CMS gains new exclusion power over physicians in federal health programs
HHS has handed CMS a tool with immediate consequences for physicians, billing organizations, and every practice that depends on federal payer revenue. Under a Federal Register notice published Oct. 14 and effective immediately, the CMS administrator can now exercise permissive exclusion authority under Section 1128(b) of the Social Security Act, a power that had rested exclusively with the HHS Office of Inspector General.
The shift is administrative on paper and severe in practice. Exclusion from federal health programs can cut a clinician off from the reimbursement streams that keep an office, hospital service line, or affiliated billing entity alive. In practical terms, it can end a provider’s ability to participate in Medicare, Medicaid, and other federal programs, and it can also make it difficult for that person to work anywhere that bills those programs.
A power once reserved for OIG now sits with CMS
Before this delegation, OIG was the only federal body able to exclude individuals and entities from all federal health programs. HHS Secretary Robert F. Kennedy Jr. delegated permissive exclusion authority to the CMS administrator, but the delegation does not transfer every enforcement function. OIG retains its own authority, and CMS does not gain the power to hold hearings or issue regulations under this notice.
The legal architecture matters because exclusion is not a routine administrative adjustment. It is one of the harshest sanctions in the federal payer system, and it can ripple far beyond the targeted physician. A single exclusion decision can affect employment, credentialing, network participation, and a practice’s billing structure. For independent physicians, the impact can be immediate and structural; for larger systems, it can still destabilize contracts, compliance reviews, and physician recruitment.
Conduct that can trigger exclusion spans fraud, licensure, and unnecessary care
The delegation covers permissive exclusion grounds already recognized under federal law. Those include kickbacks and other prohibited activities, license revocations or suspensions, excessive charges, unnecessary services, and certain fraud-related misdemeanor convictions.
That list reaches into the core of medical practice behavior. Kickback allegations strike at referral integrity. Licensure actions often signal a breakdown in professional oversight. Excessive charges and unnecessary services speak directly to utilization patterns and billing judgment, which means the authority can touch both overt fraud and conduct that appears abusive even when it does not fit a classic criminal case. For physicians, the scope is broad enough to make audit findings, state board actions, and pattern-based billing concerns more consequential than before.
Attorneys see a sanction with career-ending force
Health care attorneys describe the power in unusually blunt terms because its downstream effects are so severe. An excluded individual really cannot have a job at any kind of organization that bills federal health care programs, Tony Maida, a partner at McDermott Will & Schulte, said. Jeff Wurzburg, a partner at Norton Rose Fulbright, put the practical effect even more sharply: “It really can be a death penalty for a provider.”
The concern is not merely theoretical. Wurzburg warned that without clear notice about when CMS would use the authority, the move could chill physicians who dispute audits or challenge overpayment demands. That is a serious concern in a system where audit defense is often the only barrier between a billing disagreement and a broader compliance case. When the same agency that oversees reimbursement also gains the ability to initiate exclusion, providers may assume a more aggressive posture from the government side even before CMS has explained how often it intends to use the tool.
The agency has not yet defined its enforcement threshold
What remains unresolved is how CMS will apply the new power in real cases. The notice does not spell out what level of conduct would trigger exclusion, how CMS will sequence investigations before invoking the authority, or how appeals would work once the agency acts. Those unanswered operational questions matter because exclusion is so disruptive and because physicians need a predictable enforcement standard to evaluate risk.
The lack of procedural detail leaves clinicians and compliance teams in a narrow space between broad authority and limited guidance. A revocation, suspension, or fraud-related conviction already creates exposure under current law, but the new delegation raises a second question: whether CMS will use this authority as a targeted backstop or as a more active enforcement lever in cases that previously would have stayed within the OIG process.
Why the delegation changes the compliance posture inside practices
For physicians, the practical consequence is a more complex enforcement environment. Audits that once seemed like reimbursement disputes may now carry added exclusion risk if CMS chooses to act on unnecessary services, kickbacks, or licensure problems. That changes how practices think about documentation, referral relationships, ownership structures, and appeal strategy. It also places a premium on internal compliance systems that can detect patterns before they become exclusion-worthy conduct.
The authority may also influence how organizations respond to overpayment allegations and medical necessity reviews. A provider facing aggressive scrutiny will need to think not only about recoupment but also about whether the underlying facts could fit one of the exclusion categories now sitting closer to CMS enforcement. In a federal payment environment, that is a meaningful shift in leverage.
The agency has not said how often it will use the power, and that silence leaves physicians with a new risk and very little calibration. Until CMS publishes clearer enforcement signals, the delegation remains a potent but still undefined threat to participation in federal health care programs.