The CY2027 proposed rule's enrollment provisions didn't get the 2.4% headlines. They carry more operational risk.

The CY2027 Home Health PPS proposed rule (CMS-1844-P), published July 6, generated coverage for the 2.4% aggregate payment increase. Payment rates, LUPA thresholds, and the wage-index RFI were covered here last week. Less covered: the same rule contains a set of provider enrollment changes that apply to every Medicare-enrolled provider in the country — not just HHAs — and carry different, more immediate operational risk than the rate update. Comment deadline for both sets of provisions: August 31, 2026 at 5:00 PM ET.

Retroactive revocations for every ground — not just some

Under current 42 CFR 424.535 regulations, most Medicare revocations take effect prospectively: 30 days after CMS or a MAC mails the revocation notice. A narrow set of grounds already trigger retroactive effect — billing privilege abuse is the clearest example. CMS proposes eliminating the prospective track entirely. Under the proposed rule, every revocation ground would take effect retroactively to the date the underlying noncompliance began, regardless of when the revocation notice was sent.

CMS estimates this change would recover approximately $82 million annually in payments made between the date of noncompliance and the date of the revocation letter. For an HHA, this reframes the financial stakes of any open compliance gap. A billing practice characterized as noncompliant and traced back 18 months becomes an 18-month clawback exposure — not a prospective payment halt from the date a contractor mailed a letter. Counsel retained after a revocation notice arrives may find the liability window is substantially larger than the most recent billing period.

Geographic density as a new revocation ground

CMS proposes a revocation basis with no precedent in existing enrollment regulations: CMS could deny or revoke a provider's Medicare enrollment on the grounds that the provider is located in a geographic area with an excessive concentration of enrolled providers and suppliers — a pattern CMS links to elevated fraud risk. The explicit context is the 310 new HHA enrollments in Los Angeles County in 2025 alone, a spike integrity contractors flag as fraud-displacement behavior following concentrated enforcement in a market.

Industry advocates have called this overreach, and the objection is structural: an individual agency operating compliantly cannot control how many other providers enrolled in its MSA. Being located in Los Angeles, Miami-Dade, or the Chicago metro is not evidence of individual noncompliance. National Alliance for Care at Home and NAHC state affiliates are coordinating comments on this specific provision. The August 31 comment window is the mechanism to define what "excessive concentration" means before it appears in a final rule.

Misdemeanor convictions and extended re-enrollment bar

CMS proposes a new enrollment denial and revocation basis: a misdemeanor conviction related to financial misconduct or sexual assault within the past 10 years, applicable to any owner or managing employee of the enrolled entity — not just the individual whose NPI is enrolled. This extends enrollment review to the personal histories of everyone with operational control over the organization. CMS also proposes extending the re-enrollment bar — currently 1–3 years for most denial reasons — to up to 10 years for any enrollment denial reason. An agency revoked under any of the proposed expanded grounds faces a decade-long prohibition on re-enrollment.

What your agency should do before August 31

1. Identify any open compliance gaps and assess retroactive exposure. Under the proposed rule, the clawback window begins at the date noncompliance started — not the date a revocation letter arrives. Claims for patients during hospitalization windows, face-to-face documentation gaps, and EVV exception rates each carry a different retroactive horizon depending on how far back the pattern runs. Know your exposure before CMS does.
2. Audit ownership and managing-employee backgrounds for the past 10 years. The proposed misdemeanor ground covers everyone with ownership or management control. An internal review now is materially cheaper than a surprise revocation ground cited in a contractor's notice.
3. If you operate in a high-enrollment-density market, document your legitimate clinical operations. The geographic-density ground is the most likely to generate enforcement disputes. Agencies in LA, Miami, Houston, Chicago, or Detroit metros should confirm their billing patterns are defensible against outlier analysis before this provision finalizes.
4. Submit comments before August 31. Individual agency comments documenting compliant operations in a high-concentration market directly constrain how CMS defines "excessive" in the final rule. The comment record is how legitimate agencies protect themselves from a provision designed to catch fraudulent ones.

What we built for this

Carelytic's billing pipeline cross-references every claim date against HETS eligibility status and flags visits where the claim date falls within a known facility admission window — the billing pattern most commonly cited in retroactive enforcement actions. Pre-sign QA flags OASIS-to-diagnosis alignment gaps before a claim enters the billing queue. Every transaction carries an immutable audit trail with user ID, timestamp, and reason code. In a proposed environment where revocations apply retroactively to the first day of noncompliance, the documentation record built correctly from the first visit is the evidence base when a program integrity contractor's letter arrives.