CMS broadens Medicare enforcement to reach owners and parent companies
CMS has moved to expand its authority over Medicare billing privileges, giving regulators a wider path to deny or revoke enrollment when problems trace back to owners or parent companies rather than the provider entity alone. The final rule, released Wednesday as part of the 2027 Home Health Prospective Payment System update, closes a long-recognized enforcement gap in Medicare program integrity. In practical terms, it means a provider can no longer rely on a clean corporate shell if the controlling company has run afoul of other federal health programs or has faced licensing action in another state.
The rule is designed to reach the corporate structures that have become more common across post-acute care. Private equity ownership has intensified federal scrutiny because complex ownership chains can obscure who is actually directing operations, billing decisions, and compliance culture. CMS said its revised authority is meant to hold bad actors accountable and protect taxpayer dollars, with an estimated annual savings of $82 million.
One sentence captures the policy shift: ownership now matters as much as the facility name on the enrollment form.
Ownership changes now carry direct Medicare consequences
Under the final rule, CMS can deny or revoke Medicare enrollment not only for a provider’s own violations, but also for misconduct tied to owners or parent companies. The agency can act when a controlling entity has had a license suspended or revoked in another state, or when another federal healthcare program has suspended that entity. CMS also made clear that enforcement actions can be applied retroactively to the date the agency or its contractors notify a provider of noncompliance.
That retroactive timing is consequential. Once a notice goes out, the provider’s billing exposure begins immediately, which raises the stakes for organizations that have undergone rapid acquisitions, management turnover, or ownership restructuring. For operators, the rule creates a stronger incentive to verify the compliance history of every upstream owner before a deal closes. For regulators, it narrows the space in which ownership changes can be used to outrun prior misconduct.
The policy reflects a familiar fraud pattern in healthcare: bad actors can disappear into a new corporate structure, leaving enforcement agencies to chase a different legal entity after the underlying business continues operating. By linking enrollment status to owner conduct, CMS is trying to follow the money and the control chain rather than stopping at the provider’s formal registration record.
Home health and hospice face tighter reenrollment rules
The most immediate operational impact falls on home health agencies, hospices, and medical equipment suppliers. When these providers undergo a change in majority ownership, including an acquisition by a private equity firm, they must now reenroll as new providers with Medicare. Failure to complete the new accreditation process can jeopardize their ability to enroll or bill the program.
CMS has already treated home health and hospice as high-risk sectors in its fraud-prevention strategy. Earlier this year, the agency imposed a six-month pause on new Medicare enrollments for those providers, while also pledging deeper data-driven scrutiny of enrollment patterns and fraud indicators. The final rule extends that posture by making ownership transition itself a trigger for renewed oversight rather than a back-office disclosure.
In these sectors, the clinical stakes are not abstract. Home health and hospice care often serve older, frailer patients who depend on accurate billing, stable staffing, and continuity of care. When ownership changes are paired with aggressive growth strategies or thin compliance infrastructure, the result can be a business model that prioritizes rapid expansion over patient-centered operations. CMS is signaling that such models will face a higher burden before they can access Medicare funds.
A tougher fraud posture meets a payment increase for home health
The enforcement expansion did not arrive in a vacuum. It fits into the Trump administration’s broader campaign against what it describes as fraud, waste, and abuse across federal healthcare programs. CMS has already joined multi-agency enforcement efforts and has deferred billions of dollars in Medicaid payments to states accused of weak oversight. The new rule extends that same posture into Medicare enrollment and billing oversight, especially where ownership structures have made accountability harder to pin down.
At the same time, CMS finalized a 2.4% home health payment increase for next year, equal to $415 million in additional spending. The increase comes as Medicare continues shifting home health reimbursement away from pure volume and toward a payment system based more heavily on patient characteristics. The agency is trying to do two things at once: pay for legitimate care more accurately while tightening the gate around providers that may be exploiting program blind spots.
That pairing matters. Stronger payment integrity rules are easier to defend politically when they are coupled with a visible rate increase for compliant providers. CMS is not cutting home health reimbursement in this rule; it is separating payment policy from ownership accountability. Providers that document services appropriately may benefit from the rate update, while those with problematic ownership histories face a more demanding enrollment review.
Hospice oversight tightens alongside new payment scrutiny
Hospice providers received a separate pay bump last month under a July final rule, which raised rates by 2.3%, or $755 million. That rule also introduced the Service and Spending Variation Index, a new fraud-detection measure that tracks hospice utilization and spending on services unrelated to end-of-life care. Together, the two rules point to a more assertive CMS strategy: pay more carefully, measure more closely, and use ownership data as an enforcement trigger.
The agency’s focus on hospice and home health reflects a view that these segments combine rapid growth, limited direct oversight, and vulnerability to misuse. Those characteristics can attract investors seeking margin expansion, but they also create conditions in which billing abuse can spread quickly if compliance controls lag behind corporate dealmaking. CMS is betting that earlier intervention at the ownership level will make downstream fraud easier to stop.
For hospitals, physicians, post-acute executives, and compliance teams, the message is direct. Medicare enrollment is no longer just a provider-level credentialing issue; it is now tied to the behavior of the people and companies behind the provider. Organizations with acquisition plans, multi-state ownership, or prior enforcement history will need to scrutinize their structures with far greater care before billing Medicare under a changed corporate umbrella.
The unresolved issue is how aggressively CMS will use the new authority in practice, especially as private equity-backed deals continue to reshape post-acute care ownership and as providers try to balance compliance costs against already thin margins.