Health Care

On October 11, 2025, California Governor Gavin Newsom signed Senate Bill 41 (SB-41) into law, introducing a comprehensive set of new regulations for pharmacy benefit managers (PBMs) operating in the state. As part of the broader California Prescription Drug Affordability legislative package, SB-41 reflects the state’s effort to combat high drug costs, standardize PBM pricing practices, enhance transparency, and address concerns around access to pharmacies. Among other things, SB-41 imposes fiduciary obligations on PBMs, establishes fee structure requirements and limitations, prohibits the use of spread pricing and steering to PBM-affiliated pharmacies, and requires 100% passthrough of rebates from PBMs and their affiliates and contracted rebate group purchasing organizations (GPOs) to health plan customers.

California legislative activity focused upon private equity (PE) group and hedge fund health care transactions has continued notwithstanding California Governor Gavin Newsom’s veto last fall of California Assembly Bill 3129 (AB-3129). As we discussed in previous posts here and here, AB-3129 would have authorized the California Attorney General (AG) to review certain PE group and hedge fund health care transactions, but Governor Newsom vetoed the bill based on his view that the California Office of Health Care Affordability (OHCA) rather than the AG should be assessing proposed health care transactions and their cost and market impacts.

The first week of October 2025 marked a significant shift in U.S. drug pricing policy as the Trump administration unveiled a series of sweeping actions to deliver on his promise to lower drug prices. From President Trump’s announcement of a 100% tariff on imported branded drugs to the Trump administration’s landmark pricing deal with Pfizer and the rollout of the TrumpRx.gov direct-to-consumer (DTC) platform, last week marked an escalation in the White House’s efforts to drive down prescription drug costs and bring pharmaceutical manufacturing back to U.S. soil. Below, we provide an overview of the Trump administration’s new policies and the stakeholder responses already reshaping the broader pharmaceutical landscape.

On September 30th, 2025, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Cadia Healthcare Facilities for potential violations of the HIPAA Privacy and Breach Notification Rules. Cadia Healthcare Facilities (Cadia) is a group of five providers that specialize in rehabilitation, skilled nursing, and long-term care services in Delaware. This settlement follows an OCR investigation of Cadia in which Cadia posted a “success story” of a patient to its public website without first receiving a valid HIPAA authorization from the patient. The success story post included PHI such as the patient’s name, their photograph, and information regarding their condition, treatment, and recovery. OCR’s investigation further revealed that, through their “success story” program, Cadia compromised the PHI of 150 total patients.

As we’ve covered again and again over the past five years, providers are once more facing the prospect of a telehealth “cliff” if Congress does not take action to extend the Medicare flexibilities for telehealth services that have been in place since March of 2020.  While news is focused on the pending government shutdown, providers and Medicare beneficiaries who have come to rely on the COVID-era waivers and other flexibilities that greatly increased the availability of telehealth are facing the prospect of significantly reduced access to virtual care as of October 1, 2025.  Here is a quick review of what telehealth providers and their patients stand to lose if Congress does not act to extend coverage: 

Over the 2025 summer, the Department of Health and Human Services’ Office of Inspector General (OIG) issued four advisory opinions—two favorable and two unfavorable—that provide valuable guidance for medical device companies and pharmaceutical manufacturers navigating the federal Anti-Kickback Statute (AKS). These opinions address warranty reimbursements, vendor access fees, physician ownership, and exclusion screening costs. Below is a summary of each.

In a move that underscores the growing urgency around healthcare cybersecurity, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has released version 3.6 of its Security Risk Assessment (SRA) Tool.  The SRA Tool is a free resource designed to help covered entities and business associates conduct HIPAA-compliant risk assessments.  It is particularly focused on small and medium providers and can be a useful tool for any smaller entity subject to HIPAA.  Non-provider entities, including business associates, may need to make modifications to the tool to fit their operations and security infrastructure. 

In a cautionary tale for health care entities, the U.S. Attorney’s Office for the Eastern District of North Carolina recently announced the convictions of two health care executives who admitted to orchestrating a multi-year kickback scheme involving the use of gift cards to incentivize Medicaid patients to attend counseling sessions and submit urine drug tests. Although the Department of Health and Human Services’ Office of Inspector General (OIG) has issued multiple Advisory Opinions green-lighting other programs that include gift card distributions, these convictions underscore the importance of structuring patient incentives in strict accordance with OIG guidance.

In follow-up to the May 12^th “Delivering Most Favored Nation Prescription Drug Pricing to American Patients” Executive Order, President Trump issued letters to seventeen manufacturers (Letters), reiterating the mandate for manufacturers to provide the United States with most-favored-nation pricing for drugs. 

As we previously reported, the Executive Order gave manufacturers 180 days to negotiate most-favored-nation drug pricing terms with the Department of Health and Human Services (HHS) before the Attorney General and the Chairman of the Federal Trade Commission (FTC) can bring enforcement action against manufacturers for anti-competitive practices. The Executive Order also warned manufacturers that the HHS Secretary and heads of other agencies would consider alternative measures to compel manufacturers to modify drug prices if “significant progress toward most-favored-nation pricing for American patients [was] not delivered.” These measures include, but are not limited to, issuing rulemaking to impose most-favored-nation pricing, certifying to Congress that importation is a viable drug cost-reduction strategy, and modifying or revoking existing drug approvals. 

In a significant legal development, a federal judge has temporarily blocked Arkansas from enforcing Act 624. Act 624 prohibits pharmacy benefit managers (PBMs) from owning or operating pharmacies in the state, effectively forcing vertically integrated companies to divest or shut down their Arkansas pharmacy operations. However, on July 28, 2025, U.S. District Judge Brian Miller granted a preliminary injunction to several major PBMs and affiliated entities, halting the law’s implementation pending final resolution of the case.

On July 31, 2025, the United States Department of Justice (DOJ) announced a pair of settlements with companies accused of having violated the False Claims Act (FCA) by falsely representing their compliance with certain cybersecurity requirements applicable to federal contractors. These two settlements highlight key aspects of DOJ’s enforcement priorities: (1) DOJ’s strong focus on enforcing the FCA in the cybersecurity space, and (2) DOJ’s willingness to reward companies that self-disclose violations. All government contractors certifying compliance with regulatory and contractual requirements must stay vigilant and take the steps needed to comply. 

In the CY 2026 Medicare Physician Fee Schedule proposed rule (PFS Proposed Rule), released on July 14, 2025, the Center for Medicare and Medicaid Innovation (CMMI) introduced the Ambulatory Specialty Model (ASM), a new payment model focused on specialists who treat heart failure and low back pain in ambulatory settings. If implemented as proposed, participation in ASM will be mandatory for specialists, including cardiologists, orthopedic surgeons, pain management specialists, anesthesiologists, and neurosurgeons, who are located in designated regions and treat Medicare Fee-for-Service (FFS) beneficiaries for heart failure or low back pain. Participating providers will continue to bill Medicare FFS but will receive payment adjustments – positive, neutral, or negative – based on their performance across four domains: cost, quality, care improvement, and interoperability. 

The CY 2026 Physician Fee Schedule Proposed Rule (PFS Proposed Rule) introduces significant changes to how drug manufacturers must treat Bona Fide Service Fees (BFSFs) when calculating Average Sales Price (ASP) for Medicare Part B drugs. While the rule is directed at manufacturers, it has important implications for plans, pharmacy benefit managers (PBMs), group purchasing organizations (GPOs), and other entities that receive BFSFs, particularly if the Centers for Medicare & Medicaid (CMS) proposes similar changes to Part D. 

The Rhode Island Medical Spas Safety Act (RI MSSA) was signed into law by Governor Daniel McKee on June 30, 2025, and is the latest example of the increasing regulation of medical spas.

The Center for Medicare and Medicaid Innovation (CMMI) recently announced a six-year payment model for 2026-2031 called the Wasteful and Inappropriate Service Reduction (WISeR) Model. This blog post outlines key considerations for health care providers and suppliers to prepare for WISeR, which becomes effective January 1, 2026. 

U.S. District Court for the Southern District of Iowa issued a comprehensive preliminary injunction blocking enforcement of key provisions of Iowa Senate File 383.

A July 14, 2025 U.S. Food & Drug Administration (FDA) warning letter to a prominent wellness product and services company offers a blunt reminder that medical device requirements cannot be waived or overlooked merely because a company advertises the product for wellness and lifestyle purposes. The advisory action also indicates that FDA’s Center for Devices and Radiological Health (CDRH) remains steadfast in its enforcement of device regulations despite ongoing changes in other centers and throughout the agency.

On July 11, 2025, the Ninth Circuit Court of Appeals affirmed the criminal conviction of laboratory operator Mark Schena for violations of the Eliminating Kickbacks in Recovery Act, 18 U.S.C. § 220 (EKRA) based on compensation paid to marketers who sold testing on behalf of Schena’s laboratory. 

A few elements of this decision are particularly significant, including the court’s finding that percentage-based compensation arrangements are not per se illegal under EKRA and that evidence of undue influence over providers’ decision-making must be presented to demonstrate that the compensation was paid to “induce a referral” in violation of the statute.  The decision is also notable for its reliance on case law interpreting the Anti-Kickback Statute to reach this conclusion.

Within the first six months of President Trump’s second term, his Administration and the GOP have already implemented significant policies that are reshaping health care in the United States. Through his Administration’s restructuring of the Department of Health and Human Services (HHS), promulgation of Marketplace Integrity and Affordability rules, sweeping RADV audit changes, and now the passage of the One Big Beautiful Bill Act (OBBA), entities throughout the health care industry—particularly managed care plans and sub-capitated providers—will need to readjust to the new paradigm.