Photo of Conor Duffy

Conor Duffy is a member of Robinson+Cole's Health Law Group and the firm's Data Privacy + Security Team. Mr. Duffy advises hospitals, physician groups, accountable care organizations, community providers, post-acute care providers, and other health care entities on general corporate matters and health care issues. He provides legal counsel on a full range of transactional and regulatory health law issues, including contracting, licensure, mergers and acquisitions, the False Claims Act, the Stark Law, Medicare and Medicaid fraud and abuse laws and regulations, HIPAA compliance, state breach notification requirements, and other health care regulatory matters. Read his full rc.com bio here.

*This post was co-authored by Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

In November 2024, the Department of Health and Human Services Office of Inspector General (OIG) published the results of its audit assessing hospital compliance with the federal Hospital Price Transparency Rule (HPT Rule). OIG determined that 37

As part of its 2025 Physician Fee Schedule Final Rule (PFS Rule), the Centers for Medicare & Medicaid Services (CMS) finalized two crucial updates to federal Medicare overpayments regulations (sometimes referred to as the “60-Day Rule”) that (1) align the standard for when an overpayment is identified with the applicable standard under the

In a highly anticipated decision on an issue facing courts across the country, the Massachusetts Supreme Judicial Court held in late October that Massachusetts hospitals’ use of online tracking technologies that collect and transmit browsing activities of website visitors does not violate the Massachusetts Wiretap Law. 

The Court determined that online interactions between visitors and

*This post was co-authored by Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On November 15, 2024, the Drug Enforcement Administration (DEA) and the Department of Health & Human Services (HHS) jointly announced an extension of current COVID-era tele-prescribing flexibilities for another year – through December 31, 2025 – via

*This post was co-authored by Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On September 18, 2024, the Department of Justice (DOJ) announced a settlement with Dunes Surgical Hospital and United Surgical Partners International, Inc. (USPI), an entity holding a partial ownership interest in Dunes, in connection with alleged violations

On March 12, 2024, the U.S. Court of Appeals for the Second Circuit issued an important decision interpreting the “willfulness” standard necessary to find a violation of the federal Anti-Kickback Statute (AKS). The decision provides important guidance for health care and pharmaceutical organizations on what constitutes a knowing violation of the AKS and for counsel

On February 8, 2024, the U.S. Department of Health and Human Services (HHS) issued a final rule (Final Rule) updating federal “Part 2” regulations to more closely align the requirements applicable to substance use disorder (SUD) treatment records with the HIPAA privacy rule, and to make certain other changes. The regulations at 42

Below is an excerpt of an article, co-authored with Antitrust and Trade Regulation Team lawyer Jen Driscoll and Internal Investigations and Corporate Compliance chair Ed Heath, published in the American Health Law Association’s Health Law Weekly newsletter on January 19, 2024.

Mergers and acquisitions in health care markets are viewed with heightened scrutiny by

On November 15, 2023, the U.S Department of Justice (DOJ) announced a $45.6 million consent judgment (Settlement) with six skilled nursing facilities (SNFs), as well as the owner of the SNFs and its management company which managed the SNFs, to resolve alleged violations of the False Claims Act (FCA) tied to medical director arrangements violating the Anti-Kickback Statute (AKS). The Settlement is notable for its inclusion of the owner and the management company in addition to the SNFs, which indicates DOJ’s interest in scrutinizing the actions of individuals and management entities in connection with problematic arrangements under federal fraud and abuse laws.Continue Reading DOJ Settlement Targets Owner and Management Company in Addition to Post-Acute Care Facilities

On October 10, 2023, the federal Drug Enforcement Administration (DEA) issued another extension (Second Temporary Rule) of its pandemic-era telehealth flexibilities “in light of the need to further evaluate the best course of action” with respect to the prescribing of controlled substances via telemedicine. DEA is issuing a limited extension in order to give itself more time to finalize new standards governing tele-prescribing of controlled substances.Continue Reading DEA Further Extends COVID-19 Telemedicine Prescribing Flexibilities through December 31, 2024