On January 12, 2026, the Department of Justice announced that False Claims Act settlements and judgments in fiscal year 2025 exceeded $6.8 billion — the highest annual total in the history of the statute. Healthcare recoveries alone accounted for $5.7 billion of that.
Then January kept going. Two new DOJ medical-directorship enforcement actions in the first three weeks. A $556 million Kaiser Permanente settlement. A 324-defendant National Health Care Fraud Takedown alleging $14.6 billion in scheme value — the largest in DOJ history.
If you are a chief compliance officer reading this, here is the question that matters: is 2026 actually different, or is the press just paying more attention?
The answer determines what you do this quarter. If 2026 is a continuation of trend, you keep doing what you are doing. If 2026 is an inflection — a structural change in enforcement intensity, agency coordination, and prosecutorial theory — your tracking system needs to change before your next FMV opinion expires.
This post argues 2026 is the inflection.
What changed
Three structural shifts have happened simultaneously:
1. Cross-agency coordination is now systematized. The DOJ launched a Healthcare Fraud Data Fusion Center using AI and cloud infrastructure for inter-agency collaboration. CMS, HHS-OIG, FBI, and state Attorney General offices are now sharing investigation tooling rather than coordinating case-by- case. The structural consequence: investigations that previously took 18 months to assemble across agencies now take six.
2. The FCA is being used to enforce non-FCA conditions of payment. The 2025 trend that crystallized in 2026: federal prosecutors are treating FDA approval status, cybersecurity attestations, and EHR system configurations as "conditions of payment" — which means a defect in any of those becomes an FCA violation, not just a regulatory violation. The penalty math is brutal. Where a regulatory finding might produce a corrective action plan, an FCA finding produces treble damages plus per-claim penalties.
3. Self-disclosure is being rewarded, but the discount is shrinking. January 2026's $34 million settlement with a home health provider that self-disclosed medical directorships still produced an eight-figure settlement. The DOJ continues to credit cooperation, but the cooperation discount appears to be narrowing as the volume of voluntary disclosures grows. If your organization is sitting on a known issue, the calculus on when to self-disclose is materially different from 2024.
What that means for physician arrangements specifically
Three of the headline 2026 cases turned on physician compensation arrangements:
- The $31.5 million Fresno Community Hospital + Physicians Network Advantage settlement included a five-year Corporate Integrity Agreement and turned on alleged remuneration to referring physicians "in the form of expensive meals, alcohol, and cigars provided in a lounge on premises" plus EHR technology subsidies and bonuses for clinical integration activities that allegedly tracked referrals.
- The DOJ complaint against a long-term care hospital group alleged that the hospital paid a physician $450,000 for two directorships and a physician-on-call agreement — payments that were not fair market value and for which the physician did not actually work the hours required by the contracts.
- The $34 million home health settlement turned on medical directorships paid to physicians who referred business to the provider, where the medical directorships allegedly did not represent bona fide services.
Notice the pattern. Not one of these cases turned on patient harm, billing fraud schemes, or prescription kickbacks. They turned on how physician arrangements were structured, documented, and tracked over time.
If you are a CCO, that pattern is your operational problem, not your legal problem. Your healthcare counsel can tell you what an FMV-compliant medical directorship looks like. They cannot tell you whether the FMV opinion supporting your cardiology medical-director arrangement expired six weeks ago.
The operational gap
Here is the structural challenge inside almost every health system in America:
The compliance program is mature. The legal counsel is competent. The arrangements were structured correctly at the time they were signed.
What's missing is the system that catches the FMV opinion expiring, the safe-harbor element that fell out of compliance when the contract was amended, the OIG screening that was scheduled monthly but actually ran every six weeks, the medical-directorship time log that stopped being kept three years ago.
The arrangement does not become non-compliant on the day it's signed. It becomes non-compliant on the day the documentation supporting the exception lapses — and nobody knows, because the tracking system is a 22-column spreadsheet with 14 tabs maintained by someone who left the organization in November.
The 2026 cases above all have this shape. They are not stories about CCOs who didn't know what Stark Law required. They are stories about organizations whose tracking systems couldn't keep up with the documentation that compliance required.
Why 2026's enforcement velocity makes this gap actionable
In 2018, an unrefreshed FMV opinion was a documentation deficiency. Your compliance program would catch it at the next annual review and you'd refresh it.
In 2026, an unrefreshed FMV opinion is the predicate for an FCA case the DOJ can build with data the agency already has. Cross-agency coordination means your CMS billing data, your OIG exclusion screening history, and your physician arrangement metadata can be cross-referenced by an investigator without subpoenaing your filing cabinet first. The investigator's window into your compliance program is wider than it has ever been.
If your tracking system is downstream of the investigator's tooling, you're behind. The structural answer is to make sure your tracking system is upstream of any plausible enforcement window — meaning every arrangement is tracked continuously, every FMV opinion has a known expiration date, every safe-harbor element has a documented status, every OIG screening is logged with a verifiable timestamp.
That's not a compliance program design question. That's an operational infrastructure question.
What to do this quarter
Three concrete actions for a CCO reading this in May 2026:
Run an FMV inventory by end of Q2. Every active physician arrangement should have a documented FMV opinion with a known expiration date. Not "we got an opinion when we signed" — a date, in writing, with the source firm and methodology. If you can't produce that list in 60 minutes, your tracking system is the gap.
Audit your safe-harbor element documentation for the top 10% of arrangements by compensation value. The Fresno case turned on bonuses for "clinical integration activities" that allegedly tracked referrals. Your highest-value medical directorships and co-management arrangements are the ones that produce the headline numbers in an FCA settlement. Their element-level documentation should be auditable element by element, not bundled into a "compliance binder" that hasn't been opened since 2022.
Stress-test your subpoena response time. If an OIG investigator subpoenas every document supporting a single medical-directorship arrangement, how long does it take to assemble? If the answer is more than 30 days, your tracking infrastructure is operating at 2018 speed against 2026 enforcement velocity.
The honest framing
ArrowISE builds software that addresses these gaps. We won't pretend otherwise — that's why this post exists. But the structural argument stands regardless of which tracking infrastructure you choose:
Your healthcare counsel cannot be the system of record for your physician arrangements. Your billing system cannot be the system of record. Your contract management system cannot be the system of record. Each of those is downstream of the question "is this arrangement currently in a compliant state?" and 2026's enforcement velocity has made that question operationally too expensive to answer through reconciliation across systems.
The right tracking system makes the answer free at any moment. Whether it's ours or someone else's, the structural argument is the same: 2026 is the year operational compliance infrastructure stops being optional.