Centers for Medicare & Medicaid Services
Oversees Medicare, Medicaid, reimbursement policies, and the Open Payments Program.
Visit CMS (opens in a new tab)KEY LEGAL & COMPLIANCE SOURCES
Know the Rules. Protect the Patient.
Use this structured map to see which oversight sources relate to each compliance principle. It does not interpret a law, decide whether a rule applies, replace company policy, or provide legal or compliance advice.
LEGAL PRINCIPLES & OVERSIGHT MAP
Federal & State Compliance Oversight
Each row connects one legal principle to its primary official oversight sources and a concise description of what those sources oversee.
HIPAA/privacy and the stricter PharmaARMs disclosure rule always apply
Do not submit PHI, patient or case identifiers, employer or affiliated-company information, drug or product brand names, account, member, claim, authorization or reference numbers, credentials, screenshots, private documents, or other confidential information anywhere in this experience. Use only fictional, non-brand scenarios.
| Legal principle | Primary oversight agency(ies) | What they oversee |
|---|---|---|
| 1AEPatient Safety, Adverse Events & Product Complaints | Safety monitoring, pharmacovigilance, and timely reporting of adverse events and product complaints through required company processes. | |
| 2DOCRegulatory Compliance | Compliance with approved labeling, promotion, manufacturing, and post-market requirements. | |
| 3ADTruthful, Non-Misleading & Ethical Communications | Communications and promotional activities that are truthful, balanced, appropriately substantiated, and consistent with approved labeling and applicable rules. | |
| 4AKSAnti-Kickback & Improper Inducements | Enforcement of the Anti-Kickback Statute, False Claims Act, and fraud investigations. | |
| 5STKPhysician Self-Referral (Stark Law) | Financial relationships that can affect referrals for designated health services paid by Medicare or Medicaid. A Stark exception does not automatically resolve Anti-Kickback Statute risk. | |
| 6PAPPatient Assistance, Copay Support & Beneficiary Inducements | Financial assistance, copay support, free-drug programs, and anything of value offered to Federal health care program beneficiaries must follow applicable law and company policy. | |
| 7PRVPatient Privacy & Confidentiality | Privacy, security, and breach-notification requirements for protected health information under HIPAA. | |
| 8FTCFair Competition (Antitrust) | Anti-competitive conduct, mergers, monopolization, and collusion. | |
| 9$Transparency (Payments to HCPs) | Administration of the Open Payments Program, also known as the Sunshine Act. | |
| 10MFGProduct Quality & Manufacturing | Good Manufacturing Practice, inspections, recalls, and quality systems. | |
| 11RECAccurate Documentation & Recordkeeping | Data integrity, documentation accuracy, and records supporting regulatory compliance. | |
| 12DSCSADrug Supply Chain Security | Product tracing, authorized trading partners, and response procedures for suspect or illegitimate products across distribution and pharmacy channels. | |
| 13REMSREMS Compliance | FDA-required Risk Evaluation and Mitigation Strategy requirements, which may include enrollment, certification, dispensing, monitoring, and documentation controls. | |
| 14FCAProgram Integrity, Claims & Overpayments | Accurate claims and reimbursement practices; credible concerns about an overpayment, false claim, fraud, waste, or abuse should be escalated through the organization’s established process. | |
| 15340B340B Program Integrity | Covered-entity eligibility, diversion prevention, duplicate-discount safeguards, and verification of current program and contract-pharmacy requirements. | |
| 16LEIEExclusion Screening | Screening employees, contractors, vendors, and relevant entities against exclusion lists, including applicable state Medicaid lists, under organizational policy. | |
| 17STATEState Law & Payer-Contract Compliance | State privacy, pharmacy, insurance, and drug-pricing requirements, and payer contracts, may be more specific or restrictive than federal rules. Verify the applicable state and plan requirements. | |
| 18CIACorporate Integrity Agreements & Effective Compliance Programs | Corporate Integrity Agreements are enforcement remedies for some organizations; effective compliance programs support training, reporting, oversight, and corrective action. |
Compliance reminder: Educational resource only. Always consult official agency guidance, applicable laws, payer requirements, and company compliance policies.
Use responsibly: This map helps professionals understand where to look. It is not legal, regulatory, medical, billing, coding, payer, compliance, coverage, reimbursement, or patient-specific advice.
Each source opens in a new tab. Precise principle pages are used when available; otherwise the link points to the closest official agency destination.
COMPLIANCE FRAMEWORK
Additional Organizations That Influence Pharmaceutical Compliance
Each organization’s role remains attached to its official destination.
Health Resources and Services Administration
Administers the 340B Drug Pricing Program and oversees covered-entity participation, eligibility, and program requirements.
Visit HRSA 340B (opens in a new tab)U.S. Food and Drug Administration
Regulates the safety, efficacy, manufacturing, labeling, and promotion of drugs and biologics.
Visit FDA (opens in a new tab)Office of Inspector General
Publishes compliance guidance, Safe Harbors, advisory opinions, and investigates healthcare fraud.
Visit HHS OIG (opens in a new tab)U.S. Department of Justice
Prosecutes violations involving fraud, bribery, kickbacks, and False Claims Act cases.
Visit DOJ FCA Resource (opens in a new tab)Office for Civil Rights
Enforces HIPAA privacy, security, and breach notification rules.
Visit HHS OCR HIPAA (opens in a new tab)Federal Trade Commission
Oversees advertising practices for certain products, competition, and antitrust laws.
Visit FTC Health Care Competition (opens in a new tab)Office of Prescription Drug Promotion
A division within the FDA responsible for reviewing prescription drug promotional materials and ensuring they are truthful, balanced, and not misleading.
Visit FDA OPDP (opens in a new tab)Practical compliance awareness
This framework is for professional education and general awareness only. Verify current requirements with official sources, organizational policies, and appropriate qualified professionals.
WHEN TO STOP AND ESCALATE
A source link cannot decide a real situation.
- Legal or compliance interpretationUse your organization’s Legal or Compliance channel.
- Privacy, security, or possible sensitive informationStop sharing details and use the approved Privacy or Security channel.
- Patient-specific, medical, coding, billing, or payer decisionUse the responsible qualified professional and controlling source.
- Unclear, conflicting, or dated materialDo not infer; confirm the current rule, effective date, jurisdiction, and organizational policy.