(a) Enforcement actions. If an issuer of a risk adjustment covered plan or reinsurance-eligible plan fails to establish a dedicated distributed data environment in a manner and timeframe specified by HHS; fails to provide HHS with access to the required data in such environment in accordance with § 153.700(a) or otherwise fails to comply with the requirements of §§ 153.700 through 153.730; fails to adhere to the reinsurance data submission requirements set forth in § 153.420; or fails to adhere to the risk adjustment data submission and data storage requirements set forth in §§ 153.610 through 153.630, HHS may impose civil money penalties in accordance with the procedures set forth in § 156.805 of this subchapter. Civil monetary penalties will not be imposed for non-compliance with these requirements during the 2014 or 2015 calendar years under this paragraph if the issuer has made good faith efforts to comply with these requirements.

(b) Default risk adjustment charge. If an issuer of a risk adjustment covered plan fails to establish a dedicated distributed data environment or fails to provide HHS with access to the required data in such environment in accordance with § 153.610(a), § 153.700, § 153.710, or § 153.730 such that HHS cannot apply the applicable Federally certified risk adjustment methodology to calculate the risk adjustment payment transfer amount for the risk adjustment covered plan in a timely fashion, HHS will assess a default risk adjustment charge.

(c) Information sharing. HHS may consult with and share information about issuers of risk adjustment covered plans and reinsurance-eligible plans with other Federal and State regulatory and enforcement entities to the extent the consultation or information is necessary for purposes of Federal or State oversight and enforcement activities.