Company: USPH
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001140361-25-006750
Chunk: 29

Company: U S PHYSICAL THERAPY INC /NV
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1
Chunk 29
---
 verify our compliance with these
              programs and applicable laws and regulations. Managed care payors may also reserve the right to conduct audits. An adverse inspection, review, audit or investigation could result in:

    •

                    refunding amounts we have been paid pursuant to the Medicare or Medicaid programs or from managed care payors;

    •

                    state or federal agencies imposing fines, penalties and other sanctions on us;

    •

                    temporary suspension of payment for new patients to the facility or agency;

    •

                    decertification or exclusion from participation in the Medicare or Medicaid programs or one or more managed care payor networks;

    •

                    the imposition of a new Corporate Integrity Agreement;

    •

                    damage to our reputation;

    •

                    the revocation of a facility’s or agency’s license; and

    •

                    loss of certain rights under, or termination of, our contracts with managed care payors.

If adverse inspections, reviews, audits or investigations occur and any of the results noted above occur, it could have a material adverse effect on our business and operating results.

We may be adversely affected by a security breach, such as a cyber-attack, which may cause a violation of HIPAA or HITECH and subject us to potential legal
              and reputational harm.

In the normal course of business, our information technology systems hold sensitive patient information including patient demographic data and other protected health information, which is
              subject to HIPAA and HITECH. We also contract with third-party vendors to maintain and store our patients’ individually identifiable health information. Numerous state and federal laws and regulations address privacy and information security
              concerns resulting from our access to our patient’s and employee’s personal information.

Our information technology systems and those of our vendors that process, maintain, and transmit such data are subject to computer viruses, cyber-attacks, or breaches. We adhere to policies and
              procedures designed to ensure compliance with HIPAA and other privacy and information security laws and require our third-party vendors to do so as well. If, however, we or our third-party vendors experience a breach, loss, or other
              compromise of unsecured protected health information or other personal information, such an event could result in significant civil and criminal penalties, lawsuits, reputational harm, and increased costs to us, any of which could have a
              material adverse effect on our financial condition and results of operations.

Furthermore, our information technology systems, and those of our third-party vendors, are maintained with safeguards protecting