CMS Proposes Expanded Authority to Deny or Revoke Medicare Enrollment
CMS proposes new rules expanding authority to deny or revoke Medicare enrollment.
Why it matters: Health legal counsel must follow these changes to advise providers on compliance risks and Medicare participation rights amid broadened CMS enforcement powers.
- CMS proposed rule issued July 1, 2026, expands authority to deny or revoke Medicare enrollment.
- Rule allows retroactive revocation of enrollment to the date of noncompliance and recovery of payments, estimating $82 million in annual savings.
- CMS may revoke enrollment based on geographic areas with an excessive number of providers, though specific criteria for 'excessive' remain unspecified.
- Providers with convictions for certain misdemeanors within 10 years face automatic revocation; Part B suppliers must disclose private equity or REIT ownership.
On July 1, 2026, the Centers for Medicare & Medicaid Services (CMS) issued a proposed rule aimed at strengthening Medicare program integrity by broadening CMS’s authority to deny or revoke Medicare enrollment for healthcare providers and suppliers.
The proposal enables CMS to retroactively revoke enrollment to the date a provider became noncompliant and recover payments made during that period. CMS estimates this could reduce improper payments and save approximately $82 million annually.
Another notable element allows CMS to deny or revoke enrollment for providers operating in geographic areas CMS designates as high risk due to an "excessive" number of providers. However, the proposal does not detail the specific metrics or thresholds used to define "excessive," which may present challenges in enforcement and accuracy signaling.
The rule further requires automatic revocation for providers convicted of specified misdemeanors—including sexual assault or financial misconduct—within a 10-year lookback period, reflecting an expanded focus on safeguarding program integrity.
Additionally, all Medicare Part B suppliers must disclose any private equity or Real Estate Investment Trust (REIT) ownership on their enrollment applications, enhancing transparency about ownership structures that have drawn scrutiny in healthcare compliance.
CMS Administrator Mehmet Oz stated in the press release that these proposals "would give CMS stronger tools to protect Medicare beneficiaries and taxpayer dollars from fraud, waste, and abuse." This is a direct quote from the agency’s announcement, reflecting CMS’s enforcement intent.
Independent legal experts note that while strengthening enforcement authority is important, the lack of explicit criteria for geographic risk designations may result in enforcement uncertainty. Healthcare legal counsel should monitor further rulemaking and guidance to assess operational impacts and advise clients accordingly.
For healthcare and compliance legal professionals, staying abreast of these regulations is critical to managing risk and protecting clients’ ability to participate in Medicare programs.
By the numbers:
- $82 million — projected annual savings from retroactive revocations and improper payment recovery
- 10 years — lookback period for misdemeanor convictions triggering automatic enrollment revocation
- July 1, 2026 — date CMS issued the proposed rule
Yes, but: The proposal lacks detailed criteria on what constitutes an 'excessive' number of providers in a geographic area, which could impede enforcement clarity and provider compliance planning.
What's next: CMS will accept public comments on the proposed rule before finalizing it, with expected implementation timelines to follow the rulemaking process.