Federal Scrutiny Escalates: DOJ, FTC, and CMS Reshape Healthcare Compliance in a New Regulatory Era

2026-08-20

The regulatory landscape for healthcare providers is undergoing a rapid and significant transformation. From intensified federal fraud enforcement to pivotal shifts in telehealth billing and antitrust scrutiny in health tech, staying abreast of these developments is no longer optional—it's imperative for survival and strategic growth.

The healthcare industry is currently navigating a period of unprecedented regulatory flux and heightened enforcement. The past week alone has delivered a volley of critical announcements from federal agencies and state boards that collectively signal a new era of vigilance. For telehealth founders, brick-and-mortar practice owners expanding nationally, compliance officers, and investors, understanding these shifts is not merely about avoiding penalties; it's about anticipating market trends, mitigating risk, and strategically positioning your enterprise for sustainable growth. At TrueEval, we believe that informed leadership is the cornerstone of robust compliance, and this digest is designed to equip you with that indispensable insight.

> For more on this topic, see our analysis: [The Enforcement Surge: DOJ's New Fraud Division, Telehealth Billing Shifts, and Critical State-Level Mandates Reshape Healthcare Compliance](/blog/enforcement-surge-doj-fraud-telehealth-compliance).

The Iron Hand of Federal Enforcement: DOJ and FTC Double Down

Perhaps the most significant development of the week comes from the Department of Justice (DOJ), which has dramatically escalated its capabilities against healthcare fraud. The establishment of the National Fraud Enforcement Division (NFED) is a game-changer, centralizing and significantly expanding the DOJ's resources dedicated to combating fraud across the nation. This isn't just a restructuring; it's an undeniable signal of a ramped-up, more aggressive enforcement posture.

The NFED's priorities are starkly clear: telemedicine, Medicare/Medicaid billing, and controlled substance diversion. The explicit mention of telemedicine underscores a persistent focus on an area that saw rapid expansion during the pandemic. The DOJ's new division is equipped with expanded resources, including more prosecutors, agents, and forensic accountants embedded in every U.S. Attorney's Office, and will leverage advanced data analytics to proactively identify fraud, waste, and abuse in federal healthcare programs. This means investigations will likely be initiated faster and backed by unprecedented analytical rigor.

What this means for your practice: * Telehealth providers are squarely in the crosshairs. Every aspect of your prescribing protocols, patient intake, documentation, and billing for virtual services needs to withstand intense scrutiny. Reviews of medical necessity and appropriate prescribing for controlled substances are paramount. * All providers participating in Medicare/Medicaid must re-evaluate their billing practices. The new National Fraud Detection Center will be analyzing billing data at an unprecedented scale, making even minor discrepancies a potential trigger for investigation. Robust compliance programs, meticulous record-keeping, and stringent internal audits are no longer optional best practices but fundamental safeguards. * The explicit coordination between criminal and civil enforcement arms heightens exposure to the False Claims Act, carrying severe financial and reputational risks. Understand your liability and ensure your claims submission processes are unimpeachable.

Concurrently, the Federal Trade Commission (FTC) has initiated an antitrust inquiry into Epic Systems Corp., the dominant vendor of electronic health records. This probe focuses on Epic's employee non-compete agreements and its policies regarding rival technology companies' access to patient data. While seemingly distinct from fraud enforcement, this investigation signals a broader regulatory emphasis on competition, innovation, and data interoperability within the healthcare technology sector.

What this means for your practice: * This inquiry highlights the critical role of EHR systems in shaping market dynamics. Any potential changes resulting from FTC action could lead to improved data access for third-party integrators, fostering greater competition and innovation in health tech. Practices seeking to integrate novel technologies may find future opportunities for more seamless data exchange. * It serves as a reminder for all healthcare businesses to scrutinize their own contractual agreements, particularly those involving non-compete clauses and data sharing practices, ensuring compliance with antitrust and fair competition principles.

CMS Charts a New Course for Telehealth and Value-Based Care

The Centers for Medicare & Medicaid Services (CMS) continues to shape the future of healthcare delivery, particularly in the realm of telehealth and chronic care management. A dual announcement from CMS reveals both mandatory billing changes and strategic incentives for technology-supported care.

First, CMS is implementing a mandatory billing change for Federally Qualified Health Centers (FQHCs) and Rural Health Clinics (RHCs) concerning distant-site non-behavioral telehealth. Effective October 1, 2026, FQHCs and RHCs must cease using code G2025 and transition to specific service codes. This change demands immediate attention for these entities to update their billing systems and provide staff training, ensuring a smooth transition and continued compliance.

Second, CMS has introduced the ACCESS (Advancing Chronic Care with Effective, Scalable Solutions) Model. This 10-year voluntary program aims to test outcome-aligned payments for technology-supported chronic care services. The ACCESS Model signifies CMS's strategic shift towards value-based, outcome-aligned payment structures for chronic disease management, particularly those leveraging virtual, asynchronous, or device-supported care.

What this means for your practice: * For FQHCs and RHCs, proactive planning for the G2025 billing mandate is essential. Begin assessing your current billing infrastructure and staff training needs now to avoid revenue cycle disruptions by the 2026 deadline. * For a broader range of telehealth brands and healthcare businesses, the ACCESS Model presents a significant strategic opportunity. While voluntary, it outlines a clear pathway for future Medicare payment innovation. Practices capable of demonstrating measurable health outcomes for conditions like hypertension, diabetes, or depression, and willing to invest in robust technology and care coordination, may find ACCESS a viable avenue for growth and sustainable reimbursement. * This model underscores the increasing regulatory focus on the efficacy and accountability of technology-enabled care. Providers engaging in virtual chronic care management should align their services with outcome-driven metrics and be prepared to demonstrate value.

State-Level Specificity: California Clarifies Medical Assistant Scope

While federal agencies drive macro-level changes, state-specific regulations remain a critical layer of compliance that can lead to significant liabilities if overlooked. The Medical Board of California recently provided definitive guidance on the permissible scope of practice and required supervision for Medical Assistants (MAs) within the state.

The guidance unequivocally states that Medical Assistants are unlicensed individuals who perform non-invasive technical support services under direct supervision. This means a licensed physician and surgeon, podiatrist, physician assistant, nurse practitioner, or nurse midwife must be physically present on-premises to oversee an MA's duties. MAs are strictly prohibited from performing invasive procedures, diagnosing, treating, or making independent assessments.

What this means for your practice: * For California-based medspas, dental practices, chiropractic offices, and telehealth providers utilizing in-person administrative or technical support, a thorough review of MA job descriptions, training, and supervision protocols is critical. * Ensure that a licensed practitioner is always physically present when MAs are performing duties and that MAs are not operating outside their defined, limited scope. * The ultimate responsibility for the appropriate use of unlicensed persons rests with the supervising licensee. Non-compliance can lead to severe regulatory actions against the individual licensee and the practice. * This specific guidance from California serves as a salient reminder for all practices to regularly review state-specific scope of practice laws for all allied health professionals and unlicensed personnel. Variances between states can be substantial and can pose significant compliance risks during expansion.

FDA's Unwavering Focus on Product Quality and Innovation

Rounding out the regulatory landscape, the FDA continues its detailed work in ensuring the safety and efficacy of medical products. The agency recently issued draft guidance on 'Potency Assessment of Active Immunotherapy Products,' providing recommendations for developing and evaluating assays to ensure the potency of these advanced therapies.

While this guidance may seem niche, primarily affecting entities involved in the development and manufacturing of cutting-edge biological products, it reflects the FDA's consistent and rigorous approach to product quality and patient safety. It underscores the stringent regulatory environment governing all innovative medical interventions.

What this means for your practice: * For practices that partner with, or are considering expanding into, the realm of advanced therapies (e.g., cell and gene therapies, immunotherapies), this guidance emphasizes the high bar for product characterization and quality control. Understanding these foundational principles is crucial for ensuring the integrity and effectiveness of treatments offered. * For the broader healthcare industry, it reinforces that patient safety and treatment efficacy remain at the forefront of regulatory concerns, irrespective of the therapy's complexity.

Looking Ahead: Navigating the New Regulatory Blueprint

The collective force of these developments paints a clear picture: healthcare compliance is entering a period of unprecedented intensity. The establishment of the DOJ's NFED, coupled with the FTC's antitrust scrutiny, signals a proactive federal posture across fraud, competition, and data. Simultaneously, CMS is actively steering the future of telehealth and chronic care towards value-based models, while state boards continue to refine the granularities of practice operations.

For healthcare founders, operators, and investors, the imperative is clear: proactive, sophisticated compliance is no longer a cost center but a strategic differentiator and an essential safeguard.

What TrueEval Recommends: * Conduct Comprehensive Risk Assessments: Re-evaluate your compliance program's effectiveness in light of these heightened enforcement priorities, especially concerning telehealth, controlled substances, and Medicare/Medicaid billing. * Fortify Data Security and Interoperability Practices: Review your EHR vendor agreements and internal data sharing policies to ensure compliance with emerging antitrust considerations and to optimize for future interoperability. * Audit Billing and Documentation: Implement rigorous internal audits for all claims submitted to federal programs. Ensure every service rendered, particularly via telehealth, is meticulously documented and meets medical necessity criteria. * Review State-Specific Scope of Practice Laws: For multi-state operations, regularly audit job roles and supervision protocols to ensure alignment with granular state board requirements, preventing costly missteps. * Prepare for Value-Based Care: Even if not directly participating in the ACCESS Model, understand the shift towards outcome-aligned payments. Start building systems to track and demonstrate the efficacy of your services.

TrueEval is purpose-built to help you navigate this complex and dynamic regulatory environment. Our insights and infrastructure empower you to not only meet compliance obligations but to transform them into a competitive advantage. The time for passive compliance is over; the era of proactive, strategic compliance has arrived.