15.1 CMS & Regulatory Compliance

Gerontological nurses practice inside a dense regulatory web. The Centers for Medicare & Medicaid Services (CMS) sets federal requirements for providers that bill Medicare or Medicaid. State licensure boards, state survey agencies, accrediting bodies, and professional nursing law add layers. For GERO-BC, the priority is knowing which rules shape daily nursing decisions—assessment, documentation, staffing awareness, resident rights, infection control, and quality reporting—not memorizing every regulation number.

Why Regulation Matters in Gerontology

Older adults are high utilizers of Medicare and Medicaid. Many receive care in skilled nursing facilities (SNFs), nursing facilities (NFs), home health, hospice, inpatient rehab, or hospitals. Payment and continued certification depend on meeting Conditions of Participation (CoPs) or nursing-home Requirements of Participation. Noncompliance can trigger citations, civil money penalties, denial of payment, directed plans of correction, or termination of the provider agreement. Clinically, the same standards protect residents from neglect, unsafe medication use, unnecessary restraints, and loss of dignity.

OBRA, Resident Rights, and Nursing Homes

The Omnibus Budget Reconciliation Act of 1987 (OBRA '87) transformed nursing-home regulation. Core expectations still guide practice:

• Resident rights: dignity, privacy, self-determination, freedom from abuse/neglect/exploitation, and freedom from unnecessary physical or chemical restraints
• Comprehensive assessment and an individualized care plan that reflects preferences and measurable goals
• Quality of care standards covering ADLs, pressure injuries, urinary catheters, nutrition, hydration, and psychosocial well-being
• Nurse staffing sufficiency to meet resident needs (federal and state rules evolve; nurses escalate unsafe staffing through chain of command)

When a resident declines functionally, develops a new pressure injury, or receives a new antipsychotic, the nurse should ask: Was the change assessed, care-planned, and justified clinically—or does documentation suggest a regulatory and quality failure?

MDS, RAI, and Accurate Assessment

In nursing homes, the Resident Assessment Instrument (RAI) centers on the Minimum Data Set (MDS). The MDS is a standardized, multidisciplinary assessment that:

1. Identifies clinical and functional problems
2. Triggers Care Area Assessments (CAAs) that deepen problem analysis
3. Informs the interdisciplinary care plan
4. Feeds case-mix and payment models (including SNF PDPM)
5. Supplies data for quality measures and public reporting

Nursing implications:

• Assess what you observe; do not code convenience answers
• Coordinate with therapy, social work, and dietary so Section GG function, mood, cognition, and skin findings are consistent across the record
• Understand that inaccurate MDS coding can produce wrong care plans, incorrect payment, and misleading quality metrics—all compliance risks
• Know look-back windows and assessment reference dates for the items you help complete

Surveys, Immediate Jeopardy, and Plan of Correction

State survey agencies, under CMS authority, conduct standard, complaint, and focused surveys. Surveyors use Critical Element Pathways to probe high-risk areas: abuse, accidents, pressure ulcers, unnecessary medications, infection control, dining, and more.

Immediate Jeopardy (IJ) means a situation has caused, or is likely to cause, serious injury, harm, impairment, or death. Examples include unsecured elopement doors for a wander-risk resident, systemic failure to treat hypoglycemia, or widespread abuse reporting failures. Nurses must:

• Protect the resident first (remove hazard, notify provider, increase supervision)
• Notify leadership immediately
• Document facts, actions, and notifications chronologically
• Participate honestly in interviews—never alter records after the fact

After citations, facilities submit a Plan of Correction (PoC) stating how the deficient practice was corrected for the affected resident(s), how systemic causes were addressed, and how compliance will be monitored. Bedside nurses often implement the monitoring audits named in the PoC.

Five-Star Quality Rating System

Nursing Home Care Compare publishes a Five-Star rating built from three domains:

1. Health inspections (survey history; heavily weighted)
2. Staffing (nurse hours and turnover metrics using payroll-based journal data)
3. Quality measures (short-stay and long-stay outcomes such as pressure ulcers, antipsychotic use, mobility decline, hospitalizations, and function at discharge)

CMS periodically refreshes methodology (including MDS Section GG risk adjustment and unfreezing of previously frozen measures). Nurses influence stars through skin prevention, antipsychotic deprescribing with behavioral alternatives, fall programs, accurate function documentation, and supporting stable staffing practices.

QAPI as a Regulatory Requirement

CMS requires nursing homes to maintain Quality Assurance and Performance Improvement (QAPI) programs that are ongoing, comprehensive, and data-driven. Effective QAPI:

• Addresses clinical care, quality of life, and resident choice
• Uses performance indicators, resident/family input, and staff feedback to prioritize problems
• Implements corrective actions and tracks whether change is sustained
• Continues through leadership turnover with adequate resources

QAPI is not a binder on a shelf. When fall rates rise or catheter-associated infections spike, the nurse should expect root-cause analysis, action plans, and audit feedback—not only in-service education.

HIPAA and Information Governance

The Health Insurance Portability and Accountability Act Privacy and Security Rules protect protected health information (PHI). Gerontological settings are high-risk for hallway conversations, shared rooms, visitor overhearing, and family members requesting records without authority. Nurses apply the minimum necessary standard, verify identity before disclosure, use secure messaging, and report suspected breaches promptly. Business associates (vendors, telehealth platforms) must have appropriate agreements—relevant when technology vendors touch clinical data.

Compliance Program Essentials for the Bedside Nurse

• Follow abuse reporting timelines and mandated-reporter duties without retaliation fear
• Escalate unsafe staffing, broken equipment, and missing supplies through chain of command
• Document contemporaneously; never backdate or "clean up" charts before survey
• Question orders that appear medically unnecessary or inconsistent with goals of care
• Participate in infection-control surveillance and antibiotic stewardship data collection
• Know how to access policies for restraints, elopement, elopement risk, and emergency preparedness

Regulatory fluency is a professional foundation skill: it protects residents, the nurse's license, and the organization's ability to keep serving older adults.

Medicare, Medicaid, and Setting-Specific Rules

Gerontological nurses coordinate care across settings with different CMS rulebooks:

• Acute care hospitals: CoPs covering nursing services, medication safety, discharge planning, and patient rights
• SNF Part A stays: skilled need, physician certification/recertification, and therapy intensity expectations tied to the plan of care
• Home health: face-to-face encounter rules, homebound status concepts, and OASIS assessment accuracy
• Hospice: election of benefit, interdisciplinary group, and comfort-focused documentation aligned with terminal prognosis
• PACE and other integrated models: dual-eligible older adults with capitated, community-preferring structures

Payment rules should never replace clinical judgment, but nurses who understand coverage constraints can advocate earlier for the right level of care and prevent unsafe, non-covered discharges.

Fraud, Waste, and Abuse Awareness

Upcoding therapy minutes, documenting services not rendered, or ignoring medical necessity can implicate the False Claims Act. Nurses are not coders, yet nursing notes are often the evidence trail. If a note says "resident ambulated 150 feet with CGA" when the resident was bedbound, that single entry can become a compliance problem. Ethical documentation is regulatory compliance.

Emergency Preparedness and Infection Control

CMS emergency-preparedness rules require plans for sheltering, evacuation, communication, and surge. Infection-control programs must include surveillance, isolation, outbreak response, and staff competency. During respiratory outbreaks in congregate settings, nurses execute transmission-based precautions, cohorting, and visitor policies consistent with current public-health and CMS guidance.

Putting Compliance Into Daily Workflow

A practical shift checklist for gerontological nurses:

1. Know the high-risk residents (elopement, choking, anticoagulation, restraint alternatives, pressure-injury risk)
2. Verify care-plan interventions match current orders and MDS-triggered problems
3. Report and document incidents before leaving shift—facts only
4. Protect PHI in rooms, stations, and telehealth spaces
5. Escalate IJ-level hazards immediately; do not wait for the next QAPI meeting
6. Contribute accurate assessment data for MDS/OASIS/other required instruments

Mastering CMS and related regulatory expectations lets the nurse translate policy into safer bedside care while supporting organizational survey readiness and public quality performance.