Critical Access Hospital (CAH) Medicare Compliance Audit: CAH Conditions of Participation Documentation Review
Ensure your Critical Access Hospital meets CMS conditions of participation. Learn what documentation surveyors and auditors expect under 42 CFR Part 485.
KNOWLEDGE CENTER
7/26/20267 min read
Every Critical Access Hospital’s ability to bill Medicare at all depends on maintaining compliance with a distinct set of federal conditions of participation (CoPs) found at 42 CFR Part 485, Subpart F — separate and different from the CoPs that apply to acute care hospitals under Part 482. These conditions cover everything from staffing and clinical records to emergency services, discharge planning, and the special requirements applicable to swing beds. State survey agencies and CMS periodically assess compliance with these conditions through on-site surveys, and deficiencies identified can jeopardize not just individual claims but the facility’s underlying CAH certification itself.
This article explains the structure of the CAH conditions of participation, the documentation elements surveyors and compliance auditors examine most closely across the highest-risk condition areas, how CAHs should prepare for and respond to a survey or compliance review, and what corrective action looks like when a deficiency is identified. It closes with how HealthBridge US supports CAHs maintaining conditions of participation compliance.
The Structure of CAH Conditions of Participation
The CAH conditions of participation at 42 CFR Part 485, Subpart F establish the full framework a facility must meet to be certified and remain certified as a Critical Access Hospital. The subpart addresses compliance with federal, state, and local laws; status and location requirements, including the rural location and distance criteria that support CAH designation; patient rights; emergency services; the number of beds and length of stay limitations discussed in connection with the 96-hour rule; physical plant and environment standards; emergency preparedness; organizational structure; staffing and staff responsibilities; provision of services; clinical records; surgical services; infection prevention and control and antibiotic stewardship programs; quality assessment and performance improvement; discharge planning; and special requirements for swing beds, along with additional provisions covering psychiatric and rehabilitation distinct part units and obstetrical services where applicable.
CMS certifies a facility as a CAH only after the facility has been surveyed by the state survey agency or by CMS directly and found to meet all applicable conditions. This means conditions of participation compliance is not a one-time certification event — it is an ongoing obligation subject to periodic resurvey, complaint-driven investigation, and, in some cases, focused review triggered by patterns identified through claims data or prior survey findings.
High-Risk Condition Areas for Documentation Review
Several condition of participation areas draw particularly close attention during survey and compliance review because they depend heavily on the quality and completeness of documentation rather than physical plant characteristics alone. Clinical records requirements call for a complete, accurate, and readily accessible record for every patient, and surveyors routinely sample records to confirm that history and physical documentation, physician orders, nursing notes, and discharge summaries are present, timely, and properly authenticated. Gaps here — missing signatures, undated entries, or incomplete documentation of key clinical events — are among the most commonly cited deficiencies in CAH surveys.
Discharge planning is another closely reviewed area. CAHs must have an effective discharge planning process focused on the patient’s goals and treatment preferences, ensuring an effective transition to post-discharge care and working to reduce preventable readmissions. Surveyors look for documented evidence that discharge planning began early in the stay, that the patient and, where appropriate, family or caregivers were involved in developing the plan, and that the plan addressed the specific post-discharge services the patient’s condition required.
Staffing and staff responsibilities requirements are reviewed for evidence that the CAH maintains adequate numbers of qualified personnel, that scope-of-practice and supervision requirements are documented and followed, and that credentialing and privileging records are current and complete for all practitioners providing services. Quality assessment and performance improvement (QAPI) documentation is examined to confirm the CAH maintains an effective, data-driven program that identifies and addresses quality and safety issues on an ongoing basis, rather than treating QAPI as a periodic, check-the-box exercise disconnected from actual clinical operations.
Emergency services documentation — including staffing coverage, response time logs, and evidence that emergency protocols are followed and periodically tested — is reviewed given the central role emergency care plays in the CAH model. Infection prevention and control and antibiotic stewardship program documentation has drawn increasing scrutiny in recent survey cycles, with surveyors expecting to see an active surveillance and reporting process, not merely a written policy that is not reflected in actual practice.
How Survey and Compliance Review Differs From Claim-Level Audit
Conditions of participation review operates on a different track than claim-level Medicare medical review conducted by Medicare Administrative Contractors (MACs) or Recovery Audit Contractors (RACs). Rather than evaluating whether a specific claim’s documentation supports the diagnosis or service billed, state survey agencies and CMS assess whether the facility’s overall systems, staffing, and documentation practices meet the conditions required for continued CAH certification. A deficiency identified in a conditions of participation survey can result in a required plan of correction, a follow-up survey to verify correction, and, in serious or uncorrected cases, termination of the facility’s Medicare provider agreement — a far more consequential outcome than an individual claim denial.
That said, the two review tracks are not entirely independent. Clinical record deficiencies identified during a conditions of participation survey often mirror the same documentation gaps that lead to claim-level ADR denials, since both ultimately depend on the completeness and clarity of the same underlying medical record. CAHs that treat clinical documentation improvement as a unified compliance function — addressing both survey readiness and claim-level audit defensibility together — are generally better positioned on both fronts than facilities that manage the two as entirely separate initiatives.
Preparing for a Conditions of Participation Survey
CAHs benefit from a standing, internally led mock survey process that mirrors the actual state survey methodology, sampling clinical records across the same high-risk condition areas surveyors examine and identifying gaps before an actual survey occurs. This process should include a review of QAPI program documentation to confirm the program reflects genuine, ongoing quality monitoring tied to real clinical data, a review of credentialing and privileging files for completeness and currency, and a review of discharge planning documentation across a sample of recent patient records to confirm the process reflects the individualized planning CMS requires.
Emergency preparedness and infection control programs should be reviewed against their own specific documentation requirements — including required drills, surveillance logs, and antibiotic stewardship reporting — on a defined schedule throughout the year rather than only in anticipation of a known survey date, since surveys can also be triggered by complaints or data-driven referrals without significant advance notice.
Complaint-Driven and Data-Triggered Surveys
Not every conditions of participation review follows a predictable, scheduled resurvey cycle. State survey agencies also conduct complaint-driven investigations in response to reports from patients, families, or staff, and CMS increasingly uses claims and quality data to identify facilities warranting a targeted, unscheduled review of specific condition areas. This means a CAH cannot rely solely on advance notice of a scheduled survey to prioritize compliance preparation; a complaint about a specific discharge or a data pattern suggesting a quality concern can trigger a focused, short-notice review of the relevant condition area at any time. CAHs that maintain continuous, rather than periodic, compliance monitoring are far better positioned to respond confidently to an unscheduled complaint investigation, since their documentation practices reflect ongoing, embedded compliance rather than a temporary state achieved shortly before an anticipated survey date.
Responding to Identified Deficiencies
When a survey identifies a deficiency, the CAH must submit an acceptable plan of correction describing the specific steps that will be taken to address the deficiency, the timeline for completion, and the process for monitoring ongoing compliance going forward. An effective plan of correction addresses not only the specific instance identified by the surveyor, but the underlying systemic issue that allowed the deficiency to occur, since surveyors and CMS evaluate whether the proposed correction is reasonably likely to prevent recurrence, not merely whether it resolves the single cited example.
Facilities should also conduct their own internal review to determine whether the deficiency identified in one sampled record is present more broadly across the patient population, correcting any additional instances found and documenting that broader review as part of the compliance response. This proactive posture is generally viewed favorably in any follow-up survey and reduces the likelihood that the same underlying issue resurfaces in a subsequent review cycle.
Building a Sustainable Conditions of Participation Compliance Program
The most effective CAH compliance programs treat conditions of participation compliance as a continuous, year-round function rather than an activity concentrated around anticipated survey dates. This includes regular internal audits of clinical records, discharge planning documentation, and QAPI activity; ongoing staff education tied to specific condition areas, particularly clinical records completeness and discharge planning individualization; and a designated compliance owner responsible for tracking regulatory updates to the CAH conditions of participation and translating those changes into updated internal policy and documentation practice.
The Role of Governing Body and Organizational Structure Documentation
Surveyors also examine documentation supporting the CAH’s organizational structure and governing body oversight, since several conditions of participation depend on demonstrating that the facility’s leadership actively oversees clinical and quality operations rather than delegating that responsibility informally without documented accountability. This includes governing body meeting minutes reflecting review of QAPI findings, credentialing and privileging decisions, and significant clinical incidents; medical staff bylaws and rules that are current and consistently followed in practice; and documented lines of authority connecting clinical department leadership back to the governing body. A common finding in this area involves governing body documentation that exists on paper but does not reflect substantive engagement with the specific quality and safety issues the QAPI program has identified — for example, meeting minutes that note a QAPI report was received without any documented discussion, follow-up questions, or action items assigned. Surveyors increasingly look for evidence of a genuine feedback loop between frontline quality data and governing body oversight, since this feedback loop is central to how CMS expects the QAPI and organizational structure conditions to function together in practice, rather than as separate, independently satisfied requirements.
How HealthBridge US Supports Your Critical Access Hospital
Conditions of participation compliance touches nearly every clinical and administrative function within a Critical Access Hospital, and the consequences of sustained noncompliance extend well beyond any single claim to the facility’s fundamental ability to participate in the Medicare program. HealthBridge US supports Critical Access Hospitals with mock survey preparation, clinical record and discharge planning documentation review, QAPI program assessment, plan of correction development, and ongoing compliance program design aligned to 42 CFR Part 485. If your CAH wants to strengthen conditions of participation compliance, prepare for an upcoming survey, or needs support responding to a recent survey finding, HealthBridge US is here to help — contact our team to discuss your compliance audit and documentation review needs.
References
• Electronic Code of Federal Regulations. 42 CFR Part 485, Subpart F (Conditions of Participation: Critical Access Hospitals). https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-485/subpart-F/
• Centers for Medicare & Medicaid Services. “Critical Access Hospitals.” https://www.cms.gov/medicare/health-safety-standards/certification-compliance/critical-access-hospitals
• Centers for Medicare & Medicaid Services. “Information for Critical Access Hospitals” (MLN006400). https://www.cms.gov/files/document/mln006400-information-critical-access-hospitals.pdf
• Centers for Medicare & Medicaid Services. “Hospitals” (Conditions for Coverage/Conditions of Participation). https://www.cms.gov/medicare/health-safety-standards/conditions-coverage-participation/hospitals
• Centers for Medicare & Medicaid Services. Medicare Claims Processing Manual, Chapter 29 (Appeals). https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/clm104c29.pdf
• U.S. Government Accountability Office. “Critical Access Hospitals: Views on How Medicare Payment and Other Factors Affect Hospital Operations.” https://www.gao.gov/assets/gao-23-105950.pdf
HealthBridge US is here to help. Our compliance specialists support Critical Access Hospitals with conditions of participation documentation review and survey readiness — contact us to protect your facility’s Medicare certification.

Some or all of the services described herein may not be permissible for HealthBridge US clients and their affiliates or related entities.
The information provided is general in nature and is not intended to address the specific circumstances of any individual or entity. While we strive to offer accurate and timely information, we cannot guarantee that such information remains accurate after it is received or that it will continue to be accurate over time. Anyone seeking to act on such information should first seek professional advice tailored to their specific situation. HealthBridge US does not offer legal services.
HealthBridge US is not affiliated with any department of public health agencies in any state, nor with the Centers for Medicare & Medicaid Services (CMS). We offer healthcare consulting services exclusively and are an independent consulting firm not affiliated with any regulatory organizations, including but not limited to the Accrediting Organizations, the Centers for Medicare & Medicaid Services (CMS), and state departments. HealthBridge is an anti-fraud company in full compliance with all applicable federal and state regulations for CMS, as well as other relevant business and healthcare laws. The badges, icons, and achievement graphics displayed on this website represent proprietary performance metrics, volume milestones, and internal corporate recognition issued exclusively by our corporate affiliate network at SummitRidge. These visual markers are utilized solely as historical indicators of enterprise growth, operational longevity, and volume-based milestones cleared within our shared corporate ecosystem.
© 2026 HealthBridge US, a California corporation. All rights reserved.
For more information about the structure of HealthBridge, visit www.myhbconsulting.com/governance
Legal
Resources
Based in Los Angeles, California, operating in all 50 states.














