Skip to content

Published · Updated · United States

HIPAARule change

HHS OIG delegates permissive exclusion authority to CMS

The HHS Office of Inspector General has transferred permissive exclusion authority to the Centers for Medicare & Medicaid Services, enabling CMS to issue exclusions for HIPAA violations.

1 source · Office of Inspector General, Department of Health and Human Services

What happened

  • The change expands CMS’s enforcement toolkit for health‑care compliance.
  • No new statutory language was added, but the administrative authority shift is effective immediately.

Why it matters

Entities should watch CMS communications for exclusion notices and verify that their HIPAA compliance programs address the expanded enforcement risk.

Business impact

Exclusions can block participation in Medicare and Medicaid programs, threatening revenue streams and requiring rapid remediation to restore eligibility.

Drafted automatically from the sources below. How we write summaries

Does this summary seem wrong?

What to check

  1. monitor cms exclusion noticesHigh priority

    Set up alerts for any CMS exclusion actions affecting your organization.

  2. review exclusion criteriaMedium priority

    Ensure internal policies align with CMS’s permissive exclusion standards under HIPAA.

Discussion

No comments yet. Start the discussion.

Free account required