Which Regulatory Envelope Can Actually Carry Outcome-Tied Cash to a Patient Above $20

Legal-adjacent research, not legal advice. Dollar figures and prohibitions below are sourced to primary text (US Code, CFR, Federal Register, CMS model documents, state guidance) unless marked secondary. Anything RDCO acts on needs healthcare regulatory counsel to confirm.

The question

"Map every regulatory envelope that could carry outcome-tied CASH to patients above the $20 BIP cap (Medicare Advantage rewards-and-incentives rules, HIPAA/ACA employer wellness incentive limits, commercial contracts, and an Innovation Center 1115A waiver) and identify which has live precedent at that magnitude."

Context: [[2026-09-02-cms-access-model-oap-calibration]] closed the ACCESS Model as a funding source for the patient-payout leg of the patient-data-sovereignty bet. With that hatch shut, the leg rests on an envelope the vault had named but never mapped.

What we already know (from the vault)

• The $20 cap is the ACO Beneficiary Incentive Program, established in [[2026-05-19-aledade-patient-incentive-integration]] as "$20 per qualifying primary-care E&M visit, CPI-adjusted annually," along with the three escape hatches (commercial/MA contracts, the ACCESS OAP framework, an Innovation Center waiver).
• Escape hatch (b) is closed. [[2026-09-02-cms-access-model-oap-calibration]]: ACCESS is a capped fee schedule, max CKM Initial allowed amount $420/yr, Medicare portion $336, half withheld to reconciliation, two strictly downward adjustments, no participation in avoided spend. "A three-way savings split has nothing to split."
• Vitality's US rewards sit in two envelopes the bet architecture does not assume. [[2026-09-02-discovery-vitality-us-health-vbc-expansion]] flagged as an open follow-up that employer-side rewards sit under HIPAA/ACA wellness limits and MA-side rewards under CMS rewards-and-incentives rules, "neither of which is the AKS Promotes-Access-to-Care path our bet architecture assumes." No cite, no dollar limit.
• The bet architecture asserts cash can ride the Promotes Access to Care exception. [[2026-05-10-data-sovereignty-outcome-procurement-bet-architecture]] calls it "the cleanest pathway for the patient-incentive piece"; [[2026-05-11-patient-data-sovereignty-competitor-scan]] assumes the savings pool is "split with patients in cash (or cash-equivalent), structured to clear AKS / Beneficiary Inducement CMP under the Promotes-Access-to-Care exception." Primary text refutes this.
• The vault carried no statutory or CFR citation for any of it. A vault-wide search for 1128A, 1320a-7, 42 CFR, 422.134, or 1115A returned two hits across the whole chain. Every cite below is new to the vault.

What the web says

The envelope map

Two additional constraints not in the original four.

• 42 CFR 422.134(c)(2)(ii) bars MA from outcome-tying at all, not merely from paying cash: an MA organization "must not design a program based on the achievement of a health status measurement." An outcome-tied reward is exactly that. This is a harder no than [[2026-09-02-discovery-vitality-us-health-vbc-expansion]] assumed.
• State insurance anti-rebating binds insured commercial plans, and it is cash-specific. NAIC Unfair Trade Practices Act Model #880 §4I(1) expressly covers "accident and health insurance." The 2020 value-added exception (§4H(2)(e), adopted by NAIC Executive/Plenary 2020-12-09) covers products and services, and §4H(2)(f) de minimis gifts are explicitly non-cash. No source authorizes open-ended cash to members. Self-funded ERISA plans escape this entirely under the deemer clause, 29 USC 1144(b)(2)(B), FMC Corp. v. Holliday, 498 U.S. 52 (1990). That exemption is the single most important structural fact in this brief.

Live precedent at magnitude, ranked

The ceiling and the practice are two very different numbers, and almost nothing is where the theory says it could be.

Two useful negatives. OIG stated in its 2020 AKS final rule (85 FR 77684, at 77791-92) that "There is no OIG-imposed $75 limitation on contingency management program incentives," which is the clearest agency signal that the nominal-value floor is not a ceiling on structured behavioral programs. And no CMMI §1115A model has ever paid a beneficiary more than $600/year tied to behavior or outcomes, in any form. The behavior-tied §1115A ceiling ever observed is VBID's $600 in cards.

The data-payment envelope is smaller than assumed, and legally open

• OIG's Request for Information, 91 FR 37902 (2026-06-24), RIN 0936-AA16, comments closed 2026-08-24, states: "We have not issued any advisory opinions or guidance relating to other remuneration provided to clinical trial participants, such as transportation costs, childcare costs, or stipends." It asks whether AKS and the CMP are barriers, which frames them as in-scope rather than carved out, and contemplates a new safe harbor at 42 CFR 1001.952 or a new CMP exception at 42 CFR 1003.110. A parallel RFI on direct-to-consumer pharma programs ran 2026-01-29 to 2026-03-30.
• Observed magnitudes are trivial. PicnicHealth pays $50 one-time on qualifying enrollment. Evidation pays roughly $0.001 per point with a ~100 point daily cap, an effective ceiling near $30-40/yr. LunaDNA used an SEC-qualified Reg A Tier 2 shares-for-data structure (qualified 2018-12-01) rather than cash. Nebula shut its consumer service 2025-02-05. IRB per-visit benchmarks run $10-250, with an inter-site mean near $228 (2015 data, stale).
• HIPAA's sale-of-PHI rule cuts a different way than expected. 45 CFR 164.508(a)(4) and the research exception at 164.502(a)(5)(ii)(B)(2)(ii) limit remuneration to "a reasonable, cost-based fee to cover the cost to prepare and transmit the PHI." That constrains what a covered entity may receive, not what a patient may be paid. A patient-direct payment model with valid authorization sits differently, but no agency has said so.

Convergences and contradictions

• The bet architecture's core legal assumption is refuted by primary text. [[2026-05-10-data-sovereignty-outcome-procurement-bet-architecture]] names Promotes Access to Care as "the cleanest pathway for the patient-incentive piece." OIG's own final-rule preamble says the opposite in one sentence at 81 FR 88397. The exception is generous on amount and absolute on form. High confidence, read directly.
• A clean structural pattern runs through every federal envelope: capped-and-cash, or uncapped-and-in-kind, never both. BIP permits real cash at $20. The patient-engagement safe harbor permits $500 in-kind. Promotes Access to Care removes the cap and forbids cash. MA R&I removes the cap, forbids cash, and forbids outcome-tying. Only §1115A breaks the pattern, by waiving the statutes rather than working inside them, and CMS exercised that break exactly once (VBID cash rebates, CY2021-22) before withdrawing it.
• Contradiction with the Vitality read, in RDCO's disfavor. [[2026-09-02-discovery-vitality-us-health-vbc-expansion]] treated Vitality's envelopes as a weakness relative to RDCO's assumed AKS path. Primary text inverts it. The employer-wellness envelope Vitality occupies is the strongest on the board, and the AKS path RDCO assumed carries no cash at all. Vitality also kept buying: it closed its Icario acquisition 2026-09-01, taking US reach to roughly 19M members, one day before that brief was written.
• The ceiling is not the binding constraint anywhere that matters. The lawful employer-wellness ceiling is roughly $8,098/yr for family coverage. Observed practice averages $600-716. That is an 11x gap, and the trend is flat to down. No named private employer was found paying $1,000+/yr in cash for a measured biometric outcome. Nearly every four-figure employer number in the record is a tobacco surcharge, a penalty rather than a reward, and those drew 50+ class actions in 2025.

Synthesis for RDCO

Build against self-funded employer plans under 26 CFR 54.9802-1(f). It is the only envelope that clears cash at four figures, and the only one where the constraint RDCO faces is commercial rather than legal. Three facts stack: the rule caps reward size and is silent on form, so cash is permitted; the AKS and the Beneficiary Inducements CMP do not reach non-federal dollars, which OIG restated in June; and the ERISA deemer clause exempts self-funded plans from the state anti-rebating law that would otherwise block cash from an insurer. Applied to KFF's 2025 average family premium of $26,993, the lawful headroom is roughly $8,098/yr per covered family, against $20 per primary-care visit in Medicare. The reg also does the outcome-tying for us: "health-contingent, outcome-based" is a named category with worked examples, where 42 CFR 422.134(c)(2)(ii) affirmatively forbids designing an MA reward on a health-status measurement.

But the magnitude the bet assumes has no live payer-funded precedent anywhere, and that is the finding to sit with. [[2026-05-19-aledade-patient-incentive-integration]] framed the goal as splitting "a multi-thousand-dollar avoided-admission savings pool with the patient." Nothing in the record does that. The only verified four-figure outcome-tied payments to patients are a 2011-2015 federal grant demonstration that ended (MIPCD New Hampshire, $3,097 in debit cards) and a consumer deposit contract where the participant stakes their own money (HealthyWage, up to $10,000). The largest live public-program precedent is Washington's Medicaid contingency-management episode at $1,092 in gift cards. The largest live commercial average is about $700. So the honest position is that RDCO would not be exploiting a known-good envelope at a known-good magnitude. It would be the first payer-funded program to operate at four figures, inside an envelope that clearly permits it but that nobody has pushed.

The corollary the backlog row asked for, stated plainly: RDCO does not hold a legal-structure advantage over Vitality. It holds a deficit. The question was whether the advantage is genuine or untested theory. It is neither, because the theory is affirmatively wrong. The bet assumed a Medicare-side AKS pathway that cannot carry cash, while Vitality has operated inside the strongest envelope since the HumanaVitality era and is still buying into it. Whatever edge RDCO has is the DS leg, patient-as-source-of-truth measurement, and the outcome-tying of the reward. It is not the regulatory container. The container is commodity and Vitality already rents it.

Sequence §1115A behind the commercial build, and treat contingency management as the design template rather than the wellness industry. 42 USC 1315a(d)(1) is real authority that reaches both fraud-and-abuse statutes, and CMS has used it for uncapped cash once. But it withdrew that flexibility over means-tested-benefit spillover, which is a substantive objection RDCO would have to answer, not a procedural one. Meanwhile the Medicaid contingency-management programs are the live, replicable pattern for above-$599 behavior-tied payments: escalating schedules, restricted-card form, per-episode caps, an OIG advisory opinion on file. If RDCO wants a public-program on-ramp, that is the shape to copy, and the $599 ceiling appears to be driven by the IRS 1099-MISC reporting threshold rather than by health policy, which means it is an administrative choice rather than a legal wall.

Why this is in the vault

This resolves the load-bearing legal question left open by [[2026-09-02-cms-access-model-oap-calibration]], namely which envelope funds the patient-payout leg once ACCESS is closed, and it overturns the specific premise in [[2026-05-10-data-sovereignty-outcome-procurement-bet-architecture]] that the Promotes Access to Care exception can carry cash. It also settles the competitive question the backlog row raised against [[2026-09-02-discovery-vitality-us-health-vbc-expansion]]: the assumed regulatory advantage over Vitality does not exist, so the 3-leg rubric in [[2026-05-11-patient-data-sovereignty-competitor-scan]] should stop scoring legal structure as an RDCO moat and start scoring the DS leg.

Open follow-ups

• Washington's $1,092 contingency-management figure comes from a peer-reviewed state-by-state table built from waiver protocols, not from the CMS-approved Washington protocol itself. Read the protocol and confirm. Hawaii's maximum is unpublished in any reachable source.
• No formal instrument reciting "42 CFR 422.134 is waived" was located for VBID. CMS described it as "additional flexibility" under the model. Substantively true, formally unverified, and it matters if RDCO ever cites VBID as precedent for exceeding an MA rule.
• The $599 = IRS 1099-MISC threshold causal claim is inference plus an implementation paper, not a DHCS statement. If it holds, the practical ceiling on Medicaid behavior payments is an administrative choice that a payer willing to issue 1099s could exceed.
• What does state anti-rebating actually do to a fully-insured commercial cash-for-outcomes program, state by state? The NAIC value-added exception is adopted or aligned in roughly half of jurisdictions. New York (Ins. Law §4224(c) with §3239 wellness carve-out) and Florida ($100/insured/yr gift cap) are the two cleanest worked examples. Texas and California need direct reading.
• The EEOC/ADA gap is confirmed but unquantified as risk. The 2016 rules' 30% limit was vacated effective 2019-01-01 (AARP v. EEOC, 267 F. Supp. 3d 14 (D.D.C. 2017), vacatur order 2017-12-20), EEOC removed the incentive provisions at 83 FR 65296, the January 2021 de minimis proposals were withdrawn before Federal Register publication, and no wellness RIN appears in the 2026 Unified Agenda. So there is no number in force and no safe harbor either. What is the actual litigation exposure of a $5,000 outcome-tied cash program that requires a biometric screen?
• Does an outcome-tied cash payment to a patient who is also a research-data contributor get characterized as a wellness reward, a research stipend, or both, and does the answer change when the payer is self-insured? This is the exact seam RDCO's product sits on. It needs counsel, not research.
• Watch for a proposed rule following OIG's clinical-trial-remuneration RFI (91 FR 37902). It is the first agency movement on paying research participants who are federal beneficiaries, and any resulting safe harbor would reset the DS-leg analysis.
• What is the CPI-adjusted 2026 figure for the 42 CFR 1001.952(hh)(5) $500 cap and for the $20 BIP cap? OIG publishes the former annually; the page was not reachable.

Related

• [[2026-09-02-cms-access-model-oap-calibration]]
• [[2026-09-02-discovery-vitality-us-health-vbc-expansion]]
• [[2026-05-19-aledade-patient-incentive-integration]]
• [[2026-05-10-data-sovereignty-outcome-procurement-bet-architecture]]
• [[2026-05-11-patient-data-sovereignty-competitor-scan]]
• [[2026-07-06-lead-eom-py2026-patient-data-sovereignty-competitor-rubric]]
• [[2026-07-06-patient-side-cac-data-sovereignty-care-brand]]
• [[2026-05-23-picnichealth-thumbprint-vbc-trajectory]]

Sources

Vault

• [[2026-09-02-cms-access-model-oap-calibration]]
• [[2026-09-02-discovery-vitality-us-health-vbc-expansion]]
• [[2026-05-19-aledade-patient-incentive-integration]]
• [[2026-05-10-data-sovereignty-outcome-procurement-bet-architecture]]
• [[2026-05-11-patient-data-sovereignty-competitor-scan]]

Primary text read directly

• 42 USC 1395jjj(m), ACO Beneficiary Incentive Program: https://www.law.cornell.edu/uscode/text/42/1395jjj
• 42 CFR 425.304, MSSP beneficiary incentives: https://www.ecfr.gov/current/title-42/section-425.304
• 42 CFR 422.134, MA reward and incentive programs: https://www.ecfr.gov/current/title-42/section-422.134
• 42 CFR 1003.110, "remuneration" and its exceptions: https://www.ecfr.gov/current/title-42/section-1003.110
• 42 CFR 1001.952(hh), patient engagement and support safe harbor: https://www.ecfr.gov/current/title-42/section-1001.952
• 26 CFR 54.9802-1(f), wellness program exception and applicable percentage: https://www.ecfr.gov/current/title-26/section-54.9802-1
• 42 USC 1315a(d)(1), Innovation Center waiver authority: https://www.law.cornell.edu/uscode/text/42/1315a
• 81 FR 88368 (2016-12-07), OIG final rule; cash exclusion at 88397, nominal value at 88394: https://www.federalregister.gov/documents/2016/12/07/2016-28297/medicare-and-state-health-care-programs-fraud-and-abuse-revisions-to-the-safe-harbors-under-the
• 91 FR 37902 (2026-06-24), OIG RFI on remuneration to clinical trial participants, RIN 0936-AA16: https://www.federalregister.gov/documents/2026/06/24/2026-12676/medicare-and-state-health-care-programs-fraud-and-abuse-request-for-information-regarding-the
• OIG RFI on DTC pharma programs, FR doc 2026-01817 (2026-01-29): https://www.federalregister.gov/documents/2026/01/29/2026-01817/medicare-and-state-health-care-programs-fraud-and-abuse-request-for-information-regarding-the
• CMS VBID CY2022 Model Overview fact sheet: https://www.cms.gov/priorities/innovation/media/document/vbid-cy2022-model-overview-fact-sheet
• CMS VBID model page (termination end of 2025): https://www.cms.gov/priorities/innovation/innovation-models/vbid
• Next Generation ACO 2nd Amended Waivers (2018-12-12): https://www.cms.gov/Medicare/Fraud-and-Abuse/PhysicianSelfReferral/Downloads/next-gen-aco-2nd-amended-waivers-12122018.pdf
• MIPCD final evaluation report (NH $3,097; TX $1,150/yr): https://downloads.cms.gov/files/cmmi/mipcd-finalevalrpt.pdf
• Washington HCA contingency management provider list and fact sheet: https://www.hca.wa.gov/assets/program/contingency-management-providers.pdf
• California DHCS BHIN 22-056 (2022-10-14), Recovery Incentives $599 cap
• 85 FR 77684 (2020-12-02), OIG AKS final rule; "no OIG-imposed $75 limitation on contingency management" at 77791-92
• OIG Advisory Opinion 22-04 (2022-02-25)
• 83 FR 65296 (2018-12-20), EEOC removal of wellness incentive provisions; 81 FR 31126 and 31143 (2016-05-17), the vacated rules
• AARP v. EEOC, 267 F. Supp. 3d 14 (D.D.C. 2017); vacatur order 2017-12-20, effective 2019-01-01
• FMC Corp. v. Holliday, 498 U.S. 52 (1990); ERISA deemer clause, 29 USC 1144(b)(2)(B)
• NAIC Unfair Trade Practices Act Model #880, Spring 2024 edition, §4I(1), §4H(2)(e), §4H(2)(f): https://content.naic.org/sites/default/files/model-law-880.pdf

Secondary

• KFF 2025 Employer Health Benefits Survey (pub. 2025-10-22), $9,325 single / $26,993 family: https://www.kff.org/health-costs/report/2025-employer-health-benefits-survey/
• Business Group on Health / Fidelity employer wellness incentive averages, 2022-2025
• Contingency management state-by-state incentive maxima table, PMC12486863 (2025-09-30)
• HHS OIG fact sheet, November 2020 final rule: https://oig.hhs.gov/documents/compliance/836/factsheet-rule-beneficiary-inducements.pdf
• HealthyWage legal-basis page (deposit-contract framing): https://www.healthywage.com/info/is-healthywage-legal/