Consultant Independence Credential Authority Failure Through Concurrent Engagement Undisclosed to FDA While Advising Opioid Manufacturer on Drug Sales Strategy — McKinsey & Company, 2014–2017

Federal agencies that engage management consultants for sensitive regulatory work rely on conflict-of-interest disclosures to establish that the consulting firm's advice is independent of competing commercial interests. The conflict-of-interest disclosure is the credential: it certifies that the consultant has no concurrent engagement with an entity whose interests are adverse to those of the agency being served. The FDA's Sentinel Initiative — a project to monitor the safety of FDA-regulated products — is precisely the kind of engagement for which that independence condition is material. A consultant advising the FDA on how to monitor the safety of prescription drugs while simultaneously advising a prescription drug manufacturer on how to increase sales of those drugs is not independent. The credential says otherwise.

McKinsey's relationship with Purdue Pharma spanned 75 separate engagements from 2004 to 2019. During that period McKinsey advised Purdue on strategies to increase OxyContin sales — including a 2013 engagement to "turbocharge" sales by targeting high-volume prescribers. In 2014 McKinsey began working for the FDA on the Sentinel Initiative. During the solicitation process McKinsey represented that its conflict-of-interest policy prohibited consultants serving the FDA from being assigned to competitively sensitive projects. McKinsey admitted that representation was false. The consultants working on FDA drug safety projects were concurrently advising Purdue on opioid sales strategy. The independence condition the credential certified was not present.

Congressional scrutiny beginning in 2022 revealed that at least 22 McKinsey employees who were consulting for Purdue and other opioid producers were simultaneously working for government agencies including the FDA. The DOJ investigation that followed produced a December 2024 settlement totaling $650 million — the first criminal resolution of a management consulting firm for advice resulting in a client's criminal conduct. A former senior partner pleaded guilty to obstruction of justice for deleting records related to the Purdue engagement from his McKinsey-issued laptop during the investigation.

The civil settlement resolved allegations that McKinsey's advice to Purdue caused the submission of false and fraudulent claims to federal healthcare programs for medically unnecessary OxyContin prescriptions — and separately resolved the conflict-of-interest disclosure failure to the FDA. The two components of the settlement document the same structural architecture: credentials certifying conditions that were not present at the point of reliance. The prescriber credential certified medical necessity. The independence credential certified absence of a competing engagement. Neither condition was present. Both credentials moved as sufficient.

The conflict-of-interest disclosure certifies a condition — consultant independence from competing commercial interests — that is material to the quality and integrity of the advice the FDA receives. The FDA cannot evaluate the independence of advice it relies upon without knowing whether the advisor has a concurrent financial relationship with an entity whose interests are adverse to the FDA's regulatory function. The credential is the mechanism through which the FDA establishes that the condition is present. When the credential certifies independence and independence is absent, the FDA has relied on advice from a source whose independence it cannot evaluate — because the credential has already resolved that question in the consultant's favor.

The consultants advising the FDA on prescription drug safety monitoring were simultaneously advising the manufacturer of a prescription drug on how to increase its sales. That is not a conflict that could be evaluated from the credential. The credential certified its absence. The FDA's reliance on McKinsey's drug safety advice during the period of concurrent Purdue engagement was authorized by a credential that did not represent the condition it certified.

The structural condition this case documents is not specific to McKinsey or to the opioid context. Conflict-of-interest credentials across federal contracting, regulatory consulting, and government advisory relationships certify independence conditions that are not encoded in the credential and not evaluable from it at the point of reliance. The relying party accepts the credential. Whether the independence condition is present is not verifiable from the credential. Detection occurs through investigation, congressional scrutiny, or litigation — after the credential has already authorized the relationship and the advice that followed from it.

The $650 million settlement required McKinsey to forfeit all fees received from Purdue across 15 years, implement enhanced compliance measures, submit annual certifications to DOJ, and cease all consulting work involving controlled substances for five years. A Corporate Integrity Agreement — the first ever with a management consulting firm — was executed with HHS-OIG. The former senior partner who deleted records faces sentencing for obstruction of justice.

The remediation operates entirely after reliance. The FDA relied on McKinsey's advice on drug safety monitoring during a period when the same consultants were advising Purdue on opioid sales. The conflict was not disclosed. It was not detectable from the credential. The investigation that revealed it began years after the concurrent engagements concluded. The annual certification requirement imposed by the settlement — McKinsey's managing partner must annually certify compliance to DOJ — is itself a conflict-of-interest credential. It certifies a compliance condition. Whether that condition is present at the point of certification is not encoded in the credential and not evaluable from it at the point of reliance.

• The conflict-of-interest disclosure is an independence credential — it certifies that the consultant has no concurrent engagement with an entity whose interests are adverse to those of the contracting agency; the FDA awarded McKinsey contracts for drug safety monitoring on the basis of that certification; the independence condition the credential certified was not present from 2014 to 2017
• McKinsey admitted that consultants assigned to FDA drug safety projects were concurrently advising Purdue Pharma on opioid sales strategy; the representation made during contract solicitation — that consultants would not be assigned to competitively sensitive projects following FDA work — was false; McKinsey admitted it did not inform the FDA of the concurrent engagements
• The FDA had no mechanism to evaluate whether the independence condition the credential certified was present at the point of contract award or during contract performance; the credential resolved the independence question in McKinsey's favor; the concurrent engagement that made the credential false was not disclosed and not detectable from the credential
• The structural condition — conflict-of-interest credential certifying an independence condition not encoded in the credential and not evaluable at reliance — is not specific to McKinsey; federal contracting, regulatory consulting, and government advisory relationships routinely rely on independence credentials whose conditions are certified by the party with the financial interest in the certification's outcome
• The $650 million settlement and the first-ever criminal resolution of a management consulting firm document the gap after reliance; the remediation imposed — including annual compliance certifications — is itself a credential certifying a condition not encoded in the credential and not evaluable from it at the point of reliance; the structural condition the case documents persists in the remediation instrument
• Detection required congressional scrutiny, federal investigation, and litigation spanning years after the concurrent engagements concluded; the independence condition was not verifiable from the credential at the point the FDA relied upon it; a credential encoding the independence condition — the specific concurrent engagements, the entities advised, the dates of overlap — makes the condition evaluable at the point of contract award, not reconstructed through investigation years after the advice has been received and acted upon