False Claims Act enforcement in university research — a living tracker
The federal False Claims Act (31 U.S.C. §§3729–3733) has become an important civil enforcement mechanism in cases involving inaccurate research-related disclosures on federally funded research. Since 2019, the Department of Justice has pursued a growing set of civil settlements against institutions over undisclosed foreign appointments, undisclosed foreign support, and false certifications on federal research applications — with settlements ranging from the low six figures to the multi-millions.
Why disclosure failures become FCA cases
A federal research award is a payment from the United States, obtained on the basis of certifications the applicant institution makes. Since NSPM-33 and the Common Forms disclosure standard, those certifications now explicitly include the accuracy of researcher disclosures. Under the FCA, a knowingly false certification submitted to obtain federal funds is actionable.
"Knowingly," under the statute, includes actual knowledge, deliberate ignorance, and reckless disregard. This is why the operational stakes for institutions are so specific: the FCA does not require intent to defraud, only that the institution knew (or should have known) that a certification was inaccurate. An institution's process for verifying what it certifies is the record that answers whether it acted in reckless disregard.
Settlement tracker
Sorted by year, most recent first. Every entry links to the originating DOJ press release. We add new settlements to this tracker as they are announced; the authoritative source remains the DOJ Office of Public Affairs press-release stream ↗. If you know of a settlement we should include — with a DOJ or court-filing link — let us know.
| Year | Institution | Amount | Agencies | Basis | Source |
|---|---|---|---|---|---|
| 2024 | Cleveland Clinic Foundation | $7,600,000 | NIH | Undisclosed foreign funding on NIH applications and progress reports; false certifications. | DOJ ↗ |
| 2024 | University of Delaware | $715,580 | NASA | Undisclosed professor ties to a Chinese university, a talent program, and NSFC funding on a NASA grant. | DOJ ↗ |
| 2024 | University of Maryland, College Park | $500,000 | NSF, Army | Undisclosed PI funding from Huawei and Taobao / Alibaba. | DOJ ↗ |
| 2024 | Research Foundation for SUNY (University at Albany) | $313,574 | NASA, NOAA | PI failed to disclose Wuhan University employment, talent-plan participation, and NSFC funding. | DOJ ↗ |
| 2023 | Stanford University | $1,900,000 | Army, Navy, Air Force, NASA, NSF | Twelve faculty across sixteen proposals failed to disclose foreign current-and-pending support. | DOJ ↗ |
| 2022 | The Ohio State University | $875,689 | NSF, NASA, Army | Undisclosed foreign employment, talent-program participation, and NSFC funding. | DOJ ↗ |
| 2019 | Van Andel Research Institute | $5,500,000 | NIH | Undisclosed Chinese government grants — including Thousand Talents Program funding — held by two grant PIs. | DOJ ↗ |
What the settlements have had in common
- The predicate is a disclosure that was made but was inaccurate — foreign appointment, foreign grant, foreign in-kind support omitted.
- The institution is on the hook, not only the individual. The FCA claim runs against the entity that submitted the false claim for federal payment.
- Whistleblowers matter. A significant share of cases start as qui tam suits.
- The "how did you know?" question is central. Institutional processes to verify certifications — or their absence — are what determine whether the recklessness standard is met.
What institutions should do
- Verify what you certify. Every certification the AOR makes should be traceable to institutional review of the underlying disclosures, not only to the researcher's attestation.
- Keep the evidence. The disclosure, the sources it was reconciled against, the exceptions raised, and the resolutions — captured as an immutable snapshot per certification.
- Look at the categories enforcement looks at. Foreign appointments, foreign in-kind support, and undisclosed foreign grants are the recurring themes.
- Treat verification as institutional infrastructure, not a project. Certifications are ongoing; the verification layer has to be too.
Frequently asked questions
Why is the False Claims Act — a 19th-century statute — being used against universities in 2020s research security cases?
Because federal research awards are federal funds obtained through certifications, and those certifications now cover disclosure. When the DOJ can show a knowingly false certification about disclosure, that fits the FCA's core cause of action: knowingly presenting a false claim for federal payment. NSPM-33's disclosure standardization and the Common Forms requirement have made the certifications more explicit — and correspondingly more actionable.
Do institutions face FCA liability for a researcher's undisclosed appointment?
Institutional liability under the FCA generally requires knowledge or deliberate ignorance — not a simple factual error by an individual. But courts have found that failure to verify certifications the institution had reason to check can meet the recklessness standard. This is the operational point: institutions must be able to show a verification process, not only a collection process.
Are qui tam (whistleblower) suits a factor here?
Yes. A significant share of FCA university-research cases have started as qui tam suits filed by former employees or colleagues, later joined or declined by the DOJ. Whistleblowers receive a share of any recovery, which structurally supports the pipeline.
What is the typical settlement structure?
FCA settlements typically resolve without an admission of liability, include a payment to the United States (often multiples of the challenged funding), and can include a corporate integrity or compliance monitor for a period of years. Institutions often also fund remediation programs.
Primary sources
ResearchSecurity.ai captures an immutable evidence snapshot of every certification — who verified what, when, and how. When a regulator or opposing counsel asks 'how did you know?', you can show them.
How the compliance passport reduces FCA exposure →Verification for the institution certifying these disclosures.
Founding partners run ResearchSecurity.ai against their own compliance reality — with preferred terms and direct access to the team building it.