CMP-HC study materials
CMP-HC study resources

CMP-HC: Regulatory and Transparency Reporting Frameworks

CMP-HC · Work through your exam, one topic at a time.

All guide sections

Regulatory and Transparency Reporting Frameworks

This domain tests whether you can look at a specific interaction at a healthcare meeting - a dinner, a speaker fee, a grant, a plane ticket - and decide whether it is a reportable transfer of value, how it must be captured, when it is published, and what the recipient can do about it.

United States: Open Payments

  • The Physician Payments Sunshine Act requires applicable manufacturers of covered drugs, devices, biologicals and medical supplies, plus group purchasing organisations, to report payments or other transfers of value to covered recipients: physicians and teaching hospitals.
  • Collection runs 1 January to 31 December. Manufacturers submit by 31 March; CMS opens a 45-day review and correction window before publication, publishes by 30 June, then runs a short 15-day correction window.
  • A de minimis rule removes individual payments under $10 unless that recipient's annual aggregate reaches $100.
  • Samples, rebates and discounts, patient copay assistance and research payments (reported in a separate section) sit outside the general requirement.
  • Indirect payments count: if you know or should know that value will reach a covered recipient, it is reportable even when routed through a planner, congress organiser or CME provider.

Outside the United States

  • EFPIA and MedTech Europe require annual disclosure of transfers of value to healthcare professionals and organisations: individual disclosure where the HCP consents, otherwise aggregate, published by 30 June of the following year.
  • National codes and laws can be stricter - ABPI and Disclosure UK, the German FSA code, Farmaindustria, and France's anti-gift regime, which also restricts conventions and requires declarations.

Worked example

Three physicians attend a company advisory dinner costing $720, and one is paid $1,500 to speak for 60 minutes plus $400 airfare. Each physician's share of the dinner is $240, far above the $10 threshold, so it is reported per recipient as food and beverage. The speaker fee is compensation for services, the airfare is travel and lodging, both attach to that physician, and the related product is named for the speaking fee. The other two physicians have nothing beyond the meal to report.

Traps

  • Splitting invoices to stay under $10 - the test is per payment and per annual aggregate, not per budget line.
  • Forgetting that a teaching hospital, not only a physician, can be the covered recipient.
  • Assuming a grant to a CME provider is never reportable, or that a planner's spend is the planner's problem.

Industry Codes of Conduct: PhRMA, AdvaMed, EFPIA and MedTech Europe

This domain tests your ability to apply the voluntary industry codes that shape day-to-day behaviour at meetings, and to keep them distinct from the statutes tested elsewhere.

Common ground

  • Interaction must serve patient benefit and a genuine educational or business purpose.
  • No cash or cash equivalents, ever.
  • Meals must be modest by local standards and served in a setting that supports substantive exchange, not entertainment.
  • No recreation: golf, theatre, sporting events and spa activities are out, including when labelled as networking.
  • Spouses and guests are not funded unless they are healthcare professionals with an independent professional interest, and their costs are never folded into an HCP's reported amount.

PhRMA Code (prescription medicines, US)

The 2022 revision replaced the old $100 occasional-gift limit with a patient-benefit standard: items designed to benefit patients, such as anatomical models and patient education materials, are permitted under defined company governance. It also expects a risk-based compliance approach and addresses digital and social media interactions.

AdvaMed Code (medical technology, US)

No gifts of any value. Meals must be modest and tied to a bona fide discussion. Consulting requires a legitimate need, a written agreement and fair market value. Educational grants to third-party conference organisers are allowed with written terms and no company control over content.

EFPIA and MedTech Europe

Hospitality must be modest, ancillary to the main purpose of the event, and limited to travel, accommodation, registration and meals. Gifts are confined to inexpensive items relevant to medical practice. Enforcement sits with member associations such as the PMCPA in the UK.

Worked example

An exhibitor proposes a booth raffle for a smartwatch open to any physician who visits. It fails twice over: a gift of value for personal benefit breaches PhRMA and AdvaMed gift rules, and the watch's value to each winner would be a reportable transfer of value if the company funds it. The compliant alternative is to drop the raffle and run a hands-on demonstration with no incentive attached.

Traps

  • Treating "modest" as a fixed dollar figure; it is judged against local standards and company policy.
  • Mixing up PhRMA (biopharma) and AdvaMed (medtech) scope.
  • Assuming code compliance equals legal compliance, or that a voluntary code is unenforceable - member associations do publicly sanction companies.

Fair Market Value, HCP Contracts and Faculty Management

This domain tests the contractual and commercial mechanics behind paying a healthcare professional for a legitimate service, and the record that proves the arrangement was legitimate.

Core rules

  • Fair market value is the value of the service in an arm's-length transaction, disregarding the volume or value of past or future business. Rate cards by specialty, seniority, geography and deliverable are the usual evidence.
  • A written, signed agreement must exist before the service is delivered. It states scope, deliverables, term, compensation and termination.
  • A documented legitimate need must exist - an agenda gap, a needs assessment, a training requirement - and selection must not track prescribing volume.
  • Hours are documented: agenda, timesheet, sign-in, rehearsal. Payment follows the deliverable and goes to the individual by traceable means.
  • Expenses are reimbursed at actual, reasonable cost under policy, never as a lump sum.
  • Attendance is not paid for. Neither is "being available".
  • Faculty conflicts of interest are identified, mitigated, and disclosed again to the audience at the start of the session.

Why it matters legally

Under the US Anti-Kickback Statute and equivalents elsewhere, remuneration intended to induce referrals is unlawful however fairly it is priced. Fair market value is a necessary condition, not a defence on its own.

Worked example

A specialist asks $6,000 for a 45-minute podium talk plus two hours of preparation. The rate card gives $500 per hour for speaking and $250 per hour for preparation. The fee is 0.75 × $500 = $375 plus 2 × $250 = $500, totalling $875. The travel day is not a paid service and is reimbursed at cost. The agreement is executed before the event, hours are logged, and $875 plus expenses flows into the transparency report.

Traps

  • Backdating a contract after the invoice arrives.
  • Paying a flat retainer with no deliverables and no time record.
  • Rounding up to the number the HCP asked for in order to protect the relationship.
  • Letting a third-party planner sign the HCP agreement or hold the payment.

Educational Grants, CME/CE and Independent Medical Education

This domain tests whether you can protect the independence of accredited education while still accepting industry money.

Keep the money streams apart

Commercial support (a grant for education), sponsorship (commercial recognition, exhibit space, branding) and charitable donations are separate instruments with separate contracts, budgets and reporting. A grant is not a fee for access to learners or faculty.

ACCME Standards for Integrity and Independence

Accredited continuing education in the US is governed by the ACCME Standards for Integrity and Independence, effective 1 January 2022. The load-bearing requirements:

  • The accredited provider controls content, faculty, venue and materials.
  • Relevant financial relationships of everyone in a position to control content are identified across the prior 24 months, mitigated, and disclosed to learners.
  • Commercial support requires a signed written agreement, disclosure to learners, and payment to the provider - never to individual faculty.
  • Content must be valid, balanced and based on the best available evidence; promotion has no place inside accredited education.
  • An ineligible company - one whose primary business is producing, marketing, selling or distributing healthcare products used by or on patients - cannot itself be the accredited provider.

Separating promotion from education

Promotional satellite symposia are permitted only when unaccredited, separately contracted, clearly labelled as promotional, held outside accredited session time and not in the same room.

Worked example

A manufacturer offers $50,000 for a symposium and asks to approve the agenda and insert a ten-minute product video. Accepting would transfer content control to a commercial interest, and the video is advertising inside accredited education. The compliant route is to decline the conditions and accept an unrestricted grant, or to convert the package into an unaccredited promotional symposium with its own contract, room and signage.

Traps

  • Calling an exhibit or sponsorship package a grant.
  • Letting the supporter nominate or veto speakers.
  • Assuming "unrestricted" means undocumented - a grant still needs a signed letter of agreement and reconciliation.
  • Believing a grant to a provider where you had no say over faculty is automatically an indirect payment to each speaker; usually it is not, but direct speaker fees are.

Meeting Logistics: Venues, Meals, Travel, Exhibits and Sponsorships

This domain tests the operational decisions that turn a compliant policy into a compliant meeting: where you meet, what people eat, how they travel, and what happens in the exhibit hall.

Venue

The venue must suit the educational purpose and be conducive to information exchange. Resorts, golf and spa properties, casinos and other leisure-led venues attract scrutiny under industry codes and company policy, and some jurisdictions restrict them. The test applies to the evening event as much as to the plenary room.

Meals and hospitality

  • Modest, judged by local standard and defined by a per-person cap in policy.
  • Tied to a substantive discussion, never to entertainment.
  • Attendees limited to those with a professional interest; spouses not funded unless they are HCPs with an independent interest.
  • Itemised receipts, no alcohol where policy excludes it, no takeaway meals for absent colleagues and no dine-and-dash.

Travel

Economy class, booked through the approved channel, actual and reasonable cost, no extended stays or side trips, ground transport documented. Reimbursement goes to the traveller, not to a convenient third party.

Exhibits and sponsorships

Booths belong in a separate hall, never inside the accredited education space. Booth promotions must satisfy the gift rules, so prize draws for items of value are high risk. Sponsorship deliverables - signage, booth, session branding, attendee-list access - are commercial benefits, priced and contracted as such, and must never buy influence over content. Attendee-list access and badge scanning are data-protection events, not free marketing.

Worked example

A three-day congress is proposed at a golf resort with a golf afternoon and a spouses' dinner at $250 per head. The golf is recreation and cannot be offered to HCPs; the spouses are not eligible attendees and their cost cannot be bundled into a physician's reported meal; $250 exceeds most modest-meal caps. The compliant redesign keeps the business session at the congress hotel, replaces golf with a working group, and caps the dinner.

Traps

  • Assuming only the meeting room is regulated, not the evening programme.
  • Reporting one blended meal figure that hides alcohol or guest covers.
  • Forgetting that planners, destination management companies and congress organisers inherit your obligations through their contracts.

Data Capture, Reporting Operations, Privacy and International Meetings

This domain tests the back office: how value given at a meeting becomes a defensible record, and how personal data collected before, during and after the meeting is handled.

Capture and reconcile

Spend is captured at the source, when it happens, with date, recipient identity and licence or NPI number, amount, nature of payment and related product. Expense systems should hard-code categories that map to the reporting taxonomy so nothing is re-keyed from memory. Reconcile the general ledger against the transparency system monthly and pull planner, destination management company and congress spend into the same consolidation; the manufacturer remains responsible for what its vendors do.

Records and review

Source documentation supporting reported payments should be retained for at least five years under CMS expectations. Keep the audit trail - agreements, agendas, receipts, sign-in sheets - and use the pre-publication review window to correct recipient-level errors rather than chasing them after publication.

Privacy

Badge scanning, attendee-list sharing, event apps and event photography all process personal data. Under GDPR and similar laws you need a lawful basis and a clear notice, purpose limitation, data minimisation and a retention schedule; marketing follow-up needs its own consent. In Europe, individual disclosure of a transfer of value requires the HCP's consent, otherwise it is aggregated.

Safety information

Adverse events and product complaints raised at a booth or in a session must reach pharmacovigilance and quality within company timelines - commonly 24 hours for a suspected adverse event. Staff need training to recognise them and must not answer with promotional messaging.

Worked example

A sponsor scans badges at a German congress and plans to email every scanned physician. The scan itself needs a lawful basis and an on-the-spot privacy notice; email marketing needs separate consent under ePrivacy rules; any meal provided at the booth still has to be valued and either disclosed individually with consent or aggregated.

Traps

  • Relying on the congress organiser's privacy notice to cover the sponsor's own processing.
  • Treating a scanned attendee list as an opt-in marketing database.
  • Losing the audit trail when a vendor or reporting system changes mid-year.