CMS QAPI requirements by facility type
QAPI is the quality program CMS requires of most providers, and the rule differs by facility type.
Start here.
- 42 CFR 416.43
What 42 CFR 416.43 requires of an ASC's QAPI program
An ASC must run QAPI, the quality program CMS requires. It tracks quality indicators, adverse patient events and infection control, finds causes and proves fixes last. The governing body owns it. Incident reports feed it, and corrective actions prove it.
CMSRead the guide - 42 CFR 483.75
Nursing home QAPI and the QAA committee under 42 CFR 483.75
Every nursing home needs a written QAPI plan, the quality program CMS requires. It also needs a QAA committee that meets at least quarterly. The committee tracks adverse events, finds causes, runs at least one improvement project a year and proves fixes last. Surveyors check QAPI last, then ask if the committee already knew about the problems.
CMSRead the guide - 42 CFR 482.21
Hospital QAPI under 42 CFR 482.21: what surveyors check
A hospital must run a hospital-wide QAPI program, the quality program CMS requires. It tracks medical errors, near misses and adverse events, finds causes and checks that fixes last. The governing body, medical staff and administrators are accountable. CMS's March 2026 guidance tells surveyors to sample at least three tracked events.
CMSRead the guide - 42 CFR 418.58
Hospice QAPI under 42 CFR 418.58: requirements and evidence
A hospice must run a hospice-wide QAPI program, the quality program CMS requires. It measures palliative (comfort care) outcomes, tracks adverse patient events using its own definitions and completes improvement projects. The governing body evaluates it every year and names who runs it. CMS tags L559 through L576 cover each standard.
CMSRead the guide - 42 CFR 484.65
Home health QAPI under 42 CFR 484.65: what an HHA must show
A home health agency (HHA) must run an agency-wide QAPI program, the quality program CMS requires. It tracks adverse patient events and runs improvement projects. It uses measurable indicators, including OASIS (patient assessment data) measures, and fixes any threat to patient safety at once. A governing body oversees it, and CMS tags G640 through G660 cover it.
CMSRead the guide
Map every rule to the record.
IncidentKit connects each requirement to the incident, the investigation and the corrective action that satisfy it.