The U.S. Department of Justice is expanding the scope of healthcare enforcement in ways that many companies are not fully prepared for. What was once centered on billing fraud and false claims is now shifting toward product safety, regulatory transparency, and emerging healthcare models.
Insights from the DOJ’s 2025 Year in Review and recent enforcement actions show a clear trend: companies are increasingly exposed to liability based on how they develop, report, and market healthcare products, not just how they bill for them.
Strategic Shifts in Reporting Accountability
One notable procedural hurdle now facing the industry involves the DOJ’s use of “pre-knowledge” as a basis for intent to defraud. Historically, an isolated failure to file a Medical Device Report (MDR) was often treated as a compliance lapse. Today, the DOJ is increasingly viewing these omissions through the lens of the False Claims Act.
If a company fails to report a safety signal while continuing to market the product for use in federal healthcare programs, the government may argue that every subsequent claim for reimbursement is “false” because it was induced by a material omission of safety risks.
The long-term business implication of this shift is the erosion of the “regulatory silo.” Legal departments can no longer treat FDA reporting as a purely technical function managed by regulatory affairs. Instead, reporting must be integrated into the broader corporate risk management strategy. A failure in the former now serves as a primary evidentiary trigger for the latter, often leading to parallel civil and criminal investigations that can destabilize a corporate portfolio for years.
Niche Citations and the Expansion of Individual Liability
The prosecution of individuals for corporate reporting failures is a cornerstone of the current enforcement strategy. A critical case to monitor is the recent action against the former chief regulatory officer of ExThera Medical Corp. In this matter, the individual pleaded guilty to failing to file required adverse event reports with the intent to defraud the FDA. The government alleged that the executive suppressed information regarding patient deaths to protect the company’s financial prospects and clinical partnerships.
This case is significant because it utilizes the FDCA’s felony provisions to bridge the gap between “failure to report” and “intent to defraud.” It establishes a precedent where the government does not need to prove a specific victim was harmed by the fraud; rather, the act of misleading the regulator is sufficient for criminal liability. This heightens the stakes for executives who oversee regulatory submissions, as the DOJ is clearly willing to pursue personal criminal charges to deter systemic reporting non-compliance.
Data Analytics as an Enforcement Catalyst
The DOJ has also integrated advanced data analytics to identify reporting anomalies before a whistleblower even emerges. By cross-referencing public safety databases, social media sentiment, and clinical trial registries, the government can flag companies that appear to be under-reporting adverse events compared to industry peers. This “analytical surveillance” means that a company’s own data—or the absence thereof—can serve as the basis for an investigation.
Strategic prosecution is no longer reactive. The DOJ’s healthcare enforcement units are now “case-generating” entities that use machine learning to spot trends in product failures that have not been adequately disclosed. For sophisticated brand owners, this means that silence is no longer a neutral position. In the eyes of the DOJ, a missing report is often viewed as an active concealment, particularly when high-margin products or sensitive consumer demographics are involved.
The Juris Law Group Perspective on CPG and Food Safety
Our practice often navigates these types of enforcement challenges at the intersection of product innovation and regulatory scrutiny. At Juris Law Group, P.C., we advise clients on balancing portfolio protection with commercial scalability while maintaining rigorous reporting standards.
We have observed that the DOJ is increasingly applying these “healthcare” enforcement theories to the CPG and food and beverage sectors, particularly concerning infant formula and dietary supplements. Our team assists brand owners in developing internal audit protocols that ensure NAP consistency and SEO-aligned transparency, which are often the first lines of defense in a government inquiry. We emphasize that a proactive enforcement defense begins with a robust understanding of how internal data flows from the lab to the regulator.
Common Legal Inquiries
How does the DOJ define “intent to defraud” in FDA reporting cases?
The DOJ defines intent to defraud as the deliberate withholding of material information from the FDA to obtain a benefit or avoid a detriment. In recent cases, this has included suppressing adverse event reports to ensure a product remains on the market or to protect the company’s valuation during a merger.
Can a company be liable under the False Claims Act for safety reporting failures?
Yes; the government argues that safety reporting is a material condition of payment for many federal programs. If a company fails to disclose known risks while seeking reimbursement from Medicare or Medicaid, it may face “reverse false claims” liability for avoiding the obligation to report and remediate product defects.
What are the risks of using AI in regulatory and safety reporting?
While AI can streamline data collection, the DOJ has warned that “black box” algorithms do not excuse reporting failures. If an AI tool misses a reportable event, the company remains responsible. Furthermore, the DOJ uses its own AI to find discrepancies in a company’s automated reporting patterns.
How has the DOJ changed its approach to medical device product safety?
The DOJ has shifted toward pursuing criminal charges for “regulatory evasion.” This includes cases where employees conduct fraudulent testing to avoid submitting required premarket notifications or forge documents to suggest FDA approval. These actions are now being prosecuted as felony wire fraud and FDCA violations.
