38 We have adopted a code of business conduct and ethics that applies to all our employees, including management, and our directors. However, it is not always possible to identify and deter misconduct by employees and third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of significant fines or other sanctions. If we fail to comply with healthcare laws, we could face substantial penalties and our business, operations and financial conditions could be adversely affected. Our current and future arrangements with healthcare providers, third-party payors, customers, and others may expose us to broadly applicable fraud and abuse and other healthcare laws and regulations, which may constrain the business or financial arrangements and relationships through which we research, as well as, sell, market and distribute any products for which we obtain marketing approval. The laws that may impact our operations include: • the federal Anti-Kickback Statute, which prohibits, among other things, persons and entities from knowingly and willfully soliciting, receiving, offering or paying any remuneration (including any kickback, bribe or rebate), directly or indirectly, overtly or covertly, in cash or in kind, to induce, or in return for, either the referral of an individual, or the purchase, lease, order or recommendation of any good, facility, item or service for which payment may be made, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. In addition, the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the False Claims Act; • federal civil and criminal false claims laws, including the False Claims Act, which can be enforced by private citizens on behalf of the government through civil whistleblower or qui tam actions, and civil monetary penalty laws, which impose criminal and civil penalties against individuals or entities from knowingly presenting, or causing to be presented, claims for payment or approval from Medicare, Medicaid or other third-party payors that are false or fraudulent or knowingly making a false statement to improperly avoid, decrease or conceal an obligation to pay money to the federal government; • the federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, which created new federal criminal statutes that prohibit knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private) and knowingly and willfully falsifying, concealing or covering up by any trick or device a material fact or making any materially false statements in connection with the delivery of, or payment for, healthcare benefits, items or services relating to healthcare matters. Similar to the federal Anti- Kickback Statute, a person or entity does not need to have actual knowledge of these statutes or specific intent to violate them in order to have committed a violation; • HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or HITECH, and their respective implementing regulations, which impose requirements on certain covered healthcare providers, health plans and healthcare clearinghouses and their respective business associates that perform services for them that involve the use, or disclosure of, individually identifiable health information as well as their covered subcontractors, relating to the privacy, security and transmission of individually identifiable health information; • the federal Physician Payments Sunshine Act, created under the ACA, and its implementing regulations, which require manufacturers of drugs, devices, biologicals and medical supplies for which payment is available under Medicare, Medicaid or the Children’s Health Insurance Program to report annually to the CMS under the Open Payments Program, information related to payments or other transfers of value made to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), other healthcare professionals (such as physician assistant and nurse practitioners), and teaching hospitals, as well as ownership and investment interests held by physicians and their immediate family members; • federal consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm consumers; and