[Podcast] AHLA Speaking of Health Law: Best Practices for Operationalizing Risk Assessments and Identifying and Mitigating Stark and Anti-Kickback Risk

Stephanie Haywood  00:43

Welcome to today’s episode of Speaking of Health Law Podcast. I’m Stephanie Haywood, Senior Vice President of Sales and client engagement at Ntracts. And today I’m excited to be moderating our topic of discussion, how to use DOJ compliance guidance focused arrangement CIA’s and your organization’s contract data to identify and mitigate Stark and Anti kickback risk. The experts I’ve asked to share their knowledge and expertise on this topic are Jerry Lear and Ken Zeko.  Jerry serves as Chief Internal Audit/ERM Officer for Bon Secours Mercy Health , located in Cincinnati, Ohio. Prior to Bon Secours Mercy Health He was a partner principal for Crowe LLP, dedicated to health care risk consulting. He has implemented ERM and internal audit functions for many organizations across the country. From risk assessment to staffing design and onboarding and internal audit operations. He holds several certifications including Certified Internal Auditor (CIA) and Certified Information Systems Auditor (CISA). His professional affiliations include Institute of Internal Auditors, the healthcare Financial Management Association, health care compliance Association, and American Health Law Association. An attorney consultant with more than 25 years of regulatory compliance experience. Ken Zeko is a Principal Advisor at Hall render advisory services, leading their coding compliance service line, assisting clients with compliance program assessments, risk assessments, investigations, coding compliance engagements, self disclosures, physician arrangement reviews, independent review organization engagements, and Corporate Integrity Agreement related CIA engagements. Ken has performed over 70 compliance program assessments and has managed hundreds of coding compliance engagements for a myriad of health care organizations. He is certified in health care compliance is an active member of the health care compliance Association, as well as the American Health Law Association. Ken, Jerry, Thank you both for joining me today. I’m really looking forward to this discussion. Jerry, I had the pleasure of spending some time with you in person recently at the AHLA annual meeting and really enjoyed it. And Ken, we’ve known each other for a very long time. You two have worked together on projects on and off over many years, and you seem to have similar mindsets on how to address compliance and risk management. Ken, I was hoping that you could start by sharing a little bit about how you and Jerry connected originally, and why you enjoy working together.

Ken Zeko 03:30

Well, thanks for having us. We love this topic of physician arrangements risk. We are pretty nerdy regarding how passionate we are about it. And the way we met,  we were at a Healthcare Compliance Association Conference. Jerry had heard of me and came up and started a conversation and next thing you know, we were talking about the potential of working together someday and how we viewed compliance risk. And one of the things that we shared a – like I said – a nerdy passionate about was physician arrangements risk, we thought I was surprised to see there was somebody else like Jerry, who thought like I did that physician arrangements risk was often overlooked at organizations. And he seemed to think the same way. If you’re familiar with MD Anderson, down in Texas, they have a view of abolishing cancer and Jerry had that same thought of abolishing position arrangements or risk and we set out to do that for our clients. And I think Jerry has a very unique way of doing that at Bon Secours Mercy Health.

Stephanie Haywood  03:35

This is why I’m so excited that we’re here and having this conversation and allowing the two of you you to share your approach to risk management because I know that your views on abolishing physician arrangement risk is a bit of – or maybe I should say a totally – different approach to perhaps some other schools of thought around risk management and compliance. And later, we’re going to get into some of the reasons that others may not have the same approach as the two of you. But perhaps to start, Jerry, can you give us a high level overview of what’s different about your approach to other approaches out there?

Jerry Lear 05:35

Thanks, Stephanie. I am Ken, for the flattering comments, as I am nerdy about this stuff, and you know it. But I think to start with, we take a view of physician auditing as it being a good thing. Imagine the auditor saying that everyone loves auditing, right? So and especially auditors, but that’s it really comes from looking at auditing and monitoring is something that you should do. Now, don’t get me wrong, there is a large contingent of folks out there that have the view that if you do look at physician arrangements, do it at a surface or control level, versus getting in very deep. Because if you look, you’re gonna find something, and then you’re gonna have to deal with that. And I understand that, I respect that because frankly, no administrator wants to go to a given position and ask for money back. It’s not a good position to be in. However, as we know, the guidance says otherwise, it says we should be looking. And so we do take that approach, take it with my current client and past clients as it is good to look and look looking beyond controls and depth to find out what’s going on, in the actual arrangement, post inking the deal. So after it’s in operations, what does it look like, especially those arrangements that are more complex in nature?

Stephanie Haywood  07:27

I think you mentioned to me on one of our prior discussions, you know, we really can’t stick our head in the sand and avoid situations on some of those more complex agreements. And with your in Ken’s approach, your approach to risk management is the exact opposite of sticking your head in the sand, or waiting for the other shoe to drop, so to speak, you’re actually looking under every rock and into every corner. It seems like that is a huge task, and significant across the organization. So I’m interested if you could share with me, Jerry. And of course, Ken would would love for you to weigh in, what tools or resources do you use? And how can you make it more streamlined or easier.

Jerry Lear 08:15

So our starting point is, is analytics. And it makes us more efficient. So we have an analytics team that helps us to root out what would be the universe of physician arrangements for the organization. And so that is looking in AP systems, it’s looking in payroll, to see where payments are made. And then it is going back to one of the primary sources for hopefully, all of the information, which is contract management systems. So we’re, we’re utilizing data analytics, we’re rooting out the contracts, and then through our risk assessment process, segregating those by type of arrangement. But it’s we need to make sure that we have that universe. So we’re linked very closely to the administrator over contract management. So that we know every arrangement that is out there. And so that is a really important starting point, is understanding the totality and the aggregate universe of your arrangements.

Ken Zeko 09:26

And what I would say is ever since I was in undergrad, I kind of believe in this concept of work smart, not hard. We’re all very, very busy. And if the answers to the test are out there, I think we have a responsibility to go find the questions and the answers to the test. And in this regard, the government has given extremely good guidance regarding what they expect to see. So the Department of Justice created several years ago a document the name is isn’t that great, but believe me, the guidance is incredible the US Department of Justice Criminal Division, Evaluation of Corporate Compliance Programs, which they’ve updated now three times, and in that they say, they tell health systems exactly what they expect to see regarding oversight of physician arrangements or arrangements with third parties like medical director, they spell it out, for example, they say profit, prosecutors should analyze the services to be reformed, that third party is actually performing the work. And it’s the compensation is commensurate with the work being provided in the industry’s geographical area. So they say you should be doing these types of auditing and monitoring. And then the other thing that I look for, and Jerry and I have used over the years, our recent Corporate Integrity Agreements that have a focus arrangement, bend to them. So there’s two types of focus into depth of corporate integrity agreements, generally, false claims, ones and Anti Kickback and Stark ones, the government calls those focus arrangements. And in general, the focus arrangements. You know, CIA’s, they spell out that when you get one of those Corporate Integrity Agreements, the Independent Review Organization, the IRO, has to do has to review two things the organization’s basically their contract management system, they call it a focus arrangement system. And then they spell out that the IRO needs to do a transaction review of focus arrangement transaction review. So they spell out exactly how you should be tracking these agreements. So the system, what type of contract management system are you using? Are you using an Excel spreadsheet that somebody updates, you know, once every six months if you’re lucky? Or do you have a full blown contract management system like Ntracts, and they spell out what you’re supposed to be doing in order to pass these Corporate Integrity Agreements?

Stephanie Haywood  12:21

Are you you’ve talked a lot about what needs to happen after contract this first inked. And I appreciate that, again, if you can just speak a little more to that. And perhaps Jerry, you can also add in some examples. Can you give us an example of when you’ve seen a contract, fall flat or not get in or get into the pitfalls after they’ve been inked. And just to add to that, there have to be critics of this process. And individuals who may be hesitant to utilize a contract management system or any sort of tracking mechanism, although we know how incredibly important it is. Can you talk to us as well, about how you get buy-in, how do you get those critics on board really to what you’re trying to accomplish, not just from a regulatory and compliance perspective, but the tools around what is necessary in order to help maintain that compliance.

Ken Zeko 13:22

I think one of the keys to operationalizing physician arrangements or physician arrangement risk is to make sure that the end users of the agreement, know what’s in the agreement, and they’re aware of Stark and anti kickback back risks. They’ve been trained about it. For example, Jerry and I have both seen organizations where, you know, they they might have contracted with a physician to be a medical director. Well, sometimes the area where that medical directorship resides, they’ve never seen the actual contract. It’s been lawyered by the General Counsel’s Office or external counsel. And then the medical director resides in department X. Well, the department X leadership sometimes is never seen that actual contract. Those people need to be able to understand what’s in the contract, they need to be able to understand what risks are posed by contracting with a physician, and then they need to be able to show that they’re mitigating that risk, Jerry,

Jerry Lear 14:33

Completely agree. I think there is at some there…. We know, we know it exists, that there’s times where there’s a unreasonable expectation that the department leads or the responsible managers overseeing a given arrangement are fully aware of those and we do need to do the training and they do need to be aware of it. And they need to be reviewing when a payment is made to those physicians or when services are provided the need for the documentation to support those things. But there needs to be an additional check, right. And there needs to be some secondary monitoring of that. Because there’s complexity. And frankly, because there’s human interaction involved, right, and that brings another level of complexity there. And those department managers aren’t looking at the terms on a consistent basis. And so this, this, it becomes that much more important, especially when there’s multiple terms and multiple service expectations involved, that they’re all being considered. It’s all being documented. And that’s being checked prior to payment going out the door, hopefully.

Ken Zeko 15:56

Yeah. And that notion of like, how do we convince leadership that this is something they should do? Again, I like to point to these guidance documents in the recent Corporate Integrity Agreement documents, often what I think Jerry and I find his leadership teams are unaware of how things would work if the organization were to be looked at from the outside. So if there were some sort of inquiry, somebody blew, you know, a whistleblower says, “Hey, this organization is inappropriately contracting with physicians”, you know, let these leaders know that there would be most likely depositions, there would most likely be search warrants executed, they would, you know, look at your the individuals emails, and you want to be able to see that you’re using or you’re doing things that look like what the government would expect to see. So again, if you took a recent focus arrangement, Corporate Integrity Agreement, and you deconstruct that, and you use that as your agenda for your organization’s Compliance Committee to say, Hey, are we doing the things that the government would expect to see? Usually, that’s enough to for leadership to realize, oh, boy, we better be doing what the government would expect to see. Why not create your program, your focus arrangements, your position arrangements program to mirror what the government would expect to see, which is easily found in the corporate Corporate Integrity Agreement, focus arrangements pieces.

Stephanie Haywood  17:50

We certainly know that there’s a uniqueness to the healthcare industry that can make adherence to guidelines seem tricky in some cases. You’ve talked a bit about some of the steps that an organization can take to to conduct a thorough risk assessment, like looking at the guidance and and looking at corporate integrity agreements. Can you give us a few other examples of potential risk areas that are often identified and some additional steps that perhaps an organization can conduct can use to conduct a thorough a thorough risk assessment?

Jerry Lear 18:29

So we kind of take a unique approach. And I have, you know, when I’ve done risk assessments at various clients, is the physician assessment needs to be segregated, different and very robust. Need to understand as I’ve mentioned before the population of physician arrangements, part of that is making sure that you have all your physician arrangements for any payment or service being provided out there. And so doing searches of AP system for physician payments, that’s always a good thing. Make sure you have a contract. But it’s identify first that population, then there’s needs to be a big effort and categorizing or segregating that population by category. So that you understand, which are more complex, or more inherently risky. So segregating you know AR arrangements from like timeshares, leases, et cetera. Medical directorships, recruitment type arrangements from even more complex such as reverse MSOs, MSOs sale, leaseback type arrangements, things like that, and it’s important to understand those categories because it helps you to kind of put those into kind of parsed out sections to where you can great gain an understanding of who is touching these types of arrangements and what is the monitoring procedure that is in place, or not touching them? And what level of attention does this arrangement really require? And so and then it allows you to say, you know, to what extent are these being monitored, audited? And where do we need to add additional effort, and on some of those may be lower complex arrangements, you can do a quick check, and monitor those pre payment as we do. Whereas the other more complex arrangements that require more work, more effort to dig in deep, you could put those in an audit process, or frankly, hand them off, they may require an additional check by finance, your physician, enterprise, or leadership, etc.

Stephanie Haywood  21:06

Ken do you have anything to add?

Ken Zeko 21:08

Yeah, you know, it’s one thing to be able to say, you know, hey, government, folks, trust us, you know, we’re doing this, it’s another thing to be able to show and demonstrate. So, you know, I think one of the things that confounded Jerry and myself early on when we started to, you know, years and years ago, 10-12 years ago, when we started to talk about this is organizations can often fairly easily demonstrate what they’re doing to mitigate false claims risk. So they have somebody in the organization, that coder or that looks at medical records, or they hire somebody like my team and I to do a coding compliance review. But often organizations cannot show that they are they have something in place, they can’t demonstrate what they’re doing. Per the seven elements of an effective compliance program as promulgated by the OIG, they can’t show that they’ve been training their people about focus arrangements or stark, anti kickback risks, they can’t show that they’ve been auditing and monitoring them, that they have policies, written policies and procedures about stark anti kickback risks. And what we often see is they can demonstrate that they’re doing lots of other monitoring and auditing, but they cannot demonstrate what they’re doing regarding physician arrangements or risk. And that’s what I call the 90/10. perception or 90/10 deception, which it looks like the compliance function has the ability to go all throughout the organization, and identify and mitigate risk. But if you look really, really closely, the 10%, the physician arrangements risk is handled, quote, unquote, by the General Counsel’s Office and compliance doesn’t have the ability to kick the tires there to look underneath the rocks. And I would say to organizations, make sure that you can clearly, overtly demonstrate per the seven elements of effective compliance program that you are identifying and mitigating physician arrangements risk, that it’s not just something that’s the purview of the General Counsel’s Office.

Stephanie Haywood  23:37

You’ve spoken to me in conversation before around the 90/10 perception or deception, as you call it, and it’s really stuck with me. It’s important in relation to having compliance departments have insight into the various types of physician arrangements. You’ve both talked a bit about utilizing various systems, including contract management applications to support mitigation of stark and anti kickback risk as it relates. Can you both talk about maybe Jerry, if you don’t mind, you can start. How do you leverage contract data and other relevant information as you’re working to operationalize risk management?

Jerry Lear 24:26

Oh, well, it’s extremely important to us. And it helps to drive our efficiencies and having a fully populated contract management system. So we have a set group of individuals that review physician payments, prior to them being cut. And in order to do that and drive efficiencies in that process, we need one: a nice workflow built into our AP system, which we have designed. But also we need quick and easy access to contract management, as well as complete information in there. Because we need to be able to do a quick check of those terms against that payment to make sure that everything’s there, we’re not exceeding any caps, the calculation is accurate as well as the documentation is there to support it, so that we can get those payments reviewed, and out the door. Because, frankly, physicians like to get paid on time. And so it becomes very important, it’s also going back to the risk assessment discussion is we need that information to effectively do that assessment to understand those terms. And within that contract management system, those categories need to be accurate, and they need to be established. Because we’re going to go by that in determining what needs to be touched in a more depth fashion, by audit versus those ongoing payment reviews. And it’s going to make a difference what we catch if there is an issue by categorizing them in different ways so that it’s an important element in our process.

Ken Zeko 26:24

Yeah, and you know, one thing that Jerry, and I think Jerry does, probably one of the best jobs across the country identifying and mitigating or abolishing position arrangements risk, but one of the things he and I used to talk about, that I’m super, super, super passionate about is, when you’re looking at regulatory compliance or risk at an organization, often there are numerous data points that you can check to see to what extent these physician arrangements are caught, or these physicians are causing risk to your organization. So for example, if you have a lot of hotline calls, where operational folks are saying, Boy, physician, x through a telephone at a nurse today. Well, that’s a data point, you might want to look and see what kind of contract we have with physician x. And if you see that you’re paying physician X, you know more than fair market value, you might want to see, oh boy is physician X doing what he or she said, if they’re a medical director, for example, or employee physician. If you’re doing coding compliance audits, and physician x is performing terribly, and they’re causing all kinds of false claims at risk for you. Well, they might be also causing physician arrangements risk for you as well. Look at their contract and make sure that you’re paying them what you contracted with them to do like if you say, oh, boy, we’re gonna pay physician X, you know, Y a million dollars per year. Well look at that contract, and then talk to accounts payable to see if you are indeed paying them per the contract, or God forbid, if you’re paying them more than the contract. So looking at those other areas to see if certain physicians are popping up as risk items, and then make sure that they’re not creating position arrangements risk as well.

Stephanie Haywood  28:31

Ken, just to add to that, do you see or maybe I should ask, how do you see the organizations that you’re working with use data, either in a similar fashion or in a different fashion to help mitigate that risk?

Ken Zeko 28:48

You know, like I said, earlier, most organizations look at, they’ll look at false claims risk, and they’ll be able to demonstrate that they’re doing some sort of risk mitigation activity. I say to folks all the time, something is better than nothing getting started, you know, Perfection is the enemy of you know, getting started. So just sit down with those, I would say create a subcommittee of your Compliance Committee that looks at the data that you will have, you know, for example, look at the contracts, see what it says you’re supposed to be paying these physicians see what it says they’re supposed to be doing? And then have, I mean, at least start to have conversations about what is it that Accounts Payable is paying these physician who knows, you know, some organizations that I speak to, they’re not even aware how many medical directorships they have very easily, they can put their fingers on that. So I would start with the basics. How many medical directorships do you have? What do your contracts look like for employee positions? Are you Lee seems space like Jerry kind of indicated earlier.

Jerry Lear 30:04

And I wouldn’t ignore. So. You can’t ignore your employee population. You also. And you know, we kind of get into this thought process, especially the lawyers that, you know, the independent arrangements are where the risk is, once you employ them, there’s no risks there significantly reduce it, there is that piece, but you can’t avoid looking at those. So running analytics around compensation, outliers of compensation, coding outliers, and Ken’s, you know very much into that become important to help identify potentially more riskier arrangements and doing a reviews of those compensation outliers, as well as coding outliers. And I’m not talking just straight e&m getting more of the complexities and modifiers and in multiple procedure type stuff. So beyond just the e&m bell curve analysis, in addition, accounts receivable, so timeshares, leased space, any kinds of arrangements for services like, you know, computers, sharing EHR, and making sure that that’s being collected, and that they’re only using what would be expected timeshares are a big area for risk. And they’re subtle, and they’re generally not centrally maintained, so and so the control is dispersed, and there can be a lack of control. So the these are areas to look at, and sometimes those error arrangements can be managed by third parties. So the thought is, there’s no risk there. Because they’re being managed well, are they really? so these are things that should be considered outside of a normal independent arrangement.

Stephanie Haywood  32:05

I feel confident that both of you have shed light on a lot of additional areas that organizations if they’re not already doing, so she would look at to help mitigate that risk. At Ntracts, we’re always talking about building and fostering a culture of compliance. And it’s clear that both of you are incredibly passionate about that, and really have made it have taken significant steps. And looking at things a little bit differently. What strategies or programs do you recommend organizations implement if they’re interested in addressing risk mitigation in a similar way that the two of you do? And Ken, I appreciated your comment earlier around, just start somewhere. We talk with organizations constantly around, you know, how do we just get line of sight into our contracts, and they feel like they have this big mountain to climb, but really, it’s we’ll just start somewhere. So I appreciate that comment, and would love to hear from you about some other strategies or programs, again, that you might recommend an organization take, if they want to start addressing it, similarly to how to you and Jerry. And then beyond that, what are some things that legal and compliance leaders can do in their organizations to ensure that stakeholders and employees are aware of the risks that there may be beyond the contracts that they know about? Or to Jerry, your point, other areas that they need to be looking at? And how can those leaders stress and demonstrate really a responsibility to report those identified if hopefully not, but if identified violations? Ken, maybe you could start.

Jerry Lear 33:57

Go ahead, Ken.

Ken Zeko 33:58

So one of the things that Jerry and I haven’t mentioned about, but when I say these following words, Jerry’s going to twinkle, and he’s gonna get so excited is the concept called the three lines, risk kind of matrix. It’s brought to us by the Association of Internal Auditors. I might have gotten that wrong, Jerry. But basically, the three lines of risk model says that operational folks, the first line, should be able to identify and mitigate risk, compliance should help organizations or should help the operational folks identify and mitigate that facilitate the mitigation of risk and then internal audit should audit to make sure that everybody’s doing what they’re supposed to be doing. And with that said, the compliance folks, like I alluded to earlier as if they should have a Compliance Committee, that Compliance Committee should perhaps have a sub committee who’s impaneled to identify and mitigate, or to look to see what the organization is doing regarding its physician arrangements or risk and then employ that three lines model to make sure that the operational folks have been trained, that they know what the risks are, and that they’re doing things in their department to make sure that the risk is being mitigated. They can review the contract, they can make sure that they’re looking at sign in sheets to make sure that the physicians show up and do what they’re supposed to be doing. They can make sure that at sa attestations are being signed and collected, there are things that operational people should be empowered to do and should be doing to mitigate this physicians arrangements risk as well as other regulatory compliance risks. Jerry.

Jerry Lear 35:51

great comments. I think it goes back to Ken, you mentioned some of the training and how important that is, especially those that are involved in physician arrangements. And I think part of building that culture within that training is to actually applaud surfacing physician risk. So if an administrator, if a nurse brings forward a concern about a given arrangement or something like that, they should be applauded for that, because it gives us an opportunity to do some investigation, check. Hopefully, in the end, it’s nothing. But it gives us an opportunity to surface a potential risk of potential issue and mitigate that, hopefully. So folks need to be applauded for that, and that kind of behavior needs to be encouraged.

Ken Zeko 36:49

And the federal sentencing guidelines in the most recent iteration says that compliance programs should not just make sure that as one of the seven elements of effective compliance program, they talk about equitable, disciplinary measures. They want to make sure that you discipline folks equitably, they also want to make sure that you are rewarding employees for positive compliance activity. So what Jerry just said there aligns perfectly with the guidance that’s provided to the industry through the OIG guidance and the federal sentencing guidelines.

Jerry Lear 37:28

And the beauty of that is if you do it, right, you are actually having people call up and say, Hey, come look at this, please. The lawyers, counsel and clients that I’ve served, they’re bringing issues, you know, constantly, we have one attorney that I say, I just need an auditor dedicated to you. So and that’s a good thing. It really is. So when you get that kind of behavior, it’s great feedback that, hey, it’s working, we are advancing the culture of compliance.

Ken Zeko 38:00

And like, I’ve seen organizations that have compliance mascots, and when somebody brings something forward, they, they give the operational folk who, you know, came up with this or saw this and brought it forward, they’ll give them like their compliance mascot, like navigator, Ned, or a bulldog stuffed animal, and those people put that on their desk, and then the compliance department gives them kind of a, you know, $10 gift card to Starbucks or something like that, to recognize and leadership, you know, makes a big deal of it, and, you know, presents that to the to the person. So, recognizing folks for bringing issues definitely sets a tone of compliance and ethical business decisions at an organization.

Stephanie Haywood  38:49

It’s an incredibly important point. And, you know, compliance really is everyone’s responsibility across the organization. So I’m so glad that you’ve shed light to that. We talked a lot about a very important topic, an area of discussion, and I really appreciate it, I’m definitely going to have to have you back for another discussion. Because I know that we’ve barely scratched the surface. There’s a lot more to cover. I would just ask before we finish, maybe starting with you, Jerry, is there anything else you’d like to leave our listeners with?

Jerry Lear 39:26

I’d say the viewpoints… First, I go back to understanding your population of arrangements, right? And understanding which are more complex and inherently risky. Don’t assume that an approval means review. And so that’s where your monitoring and your detective processes are important. And last, just do the auditing. Start. If you haven’t already do the monitoring, it is important that you actually look and so I’ll leave you that.

Stephanie Haywood  40:08

Ken?

Ken Zeko 40:10

I would say, get used to having conversations about risk and understanding what leadership’s risk profile is. If you know leadership has a very high risk threshold, you should understand where they’re coming from. And you should be able to put things in place that mitigate the risks not only with associated with physician arrangements, but other regulatory compliance risk areas, something like I said earlier, is better than nothing. And the government will expect to see a lot more of something at the bigger, more sophisticated organizations. If you’re a, you know, small 15, doctor, physician practice, they might not expect to see much. But at a larger health system, they would expect to see all of the things that Jerry and I have been talking about.

Stephanie Haywood  41:11

Well, I want to thank you both. I want to thank everyone for tuning in. Again, I want to give a very special thanks to you, Jerry, and Ken, to you for joining me today on this discussion. Thanks for sharing your expertise. Thanks for sharing what you’ve what you’ve seen, and really what sounds like and what really is, is I’ve had an opportunity to get to know you both your passion for establishing and maintaining best practices around compliance, contracting compliance, mitigation of Stark and anti- kick back around this physician arrangements and maintaining compliance in the health care organizations that that you support. I think for sure everyone’s going to be listening and leaving this discussion with several actionable takeaways for their compliance process. And I appreciate the conversation today. Thank you both so much.

Jerry Lear 42:06

Thank you.

Ken Zeko 42:06

Thanks.

42:14

Thank you for listening. If you enjoyed this episode, be sure to subscribe to AHLA speaking of health law wherever you get your podcasts. To learn more about AHLA and the educational resources available to the healthcare community. Visit Americanhealthlaw.com