(a) A program contractor, a person, or an entity employed by, or having a fiduciary relationship with, or who furnishes professional services to a program contractor will not be held to have violated any criminal law and will not be held liable in any civil action, under any law of the United States or of any State (or political subdivision thereof), by reason of the performance of any duty, function, or activity required or authorized under this subpart or under a valid contract entered into under this subpart, provided due care was exercised in that performance and the contractor has a contract with CMS under this subpart.

(b) CMS pays a contractor, a person, or an entity described in paragraph (a) of this section, or anyone who furnishes legal counsel or services to a contractor or person, a sum equal to the reasonable amount of the expenses, as determined by CMS, incurred in connection with the defense of a suit, action, or proceeding, if the following conditions are met:

(1) The suit, action, or proceeding was brought against the contractor, person or entity by a third party and relates to the contractor's, person's or entity's performance of any duty, function, or activity under a contract entered into with CMS under this subpart.

(2) The funds are available.

(3) The expenses are otherwise allowable under the terms of the contract.