One payment, three legal duties: why physician payment records never reconcile
A company reports a payment to CMS under the Sunshine Act. The physician attests to it under the hospital's conflict-of-interest policy. The hospital certifies the program that collects those attestations. Three duties describe the same dollar, none of them reconcile before publication, and the first place they meet is the public record.
Three different parties carry a legal duty that describes the same payment. Each duty is real, each is enforced separately, and the system that creates them contains no step where the three accounts are compared before they become public.
Every drug and device manufacturer reports its transfers of value to CMS each year. An inaccurate record is treated the same as a failure to report, and the civil monetary penalties attach per record.
The same physician attests to industry relationships under the hospital's conflict-of-interest policy, and again to journals and research sponsors. Those attestations are filled in from memory, months after the payments they describe.
The hospital collects the attestations, runs the conflict-of-interest program, and stands behind it to accreditors, research sponsors, and its own board. Its certification is only as good as disclosures it has no independent way to check.
Where the three accounts finally meet
The company files to CMS. The physician attests to the hospital. Those two records never pass through a common checkpoint. The first place they meet is the public database CMS publishes each June, and by then both are already on the record. When they disagree, the disagreement is public before anyone inside the institution has seen it. A compliance office finds out what industry reported about its medical staff at the same moment any journalist, plaintiff's counsel, or credentialing committee can.
The physician review process that could catch errors earlier exists, but almost nobody uses it. The numbers are on our dispute deficit page: formal disputes are measured in the hundreds against sixteen million published records a year.
Is the reporting duty enforced on its own?
Yes, and the precedent is specific. In October 2020, Medtronic paid $8.1 million to resolve False Claims Act allegations over payments to a South Dakota neurosurgeon, and a separate $1.11 million civil monetary penalty for failing to accurately report those same payments to CMS under Open Payments. The reporting penalty was assessed independently of the kickback theory, and it landed near the annual statutory cap in force at the time. It was the first publicly announced Open Payments enforcement action. The details are in the Department of Justice announcement. For the current penalty schedule, see Open Payments penalties.
What this costs a compliance office today
Under the current system, reconciling the three accounts is manual work. The public file is keyed by company, not by physician, so building one physician's complete picture means walking every filer's records. Attestations are collected once a year and checked against nothing. Staff hours go to assembling data that already exists in three places, and the exposure that remains after all that work is the penalty and enforcement risk described above.
PayClear approaches this from the source. Each physician holds one ledger of every industry payment, confirms or disputes each record while it can still be corrected, and sends disclosure-ready reports where they need to go. What reaches a compliance office is a record the physician has already looked at, instead of a June surprise.
Penalty figures are public statutory maximums; cost ranges are illustrative estimates from published compliance research. This is general information, not legal, tax, or compliance advice, and describes the reporting system generally, not any specific organization.
Figures verified 2026-09-07. Source: CMS Open Payments program rules; US Department of Justice settlement announcement, October 2020.
In a walkthrough we pull the public CMS record for your institution's physicians and show what it carries, and where in the calendar an error can still be corrected before it publishes.
Request a walkthroughHow the institution side works: for institutions. A physician who wants to check their own record can start here, free.