Yes, and the bar just moved. In its CY 2027 home health final rule (CMS 1844 F, Federal Register, November 9, 2026), CMS removed every factor it once weighed before revoking a provider for a “pattern or practice” of noncompliant claims, including the share of claims denied. The change reaches physician practices in early January 2027.
What did CMS change in the enrollment rules?
CMS finalized a package of Medicare enrollment changes inside its annual home health payment rule. The rule text says these changes apply to all Medicare provider and supplier types unless a section says otherwise, so they reach solo doctors, group practices and nurse practitioners.
The title of the rule mentions home health, which is why many practice owners have not noticed it. Buried in section V.C are the provisions that matter to an office based group. CMS received about 375 sets of comments on them and finalized most as proposed. CMS filed the rule for public inspection on November 4, 2026, and the enrollment provisions take effect 60 days after that filing.
The biggest changes for practices are these:
- CMS removed the four factors in 42 CFR 424.535(a)(8)(ii) that it used to weigh when it found a pattern of noncompliant claims.
- CMS can now revoke for false or misleading information on any enrollment related form, including the Form CMS 588 for electronic funds transfer and opt out affidavits.
- CMS made its remaining prospective revocation grounds retroactive, so a revocation can reach back to the date the problem began.
- A revoked provider now has 15 calendar days from the date of the revocation letter to submit its final claims. The old window was 60 days.
- CMS can now send denial and revocation notices by email.
Can denied claims alone lead to a revocation?
They can count toward one. CMS now judges a pattern of noncompliant claims on the “facts and circumstances” of each case, with no list of factors it must weigh and no minimum number of claims.
The old rule told CMS to consider the percentage of claims denied, any history of final adverse actions, the type of billing error, and any other relevant facts. CMS wrote that these factors “often constrain” its ability to act. It said most aberrant billing comes from providers with no adverse history, and that bad billing can happen even when the denial rate stays low. CMS also noted the old factor looked only at denied claims and ignored rejected claims.
Commenters asked CMS to say that isolated, clerical or quickly corrected errors do not count as a pattern. CMS declined. It repeated that it can act when “several of the provider’s claims do not meet Medicare requirements,” and said that position dates back to 2014. CMS also declined to say whether technical denials, documentation gaps, coding disagreements or claims later overturned on appeal count toward the analysis. It called those questions outside the scope of the rule.
CMS did promise restraint. It wrote that it “will only revoke under this ground when genuinely warranted and not as a matter of course.” A revocation is still a serious step, and most practices will never face one. The difference is that a practice can no longer point to a low denial rate or a clean history as a defense written into the regulation.
What does a retroactive revocation mean for my payments?
It means the revocation date can fall months before the letter arrives. Medicare can then treat payments made after that date as payments to a provider that was out of compliance.
CMS gave an example in the rule. A state revokes a medical license on March 1, and CMS mails a revocation notice on March 15. Under a prospective date, the provider could bill until April 15. Under a retroactive date, the revocation starts March 1.
The change that touches the most practices covers late enrollment updates. Under 42 CFR 424.516(d), physicians and physician groups must report a change of ownership, an adverse legal action or a practice location change within 30 days, and all other enrollment changes within 90 days. Before this rule, only ownership, adverse action and location changes carried a retroactive revocation date. Now a revocation for any late update reaches back to the day after the reporting deadline. CMS named a new managing employee, a new bank, a new billing agency and a new correspondence address as examples.
Other grounds now run from the date of the event. A revocation for misusing a billing number starts on the date of the conduct. One for false information on a form outside the enrollment application starts on the date of the submission. One for failing to give CMS access to records starts the day after the access deadline.
How fast must a revoked practice submit its last claims?
Within 15 calendar days of the date on the revocation letter. That clock covers all services furnished before the revocation effective date.
Commenters asked for 30 or 45 days, or for 15 business days. CMS kept 15 calendar days. Some also worried that a letter could go astray. CMS answered that it and the MACs “strive to take appropriate steps” to deliver letters on time. Because notices can now arrive by email, a practice that ignores its enrollment inbox could lose most of that window before anyone reads the letter.
What did CMS decide not to finalize?
CMS dropped two proposals after heavy pushback. It will not revoke a provider’s other enrollments just because one new enrollment application was denied. It also dropped a plan to deny enrollment when anyone with “any other form of business or financial relationship” with the applicant sits under a payment suspension.
CMS did finalize several other items. It can now revoke for certain misdemeanor convictions, such as fraud tied to a health care program or patient abuse. It added a rule that records a practice keeps for orders, referrals, certifications and prescriptions must be accurate, complete and compliant. Practices can also now rebut a reactivation effective date within 15 days.
What this means for practices with 1 to 15 providers
Small groups feel this rule most because one person often handles billing, enrollment and the office mailbox. A missed update or a run of preventable denials now carries more weight. Here is where to start.
- Audit every PECOS record this month. Check each NPI for current practice locations, managing employees, bank account, billing agency and correspondence address. Fix anything stale before the new rules take effect in January.
- Set a 30 and 90 day clock. Any time you add a location, hire an office manager, switch banks or change billing companies, log the date and the reporting deadline. File the update well inside that window.
- Route CMS email to a shared inbox. Use a role address such as enrollment@ that at least two people check daily. A 15 day claim window leaves no room for a missed message.
- Track denials by root cause. A rising count of the same denial reason is the kind of “pattern” CMS can now weigh without limits. Fix the cause at the front end, then document the fix.
- Answer documentation requests on time. Calendar every ADR and records request. A late response can now trigger a revocation dated the day after the deadline.
- Check every form for accuracy. The false information rule now covers EFT forms, opt out affidavits and letters naming authorized officials. CMS set no intent or materiality test, so an honest mistake is still a risk.
A shared calendar, a named owner for each enrollment task and a monthly denial review cover most of the risk.
Frequently asked questions
Does the CY 2027 home health rule apply to physician practices?
Yes. CMS says the enrollment provisions in section V.C apply to all Medicare provider and supplier types unless a section states otherwise. Only a few items, such as hospice reactivation surveys, apply to specific provider types.
When do the new Medicare enrollment rules take effect?
The enrollment provisions take effect 60 days after CMS filed the rule for public inspection on November 4, 2026. That places the start in early January 2027.
Is there a denial rate that triggers revocation?
No. CMS refused to set any numerical threshold or define “pattern or practice” with a number of claims or a time period. It will judge each case on its facts.
How long is a revoked provider barred from Medicare?
The rule says a revoked provider is generally barred from reenrolling for 1 to 10 years.
Can I fix an enrollment error before CMS revokes?
Only in limited cases. CMS allows a corrective action plan for general noncompliance with enrollment requirements, and this rule extends that option to denials on the same ground. CMS refused to create a broader cure period before revocation.
Will CMS send revocation letters by email now?
Yes. CMS finalized email as an accepted way to send denial and revocation notices. It said it will look at emailing several contacts on file.
What should my practice do next?
Start with a clear picture of your enrollment records and your denial patterns, since CMS can now weigh both more freely. WeBill Health works as a revenue defense partner for independent practices, with 24/7 CAQH and PECOS lifecycle monitoring and human pre submission review by coding experts who use payer rule libraries built by specialty and carrier. That process supports a 98% clean claim rate. To find the enrollment gaps and repeat denials that put your practice at risk, request a Revenue Health Audit.
Sources
- Federal Register, November 9, 2026: CY 2027 Home Health Prospective Payment System Rate Update; Medicare Provider Enrollment, DME and DMEPOS Policies (CMS 1844 F)
- Federal Register public inspection copy of the final rule, filed November 4, 2026 (section V.C, Provider Enrollment)
- eCFR, 42 CFR 424.516: reporting requirements for physicians and physician organizations
- Federal Register, July 6, 2026: CY 2027 Home Health proposed rule
