Every hospital that accepts Medicare or Medicaid payment operates under a non-negotiable legal compact with the federal government. That compact is codified in the CMS Conditions of Participation (CoPs) — a set of health and safety standards that define the minimum requirements a hospital must meet to remain eligible for federal reimbursement. These are not guidelines or best practices. They are threshold requirements, and failing to meet them can result in termination from the Medicare and Medicaid programs entirely.
For hospital operations managers, understanding the CoPs not as a compliance checklist but as a structural framework is the difference between managing reactively — scrambling before surveys — and managing proactively, where compliance is embedded in daily operations. This article explains what the CoPs actually require, how the survey process works from initial notification through enforcement action, and what the escalating consequences look like when a hospital falls short.
The Legal Foundation: What the CoPs Actually Are
The Conditions of Participation for hospitals are established under Title XVIII and Title XIX of the Social Security Act and are codified in the Code of Federal Regulations at 42 CFR Part 482. CMS administers and enforces these standards. The regulations cover a broad range of operational and clinical domains, organized into discrete Conditions — each of which must be met in full for the hospital to maintain Medicare and Medicaid certification.
As an Amazon Associate, I earn from qualifying purchases.
Each Condition contains multiple Standards, which in turn contain Elements of Performance or interpretive criteria that surveyors use to assess compliance. It is important to understand the hierarchy: a hospital can be found out of compliance with a Standard without being cited at the Condition level. But when deficiencies are serious enough — or widespread enough across multiple standards within a single Condition — the hospital receives a Condition-level deficiency, which triggers a far more serious enforcement pathway.
💼 Healthcare Career Opportunities
Explore healthcare management and administration roles from hospitals, clinics, and health systems.
Browse Jobs →Core Areas the CoPs Cover
The hospital CoPs span virtually every dimension of hospital operations. Key Conditions include:
- Governing Body — The hospital must have an identifiable governing body legally responsible for the conduct of the hospital, including oversight of the medical staff and the quality of care delivered.
- Medical Staff — Requirements for credentialing, privileging, and peer review processes.
- Nursing Services — Adequate staffing, supervision, and the presence of a registered nurse on every unit every shift. This intersects directly with nursing leadership strategy and how nurse executives structure their departments.
- Medical Record Services — Standards for documentation, record retention, and the integrity of the medical record.
- Pharmaceutical Services — Safe medication management from procurement through administration.
- Radiologic Services, Laboratory, and Other Ancillary Services — Standards applicable to the specific services offered.
- Food and Dietetic Services — Nutritional care and kitchen safety.
- Utilization Review — A functioning program to review the appropriateness of admissions and lengths of stay.
- Physical Environment — Life safety, infection control infrastructure, and maintenance of the physical plant.
- Infection Control — An organization-wide program with clear accountability.
- Discharge Planning — Structured processes for identifying patients who need post-acute services and coordinating transitions of care.
- Quality Assessment and Performance Improvement (QAPI) — An ongoing, data-driven program to measure and improve the quality and safety of care — this is not a paper program; surveyors assess whether it is functional and whether leadership is meaningfully engaged.
- Patient Rights — A broad condition covering informed consent, the right to participate in care decisions, grievance processes, and freedom from abuse, neglect, and exploitation.
- Emergency Services — If the hospital provides emergency care, it must meet standards for staffing, equipment, and response capability.
CMS has also added and updated specific Conditions over time. The Infection Control CoP was significantly scrutinized during the COVID-19 pandemic, and CMS has used emergency regulatory authority in the past to rapidly modify CoP requirements — including the interim final rule on vaccine requirements for healthcare workers, which was ultimately upheld by the Supreme Court.
Deemed Status: The Role of Accrediting Organizations
Most hospitals do not receive their CoP survey directly from state surveyors acting on behalf of CMS. Instead, they achieve compliance through deemed status — a mechanism by which CMS recognizes that an accrediting organization's standards are at least as rigorous as the CoPs. A hospital accredited by one of these organizations is "deemed" to meet the Medicare CoPs without undergoing a separate federal survey.
As an Amazon Associate, we earn from qualifying purchases.
The Joint Commission is the most widely used accrediting organization for hospitals with deemed status, though the American Osteopathic Association's Healthcare Facilities Accreditation Program (HFAP) and DNV GL Healthcare also hold CMS-approved deeming authority. Understanding the relationship between accreditation standards and the CoPs is essential — they are parallel frameworks with significant overlap, but they are not identical. A hospital can be fully accredited and still receive a CoP citation during a CMS complaint investigation. For a deeper look at how accreditation surveys and CMS oversight interact, see our coverage of compliance and accreditation.
CMS retains the right to conduct validation surveys of deemed-status hospitals to verify that the accrediting organization's process is actually catching deficiencies. If validation surveys consistently reveal problems that accreditation missed, CMS can revoke an organization's deeming authority — which has significant implications for every hospital that organization accredits.
How the Survey Process Actually Works
Understanding the mechanics of the survey process is operationally essential. Surveys are not simply announced inspections where a team arrives to review binders. They are investigative in nature, relying heavily on observation, patient and staff interviews, and record review.
Types of Surveys
Recertification surveys are the periodic, unannounced surveys conducted by state survey agencies on behalf of CMS to verify ongoing compliance. For hospitals with deemed status, the accrediting body's triennial survey fills this role, with CMS conducting a subset of validation surveys.
Complaint investigations are triggered when CMS or a state survey agency receives a complaint — from a patient, a family member, a staff member, or an outside party — alleging a specific deficiency. These are also unannounced and can occur at any time. High-severity complaints are typically investigated within days. This is an important operational reality: the most consequential surveys are often not the scheduled ones.
Revisit surveys occur after a hospital has been cited for deficiencies and has submitted a Plan of Correction. Surveyors return to verify that the corrective actions have been implemented and are sustainable.
What Surveyors Actually Do On-Site
A survey team — typically composed of registered nurses, health facility surveyors, and sometimes a physician or other specialist — will arrive unannounced, identify themselves to the administrator on duty, and begin work immediately. They will typically:
- Conduct a facility tour, observing care delivery, physical environment, and infection control practices in real time.
- Review a sample of open and closed medical records, looking for documentation that supports or contradicts compliance with specific standards.
- Interview patients, family members, and staff — including frontline nursing staff, physicians, and housekeeping personnel — outside the presence of management whenever possible.
- Review policies, procedures, governing body minutes, medical staff credentialing files, QAPI meeting minutes, and other administrative records.
- Observe medication administration, restraint use, informed consent processes, and other high-risk activities.
The interview component is frequently underestimated. Surveyors are specifically trained to speak with bedside staff, and inconsistencies between what policies say and what staff actually do in practice are a primary source of findings. Staff who cannot articulate the facility's infection control protocols, restraint criteria, or patient rights procedures create risk regardless of how well-written the hospital's policies are.
The Exit Conference and Statement of Deficiencies
At the conclusion of the survey, the team conducts an exit conference with hospital leadership, presenting preliminary findings. This is not a negotiation — it is a notification. The formal findings are then documented in a Statement of Deficiencies (Form CMS-2567), which identifies each deficiency by the specific regulation cited, describes the evidence found, and classifies the severity and scope of the finding.
The scope and severity matrix is critical to understand. CMS uses a grid that classifies deficiencies from A (isolated, no actual harm, no potential for more than minimal harm) through L (immediate jeopardy to patient health or safety, widespread). Condition-level deficiencies typically occur at the E level and above. Immediate jeopardy findings — typically J, K, or L — require same-day or next-day corrective action and trigger the most aggressive enforcement response.
The Enforcement Pathway: From Citation to Termination
Once a hospital receives a Condition-level deficiency, it enters a formal enforcement process. The hospital must submit a Plan of Correction (PoC) — a structured, time-bound document that describes what caused the deficiency, what corrective actions will be taken, how the hospital will monitor for ongoing compliance, and who is accountable for each action.
The PoC is not merely accepted at face value. CMS or the state survey agency reviews it for credibility and specificity, and a revisit survey will assess whether the corrections described were actually made and whether they represent systemic change rather than a temporary fix.
Termination Proceedings
If a hospital fails to correct Condition-level deficiencies within the prescribed timeframe — typically 90 days, though this can be shorter — CMS initiates termination proceedings. This is the formal process by which the hospital's Medicare provider agreement is terminated, making it ineligible to bill Medicare or Medicaid for any services.
Termination is an existential event for most hospitals. The financial impact is immediate and severe. CMS will also notify patients, referring physicians, and the public. The hospital can appeal, but the appeal process does not automatically stay the termination.
Immediate Jeopardy: The Emergency Track
When surveyors identify an immediate jeopardy situation — a finding that has caused or is likely to cause serious injury or death to a patient — the enforcement timeline compresses dramatically. The hospital must typically provide an acceptable plan to remove the immediate jeopardy finding within hours to days, not weeks. If immediate jeopardy cannot be resolved during the survey, CMS can impose immediate sanctions including termination with very short notice. In practice, immediate jeopardy findings trigger internal incident command-level responses from hospital leadership.
Operational Implications for Hospital Administrators
The most durable CoP compliance programs share several operational characteristics that distinguish them from facilities that cycle through crisis-driven remediation.
QAPI as a Real Operational Tool, Not a Paper Program
The QAPI Condition is one of the most scrutinized in any survey because it functions as a meta-condition — a functional QAPI program should be identifying and correcting the same issues surveyors would find. When a hospital receives a Condition-level deficiency in an area that its own QAPI program should have caught, surveyors often cite both the specific deficiency and the QAPI failure. Building a QAPI program that operates with genuine data, real accountability, and documented follow-through is foundational, not optional.
Staff Education That Goes Beyond Policy Acknowledgment
Surveyors interview staff precisely because policy acknowledgment signatures do not predict practice. Operations managers need to invest in competency-based education approaches where staff can demonstrate — not just describe — correct practice. This is especially true for patient rights, restraint use, informed consent, and infection control.
Unannounced Internal Audits That Mirror Survey Methodology
The most effective self-assessment programs deliberately replicate survey methodology: unannounced observation of care delivery, patient and family interviews, record reviews of recently discharged patients, and review of governing body and medical staff committee minutes for documentation of oversight. Hospitals that conduct mock surveys using external consultants or peer organizations typically identify findings before a surveyor does.
Leadership Accountability at the Governing Body Level
The Governing Body CoP makes explicit that the board bears ultimate legal responsibility for the hospital's compliance with the CoPs. This is not merely a regulatory formality. In enforcement proceedings, CMS looks at whether governance structures functioned — whether the board received meaningful quality reports, whether it acted on red flags, and whether the medical staff oversight process was real. Hospital administrators who brief their boards only on favorable metrics are creating governance documentation that will not withstand scrutiny.
Staying Ahead of Regulatory Change
CMS revises the CoPs through notice-and-comment rulemaking, and the interpretive guidelines that accompany each Condition are updated through the State Operations Manual, which CMS publishes and revises on an ongoing basis. Significant updates — such as the revised discharge planning CoP that took effect in 2020, which increased requirements for patient and caregiver involvement in transition planning — can change survey priorities substantially without changing the underlying regulatory text. Monitoring the State Operations Manual for revisions and transmittals is as important as monitoring the CFR itself.
The CMS CoPs are not a static compliance target. They are an evolving legal framework, and the enforcement environment shifts with changes in federal health policy, emerging patient safety evidence, and post-event regulatory responses. For hospital operations managers, treating CoP compliance as a continuous operational discipline — embedded in hiring, training, performance management, and governance — is the only approach that consistently produces durable results.
