The Enforcement Surge: DOJ's New Fraud Division, Telehealth Billing Shifts, and Critical State-Level Mandates Reshape Healthcare Compliance

2026-08-18

This week's regulatory landscape reveals a healthcare industry facing an unprecedented surge in enforcement and pivotal shifts in how care is delivered and reimbursed. From a fortified DOJ targeting fraud to mandatory telehealth billing changes and critical state-level scope of practice mandates, staying ahead is no longer optional.

The healthcare regulatory environment is a dynamic and often challenging terrain, demanding constant vigilance from even the most seasoned operators. This past week has amplified that reality, signaling a significant escalation in federal enforcement capabilities, a strategic evolution in telehealth payment models, and critical state-level clarifications that underscore the complexity of multi-jurisdictional practice. For telehealth founders, national practice owners, compliance officers, and investors, understanding these shifts is not merely advisable; it is essential for safeguarding your enterprise and ensuring sustainable growth.

> For more on this topic, see our analysis: [The Enforcement Nexus: DOJ's New Fraud Division, Telehealth Crackdowns, and Critical Policy Shifts](/blog/enforcement-nexus-doj-fraud-telehealth-policy-shifts).

The DOJ's National Fraud Offensive: A New Era of Scrutiny

Perhaps the most impactful development comes from the Department of Justice (DOJ), which has unveiled its National Fraud Enforcement Division (NFED). This is not merely a rebranding; it's a strategic overhaul designed to significantly bolster the DOJ's capacity to combat fraud across federal programs, with an explicit and sharpened focus on the healthcare industry. This move signals a critical elevation in federal scrutiny for virtually every healthcare business.

The NFED centralizes and expands resources, deploying a 'lean, flat, and agile' structure with increased prosecutors, agents, and forensic accountants in U.S. Attorney's Offices nationwide. What does this mean in practical terms? More investigations will be opened, faster, and backed by increasingly sophisticated data analytics. The new National Fraud Detection Center will proactively analyze billing data at an unprecedented scale, making it significantly easier for the DOJ to identify anomalies and potential fraudulent activity.

Key Enforcement Priorities: * Healthcare Fraud: This is a broad category, but the DOJ has explicitly highlighted specific areas. * Telemedicine: Telehealth brands are under particular scrutiny. The rapid expansion of telemedicine during the pandemic, while critical for access, also created new vulnerabilities for fraud. Providers must ensure their telehealth practices adhere strictly to medical necessity, proper patient-provider relationships, and compliant billing. * Medicare/Medicaid Billing: The bedrock of federal healthcare programs remains a prime target. Practices must re-evaluate their billing protocols, ensuring absolute accuracy and adherence to all coding and reimbursement rules. False Claims Act exposure is heightened, with both civil and criminal liabilities a significant risk. * Controlled Substance Diversion: Any practice involved in prescribing, dispensing, or administering controlled substances, including through telehealth, faces increased risk. Rigorous adherence to DEA regulations, state prescription drug monitoring program (PDMP) requirements, and robust documentation is paramount.

The establishment of the NFED demands an immediate and comprehensive review of internal compliance programs. Robust internal controls, diligent record-keeping, and proactive auditing of billing and prescribing practices are no longer merely best practices; they are foundational requirements for mitigating severe financial, reputational, and even criminal risks.

Telehealth Reimbursement and Value-Based Care: CMS Signals Strategic Shifts

CMS has made two significant announcements that will shape the future of telehealth reimbursement and care delivery models:

Mandatory Billing Change for FQHCs/RHCs: Effective October 1, 2026, Federally Qualified Health Centers (FQHCs) and Rural Health Clinics (RHCs) will face a mandatory billing change for distant-site non-behavioral telehealth services. These entities will no longer use the generic code G2025 and must transition to specific service codes. This is a crucial operational update for these vital community providers, requiring immediate attention to billing system updates and staff training to ensure a smooth transition and continued reimbursement.

Introduction of the ACCESS Model: Concurrently, CMS has launched the ACCESS (Advancing Chronic Care with Effective, Scalable Solutions) Model. This 10-year voluntary program represents a strategic move towards testing outcome-aligned payments for technology-supported chronic care services. For a broader spectrum of healthcare businesses, particularly telehealth brands focused on chronic disease management, the ACCESS Model is a powerful signal.

#### What the ACCESS Model Signifies: * Value-Based Care: It reinforces CMS's commitment to shifting from fee-for-service to value-based care, rewarding providers for demonstrable health outcomes. * Technology-Supported Care: The model explicitly embraces virtual care, asynchronous interactions, and remote patient monitoring devices, validating technology as a core component of future care delivery. * Opportunity for Innovation: Practices capable of demonstrating measurable health outcomes for conditions like hypertension, diabetes, or depression, and willing to invest in robust technology and care coordination, may find ACCESS a viable avenue for growth and sustainable reimbursement.

While voluntary, the ACCESS Model provides a blueprint for future Medicare payment innovation, emphasizing the increasing regulatory scrutiny on the efficacy and accountability of technology-enabled care. It's a call to action for providers to develop robust, data-driven chronic care programs.

DEA Adjusts Controlled Substance Classifications

The Drug Enforcement Administration (DEA) has issued a proposed rule to reschedule three key substances: suvorexant (Belsomra), lemborexant (Dayvigo), and daridorexant (Quviviq). These medications, currently Schedule IV, are proposed to be moved to Schedule V of the Controlled Substances Act (CSA).

While a move from Schedule IV to Schedule V generally indicates a lower potential for abuse, it does not remove these substances from controlled status. The implications for practices that prescribe, dispense, or administer these medications are clear:

Operational Updates: If finalized, practices must ensure their operational protocols, including storage, recordkeeping, inventory management, and dispensing procedures, are updated to comply with Schedule V regulations.
EHR System Adjustments: Electronic Health Record (EHR) systems will need to be configured to reflect the new scheduling.

The deadline for comments or hearing requests is September 10, 2026, offering ample time for providers to monitor this development and prepare for potential changes. Compliance failures, even for Schedule V substances, can result in administrative, civil, and criminal sanctions.

State-Level Nuance: California's Medical Assistant Scope Clarification

For healthcare businesses operating in California, particularly medspas, dental practices, chiropractic offices, and telehealth providers utilizing in-person administrative or technical support, the Medical Board of California's definitive guidance on the permissible scope of practice and required supervision for Medical Assistants (MAs) is critically important.

The guidance re-emphasizes that Medical Assistants are unlicensed individuals whose activities are strictly limited to non-invasive technical support services under direct supervision. This means:

Direct Supervision Required: A licensed physician and surgeon, podiatrist, physician assistant, nurse practitioner, or nurse midwife must be physically present on-premises to oversee MA duties.
Strict Limitations: MAs cannot perform any invasive procedures, diagnose, treat, or make assessments. These activities fall squarely outside their legal scope.
Ultimate Responsibility: The supervising physician bears the ultimate responsibility for the appropriate use of MAs. Non-compliance can lead to serious regulatory infractions against the supervising licensee.

This clarification underscores the ongoing challenge of state-specific scope of practice laws. Multi-state operators must maintain meticulous awareness of these varying regulations, as a permissible activity in one state might be a severe violation in another. Investing in robust training and clear policy documentation for all clinical support staff is crucial to prevent inadvertent breaches that could lead to disciplinary action and harm patient safety.

Evolving Federal Policy: Restrictions on Certain Pediatric Procedures

CMS has issued a final rule prohibiting the use of federal Medicaid funds for 'sex-rejecting procedures' for individuals under 18 years old, and federal CHIP funds for individuals under 19 years old. State Medicaid and CHIP plans are now mandated to prohibit payment for these procedures for the respective age groups. A limited transition period of up to six months is provided for beneficiaries actively receiving cross-sex hormone therapy.

This federal policy shift has critical implications for healthcare providers offering services to pediatric and adolescent populations, including gender-affirming care. Practices that bill Medicaid or CHIP for such procedures for minors, as defined by CMS, will no longer be able to claim federal financial participation. This requires:

Immediate Review of Billing Practices: Healthcare operators, including telehealth brands, pediatric practices, and mental health providers, must review their billing practices and service offerings to ensure compliance with these new federal restrictions.
Operational Adjustments: The six-month grace period for existing cross-sex hormone therapy prescriptions offers a brief window for practices and patients to adjust, but it does not alter the fundamental prohibition moving forward. Non-compliance could result in denied claims and potential recoupment actions.

This development highlights the increasing complexity of federal and state interplay in healthcare policy and the need for providers to remain agile in adapting to rapid policy changes that impact specific patient populations and service lines.

Broader Industry Trends: Innovation in Oncology

While not directly impacting immediate compliance for most general healthcare businesses, a notice from HHS's National Cancer Institute (NCI) provides a glimpse into the broader landscape of biomedical innovation. The NCI is seeking partners for novel anti-CE1 antibodies (B9 and B10) that show potential as therapeutics for hepatocellular carcinoma (HCC), the most common form of liver cancer. This pre-clinical stage invention represents a new avenue for treating aggressive malignancies.

For most TrueEval clients, this development is not an immediate operational concern. However, it underscores the constant evolution of medical science and the federal government's investment in advanced therapeutic options. For larger healthcare organizations considering future expansion into integrated care models, clinical research partnerships, or strategic M&A activities in the biopharmaceutical space, tracking such advancements can inform long-term strategy and potential new referral pathways or service offerings.

What This Means For Your Practice: A Call for Proactive Compliance

The past week's developments paint a clear picture: healthcare compliance is entering a new phase of intensified enforcement and strategic evolution. The DOJ's new National Fraud Enforcement Division is a powerful signal that the federal government is dedicating unprecedented resources to detect and prosecute fraud, particularly in areas like telehealth, Medicare/Medicaid billing, and controlled substances. Concurrently, CMS is refining reimbursement models, pushing towards value-based care and technology-enabled chronic disease management, while state boards continue to fine-tune the granular details of scope of practice.

For healthcare founders, operators, and compliance officers, these shifts demand a proactive and comprehensive approach:

1. Strengthen Your Compliance Programs: With the DOJ's enhanced capabilities, robust internal controls, regular audits, and thorough documentation are no longer optional. Review your billing, coding, and prescribing practices immediately. 2. Align with Telehealth's Evolving Landscape: Understand the nuances of new CMS models like ACCESS and prepare for upcoming billing changes. Invest in technology and care coordination that demonstrate efficacy and outcomes. 3. Stay Hyper-Aware of State-Specific Rules: Especially for multi-state practices, the California MA guidance serves as a stark reminder that state-level scope of practice and supervision requirements vary significantly and can lead to severe consequences if overlooked. 4. Adapt to Policy Shifts: Be prepared to adjust service offerings and billing practices in response to federal and state policy changes, such as the CMS rule on pediatric procedures. 5. Leverage Data: Utilize internal data analytics to monitor compliance, identify potential risks, and demonstrate the quality and efficacy of your services.

In this complex and rapidly evolving environment, TrueEval remains your indispensable partner, providing the intelligence and infrastructure necessary to navigate compliance challenges with confidence. The time for passive observation is over; the era of proactive, data-driven compliance is here. Ensure your practice is not just reacting, but strategically adapting to shape its future success.