Healthcare Compliance

CMS Survey Checklist: Conditions of Participation 2026 Guide

What CMS surveyors examine during Conditions of Participation surveys for hospitals and ASCs , infection control, environment, pharmacy, QAPI, and the 42 CFR 482 checklist.

LP

Lisa Puckett

CEO & Chief Compliance Officer · CSP · SWANA Vice Director

April 9, 2026

CMS pays hospitals roughly $450 billion every year under Medicare Part A alone, and that money only flows to facilities that satisfy the Conditions of Participation. Lose your CoP certification and you lose access to the single largest payer in American healthcare overnight. For a typical acute-care hospital, Medicare represents 40 to 60 percent of net patient revenue.

CMS surveys are not routine paperwork exercises. A Condition-Level deficiency triggers a 90-day correction window, and an Immediate Jeopardy finding puts the facility on a 23-day termination notice. Hospitals have lost deemed status over a single finding that staff were not following the written infection control plan. ASCs have been excluded from Medicare after USP 797 sterile compounding failures.

This is the checklist we use when we run mock CMS tracer rounds for hospital and ASC clients , built from the CFR provisions surveyors cite, the document pulls they make in the first hour, and the staff interviews that generate Standard-Level and Condition-Level findings.


When to Expect a CMS Survey

CMS surveys fall into four categories, and only one is scheduled far enough in advance to be useful for preparation.

Recertification surveys. Hospitals and ASCs on direct CMS certification receive recertification surveys on a triennial cycle. The state agency does not publish the date, but the window is known. If your last survey was three years ago last month, you are in the window today.

Complaint-driven surveys. Any patient, family member, former employee, or competitor can file a complaint. Complaint surveys are unannounced and narrow in scope, but an investigation that uncovers additional deficiencies expands into a full survey.

Validation surveys. Even if your facility is accredited by The Joint Commission, DNV, or AAAHC under deemed status, CMS retains authority to conduct validation surveys to verify the accrediting organization's process matches CMS standards.

Initial Medicare certification. New facilities and facilities changing ownership undergo initial certification before Medicare billing privileges are granted.

Who's Surveying You

CMS does not conduct most surveys directly. The agency contracts with state survey agencies under Section 1864 of the Social Security Act , in California that is the Department of Public Health, Licensing and Certification Division. The CMS Regional Office sits above the state agency and reviews findings, approves plans of correction, and issues enforcement actions. If your facility holds deemed status through The Joint Commission, DNV Healthcare, or AAAHC, your primary survey is conducted by the accrediting organization and CMS relies on that survey unless a validation or complaint survey triggers direct federal involvement.

A typical survey team includes a team leader (a registered nurse with survey certification), a Life Safety Code surveyor, a pharmacy surveyor for hospitals with licensed pharmacies, and specialists pulled in for specific conditions. Teams range from two people for a focused ASC survey to eight or more for a full hospital recertification.

The Two Compliance Frameworks

Hospitals and ASCs operate under separate CFR provisions with different Condition structures and different survey tags.

Hospitals are governed by 42 CFR Part 482, Conditions of Participation for Hospitals , 24 Conditions, each containing multiple Standards. Surveyors cite findings at either the Standard level (a specific failure within a Condition) or the Condition level (a systemic failure of the entire Condition). Condition-level findings are the ones that put your facility on enforcement timelines.

Ambulatory surgical centers are governed by 42 CFR Part 416, Conditions for Coverage for Ambulatory Surgical Centers. ASCs have a smaller set of Conditions reflecting the narrower scope of outpatient surgical services, but the enforcement structure is identical: Standard-level and Condition-level findings, required Plans of Correction, same termination timelines. ASCs are evaluated with less tolerance for any single lapse because the entire operation is concentrated in fewer systems.

The Hospital CoPs: 42 CFR 482 Structure

The 24 Hospital Conditions of Participation cover governance, patient care, staff, physical environment, and organizational systems. The Conditions most relevant to waste management, infection control, and the services we provide:

  • §482.12 Governing Body , ultimate responsibility for quality of care, including infection control and environment of care
  • §482.21 Quality Assessment and Performance Improvement (QAPI) , active ongoing program that must include infection prevention data
  • §482.25 Pharmaceutical Services , controlled substance security, USP 797 sterile compounding, USP 800 hazardous drug handling
  • §482.41 Physical Environment , Life Safety Code and Environment of Care provisions, including waste storage and egress
  • §482.42 Infection Prevention and Control and Antibiotic Stewardship Programs , the most-cited Condition on CMS surveys year after year
  • §482.15 Emergency Preparedness , the all-hazards plan, including continuity of waste vendor services during disasters

The Conditions that most frequently generate findings are §482.42 (infection control), §482.41 (physical environment and life safety), and §482.25 (pharmaceutical services). All three connect directly to waste stream management.

The ASC CoC Structure: 42 CFR 416

ASC Conditions for Coverage are concentrated in fewer sections but hit the same compliance surface area:

  • §416.41 Governing Body and Management , organizational accountability
  • §416.43 Quality Assessment and Performance Improvement , ASC equivalent of hospital QAPI
  • §416.44 Environment , physical plant, safety, and sanitation, including waste handling and storage
  • §416.48 Pharmaceutical Services , medication management, controlled substance security, USP 797 sterile compounding where applicable
  • §416.51 Infection Control , the single most-cited ASC condition, covering hand hygiene, sterilization, HLD, and isolation precautions

ASCs run leaner than hospitals, and a single compliance officer is often responsible for all of these domains. That is exactly why ASC surveys generate Condition-Level findings at rates higher than hospital surveys on a per-facility basis.

The 15-Point CMS Document Pull Checklist

Every CMS survey opens with a document request. Missing documentation is treated as evidence of systemic failure, not a filing error.

1. Infection Control Program and Risk Assessment

The written infection prevention and control plan, annual facility risk assessment, and evidence the plan was reviewed and updated in the last 12 months. Required under §482.42 (hospital) and §416.51 (ASC).

2. HAI Surveillance Data

Healthcare-associated infection surveillance data from the last 12 months , CLABSI, CAUTI, SSI, and C. difficile rates where applicable. Must tie into QAPI data under §482.21 or §416.43.

3. Hand Hygiene Compliance Monitoring

Direct observation data, target rates, actual rates, and corrective action when rates fall below target. A frequent Condition-Level citation when programs exist on paper but not in practice.

4. Sterilization and High-Level Disinfection Logs (IAHCSMM Standards)

Biological indicator results, chemical indicator records, load records for every sterilizer cycle, and evidence that reprocessing follows manufacturer IFUs. HLD logs for endoscopes must show time, temperature, and concentration verification.

5. Environmental Services Cleaning Logs

Terminal cleaning records for operating rooms, procedure rooms, and patient care areas. Documentation of cleaning products used and dwell times observed.

6. Medical Waste Segregation and Documentation

The written medical waste management plan, manifests for the last 12 months, verification of hauler credentials, and evidence that staff are trained on segregation at the point of generation. Surveyors walk the waste storage areas and match what they see to the manifests.

7. Pharmaceutical Waste Management (40 CFR 266 Subpart P)

Documentation of the facility's status as a very small, small, or large quantity generator under RCRA, segregation of hazardous pharmaceutical waste from non-hazardous, and manifests for hazardous shipments. The EPA's Management Standards for Hazardous Waste Pharmaceuticals at 40 CFR Part 266, Subpart P are explicitly cross-referenced in CMS pharmacy surveyor guidance.

8. Controlled Substance Procurement and Disposal (DEA)

DEA Form 222s, perpetual inventory logs, biennial inventory records, and destruction records under 21 CFR 1317. Surveyors verify that destruction is witnessed, documented, and performed by authorized reverse distributors where applicable.

9. USP 797 Sterile Compounding (if applicable)

Environmental monitoring data, media fill test records, personnel garbing and gloved fingertip testing, beyond-use date assignments, and cleanroom certification reports. USP 797 findings generate Condition-Level citations under §482.25 and §416.48 more often than any other pharmacy issue.

10. USP 800 Hazardous Drug Handling

The hazardous drug list per the NIOSH List of Antineoplastic and Other Hazardous Drugs, the facility's Assessment of Risk, PPE availability, spill response procedures, and annual staff training documentation.

11. QAPI Plan and Data

The written QAPI plan, current performance improvement projects, QAPI committee minutes, and evidence that QAPI data feeds into governing body decision-making.

12. Employee Health Records

Hepatitis B vaccination offers, TB testing, seasonal influenza vaccination rates, and N95 respirator fit-testing records for staff in aerosol transmissible disease exposure roles.

13. Incident and Event Reporting System

The incident reporting policy, trends from the last 12 months, root cause analyses for sentinel events, and evidence that patterns are addressed through QAPI.

14. Contract Services Oversight (Including Waste Vendors)

Under §482.12(e) and §416.41, the governing body is accountable for the performance of every contracted service , medical waste haulers, reverse distributors, laundry vendors, sterilization services. Surveyors will ask for the contract, the performance monitoring plan, and evidence of periodic review.

15. Emergency Preparedness (42 CFR 482.15)

The all-hazards risk assessment, written emergency plan, communication plan, training and testing records, and evidence that the plan addresses continuity of critical services including waste handling during a disaster.

The Infection Control Condition: CMS's #1 Focus Area

§482.42 is the single most frequently cited Condition on hospital surveys, and §416.51 is the most frequently cited Condition on ASC surveys. CMS survey data shows infection control Condition-Level citations appearing in roughly 20 percent of all hospital surveys and a higher rate for ASCs.

Surveyors examine infection control through tracer methodology: pick a patient, follow the care across every department and handoff, look for breakdowns. The waste stream is part of every tracer. A surveyor watching a procedure notes whether sharps are disposed of in approved containers at the point of use, whether regulated medical waste is segregated from general trash, whether containers are properly closed and labeled, and whether transport to the storage area follows the written plan.

The most common citations are not the exotic ones. They are hand hygiene rates below target, sharps container overfill, mixed waste streams in red bag containers, and transport staff who cannot explain the written plan. Every one of those is a point where the COMPLIANCE|360 bundle closes the gap before a surveyor arrives.

What a Condition-Level Deficiency Looks Like

A Standard-Level deficiency is a specific failure within a Condition , a single sharps container overfilled, a single hand hygiene observation missed, a single manifest that could not be located. Standard-Level findings require a Plan of Correction but do not directly threaten Medicare certification.

A Condition-Level deficiency is a finding that the facility has failed the entire Condition. Surveyors cite Condition Level when deficiencies are serious, numerous, or systemic enough that the facility is not substantially complying with the Condition as a whole. Condition-Level findings put the facility on a 90-day improvement window with mandatory revisit surveys.

Immediate Jeopardy is the most serious category , cited when the deficiency has caused or is likely to cause serious injury, harm, impairment, or death to patients. IJ findings trigger a 23-day termination notice. Real examples from published CMS termination letters include unsterilized instruments used in procedures, failure to follow isolation precautions during an outbreak, and controlled substance diversion that went undetected for months.

Your 30-Day Pre-Survey Readiness Review

If your facility is in a recertification window, the 30 days before a likely survey are the highest-leverage time you have.

Walk the facility as a surveyor would. Start at the loading dock where waste is staged. Follow the waste stream back to its point of generation in every clinical department. Look for missing labels, overfilled containers, mixed streams, and storage areas without proper signage.

Run mock tracer interviews. Pick three patients and trace their care across every touchpoint. Interview staff at each handoff on their knowledge of the infection control plan, waste segregation, and written policies. If they cannot explain the plan, the plan is not operational.

Practice the document pull. Hand the compliance officer the 15-point document list and time how long it takes. If any item takes more than ten minutes to locate, it needs to be closer to hand on survey day.

Review your last three years of QAPI data. Surveyors will ask what problems you identified, what you did about them, and how you measured the improvement. Thin QAPI data is a Condition-Level finding on its own.

Survey Day Protocol

Opening conference. The team leader presents credentials, explains the scope, and delivers the document request. The facility identifies the administrator, chief nurse, infection preventionist, pharmacy director, and safety officer as points of contact.

Tracer rounds. Surveyors split up and follow patients, staff, and waste streams across the facility. Staff interviews happen in real time at the bedside.

Daily briefings. The team leader meets with facility leadership each afternoon to preview findings , the facility's opportunity to clarify facts, produce additional documentation, and correct misunderstandings before findings are committed to the final report.

Closing conference. At the end of the survey the team presents preliminary findings. These are the findings that will appear on CMS Form 2567.

After the Survey: Plan of Correction and the Clock

Within 10 business days of the closing conference the facility receives CMS Form 2567, the Statement of Deficiencies and Plan of Correction. Each deficiency is assigned a survey tag, a CFR citation, and a space for corrective action.

The facility submits its Plan of Correction within 10 calendar days of receipt. The PoC must address what will be done, who is responsible, how the correction will be monitored, and the completion date. CMS Regional Office either accepts the PoC or returns it for revision. Revisit surveys verify implementation: for Condition-Level findings, the revisit must confirm substantial compliance within 90 days or termination proceedings advance. For Immediate Jeopardy, the clock is 23 days.

Facilities that treat the PoC as a one-time document almost always end up with repeat findings on the next survey cycle. The corrections have to become the way the facility runs.

How BayArea Compliance Helps

COMPLIANCE|360 bundles the compliance surface area CMS surveyors examine under §482.42, §482.41, §482.25, §416.51, §416.44, and §416.48 into a single monthly program at $360/month , infection control plan maintenance, medical waste program oversight, pharmaceutical waste classification under 40 CFR 266 Subpart P, and annual staff training.

Our medical waste disposal service manages the waste streams every tracer round touches , biohazardous, sharps, pathological, chemotherapy , with manifest tracking, container right-sizing, and hauler oversight that satisfies the §482.12(e) contracted services requirement. Our pharmaceutical waste program handles 40 CFR 266 Subpart P classification, DEA controlled substance destruction under 21 CFR 1317, and USP 800 hazardous drug handling documentation.

For facilities in an active survey window, AUDIT|360 provides mock CMS tracer rounds led by the same team that builds the documentation. See our full healthcare compliance offerings for hospitals, ASCs, skilled nursing, and specialty clinics. Call 833-247-OSHA to schedule a pre-survey readiness review.

Get more compliance content like this

New inspection checklists, regulation updates, and cost-saving tips delivered monthly. No spam, unsubscribe anytime.

Led by Lisa Puckett, CSP · SWANA Vice Director · 2025 NRC Recycler of the Year

Ready to Simplify Your Compliance?

One vendor for waste disposal, training, and regulatory compliance across the Bay Area, led by the 2025 NRC Recycler of the Year. Get a free assessment today.