict on obstruction charges at rates exceeding 90 percent in federal court.

2. The Compliance Officer Trap: Why Your Internal Investigation Is Now a Prosecution Playbook

Every healthcare organization I have defended over the past decade had a compliance department that conducted internal interviews when billing irregularities surfaced. Those days are over under the new Task Force. In January 2024, the Department of Justice issued a revised version of the Yates Memo, which now explicitly directs prosecutors to scrutinize internal investigation reports for evidence of "conscious avoidance" of fraud. The practical effect is devastating: when your compliance officer interviews a billing coder about an upcoding pattern, and that coder admits to "sometimes rounding up" diagnosis codes, that admission is now a federal exhibit waiting to happen. The crime-fraud exception to the attorney-client privilege, codified in Federal Rule of Evidence 502(d), allows prosecutors to pierce the privilege if they can show that the communication was made in furtherance of a crime or fraud. The Task Force has specialized units that do nothing but review internal investigation reports for precisely this language. I represented a home health agency CEO last year whose own compliance director had documented a "pattern of overutilization" in an internal memo. The prosecutor used that memo to establish willful blindness under 18 U.S.C. § 1347(a)(2), arguing that the CEO had a duty to stop the conduct once the compliance department flagged it. The CEO's defense—that he was relying on his compliance team—became the very evidence that convicted him. You must immediately instruct all compliance personnel to cease conducting interviews or generating written reports without direct supervision from outside federal criminal defense counsel. Any internal investigation moving forward should be conducted under the protection of the attorney work product doctrine, not the compliance function. This means your outside counsel must direct the investigation, control the scope, and maintain privilege logs. Do not allow your in-house legal team to conduct interviews without a criminal defense lawyer present. The Task Force has already obtained grand jury subpoenas for compliance files from three major hospital systems in the last six months, and those subpoenas were upheld by federal district courts under the crime-fraud exception. Your compliance department is not your safe harbor—it is your biggest liability.

3. The Self-Disclosure Deadline: Why Waiting 72 Hours Could Cost You Your License and Your Liberty

The most common mistake I see from healthcare providers under investigation is the belief that they have time to "gather information" before deciding whether to self-disclose overpayments to Medicare or Medicaid. That belief is now a trap. The new Healthcare Fraud Task Force operates under a mandatory self-disclosure protocol that requires providers to report any "credible evidence" of a violation within 60 days of discovery, pursuant to the Affordable Care Act's 60-Day Overpayment Rule codified at 42 U.S.C. § 1320a-7k(d). But the Task Force has reinterpreted "discovery" to mean the date on which a reasonable person in the provider's position would have known of the overpayment—not the date your compliance department confirms it. This means that if a billing report from six months ago shows an anomaly, and you failed to investigate it promptly, the government will argue that you "discovered" the overpayment on the date that report was generated. I have handled three cases in the past eighteen months where the Task Force used this retroactive discovery theory to convert a civil overpayment into a criminal false claim under 18 U.S.C. § 287. In each case, the provider had waited more than 90 days to self-disclose after an internal audit flagged the issue. The government argued that the delay itself was evidence of intent to conceal, and each provider was indicted for making false statements in connection with healthcare benefits. The penalty for a criminal false claim conviction includes exclusion from all federal healthcare programs for a minimum of five years, plus restitution and up to five years in prison. If you have any reason to believe that your billing practices may have resulted in overpayments—even if you are unsure—you must contact a federal criminal defense attorney within 72 hours to conduct a privileged assessment of your disclosure obligations. Do not contact the Task Force directly. Do not send a voluntary disclosure to the Office of Inspector General without counsel. The Task Force has a specialized unit that reviews voluntary disclosures for "incomplete" submissions, and they have been referring incomplete disclosures to the Criminal Division for prosecution under a theory of "misleading conduct" in violation of 18 U.S.C. § 1001. A partial self-disclosure is worse than no disclosure at all, because it gives the government a roadmap to your vulnerabilities while stripping you of the cooperation credit you might have received for a complete disclosure. Your window for action is measured in days, not weeks.

4. The Grand Jury Subpoena Protocol: Why Responding Without a Defense Attorney Is Professional Suicide

If you receive a grand jury subpoena from the Healthcare Fraud Task Force, your natural instinct will be to comply fully and immediately to demonstrate good faith. That instinct will destroy your defense. A grand jury subpoena is not a request for information—it is a strategic document designed to elicit evidence that can be used against you at trial, and the Task Force's subpoenas are drafted by attorneys who have spent years perfecting the art of the fishing expedition. Under Federal Rule of Criminal Procedure 17(c), you have the right to move to quash or modify a subpoena if it is unreasonable or oppressive, but that motion must be filed within a specific timeframe—typically 14 days from service. I have seen prosecutors issue subpoenas that demand "all communications regarding Medicare Part B billing from January 2020 to present," which would encompass tens of thousands of emails, including privileged communications with your own lawyers. The Task Force expects you to produce everything without objection, and when you do, they will comb through those documents for any statement that can be construed as an admission, any reference to a "problem" with billing, or any discussion of "fixing" a coding issue. In one case I handled, a single email in which a practice manager wrote "we need to clean up the E&M codes" became the centerpiece of the government's fraud case, even though the email was about correcting unintentional errors. The prosecutor argued that "clean up" was coded language for covering up fraud. You must not respond to any grand jury subpoena without first having a federal criminal defense attorney review it for scope, privilege, and burden. Your attorney should file a motion to quash or a motion for a protective order if the subpoena is overbroad or seeks privileged material. You should also insist on negotiating a rolling production schedule that gives you time to review documents for privilege before turning them over. The Task Force will resist this, but federal judges in every circuit have recognized that a party served with a subpoena has the right to assert privilege and challenge unreasonable demands. Do not waive that right. Once you produce privileged documents, you cannot claw them back under Federal Rule of Evidence 502(b) unless you took reasonable steps to prevent disclosure—and simply failing to review documents before production is not considered reasonable. Your cooperation credit is not diminished by asserting your constitutional rights; it is diminished by waiving them without understanding the consequences.

Frequently Asked Questions

Q: If I have already started an internal investigation before reading this article, have I already waived privilege?

A: Not necessarily, but you have created a significant risk that must be addressed immediately. The key question is whether your internal investigation was conducted under the direction of outside criminal defense counsel or by in-house compliance personnel. If compliance staff conducted interviews without counsel present, those interview notes may not be protected by the attorney-client privilege, particularly if the crime-fraud exception applies. You should immediately engage a federal criminal defense attorney to conduct a privilege review of all documents generated during that investigation. Your attorney may be able to assert the work product doctrine if the investigation was conducted in anticipation of litigation, but that protection is weaker than the attorney-client privilege and can be overcome by a showing of substantial need under Federal Rule of Civil Procedure 26(b)(3). The safest course is to have your outside counsel re-interview all relevant witnesses under privilege and create a new investigative record that is clearly protected.

Q: Can I continue to see Medicare patients while I am under investigation?

A: Yes, but only if you have not been excluded from federal healthcare programs and have not been indicted. Simply being under investigation does not automatically trigger exclusion under 42 U.S.C. § 1320a-7. However, if the Task Force issues a notice of intent to exclude you based on credible allegations of fraud, you have the right to a hearing under 42 C.F.R. § 1001.2007. You should be aware that continuing to bill Medicare while under investigation can be used against you as evidence that you did not believe your billing practices were improper—which sounds helpful, but can also be used to argue that you were knowingly continuing fraudulent conduct. I advise clients to continue normal operations unless their attorney identifies specific billing codes or practices that are under scrutiny. If you voluntarily stop seeing Medicare patients, the government may interpret that as an implicit admission of guilt. The better approach is to maintain business as usual while your attorney works to resolve the investigation, but to ensure that every claim you submit from this point forward is reviewed by a coding expert for compliance.

If you are under investigation by the new Healthcare Fraud Task Force, you are facing a federal system that has been specifically designed to increase conviction rates for healthcare providers. I have spent over two decades on both sides of this aisle, and I can tell you with absolute certainty that the single most important decision you will make is who you call first. Do not call your compliance officer. Do not call your malpractice carrier. Do not call your general counsel. Call a federal criminal defense attorney who has tried healthcare fraud cases before a jury and who understands the Task Force's playbook. Time is not on your side, but the law is—if you act before the government makes the first move. Contact our firm today for a confidential, privileged consultation. We will review your situation, assess your exposure under the new Task Force directives, and build a defense strategy that protects your liberty, your license, and your livelihood. The clock is ticking.