The Physician Payments Sunshine Act is the federal law behind Open Payments, the public database the Centers for Medicare & Medicaid Services (CMS) uses to publish, once a year, the payments and other transfers of value that drug, device, and biologic manufacturers make to physicians and teaching hospitals. For research administrators, the part that matters most is the database’s “research payments” category: money paid under a written agreement or research protocol—often to the institution rather than the individual—which sits alongside, but is legally and operationally distinct from, the financial conflict-of-interest (FCOI) disclosures an institution collects from its own investigators. This guide covers what the statute actually requires, who has to report what, how the annual publication cycle works, and how it fits alongside institutional COI disclosure.
What the Sunshine Act actually is
The Physician Payments Sunshine Act is Section 6002 of the 2010 Patient Protection and Affordable Care Act (ACA), codified at 42 U.S.C. § 1320a-7h. It was introduced by Senators Chuck Grassley and Herb Kohl and directs CMS to collect and publicly report financial relationships between the medical products industry and physicians and teaching hospitals. CMS finalized the implementing rule in February 2013, set August 1, 2013 as the start date for data capture, and set March 31, 2014 as the first submission deadline (covering the partial 2013 data year). CMS operates the program under the name Open Payments; the searchable public database lives at openpaymentsdata.cms.gov.
The statute’s underlying premise is straightforward: financial relationships between industry and the clinicians and institutions that prescribe, use, or study their products can influence clinical and research decisions, and publishing those relationships gives patients, journal editors, funders, and institutions a way to check disclosures against an independent record rather than relying solely on self-report.
Who has to report: applicable manufacturers and GPOs
The reporting obligation falls on industry, not on physicians or institutions. Two categories of entity must submit data to CMS each year:
- Applicable manufacturers — companies that manufacture at least one drug, device, biological, or medical supply covered by Medicare, Medicaid, or CHIP (or that are majority-owned by an entity that does).
- Applicable group purchasing organizations (GPOs) — organizations that purchase, arrange for, or negotiate the purchase of a covered drug, device, biological, or medical supply on behalf of members.
A limited-reporting exception applies to manufacturers whose revenue from covered products is under a set share of total gross revenue, and there is no obligation to report ownership interests in publicly traded companies or widely held mutual funds. Product samples, standard-of-care educational materials for patients, and short-term loans of clinical devices are also excluded from reporting.
Who gets reported on: covered recipients
CMS calls the recipients of these payments “covered recipients.” The category originally covered physicians (MDs, DOs, dentists, podiatrists, optometrists, and chiropractors) and teaching hospitals. A 2020 CMS final rule expanded the definition, effective for the 2021 data year onward, to include physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists (including anesthesiologist assistants), and certified nurse midwives. Residents and most non-teaching hospitals remain outside the reporting requirement.
What counts as a reportable payment: the three data categories
Open Payments organizes disclosures into three categories, and the distinction matters for how a research office should think about the data:
- General payments — consulting fees, speaking fees, meals, travel, gifts, honoraria, and royalties not tied to a specific research agreement.
- Research payments — payments made under a written agreement or research protocol, including payments to principal investigators and sponsored-research payments made to the institution rather than the individual. This is the category most relevant to clinical trial and sponsored-research administration, since an institution can appear as the recipient of record even when no individual investigator receives a personal payment.
- Ownership and investment interests — equity or other ownership stakes held by a physician or immediate family member in an applicable manufacturer or GPO.
Reportable payments below a set per-transfer amount are excluded unless they push the cumulative total to a given recipient over an annual aggregate threshold, at which point the manufacturer must report every payment to that recipient for the year, including ones under the per-transfer minimum. Both thresholds are adjusted annually for inflation, so an administrator relying on an exact dollar figure should confirm the current year’s amount on CMS’s Open Payments site rather than citing an older figure from memory.
The annual data cycle: collection, review and dispute, publication
Open Payments runs on a fixed annual calendar:
- Collection — reporting entities track payments throughout the calendar year.
- Submission — entities submit the prior year’s data to CMS between February 1 and March 31.
- Pre-publication review and dispute — covered recipients (or an institutional delegate acting on their behalf) can register in the CMS system and review the records attributed to them, typically over a roughly 45-day window running from early April to mid-May. A recipient who finds an inaccurate record can flag it as disputed directly with the reporting entity.
- Correction — reporting entities have a further window, running to the end of May, to resolve disputed records before the data locks for publication. Disputes that remain unresolved still publish, but are marked as disputed in the public database.
- Publication — CMS publishes the finalized annual dataset by June 30.
Because the review-and-dispute window is time-limited and recipient-initiated, an institution that wants to catch inaccurate attributions before they go public—a payment misattributed to the wrong investigator, or a sponsored-research payment mistakenly reported against an individual instead of the institution—needs a process for making sure covered recipients actually check their record during that window, not after.
How this differs from institutional FCOI and COI disclosure
Open Payments is frequently confused with an institution’s own conflict-of-interest disclosure process, but the two are structurally different systems that happen to cover overlapping subject matter:
- Who populates the record. Open Payments is populated by industry (the manufacturer or GPO self-reports). Institutional conflict-of-interest (COI) disclosure, including the financial conflict-of-interest (FCOI) process required for PHS-funded research under 42 CFR Part 50, Subpart F, is populated by investigator self-report.
- What triggers it. Open Payments captures essentially any qualifying industry payment above the reporting threshold, regardless of whether that payment relates to a specific federally funded project. Institutional FCOI review is triggered by an investigator’s significant financial interest above a regulatory or institutional threshold, evaluated specifically against the research the investigator proposes to conduct.
- What happens with the information. Open Payments simply publishes the data for anyone to search. Institutional COI review evaluates disclosed interests, decides whether a conflict exists, and where one does, implements and monitors a management plan before funds are expended.
In practice, the two systems function as a cross-check on each other. A compliance or COI office can query Open Payments for a given investigator to see whether industry-reported payments line up with what that investigator disclosed on an institutional COI form—a discrepancy doesn’t automatically mean a disclosure failure (timing, payment categorization, and institution-vs-individual attribution differences are all common, benign explanations), but it is a legitimate starting point for a compliance follow-up. For the mechanics of building and running that institutional-side disclosure form, see CASRAI’s guides on conflict-of-interest disclosure form structure and the different types of conflict of interest an institution’s policy needs to capture.
Why it matters for research administration specifically
Open Payments was designed primarily for patient- and public-facing transparency, but it has direct operational relevance for research offices:
- Sponsored research payments are visible. Because the research-payment category captures payments made under a written research agreement or protocol, industry-funded clinical trials and investigator-initiated studies—including funding structured through pharmaceutical company research grants—generate public Open Payments records even when the payment flows entirely through the institution’s sponsored-programs office.
- It’s a due-diligence source, not a substitute for institutional review. Journal editors, other institutions, and journalists routinely cross-reference an investigator’s Open Payments history when evaluating disclosed conflicts on a manuscript or grant application. An institution’s COI process still has to do the substantive review; Open Payments is one input an editor or reviewer might independently check.
- Billing-compliance overlap. Undisclosed financial relationships that intersect with clinical trial billing can raise False Claims Act exposure distinct from Open Payments itself; see CASRAI’s guide on False Claims Act liability in clinical trial billing for that adjacent risk area.
- It doesn’t replace FCOI training or disclosure obligations. Meeting Open Payments transparency requirements (which fall on industry) has no bearing on an institution’s own obligation to run FCOI disclosure and management under 42 CFR Part 50 Subpart F, or on investigator-level disclosure obligations to journals under ICMJE-style forms.
Enforcement and penalties
Failure to report falls on the manufacturer or GPO, not on the covered recipient. Under the statute’s civil monetary penalty structure, CMS can impose penalties in the range of $1,000 to $10,000 per unreported payment for a non-knowing failure to report, up to an annual aggregate cap, and $10,000 to $100,000 per unreported payment for a knowing failure to report, up to a higher annual aggregate cap. These base figures are adjusted periodically for inflation under the Federal Civil Penalties Inflation Adjustment Act, so the exact current-year cap should be confirmed against CMS’s own published penalty schedule rather than an older secondary source.
How to look up or correct a record
The public database at openpaymentsdata.cms.gov is searchable by recipient name, NPI, specialty, state, and reporting entity, and does not require registration to search. Covered recipients who want to review records attributed to them before annual publication—or dispute one—need to register directly in the CMS Open Payments system during the pre-publication review-and-dispute window described above; disputes are resolved between the recipient and the reporting entity, with CMS acting as the platform rather than an adjudicator. Research offices that support faculty with this process typically build a reminder into the annual compliance calendar timed to the April–May review window, since it closes on a fixed schedule regardless of whether a given investigator has logged in to check.
Frequently asked questions
Is Open Payments the same thing as an institutional conflict-of-interest disclosure?
No. Open Payments is a federally mandated public database populated by industry self-reporting of payments to physicians and teaching hospitals. Institutional COI and FCOI disclosure is a separate process, populated by investigator self-report and reviewed by the institution, that determines whether a disclosed interest constitutes a conflict requiring management. They cover overlapping subject matter but are legally distinct obligations run by different parties.
Does a sponsored research grant paid to my institution show up in Open Payments under my name?
Research payments can be attributed to the institution as the recipient of record rather than to an individual investigator, depending on how the funding agreement is structured, but the associated principal investigator is also typically identified in the record. The exact attribution depends on the underlying research agreement, which is one reason discrepancies between an investigator’s institutional COI disclosure and their Open Payments record are common and not automatically evidence of a disclosure problem.
Who is not covered by Open Payments reporting?
Residents, and health care professionals outside the specific covered-recipient categories (physicians, teaching hospitals, and, since the 2021 data year, physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists, and certified nurse midwives), are not covered recipients under the program, even if they receive industry payments.
How often is the Open Payments database updated?
CMS publishes a new annual dataset by June 30 each year, covering payments from the prior calendar year, following the collection, submission, and review-and-dispute cycle described above.
What should I do if I find an inaccurate record about myself in Open Payments?
Register in the CMS Open Payments system during the annual pre-publication review-and-dispute window and dispute the record directly; resolution happens between you and the reporting manufacturer or GPO. If the window has already closed for a given data year, the record may still be corrected in a later publication cycle, but it will remain visible as originally reported, and disputed, until then.
