What Are the Proposed CMS Medicare Enrollment Revocation Changes for 2027?
As of August 2026, CMS has proposed sweeping changes to Medicare provider enrollment enforcement through the CY 2027 Home Health PPS Proposed Rule (CMS-1844-P), published in the Federal Register on July 6, 2026. The proposed rule would make all Medicare enrollment revocations retroactive to the date of noncompliance, add entirely new grounds for denying or revoking enrollment, and expand disclosure requirements for private equity ownership. Comments are due by August 31, 2026, and if finalized, the changes would apply to all Medicare providers and suppliers.
- Retroactive revocations: Under the proposed rule, every Medicare enrollment revocation would take effect on the date the noncompliance began, not 30 days after CMS mails notice. A missed reporting deadline could trigger a revocation backdated to the day after the deadline passed.
- New denial and revocation grounds: CMS would add revocation triggers for co-location with a revoked provider, geographic concentration of providers, certain misdemeanor convictions, and violations of the 36-month ownership rule.
- Expanded disclosure requirements: Private equity and REIT ownership disclosures would extend to CMS-855B and CMS-855S forms, and the definition of managing employee and affiliation would broaden significantly.
What CMS Changed in the Proposed Rule
On July 6, 2026, CMS published proposed rule CMS-1844-P as part of the Calendar Year 2027 Home Health Prospective Payment System Rate Update. While the payment provisions primarily affect home health agencies, CMS embedded a set of provider enrollment enforcement proposals that apply to every Medicare provider and supplier type. The comment period closes at 5:00 PM ET on August 31, 2026.
The enrollment provisions represent the latest and most aggressive step in a series of CMS rulemakings aimed at expanding program integrity authority. CMS Administrator Mehmet Oz stated in the accompanying press release that the proposals would “give CMS stronger tools to protect Medicare beneficiaries and taxpayer dollars from fraud, waste, and abuse.” Multiple healthcare law firms have described the proposed changes as the most consequential enrollment enforcement expansion in recent Medicare history.
The proposed rule would amend the Medicare enrollment regulations at 42 CFR Part 424 across several categories. The changes affect revocation grounds, denial grounds, the reapplication process, moratoria, disclosure obligations, and operational definitions. In our experience handling Medicare enrollments across 40 or more states, each of these categories introduces new compliance risks that most practices are not currently monitoring for.
Does the CMS Enrollment Revocation Rule Apply to My Practice?
Yes. Although the proposed rule is housed within the Home Health PPS update, CMS explicitly states that the enrollment provisions apply to all providers and suppliers enrolled in Medicare. This includes solo physicians, group practices, behavioral health providers, rehabilitation therapists, DME suppliers, home health agencies, hospices, ambulatory surgical centers, and any other entity enrolled through the CMS-855 application series.
The scope is broad by design. CMS is not targeting a single provider type. The proposed rule addresses structural gaps in enrollment enforcement that CMS believes allow bad actors to persist in the program while placing a higher compliance burden on legitimate providers. Any practice that files a CMS-855I, CMS-855B, or CMS-855S is affected by at least one of the proposed changes.
For practices that manage their own enrollment in-house, the expanded definitions of managing employee and affiliation mean that internal compliance reviews need to cover a wider set of individuals and entities than before. For practices that outsource enrollment, the critical question is whether their enrollment partner is actively tracking these proposed changes and preparing for implementation. We have already begun reviewing client enrollment records against the proposed requirements to identify potential exposure before the rule is finalized.
Why CMS Is Expanding Revocation Authority Now
This proposed rule continues a pattern CMS has followed since 2019, steadily expanding its enrollment enforcement toolkit through successive rulemakings. The CY 2026 HHA PPS Final Rule, which took effect January 1, 2026, introduced retroactive revocation authority for certain grounds and shortened adverse action reporting windows to 30 days. The CY 2027 proposed rule takes that approach further by making retroactive revocations universal across all revocation grounds.
CMS has framed these changes as necessary to address a rise in improper payments and fraudulent enrollment activity, particularly among home health agencies, DMEPOS suppliers, and entities with complex ownership structures. The proposed rule cites a May 2025 AMA Journal of Ethics article and a 2023 systematic review linking private equity ownership in healthcare to increased short-term mortality and reduced staffing levels. CMS characterizes this as a Medicare-wide issue extending beyond any single provider type.
The practical consequence for legitimate providers is that compliance errors that would previously have resulted in a prospective revocation with 30 days of notice may now carry retroactive financial consequences. CMS is shifting its enforcement posture from corrective to punitive, and the proposed rule reduces the regulatory guardrails that currently constrain that discretion.
What Do Retroactive Revocations Mean for Provider Revenue?
Under current rules, many revocation grounds carry a prospective effective date. When CMS revokes a provider’s enrollment, it takes effect 30 days after the notice is mailed, giving the provider a window to wind down billing and resolve outstanding claims. The proposed rule would eliminate that buffer for all revocation grounds.
Consider a group practice that misses a 30-day reporting deadline for a change in managing employee. Under current rules, CMS could revoke the enrollment effective 30 days after notice. Under the proposed rule, the revocation would be retroactive to the day after the reporting deadline passed. Every claim submitted between the deadline and the revocation notice would become an overpayment subject to recoupment. For a multi-provider group billing Medicare at typical volumes, the financial exposure from even a short gap could reach tens of thousands of dollars.
CMS is also proposing to reduce the post-revocation claims submission period from 60 days to 15 days. This means providers would have just 15 days from the date of the revocation letter to submit any remaining claims for services already rendered. That is an extremely tight window for practices with complex billing operations or multiple service locations.
| Enforcement Area | Current Rule | Proposed Rule (CY 2027) |
|---|---|---|
| Revocation effective date | Prospective (30 days after notice) for most grounds | Retroactive to the date of noncompliance for all grounds |
| Post-revocation claims window | 60 days to submit remaining claims | 15 days from revocation letter date |
| Billing abuse determination | CMS must consider 4 enumerated factors | Enumerated factors removed; CMS retains broad discretion |
| PE/REIT ownership disclosure | Required on CMS-855A (SNFs only) | Extended to CMS-855B, CMS-855S, and CMS-20134 |
| Affiliation lookback period | 5-year lookback for disclosure | No lookback limit; all historical affiliations subject to disclosure |
| Cross-enrollment consequences | Other enrollments revoked only if triggering enrollment is revoked | Other enrollments can be revoked if triggering enrollment is denied (not just revoked) |
What Should Providers Do Before This Rule Is Finalized?
The comment period closes August 31, 2026. If finalized, these changes will require operational adjustments that most practices are not currently prepared for. Based on the patterns we see across the enrollment applications we manage, the following steps address the highest-risk areas.
- Conduct a full enrollment audit. Pull every active CMS-855 enrollment on file and verify that practice locations, ownership percentages, managing employees, and authorized officials are current and accurate. Any data that has changed but was not reported within the required window is a potential retroactive revocation trigger under the proposed rule.
- Verify all reportable individuals. Confirm that every person with 5% or more ownership interest, every managing employee, and every officer or director has been disclosed on the enrollment application. Under the proposed rule, CMS would broaden the definition of managing employee and eliminate the five-year lookback for affiliation disclosures.
- Check adverse action history for all reported persons. The proposed rule adds new revocation grounds for misdemeanor convictions related to financial misconduct or sexual assault within the past 10 years. Review the background of every owner, officer, and managing employee, including any newly captured misdemeanor history.
- Reconcile PECOS with NPPES. Ensure that every data point in your PECOS enrollment matches your NPPES record exactly, including practice addresses, taxonomy codes, and legal business names. Mismatches between these systems are already a top cause of enrollment issues, and the proposed rule raises the stakes for inconsistencies.
- Review proximity to any revoked providers. The proposed rule introduces a new revocation ground based on geographic concentration and co-location with revoked providers. If your practice shares a building, suite, or address with any entity that has been revoked from Medicare, document the independence of your operations.
- Assess private equity or REIT ownership exposure. If your organization has any private equity or real estate investment trust involvement in its ownership chain, prepare for expanded disclosure requirements on CMS-855B, CMS-855S, and CMS-20134 forms.
- Submit public comments by August 31, 2026. CMS is accepting comments through the Federal Register. Providers and industry organizations can raise concerns about specific provisions, particularly the removal of enumerated factors for billing abuse determinations and the universal retroactive effective date for revocations.
If your enrollment records have not been audited against the proposed CMS requirements, now is the time to close that gap. We review every active enrollment, verify reporting compliance, and flag potential exposure before it becomes a revocation risk.
Common Misreadings of the Proposed Rule
Several misconceptions are circulating about what the proposed rule actually does. Clarifying these prevents practices from either underreacting or overreacting to the changes.
The most common misreading is that retroactive revocations are already in effect. They are not. The rule is proposed, not finalized. CMS published it for public comment on July 6, 2026, and the comment period closes August 31, 2026. If finalized, the changes would take effect as part of the CY 2027 rulemaking cycle, typically January 1, 2027. Providers should prepare now but should not assume the final rule will mirror the proposed version exactly.
Another frequent error is assuming this rule only affects home health agencies. While the enrollment provisions are embedded in the Home Health PPS proposed rule, CMS states clearly that the enrollment changes apply to all providers and suppliers. Physician practices, group practices, behavioral health providers, and DME suppliers are all in scope.
A third misreading involves the billing abuse determination. CMS is not eliminating the requirement that a provider have a pattern or practice of submitting noncompliant claims. What CMS is removing are the four enumerated factors it currently must consider when making that determination, including claim denial rates and prior adverse action history. This gives CMS significantly broader discretion to define what constitutes abusive billing, but it does not create an entirely new revocation category.
Providers who handle their own enrollment often overlook the cumulative effect of these changes. Individually, each provision introduces a modest expansion of authority. Together, they represent a fundamental shift in the risk profile of Medicare enrollment compliance. One question we hear from practice managers is whether their current enrollment maintenance process is sufficient. In most cases, the answer is that it needs updating to account for the shorter reporting windows and expanded definitions the proposed rule introduces.
Managing Enrollment In-House vs. Outsourcing
The proposed rule raises the operational bar for enrollment compliance in a way that directly affects the in-house versus outsourced decision. Practices that manage enrollment internally now need to monitor a wider set of compliance triggers, track a broader definition of reportable individuals, maintain audit-ready documentation for retroactive review, and respond to any CMS development request within shorter timeframes.
For solo practitioners and small groups, the administrative burden of continuous enrollment monitoring is difficult to absorb without dedicated staff. A single missed 30-day reporting deadline for a change in practice location or managing employee could now carry retroactive financial consequences that did not exist under prior rules. The cost of a compliance gap is no longer measured in processing delays. Under the proposed rule, it is measured in recouped payments.
Outsourcing enrollment to a credentialing and enrollment partner shifts that monitoring burden to a team that tracks CMS deadlines, maintains PECOS records, and flags reporting triggers proactively. At Contracting Providers, we handle Medicare enrollment across 40 or more states and maintain a structured intake and audit process that catches compliance gaps before they become revocation risks. For practices navigating the CMS-855 application series, our team manages submission, follow-ups, and MAC coordination through the full enrollment lifecycle. Our clients use this approach to protect their billing privileges while keeping their administrative staff focused on patient care.
Frequently Asked Questions
When does the CMS Medicare enrollment revocation proposed rule take effect?
The rule is proposed, not final. CMS published it on July 6, 2026, and the public comment period closes August 31, 2026. If finalized without significant changes, the enrollment provisions would likely take effect January 1, 2027, as part of the CY 2027 rulemaking cycle. Providers should prepare now but should not treat the proposed provisions as current law.
What does retroactive revocation mean for Medicare providers?
A retroactive revocation means the revocation effective date is backdated to the date the noncompliance began, not 30 days after CMS sends notice. Claims submitted between the noncompliance date and the revocation date become overpayments subject to recoupment. This is a significant change from the current rule, which allows most revocations to take effect prospectively.
Does the proposed rule affect commercial payer enrollment?
Not directly. The proposed rule applies to Medicare enrollment under 42 CFR Part 424. However, a Medicare revocation frequently triggers downstream consequences with commercial payers and state Medicaid programs. Many commercial payers require active Medicare enrollment as a condition of network participation, so a Medicare revocation can cascade into lost commercial contracts.
How do I submit a public comment on the proposed rule?
Comments must be submitted through the Federal Register or Regulations.gov by 5:00 PM ET on August 31, 2026. Identify the proposed rule by its CMS designation (CMS-1844-P) and its Federal Register citation. Comments can address any provision in the proposed rule, and CMS is required to review and respond to substantive comments before finalizing.
What is the new CMS billing abuse revocation standard?
CMS proposes removing the four specific factors it currently must consider when determining whether a provider has a pattern or practice of submitting noncompliant claims. These factors include claim denial rates, prior adverse actions, the nature of the billing noncompliance, and other mitigating circumstances. CMS argues these factors constrain its ability to address abusive billing. The underlying requirement of a pattern or practice remains, but CMS would retain broader discretion in making that determination.
Are behavioral health providers affected by the proposed rule?
Yes. The proposed enrollment changes apply to all Medicare provider and supplier types, including behavioral health practitioners enrolled through the CMS-855I and behavioral health organizations enrolled through the CMS-855B. The retroactive revocation provisions, expanded managing employee definitions, and new misdemeanor-based revocation grounds all apply equally to behavioral health practices.
What is the 36-month rule CMS references in the proposed revocation grounds?
The 36-month rule requires certain provider types, including home health agencies, hospices, and DMEPOS suppliers, to reenroll in Medicare and complete required accreditation or surveys following a change in majority ownership. CMS proposes a new revocation and denial ground for providers that circumvent this rule. This provision primarily affects entities involved in ownership changes or acquisitions.
Next Steps
The CMS comment deadline is August 31, 2026, and the proposed enrollment revocation changes are likely to be finalized in some form for CY 2027. Start by auditing your current enrollment records against the proposed requirements. If your practice has not reviewed its CMS-855 filings recently, our guide to filing CMS-855I, 855B, and 855S applications walks through the process. For practices managing PECOS access, verifying your login and enrollment status is a critical first step. If you are unsure whether your enrollment records are current or need help preparing for the proposed changes, our enrollment team handles the full process.
Protect your Medicare billing privileges before the new revocation rules are finalized. Our enrollment specialists audit your records, verify compliance, and manage your CMS-855 filings so nothing falls through the cracks.
