Company: CI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001739940-25-000009
Chunk: 25

Company: Cigna Group
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 25
---
 OCR's request. As participation in this audit is voluntary, the information provided will not result in any HIPAA enforcement action or civil monetary penalty; however, any serious compliance issues could open up subsequent compliance reviews that could include a range of remedies from OCR.

Noncompliance or findings of noncompliance with applicable laws, regulations or requirements, or the occurrence of any privacy or security breach involving the misappropriation, loss or other unauthorized disclosure of PII, whether by us or by one of our third-party service providers, could materially adversely affect our business and reputation, including our results of operations, financial position and cash flows.

Effective prevention, detection and control systems are critical to maintain regulatory compliance and prevent fraud; failure of these systems could adversely affect us.

Federal and state governments have made investigating and prosecuting health care and other insurance fraud and abuse a priority. Fraud and abuse prohibitions encompass a wide range of activities including kickbacks for referral of customers, billing for unnecessary medical services, improper marketing and violations of patient privacy rights. Some of our businesses are also subject to federal and state laws and regulations that may impact our relationships with health care providers and customers, including laws on self-referrals, beneficiary inducements, false claims, fee-splitting, telemedicine, corporate practice of medicine, dispensing, packaging, fulfillment and distribution of controlled substances, other pharmaceutical products and medical devices, medical malpractice, consumer protection, product liability, narrow networks, provider tiering programs, provider contracts, overpayments, reimbursement of out-of-network claims and licensure. The regulations and contractual requirements applicable to us are complex and subject to change and may affect our ability to market or provide our products or services. In addition, ongoing vigorous law enforcement, a highly technical regulatory scheme, and the Dodd-Frank Act and related regulations enhance regulators' enforcement powers and whistleblower incentives and protections. Our compliance efforts in this area will continue to require significant resources. Failure of our prevention, detection or control systems related to regulatory compliance, or the failure of employees to comply with our internal policies, including data systems security or unethical conduct by managers and employees, could adversely affect our reputation and also expose us to litigation and other proceedings, fines and penalties.

In addition, provider or customer fraud that is not prevented or detected could impact our medical costs or those of our self-insured clients. Further, during an economic downturn, we may experience increased fraudulent claims volume that may lead to additional costs due to an increase in disputed claims and litigation.

Economic Risks

Economic and market conditions affect