Criminal law in healthcare refers to the body of federal and state laws that make certain actions by healthcare professionals and organizations punishable by fines, imprisonment, or both. Unlike civil malpractice cases, where a patient sues for compensation after a medical error, criminal cases are brought by the government and require proof that someone acted with intent to defraud, harm, or willfully disregard patient safety. The stakes are fundamentally different: instead of paying damages, a convicted healthcare worker can lose their freedom, their license, and their ability to ever participate in federal health programs again.
How Criminal Law Differs From Malpractice
Most legal disputes in healthcare are civil matters. A surgeon nicks an artery, a pharmacist fills the wrong prescription, a diagnosis gets missed. These errors can cause serious harm, but they’re typically handled through malpractice lawsuits where the patient (or their family) seeks financial compensation. The standard of proof is “preponderance of the evidence,” meaning the jury just needs to believe the claim is more likely true than not.
Criminal law sets a much higher bar. The government must prove guilt “beyond a reasonable doubt,” and in most cases must show that the person acted intentionally, knowingly, or with reckless disregard for the consequences. A simple medical mistake, even one with devastating outcomes, rarely crosses into criminal territory. The line gets crossed when there’s fraud, deliberate harm, gross recklessness, or willful violation of laws designed to protect patients and public funds.
Healthcare Fraud and False Claims
Fraud is the most common reason healthcare workers and organizations face criminal prosecution. The federal False Claims Act imposes civil liability on anyone who submits a fraudulent claim to a government health program like Medicare or Medicaid, but separate criminal statutes allow the government to pursue prison time for the same conduct. The distinction often comes down to intent: did someone knowingly bill for services they didn’t provide, or was it a coding error?
The scale of healthcare fraud enforcement is enormous. In 2025, the Department of Justice announced criminal charges against 324 defendants, including 96 doctors, nurse practitioners, pharmacists, and other licensed professionals, across 50 federal districts. The schemes involved over $14.6 billion in intended losses. The government seized more than $245 million in cash, luxury vehicles, cryptocurrency, and other assets during the operation. The Centers for Medicare and Medicaid Services also blocked over $4 billion in fraudulent claims and revoked billing privileges for 205 providers.
Common fraud schemes include billing for procedures never performed, upcoding (billing for a more expensive service than what was actually provided), prescribing medically unnecessary treatments to generate revenue, and paying kickbacks for patient referrals. The federal Anti-Kickback Statute makes it a crime to offer, pay, solicit, or receive anything of value in exchange for referrals involving federal healthcare programs. Penalties include fines, jail time, and permanent exclusion from Medicare and Medicaid.
HIPAA Violations
Most breaches of patient privacy under HIPAA (the Health Insurance Portability and Accountability Act) result in civil fines, not criminal charges. But the law does have a criminal tier for people who knowingly obtain or disclose protected health information in violation of the rules.
The penalties escalate based on intent. A basic violation carries up to a $50,000 fine and one year in prison. If the violation was committed under false pretenses, that jumps to a $100,000 fine and up to five years. The harshest penalties, up to $250,000 and ten years in prison, are reserved for people who steal or misuse health information for commercial advantage, personal gain, or to cause malicious harm. An example might be a hospital employee selling celebrity medical records or using patient data for identity theft.
Drug Diversion
Healthcare workers have unique access to powerful controlled substances, and stealing or misusing those drugs is a federal crime. Drug diversion happens when a nurse, pharmacist, anesthesiologist, or other provider takes medications intended for patients for their own use or to sell. The charge is typically unlawfully obtaining controlled substances by fraud, deception, or subterfuge.
In one recent case, a nurse at a Boston-area hospital pleaded guilty to drug diversion and was sentenced to three years of probation and 100 hours of community service. Sentences vary widely depending on the quantity of drugs involved, whether patients were harmed as a result, and whether the diversion was driven by personal addiction or profit. Beyond criminal penalties, diversion almost always results in loss of professional licensure.
Patient Abuse and Neglect
Criminal charges for patient abuse or neglect typically arise in settings where vulnerable people depend on their caregivers: nursing homes, psychiatric facilities, hospitals, and home health agencies. Federal and state laws define neglect as depriving a dependent adult of the minimum food, shelter, clothing, supervision, or medical care necessary to maintain their life or health through willful or negligent acts.
These cases can involve physical violence, sexual abuse, financial exploitation, or simply failing to provide basic care when you have a legal duty to do so. Exploitation includes the intentional or negligent failure to use a vulnerable adult’s income and assets for the necessities required for their support. Prosecution requires showing that the caretaker’s actions (or inaction) were deliberate or so reckless that they crossed beyond ordinary negligence.
Criminal Negligence and Medical Errors
Criminal prosecution of healthcare workers for medical errors is rare, but it does happen when the conduct is so far below acceptable standards that it rises to gross negligence. The most prominent recent case involved RaDonda Vaught, a nurse at Vanderbilt University Medical Center who made a fatal drug error in 2017. She was convicted of gross neglect and negligent homicide and sentenced to three years of supervised probation. She also lost her nursing license.
The case sent shockwaves through the healthcare community because it blurred the line between a tragic mistake and a criminal act. Generally, criminal law is reluctant to punish physicians and nurses for errors made during good-faith treatment. Even in cases where a patient has refused care and a provider proceeds anyway, criminal battery charges are unlikely if the treatment was genuinely intended to help. The law recognizes a distinction between harmful intent and a well-meaning professional who made a terrible error in judgment. But “well-meaning” has limits. When a provider bypasses multiple safety systems or acts with reckless disregard for protocols, prosecutors may decide a criminal case is warranted.
Practicing Without a License
Holding yourself out as a medical professional without proper authorization is a crime in every state. In Massachusetts, for example, practicing medicine without a license, practicing under a false name, or impersonating another practitioner is punishable by a fine of $100 to $1,000, imprisonment for one month to one year, or both. The law also strips the offender of any right to collect payment for services rendered illegally.
These cases range from people with no medical training at all who pose as doctors, to licensed professionals who continue practicing after their license has been suspended or revoked, to providers who practice outside the scope of their credentials.
Medical Battery and Lack of Consent
Battery in healthcare occurs when a provider performs a procedure without the patient’s consent. The key legal element is that the touching was unauthorized, not necessarily that it was intended to cause harm. This can be the basis for both a civil lawsuit and criminal charges, though criminal prosecution is uncommon when the provider’s goal was genuinely therapeutic.
Criminal battery charges are most likely when a provider performs a procedure the patient explicitly refused, operates on the wrong body part intentionally, or conducts procedures for purposes unrelated to the patient’s care. Courts have consistently held that the criminal justice system is reluctant to punish providers acting in good faith, reserving prosecution for cases where harmful or exploitative intent is clear.
Consequences Beyond Prison
A criminal conviction in healthcare triggers consequences that extend far beyond the courtroom. The Department of Health and Human Services Office of Inspector General maintains an exclusion list that bars convicted individuals from participating in Medicare, Medicaid, and all other federal health programs. The mandatory minimum exclusion periods are severe: five years for convictions related to program fraud, patient abuse, healthcare fraud felonies, or controlled substance felonies. A second offense doubles the exclusion to ten years. A third conviction results in permanent exclusion.
For most healthcare professionals, exclusion from federal programs effectively ends their career. Hospitals, clinics, and pharmacies that bill Medicare or Medicaid cannot employ excluded individuals in any capacity that touches federal funds. Combined with the near-certain loss of professional licensure, a criminal conviction in healthcare doesn’t just carry a sentence. It carries a career.