Provider-based attestation compliance for off-campus hospital outpatient departments (HOPD) remains a high-risk Medicare issue for hospitals, particularly for off-campus clinics and recently acquired physician practices.
Provider-based status allows hospitals to bill under the Hospital Outpatient Prospective Payment System (OPPS) at more favorable rates designed to cover higher hospital overhead, and allow the ability to utilize the 340B drug program at these locations. The Consolidated Appropriations Act of 2026 formally requires attestation of compliance with complex regulations and significantly penalizes noncompliance.
Hospitals need to start preparing a compliance framework to review their provider-based compliance and to outline how it will meet the new attestation requirements. The underlying regulations that need to be reviewed under 42 CFR § 413.65 are not changing, so hospitals shouldn’t wait until Centers for Medicare & Medicaid Services (CMS) issues new implementation instructions to start their review.
CMS hasn’t required hospitals to submit attestations to confirm compliance with the regulations under 42 CFR § 413.65 for over 20 years. Attestations were voluntary yet beneficial in reducing financial risk of being out of compliance. Other than the voluntary attestation process, hospitals needed to act in good faith that the regulations were being followed.
With the passage of The Consolidated Appropriations Act on February 3, 2026, hospitals must be aware of the new requirements on the attestation process for HOPDs and act accordingly or lose the status.
The Consolidated Appropriations Act of 2026 Key Takeaways
Here’s what you need to know about the Consolidated Appropriations Act of 2026 as it relates to provider-based attestation compliance.
- For hospitals to maintain provider-based status and the associated benefits, hospitals must submit an initial attestation between January 1, 2026, and December 31, 2027. Any location that fails to submit will have its provider-based status automatically revoked.
- CMS must still go through the proposed rulemaking and comment process to finalize any new attestation processes that hospitals are to follow—if any; establish a review process including but not limited to on-site visits; and establish a schedule in which hospitals will have to submit an additional attestation.
- Hospitals can follow the current voluntary attestation process under 42 CFR § 413.65(b)(3) prior to the issuance of a new process.



