U.S. DEPARTMENT OF JUSTICE A1 LEGAL & REGULATORY MEDIUM RISK Published 15 Oct 2026 at 12:00 UTC, affecting US

DOJ: National Fraud Enforcement Division and the Department of Health and Human Services Announce Self-Disclosure Protocol for Criminal Health Care Fraud

DOJ announced that companies disclosing potential criminal health care fraud need only report to the Fraud Division to receive both DOJ and HHS-OIG self-disclosure benefits.

Read the original notice ↗ All US items

In short

  • A single disclosure now covers both the Corporate Enforcement Policy and the Health Care Fraud Self-Disclosure Protocol.
  • HHS-OIG updated its protocol to clarify that criminal conduct should be disclosed to the Department of Justice.

What happened

The DOJ’s National Fraud Enforcement Division and HHS-OIG issued a new policy clarifying that companies who voluntarily self-disclose potential criminal health care fraud only need to report to the DOJ’s Fraud Division. This streamlines the process, allowing companies to access both the DOJ’s Corporate Enforcement Policy and HHS-OIG’s Health Care Fraud Self-Disclosure Protocol without multiple submissions.

HHS-OIG also updated its Self-Disclosure Protocol to specify that criminal conduct should be reported to the DOJ, not just HHS-OIG. Companies disclosing only to HHS-OIG generally will not qualify for a DOJ declination, emphasizing the importance of reporting criminal matters directly to the Fraud Division.

FROM THE NOTICE
There is now one clear point of contact: DOJ’s Fraud Division. If a company comes forward, cooperates fully, and remedies the misconduct, the benefits are clear and predictable.
Assistant Attorney General Colin M. McDonald, DOJ, justice.gov

In numbers

  • more than 6,200 defendants charged by the strike forces
  • more than $45 billion amount billed by defendants to federal health care programs and private insurers

Named in this item

2 entities
STATUS NAME ISO PROGRAM IDENTIFIER
National Fraud Enforcement Division
Organization, regulator
US Health Care Fraud Self-Disclosure Protocol —
Department of Health and Human Services Office of Inspector General
Organization, regulator
US Health Care Fraud Self-Disclosure Protocol —

What compliance teams should check

  • Update internal reporting procedures to ensure all potential criminal health care fraud is disclosed to the DOJ Fraud Division’s Health Care Fraud Section.
  • Review the updated HHS-OIG Self-Disclosure Protocol to confirm criminal conduct is routed to the DOJ, not solely to HHS-OIG.
  • Train compliance staff on the new single-disclosure process to avoid missing eligibility for both the Corporate Enforcement Policy and the Health Care Fraud Self-Disclosure Protocol.

Why it matters

This policy change significantly simplifies the self-disclosure process for health care organizations by establishing a single point of contact for reporting potential criminal conduct. By eliminating the need for multiple disclosures to different agencies, compliance officers can ensure their organizations receive the full benefits of both the DOJ’s Corporate Enforcement Policy and HHS-OIG’s Self-Disclosure Protocol. This clarity reduces the risk of missed opportunities for leniency and encourages timely, transparent reporting, which is critical for mitigating enforcement actions and demonstrating a strong compliance culture.

FOR COMPLIANCE TEAMS

Catch stories like these on your own customers.

complead screens your customers against adverse media, sanctions and PEP lists, and re-checks them every day. When a name you hold turns up in the news, it lands in your case queue with the evidence attached.

Related on the radar

All US items →
16 Oct 2026
FINANCIAL TIMES A2 TERRORISM & SANCTIONS
EU vows to maintain Russia sanctions after US pivot
MED
16 Oct 2026
ABC NEWS (AUSTRALIA) A2 FINANCIAL CRIME
Bonza owner pleads guilty to $500 million fraud
HIGH

How the radar works

Each item is classified by category, pinned to the jurisdictions it affects and scored from 0 to 10. The score starts from a model assessment of how serious the item is, then adds points for the kind of event, what it names and the source behind it. Reliability grades run from A1 (the regulator’s own notice) to C3 (a single secondary source).

AML News Radar reports what its sources publish. Summaries, categories and scores are automated; read the original notice before acting. It is not legal advice and not a screening decision.

Read the full methodology

Subscribe to the radar

You will get new items from every jurisdiction and category.

DIGEST