What it truly means to align HCP payments with US regulatory, transparency, and audit expectations — and where compliance programs hold up or unravel.
Planning and conducting an HCP engagement is only part of the story. What happens after the work is done matters just as much, if not more so. How organizations structure, process, approve, and report HCP payments is where compliance programs either hold up under scrutiny or quickly unravel.
Paying an HCP correctly is not simply a matter of cutting a check. It is one of the highest-risk touch points in the entire HCP engagement lifecycle. This is Part 1 of a two-part series on payment compliance: this article focuses on the US regulatory environment; Part 2 turns to the added complexity of paying HCPs across international markets.
Today, HCP payments sit at the intersection of anti-bribery and anti-corruption laws, transparency reporting, tax regulations, and cross-functional operational governance. Few points in the HCP engagement lifecycle bring together as many simultaneous compliance obligations as payment execution and reporting.
The goal of this piece is to translate those obligations into practical terms and offer guidance for compliance professionals navigating the US regulatory landscape. It is a governance overview, not a substitute for jurisdiction-specific legal advice.
Why Payment Compliance Is High Risk
Most compliance professionals understand that HCP payments are scrutinized. Fewer appreciate just how many distinct regulatory frameworks can apply to a single payment, and how easily exposure accumulates across them: federal and state fraud-and-abuse rules, transparency reporting, tax, accounting controls, anti-corruption rules, and internal policy commitments.
Enforcement trends have intensified. Enforcement attention remains focused on compensation arrangements with HCPs, particularly where payment patterns raise questions about the legitimacy of the need, the HCP selection criteria, the fair-market-value basis for compensation, or the relationship between payments and prescribing or ordering behavior. OIG has specifically identified above-FMV compensation, speaker selection influenced by sales or marketing, and compensation tied to past or future business as suspect characteristics in speaker-program arrangements. DOJ enforcement activity continues to reinforce that honoraria, meals, travel expenses, and similar transfers can create Anti-Kickback Statute and False Claims Act exposure when allegedly used to induce prescriptions or orders reimbursed by federal healthcare programs. The pattern of payments across an HCP’s relationship with a company matters as much as any individual transaction.
Transparency reporting creates downstream exposure. In the United States, Open Payments requires applicable manufacturers and applicable group purchasing organizations to report certain payments or other transfers of value to covered recipients, subject to regulatory limitations and exclusions. Errors in payment records do not remain internal: they become public, discoverable, and auditable facts. Inconsistencies between what a company reported and what its internal records show can be a trigger for regulatory inquiry.
Manual and fragmented payment processes amplify risk. When contracts, proof-of-performance records, payment approvals, payment execution, tax documentation, and transparency reporting live in disconnected systems, reconciliation gaps become more likely. Those gaps create audit vulnerabilities that well-designed operational governance is intended to prevent.
FMV Methodology
Fair market value (FMV) is central to compliant HCP compensation in the United States, but FMV alone is not enough. For arrangements involving federally reimbursed products or services, the broader control objective is that compensation be for bona fide services, commercially reasonable, consistent with documented need, and not determined in a way that takes into account the volume or value of past or potential future referrals, prescriptions, orders, or other federal healthcare program business. OIG treats above-FMV compensation and compensation tied to past or future business generated by an HCP as suspect characteristics. A defensible FMV methodology has several defining characteristics:
- It is grounded in independent, external market data, not internal precedent or what a business team believes an HCP deserves
- It applies consistent tiering criteria based on objective factors such as specialty, credentials, publication record, speaking experience, geographic market, and relevant expertise
- It produces rates that are documented, reproducible, and auditable. If the same HCP were evaluated again tomorrow using the same methodology, the outcome should be explainable and consistent
- It is reviewed and updated regularly to reflect market evolution
- Rate exceptions, situations where proposed payment falls outside the standard FMV range, are subject to a formal, documented review and approval process, not informal accommodations
Travel compensation requires particular attention and is frequently underexamined. Travel time reimbursement for HCPs should also be grounded in FMV methodology. Travel time is not always equivalent to substantive consulting, speaking, or advisory time. Paying full professional service rates for travel time may be difficult to defend unless the organization has a documented rationale and applies the approach consistently. Many companies use a lower travel-time rate, a mileage or time cap, or a separate travel-compensation methodology. The exact model matters less than whether the policy is reasonable, consistently applied, and supported by documentation.
Ownership and Timing of Payments
Two dimensions of payment governance that often draw scrutiny are who owns the payment release decision and when payment is made relative to services rendered.
Ownership should be clear and controlled. Payment release should require documented evidence that contracted services were performed, not simply that a contract existed or an engagement was scheduled. Compliance functions must have visibility into whether proof-of-performance documentation exists before payment occurs. When business teams control payment release without compliance involvement or systematic documentation requirements, the risk of paying for services not rendered, overpaying against the contract, or paying before services are performed increases substantially.
Timing also matters. Payments made materially in advance of services may raise an inference of inducement if they are not connected to a bona fide, documented service obligation. Payments made long after services, without a clear explanation for the delay, can raise questions about record integrity. A payment made within a reasonable period after documented services, with a clear linkage among contract, service record, invoice, payment, and disclosure category, is easier to defend than one where the timeline is ambiguous or inconsistent.
Sunshine Act Reporting Alignment
The Sunshine Act requires reporting by applicable manufacturers and applicable group purchasing organizations of reportable payments or other transfers of value to covered recipients, subject to regulatory limitations and exclusions. The annual reporting cycle, reportable covered recipients, submission deadlines, and dispute resolution process are well established, as are the recent trends of CMS for-cause and risk-based audits. What is less often addressed is the internal alignment required to make reporting accurate.
Payment records, engagement records, and contract records must be reconcilable. If a payment is attributed to the wrong HCP, wrong specialty, wrong date, wrong activity type, or wrong nature-of-payment category, the error can surface in public reporting and may require investigation, correction, and explanation. Repeated reporting corrections across multiple periods can become a governance red flag even when any single error appears small, and can create the potential for further regulatory audits and investigations.
High-maturity programs treat Sunshine Act alignment not as a year-end exercise but as an ongoing operational discipline, using ongoing monitoring, targeted auditing, and timely corrective action to identify issues early and strengthen reporting accuracy before the year-end submission process begins.
Operational Challenges
Manual Payment Processes
Manual payment workflows, spreadsheets, email approvals, disconnected systems, remain surprisingly common in life sciences organizations, even large ones. The operational risks are well documented: data entry errors, approval delays, missed documentation requirements, and reconciliation failures that create compliance exposure well before any regulator ever asks a question.
The problem with manual processes is not simply inefficiency. It is that they lack the embedded controls that systematic compliance requires. A manual process depends on every person in the chain doing the right thing, every time, with no systemic safeguard when they do not. That is not a compliance program. That is compliance theater.
Mismatches Between Services, Contracts, and Payments
One of the most persistent sources of audit findings in HCP payment programs is the mismatch between what a contract says will be performed, what was actually performed, and what was approved for payment. Common manifestations include:
- Payments that exceeded the contracted amount without a documented amendment or exception approval
- Payments for services that were never completed or cannot be documented as completed
- Payments categorized under the wrong activity type, creating transparency reporting errors
- Contracts that describe services so generally that proof-of-performance documentation becomes ambiguous
These mismatches are not always the result of bad intent. They frequently reflect operational fragmentation: different teams managing contracting, service execution, payment, tax, and reporting without sufficient coordination or shared documentation standards.
Best Practices
Controls and Reconciliation
Effective payment compliance requires controls at multiple points in the payment lifecycle, not just at the end. Essential control checkpoints include:
- Pre-payment verification that contracted services have been documented as completed before payment release
- Rate validation confirming that the payment amount is consistent with the approved FMV rate and the contracted scope of services
- Contract-to-service-to-payment matching, so the payment record can be traced back to a specific contract, date of service, deliverable, and proof-of-performance record
- Cross-referencing between payment records, engagement records, tax records, and transparency reporting to identify and resolve discrepancies before they become public reporting errors
- Exception tracking that captures, documents, and escalates any deviation from standard payment policy for review and resolution
Reconciliation should not be a once-per-year exercise. Organizations that build monthly or quarterly reconciliation processes into their payment workflows catch mismatches early, when they are easier to investigate, explain, and correct.
Audit Trails
A complete audit trail for every HCP payment should answer the following questions without requiring significant effort to manually reconstruct:
- What legitimate business need supported the engagement?
- Why was this HCP selected, and what objective criteria supported the selection?
- What services were contracted?
- What services were actually performed, and how was performance documented?
- Who approved the engagement, the rate, any exception, and payment release, and at what stage of the process?
- What FMV methodology supported the rate paid?
- How was the payment classified for transparency reporting purposes?
- What were the service date, invoice date, payment date, and any documented reason for delay?
International payments raise a further set of audit-trail questions; Part 2 of this series covers those in detail.
Organizations that can answer those questions from structured records, without manual reconstruction from email threads and shared drives, are operating at a level of governance maturity that is more likely to hold up under regulatory, internal audit, and external reviewer scrutiny.
Practical Takeaways
Payment Compliance Checklist
Compliance teams should be able to affirm the following for every HCP payment processed:
☐ A documented needs assessment and legitimate business purpose exists for the underlying engagement
☐ HCP selection was based on objective, documented criteria unrelated to prescribing, ordering, referral behavior, or expected revenue generation
☐ Compensation was determined using a consistent, auditable FMV methodology
☐ Travel time (if reimbursed) is compensated at a defensible, consistently applied rate
☐ A signed contract was in place prior to services being rendered
☐ Documented proof of performance exists and is linked to the payment record
☐ Payment amount matches the contracted scope and approved FMV rate
☐ Any payment exception has been reviewed and approved through the formal exception process
☐ The payment has been correctly categorized for transparency reporting purposes, with assumptions documented where needed
☐ Payment timing is consistent with when services were performed, or any delay or advance payment has a documented rationale
A full version of this checklist, including the additional items relevant to international payments, is available as a downloadable resource. See the link at the end of this article.
Red Flags Compliance Teams Watch For
Experienced compliance reviewers are alert to patterns that signal potential issues, even when individual payments appear unremarkable in isolation:
- HCPs receiving cumulative annual compensation that appears high relative to documented services
- Payments clustered around product launches, formulary reviews, or other commercially significant events
- Payments at rates that consistently approach or exceed FMV ceilings or benchmarks without documented justification
- Repeated rate exceptions for the same HCP, same product team, or same business unit
- Speaker programs where attendees lack a legitimate business reason to attend, attend the same or substantially similar program repeatedly, or include guests, office staff, or others without a clear educational need
- Sales or marketing influence over speaker selection, advisor selection, or payment approval
- Gaps between contracted scope and documented deliverables that are explained informally rather than through a formal amendment or exception process
- Transparency reporting corrections or amendments that recur across multiple reporting periods
These are not necessarily indicators of wrongdoing. They are indicators of process weakness, and they are precisely what auditors and investigators look for when evaluating whether an organization’s payment compliance program is substantive or superficial.
Getting Payment Compliance Right
Payment is the final point in the HCP engagement lifecycle where prior compliance decisions become visible. A well-documented needs assessment, a defensible HCP selection process, and a rigorous proof-of-performance discipline create the foundation. But if payment execution, reconciliation, tax handling, and reporting are not equally disciplined, that foundation may not protect the organization.
The organizations that manage HCP payment compliance most effectively are not necessarily the ones with the most complex policies. They are the ones that have built payment governance directly into operational workflows, with embedded controls, systematic reconciliation, centralized FMV application, and reporting processes that connect payment data to engagement records.
Payment compliance is not what happens after the engagement is done. It is one of the clearest ways an organization demonstrates that the engagement had a legitimate purpose, was documented appropriately, and was executed consistently with applicable law and policy expectations. It is what demonstrates that the engagement was worth doing.
Paying HCPs internationally introduces a further layer of complexity. Part 2 of this series looks at country-specific restrictions, global disclosure regimes, and the currency and tax implications of cross-border payments.
How Medispend Helps
FMV Data Management
MediSpend’s FMV Data Management solution ensures consistency across your organization when tiering KOLs and calculating FMV rates. Customizable, auditable workflows streamline the rate exception process, and built-in analytics give compliance teams visibility into engagement patterns before they become audit findings. Learn more about FMV Data Management →
Stakeholder Engagement
MediSpend’s Stakeholder Engagement solution lets your organization plan, engage, and pay HCPs against embedded compliance rules, so payment ownership, timing, and proof-of-performance documentation are enforced automatically rather than left to individual judgment. Learn more about Stakeholder Engagement →
Get the full checklist
This article covers the US-specific portion of the payment compliance checklist. Download the complete HCP Payment Compliance Audit-Readiness Checklist, covering both US and international payments, here: HCP Payment Compliance Audit-Readiness Checklist
Jay Ward
Life Sciences Solutions Director
