Call Us Today! 877-659-2467

FTC $20M Fine Highlights the Risk of Using AI without Verification

FTC $20M fine for using AI without verifications

$20 Million Settlement Highlights Risks of False Medical Billing and AI-Generated Documentation

DOJ Settlement: $20 Million, Including $10 Million in Restitution

The U.S. Department of Justice (DOJ) announced a $20 million settlement involving Heal 360 urgent-care and primary-care clinics. The settlement resolves allegations that the clinics submitted fraudulent claims for COVID-19 testing services.

The DOJ alleged that Heal 360 billed a federal COVID-19 program for medical services the clinics never performed.

Patients reportedly received only COVID-19 specimen collection services. However, the clinics billed higher-level evaluation and management (E/M) codes, including 99203, 99204, 99213, and 99214.

These codes represented more extensive medical services than patients allegedly received.

How Medical Documentation Contributed to the Alleged Fraud

The DOJ identified several practices that raised serious concerns about billing accuracy and medical record integrity.

According to the allegations:

  • False Medical Records: Staff used electronic templates to document examinations and medical services that never occurred.
  • Remote Scribes: Overseas remote scribes entered information into patient records, including documentation supporting services the clinics allegedly never provided.
  • Incorrect Rendering Providers: The clinics identified a physician as the rendering provider on most claims, despite no patient examination or treatment.
  • Improper Billing: The clinics submitted hundreds of thousands of claims using higher-level E/M codes instead of appropriate collection codes.

These allegations highlight the importance of accurate medical documentation, proper coding, and provider oversight.

What This Means for Healthcare Providers

This settlement raises important concerns for medical practices, urgent-care centers, billing companies, coding vendors, and remote-scribe services.

Organizations using electronic templates or AI-assisted documentation should pay particular attention.

Technology can simplify medical documentation, but providers must verify that every record accurately reflects the services performed.

AI-generated notes and automated templates do not eliminate the provider’s responsibility for accurate documentation and billing.

Steps Healthcare Organizations Should Take Now

Healthcare organizations should review their documentation and billing procedures to reduce compliance risks.

  1. Verify Billing Accuracy: Compare billed E/M codes against the services performed and documented.
  2. Audit Medical Records: Review templated and copied notes for examinations, patient histories, or medical decisions that never occurred.
  3. Confirm Provider Responsibility: Require rendering providers to review and authenticate documentation supporting their claims.
  4. Review AI and Remote-Scribe Documentation: Verify the accuracy of AI-generated notes and information entered by remote scribes.
  5. Monitor Billing Vendors: Ensure billing companies select codes based on documented services, not automatically populated template fields.
  6. Address Overpayments: Investigate potential billing errors and promptly correct and return identified overpayments when required.
  7. Maintain Audit Trails: Preserve records identifying who created, reviewed, modified, and authenticated each medical note.

AI Documentation Creates New Compliance Responsibilities

Healthcare organizations increasingly rely on AI, remote scribes, and electronic templates to improve efficiency.

These technologies can reduce administrative workloads, but they also introduce documentation and compliance risks.

Providers must ensure that automated records accurately reflect each patient’s encounter.

A completed medical record does not prove that a documented service actually occurred.

Organizations should establish clear policies for reviewing AI-generated documentation, verifying clinical accuracy, and maintaining accountability.

The Bottom Line

This settlement does not prohibit healthcare organizations from using remote scribes, electronic templates, or AI-assisted documentation.

However, electronically generated records can become evidence in False Claims Act investigations when they misrepresent services.

Healthcare providers must maintain accurate records, verify billing codes, and ensure that documentation supports every submitted claim.

Remember: Technology can assist with documentation, but it cannot replace provider accountability.

The defendants deny the allegations, and the settlement does not establish liability.

Source: U.S. Department of Justice – Heal 360 $20 Million Settlement

Contact Aris Medical Solutions for a complimentary HIPAA compliance consultation.

Schedule your HIPAA compliance review today and protect your organization from the next enforcement headline.

About Suze Shaffer

Suze Shaffer is the Owner and President of Aris Medical Solutions, a healthcare compliance company dedicated to simplifying HIPAA compliance. Through its online compliance solution, the HIPAA Keeper™, Aris Medical Solutions provides healthcare providers and business associates with the tools, documentation, training, and expert guidance needed to achieve and maintain HIPAA compliance.

Through the HIPAA Keeper™, Aris has assisted organizations nationwide with conducting risk analyses, developing risk management plans, implementing HIPAA Privacy and Security policies and procedures, and strengthening safeguards for protected health information. Aris Medical Solutions also considers applicable federal and state privacy and security requirements to help clients build a more comprehensive compliance program.

Suze is also a speaker and has presented at numerous conferences and professional events on HIPAA compliance, cybersecurity, risk management, and data breach prevention. Helping organizations understand their responsibilities and identify vulnerabilities before they result in a breach, audit, or investigation. She believes effective compliance begins with education. By helping organizations understand not only what they are required to do, but why those safeguards are important, organizations are better prepared to protect patient information and reduce their compliance risks.

At Aris Medical Solutions, the mission is simple: “Simplifying HIPAA” through education, expert guidance, and the HIPAA Keeper™, Aris Medical Solutions helps organizations turn complicated compliance requirements into a manageable, ongoing process.

The information provided reflects regulatory requirements and guidance available at the time of writing and is intended for educational purposes only. It should not be considered legal advice.

Share This HIPAA Blog

Hurricane Preparedness

October 8, 2026
©2026 Aris Medical Solutions – HIPAA Risk Management | HIPAA Compliance Consultants | All Rights Reserved | Terms and Conditions | Privacy Policy
The content and images on this website is owned by Aris Medical Solutions and their owners. Do not copy any content or images without our consent.
Powered by Bandwise LLC