FREE CASE EVALUATION

Prominently Featured In:

CNN
Netflix
Newsweek
Business Insider
Time

What Should I Do When I Notice Compliance Problems

The compliance problem that a practitioner identifies independently is the compliance problem for which the most constructive responses are available. The compliance problem that investigators identify first is the one for which the response is most constrained.

Self-identified compliance issues in controlled substance prescribing practices are not rare. The clinical, regulatory, and administrative requirements governing opioid prescribing are extensive, frequently updated, and not always consistently applied within a practice. A practitioner or practice administrator who reviews prescribing records, billing documentation, or controlled substance inventory with genuine attention will typically identify areas where the practice’s conduct has not met every applicable standard.

The question is not whether compliance issues exist. The question is what to do when they are identified.

Do Not Ignore Identified Compliance Issues

The practitioner who identifies a compliance problem and takes no action has documented, through the identification itself, that the problem was known. A compliance review that generates a written report identifying prescribing irregularities, documentation deficiencies, or controlled substance accounting discrepancies, but that produces no remediation, creates a record of awareness without a record of response. That record, if it reaches investigators, demonstrates that the practitioner knew of the problem and chose not to address it.

Inaction in the face of identified compliance problems is itself a form of conduct that may inform a government investigation’s assessment of the practitioner’s intent. The prescriber who identified the problem and corrected it is in a different legal position than the prescriber who identified the problem and continued prescribing in the same manner. The difference between those two positions is the compliance response.

Privilege the Review and the Findings

Compliance reviews that are conducted under the direction of counsel, and whose findings are communicated to counsel, are protected by the attorney-client privilege and the work product doctrine. A compliance review that is conducted without counsel’s involvement, whose written findings are shared with non-attorney staff, or whose conclusions are discussed in unprotected communications is a review whose findings may be discoverable by the government in a subsequent investigation.

The structure of the compliance review matters. A review directed by outside counsel, conducted by healthcare compliance professionals retained by that counsel, and whose findings are communicated to the practitioner through counsel in a privileged communication is a review whose findings are protected. The same review conducted by the practice’s own staff, without counsel’s involvement, generates unprivileged documents that the government can subpoena.

Directing compliance work through counsel is not an effort to hide findings from the government. It is the appropriate exercise of privilege rights that the legal system provides for precisely this purpose. The privilege does not protect the underlying facts. It protects the process of identifying and analyzing them with the assistance of legal counsel.

FREE CONSULTATION

Need Help With Your Case?

Don't face criminal charges alone. Our experienced defense attorneys are ready to fight for your rights and freedom.

  • 100% Confidential
  • Response Within 1 Hour
  • No Obligation Consultation

Or call us directly:

(212) 300-5196

Remediate Identified Problems

When compliance problems are identified, the appropriate response is remediation: correcting the practices that generated the problem, implementing controls that prevent the problem from recurring, and documenting the remediation in a manner that demonstrates the practitioner’s good faith response to the identified issue.

Remediation of prescribing compliance problems may include: additional training for staff on documentation requirements; implementation of more rigorous patient assessment protocols; adjustments to the practice’s controlled substance prescribing policies; termination of the prescribing relationship with patients who present signs of diversion; and enhanced monitoring of the practice’s prescribing data against PDMP records.

The practitioner who remediates identified compliance problems and documents the remediation has created evidence that, if the matter subsequently becomes the subject of a government investigation, demonstrates an affirmative good faith response to identified issues rather than an ongoing indifference to compliance obligations.

Voluntary Disclosure

In some circumstances, the proactive voluntary disclosure of identified compliance problems to the relevant government authority is the appropriate response. The OIG’s self-disclosure protocol, the DEA’s voluntary disclosure provisions, and analogous programs at state agencies provide mechanisms through which practitioners and healthcare entities can disclose identified compliance problems and seek resolution of the resulting liability before the government identifies the problem independently.

Todd Spodek
DEFENSE TEAM SPOTLIGHT

Todd Spodek

Lead Attorney & Founder

Featured on Netflix's "Inventing Anna," Todd Spodek brings decades of high-stakes criminal defense experience. His aggressive approach has secured dismissals and acquittals in cases others deemed unwinnable.

NY Bar Admitted Multi-State Licensed Federal Courts
Meet the Full Team

Voluntary disclosure is not appropriate in every situation, and it is not without risk. A disclosure that reveals conduct the government had not yet identified may initiate an investigation that would not otherwise have occurred. A disclosure that is incomplete may be treated as worse than no disclosure at all. The decision about whether to make a voluntary disclosure, and what to disclose, requires careful analysis of the identified conduct, the available defenses, and the likely government response.

The compliance problem identified in an internal review is a problem that exists regardless of whether it is addressed. The choice is not between having the problem and not having it. The choice is between addressing it now, with the full range of available responses, or addressing it later, with whatever responses remain after the investigation has progressed beyond the point where early intervention was possible.

When Compliance Problems Suggest a Larger Issue

Some compliance problems identified in an internal review suggest a pattern that goes beyond individual documentation deficiencies or administrative oversights. A review that reveals systematic prescribing of controlled substances to patients without adequate physical examination documentation, controlled substance inventory discrepancies that exceed the range attributable to accounting error, or a pattern of prescriptions that do not correlate with the patient diagnoses reflected in the medical records is a review that has identified something more significant than a compliance gap.

Counsel retained to oversee a compliance review that produces findings of this character is counsel who must assess not only the remediation strategy but the full scope of civil and criminal exposure that the findings represent. That assessment determines whether voluntary disclosure is appropriate, whether specific remediation measures are adequate, and whether the practitioner’s overall situation requires the kind of comprehensive legal strategy that a significant government investigation demands.

Share This Article:
Todd Spodek
ABOUT THE AUTHOR

Todd Spodek

Managing Partner

With decades of experience in high-stakes federal criminal defense, Todd Spodek has built a reputation for aggressive, strategic representation. Featured on Netflix's "Inventing Anna," he has successfully defended clients facing federal charges, white-collar allegations, and complex criminal cases in federal courts nationwide.

Bar Admissions: New York State Bar New Jersey State Bar U.S. District Court, SDNY U.S. District Court, EDNY
View Attorney Profile

Community Discussion

Real questions and discussions from readers about this topic.

58
FF former_fed_investigator Former Federal Agent 1w ago

Former investigator perspective on this topic

Retired OIG special agent here. Spent 18 years on the enforcement side. Reading this article and the comments — I want to offer some perspective from the other side of the table.

Most investigations start with data, not complaints. PDMP data, Medicare billing data, pharmacy purchasing records. By the time an agent contacts you, they've usually been looking at your numbers for months. That's why having good documentation matters — the data will flag you, but the documentation either explains the data or doesn't.

57
RD retired_DEA_agent Former Federal Agent 1w ago

Talking. Hands down. Doctors who talked to agents without a lawyer — trying to explain their way out of it — gave us 80% of the evidence we needed. Every single time. Get a lawyer first. Always.

40
FM fed_med_lawyer Attorney 1w ago

Seconding this emphatically. I've represented dozens of healthcare providers. The ones who called me BEFORE talking to agents had dramatically better outcomes than the ones who called AFTER. It's not about having something to hide — it's about having your rights protected from the start.

28
WP worried_physician Physician 1w ago

This is incredibly valuable perspective. Can you share — what's the single biggest mistake you saw doctors make when they first learned they were being investigated?

49
WP worried_physician Physician 2w ago

Going through exactly what this article describes — anyone else?

Just read this article about "What Should I Do When I Notice Compliance Problems" and it hit close to home. I'm a pain management physician and I've been losing sleep over this. My malpractice carrier asked about my controlled substance prescribing. I haven't been contacted directly by any agency yet but the anxiety is crushing. Anyone been through something similar?

46
HD healthcare_defense_atty Attorney 2w ago

First: do NOT speak to any federal agent without counsel. Period. Not the DEA, not the OIG, not the FBI. You have the right to counsel and exercising that right cannot be held against you.

Second: get a consultation NOW, before anything formal happens. Pre-investigation counsel is dramatically more effective (and less expensive) than post-indictment defense. Many healthcare fraud defense attorneys offer free initial consultations.

Third: do NOT alter any records. Do NOT destroy any documents. Do NOT discuss this with staff beyond what's necessary for patient care. Any of those actions can become separate criminal charges (obstruction, evidence tampering) even if the underlying prescribing was entirely legitimate.

30
SI survived_investigation Physician — Investigated & Cleared 2w ago

Went through a DEA investigation 3 years ago. It was the worst 18 months of my life but I came out clean. Best advice: get a lawyer who specifically handles federal healthcare cases (not a general criminal attorney), follow their instructions to the letter, and keep practicing medicine. The investigation itself is not a conviction and most of your patients still need you.

25
PC pharma_compliance Compliance 2w ago

If you haven't already, start documenting everything meticulously going forward. Every prescribing decision should have clear clinical justification in the chart. This protects you regardless of whether an investigation materializes.

40
FM family_member_scared 1w ago

My wife is a doctor and I’m terrified after reading this

My wife is a psychiatrist and got a call from a federal agent last week. We have a mortgage. I don't know anything about criminal defense. How do we even start? How much does this cost? Can they take our house?

44
FM fed_med_lawyer Attorney 1w ago

I understand the fear. Here's what you need to know:

1. Attorney fees: Federal healthcare fraud defense typically costs $15,000-50,000 depending on the stage and complexity. Pre-investigation work is on the lower end.

2. Your home: In most states, homestead exemptions protect your primary residence. Federal forfeiture requires a direct connection between the property and the alleged criminal activity — simply being a doctor who's investigated doesn't put your house at risk.

3. First step: Call a federal healthcare fraud defense attorney this week. Not a general lawyer. Someone who has handled DEA/OIG cases before. Most will do a free phone consultation to assess the situation.

4. Don't panic: Investigation ≠ charges. Charges ≠ conviction. Many investigations are closed without action.

28
DS doc_spouse_survivor 1w ago

I'm the spouse of a physician who went through a 2-year DEA investigation. It was resolved favorably. The emotional toll is real — please consider therapy for both of you. We found a support group for medical professionals under investigation that helped enormously. You're not alone in this.

31
IP independent_pharmacist PharmD 2w ago

Pharmacist perspective on “What Should I Do When I Notice Compliance Problems”

Running an independent pharmacy and this topic affects us directly. Our state board just issued new guidelines that seem to conflict with DEA expectations. It feels like there's no right answer sometimes. Any other pharmacists dealing with this?

30
HD healthcare_defense_atty Attorney 2w ago

Pharmacists are increasingly being named in federal healthcare fraud cases. Your documentation is your shield. Invest in a compliance program if you don't have one — it's far cheaper than a defense. And know that you DO have the right to refuse to fill prescriptions you believe are not for a legitimate medical purpose. That right is explicitly recognized in federal regulation.

19
CP chain_pharmacist_anon PharmD 2w ago

You're not alone. The "corresponding responsibility" doctrine puts us in an impossible position. Document EVERYTHING — every conversation with a prescriber about a questionable script, every refusal, every verification call. If you have a compliance program, follow it religiously. If you don't have one, get one yesterday.

27
IP infusion_practice_doc Anesthesiologist 1w ago

Anyone running a ketamine clinic dealing with these issues?

I operate a ketamine-assisted therapy practice and the regulatory landscape feels like it changes monthly. I'm getting questions from my liability insurer about my ketamine protocols. How are other ketamine providers navigating this?

31
FK fellow_ketamine_doc Anesthesiologist 1w ago

Running a ketamine clinic since 2021. The key is airtight protocols and documentation. We have:
- Written treatment protocols for every indication
- Informed consent that specifically addresses off-label use
- Pre-treatment screening including psychological evaluation
- Monitoring during and after infusion
- Follow-up documentation
- Clear exclusion criteria

The DEA has been more interested in compounding pharmacies than individual clinics so far, but that could change. Stay current with ASA and APA guidelines.

29
PA pharma_attorney Attorney 1w ago

Ketamine clinics are an emerging enforcement target. The Schedule III classification gives you more flexibility than Schedule II, but the "legitimate medical purpose" standard still applies. The biggest risk areas I see: (1) inadequate patient screening, (2) lack of follow-up care, (3) advertising that makes medical claims beyond what's supported, (4) corporate practice of medicine violations if non-physicians have ownership stakes. Get a compliance review done proactively.

26
CM clinic_manager_anon Office Manager 3w ago

What should clinic staff know about this topic?

I'm a practice manager at a urgent care. After reading about "What Should I Do When I Notice Complianc" — what should front-line staff (receptionists, medical assistants, billing staff) know? We want to make sure we're not inadvertently creating problems. Should we be training staff differently?

27
HC healthcare_consultant Compliance 3w ago

Key things for staff:

1. Never alter medical records after the fact for any reason
2. If a federal agent shows up, be polite but say "I need to contact our attorney before providing any information"
3. Don't discuss patient cases with anyone outside the practice
4. Follow your office's prescription verification protocol exactly — no shortcuts
5. Document any patient behavior that seems concerning (doctor shopping, lost prescriptions, etc.)

Annual compliance training for all staff is worth every penny.

25
NA new_attending_2025 Resident 1w ago

Just started practice — is this something I should worry about from day one?

I just finished fellowship and started at a group practice. Reading about "What Should I Do When I Notice Complianc" is terrifying for someone just starting out. Should I be getting my own malpractice attorney from day one? What should I be doing differently as a new practitioner to protect myself?

34
BT been_there_doc Physician — 20yr 6d ago

The fact that you're thinking about this early is a good sign. Three things:\n\n1. Document meticulously. Every prescribing decision should have clear clinical justification. "Patient reports pain" is not enough. Physical exam findings, functional assessments, treatment plans.\n\n2. Get familiar with your state PDMP and check it for every controlled substance prescription. Make it a habit from day one.\n\n3. Find a mentor in your practice who models good prescribing practices. Observe how they handle difficult patients, how they document, how they say no when needed.\n\nYou don't need a defense attorney on retainer, but knowing who you'd call if needed is smart.

22
HD healthcare_defense_atty Attorney 6d ago

I'll add: make sure your malpractice insurance includes regulatory defense coverage (not just civil malpractice). Many policies exclude coverage for DEA/licensing board actions. Ask your carrier specifically. If they don't cover it, supplemental regulatory defense insurance is available and relatively inexpensive for new practitioners.

25
DD dental_doc DDS 3w ago

Does this apply to veterinarians too?

I'm a dentist who prescribes post-surgical opioids. Most of the articles I see focus on physicians and pain management. Are dentists really at risk for DEA scrutiny?

30
FM fed_med_lawyer Attorney 3w ago

Yes. Any DEA registrant who prescribes controlled substances is subject to the same federal standards. Dentists are increasingly scrutinized for opioid prescribing — the CDC's prescribing guidelines have been applied to dental practice. Veterinarians have seen a rise in diversion cases (drugs prescribed for animals being diverted to human use). The DEA does not distinguish by specialty — they look at prescribing patterns and whether they're consistent with legitimate medical practice.

25
PW PA_worried_about_DEA PA-C 2w ago

Does this apply to NPs and PAs too, or just physicians?

I'm a physician assistant with prescriptive authority. Does what this article discusses about "What Should I Do When I Notice Complianc" apply equally to mid-level providers? I prescribe psychiatric medications including benzos under my collaborating physician's DEA number. If something goes wrong, who is at risk — me, the supervising physician, or both?

35
FM fed_med_lawyer Attorney 2w ago

Both. If you have your own DEA registration, you bear independent responsibility for your prescribing. If you're prescribing under a collaborating physician's DEA number, the supervising physician also has exposure. The DEA does not limit investigations to physicians — NPs, PAs, dentists, podiatrists, and veterinarians have all been targets of federal prescribing investigations.

The same standard applies: prescriptions must be issued for a legitimate medical purpose in the usual course of professional practice. Document your clinical reasoning for every controlled substance prescription.

18
NC NP_colleague NP 2w ago

I got my own DEA number specifically so I wouldn't be dragged into my collaborating physician's issues. Worth considering if you haven't already. It also makes your prescribing cleaner from a documentation standpoint.

Ask the Community

Federal Lawyers By The Numbers

36 Cases Handled This Year and counting
15,536+ Total Clients Served since 2005
95% Case Success Rate dismissals & reduced charges
50+ Years Combined Experience in criminal defense

Data as of February 2026

URGENT

Take Control of Your Situation

Our team is standing by to discuss your legal options

Get Advice From An Experienced Criminal Defense Lawyer

All You Have To Do Is Call (212) 300-5196 To Receive Your Free Case Evaluation.