# F610: investigate, prevent and correct alleged violations

> F610 covers alleged abuse, neglect, exploitation and mistreatment. The home must keep evidence that it thoroughly investigated each allegation. It must protect residents meanwhile and correct verified problems. Results go to the administrator and State Survey Agency within 5 working days.

Source: https://incidentkit.ai/compliance/f-tags/f610 · Updated Oct 5, 2026

## Key facts

- **Tag title:** Investigate/Prevent/Correct Alleged Violation (Appendix PP also lists it as Alleged Violations-Investigate/Prevent/Correct)
- **Regulation:** 42 CFR 483.12(c)(2), (c)(3) and (c)(4)
- **Guidance relied on:** Appendix PP Rev. 232 (issued 07-23-25, in use since 04-28-25); F610 section Rev. 173 (11-22-17)
- **Protection clock:** Right away, until the investigation ends
- **Results clock:** Within 5 working days of the incident
- **Method:** None required
- **Severity note:** No examples in the tag. Follows the harm and the F600 event

- **Citation:** F610 · 42 CFR 483.12(c)(2)-(4)
- **Authority:** CMS
- **Applies to:** Medicare-certified skilled nursing facilities, Medicaid-certified nursing facilities

## What F610 covers

Under 42 CFR 483.12(c), the home must keep evidence that it thoroughly investigated each alleged violation. It must prevent further potential abuse, neglect, exploitation or mistreatment while it investigates. If the allegation is verified, it must take appropriate corrective action.

F610 also covers injuries of unknown source and misappropriation of resident property. A police report does not replace the home's own investigation. The home must still investigate to the extent possible, in consultation with the police.

## What thorough means to surveyors

CMS prescribes no process. It expects enough evidence for the administrator to decide how to protect residents.

*What to have ready*

| Surveyors ask for | Have ready |
| --- | --- |
| Proof an investigation started | Start time, who led it, who was told |
| Interviews | Dated notes. Include the alleged victim, representative, accused (person alleged to be responsible), witnesses and practitioner. |
| Record review | Progress notes. Medication administration records. Incident reports. Hospital and emergency room records. Lab and x-ray reports. Photos. |
| Protection while investigating | What changed that day: separation, more supervision, room move, access removed, check-ins |
| The conclusion | The administrator's finding and why |
| Corrective action and follow-through | Actions with owners and dates, a check they worked, QAA committee review |

Do not disturb evidence. CMS says washing linens or clothing, destroying documents and bathing the resident before an exam impede investigations. So does skipping an emergency room exam, including a rape kit where appropriate.

## Protecting residents while you investigate

Protection must start right away, before the facts are settled. CMS lists these failures. The accused keeps access to residents. A resident who reports is retaliated against. A resident who touches others is moved but keeps doing it. A resident with a history of striking is left unsupervised with a past target. Protections end because the investigation was inadequate.

- Assess and treat the alleged victim at once.
- Tell the practitioner and the family or representative.
- Remove access by the accused; confirm ongoing safety.
- Ask whether the resident feels safe. If not, move rooms or add supervision.
- Make unannounced management visits on different shifts to check on residents at risk.
- Tell law enforcement and other agencies as required, and involve the administrator.

## Timelines

| Duty | Timing |
| --- | --- |
| Put protective measures in place | Right away, until the investigation is complete |
| Report results to the administrator and State Survey Agency (an [F609](https://incidentkit.ai/compliance/f-tags/f609) duty) | Within 5 working days of the incident |
| Corrective action if the allegation is verified | No fixed number of days. The home should oversee the action and check that it works |

## What makes an F610 deficiency more severe

The F610 guidance gives no severity examples, so surveyors use the CMS scope and severity matrix. Section 483.12 counts toward substandard quality of care, CMS's label for serious findings. It applies at immediate jeopardy (serious harm happened or is likely). It also applies at pattern or widespread actual harm, or widespread potential for more than minimal harm.

- **Continued access.** The accused keeps access and a resident is harmed again.
- **No investigation.** None was done, so the home cannot show safety.
- **Lapsed protection.** Safeguards ended early and a resident was affected.
- **Pattern.** Several allegations, shifts or units show the same gap, raising scope.

Facts like these move a finding up. F600 gives an immediate jeopardy example: staff did not report or protect a resident who said she was touched. If the home removes immediate jeopardy, surveyors lower what remains at the tag to level 2. If other residents were harmed, they lower it to harm.

## Documentation gaps that lead to citations

- The investigation is one paragraph with no interviews.
- Interviews are missing or undated, including the accused.
- No record shows who protected the resident the first night or what changed.
- The conclusion says unsubstantiated, with no reasons.
- Corrective action is staff re-education with no check that practice changed.
- The 5-working-day report was never sent.
- The home stopped investigating when police got involved.

## How to show a good investigation and fix

1. **Secure and protect** Keep proof safe, protect the resident, and record the time and steps.
2. **Collect evidence** Interview, observe and review records. Date and file each item.
3. **Decide and explain** The administrator or designee records the finding and why, even if unsubstantiated.
4. **Correct the system** If verified, fix what allowed it. Assign an owner and due date. Report within 5 working days.
5. **Verify and review** Check the change held. Take the case to the QAA committee and close it with evidence. See [F867](https://incidentkit.ai/compliance/f-tags/f867).

## How IncidentKit supports F610

[Investigations](https://incidentkit.ai/product/investigations) hold the evidence file, contributing factors and disposition. A person signs the conclusion. [Lauren](https://incidentkit.ai/product/lauren) drafts the investigation from staff answers, marked "Lauren · draft" until approved. [Corrective actions](https://incidentkit.ai/product/corrective-actions) carry an owner, due date, evidence and an effectiveness check. Nothing closes until verified. IncidentKit does not conduct the investigation. Your team adds interviews and notes.

## What the rule asks for, and how IncidentKit supports it

| Requirement | IncidentKit |
| --- | --- |
| Evidence that each allegation was thoroughly investigated | Investigations hold the evidence file. Your team adds interviews and notes; a person signs. |
| Prevent further harm while the investigation runs | Record interim protections and owners. Routing and escalation alerts the roles you set. |
| Report results within 5 working days | The record holds what the follow-up report needs. The report goes through your state's channel. |
| Corrective action when an allegation is verified | Each action carries an owner, due date, evidence and an effectiveness check. Nothing closes until verified. |
| Prove the sequence of events | The audit trail logs each change with who, when and what changed. |

## Frequently asked questions

### Must the home follow a set investigation method?

No. CMS sets no specific process. The home must collect enough evidence for the administrator to decide what is needed to protect residents.

### If police are investigating, can the home stop its own investigation?

No. The home must still investigate to the extent possible, in consultation with the authority. It must not impede the police and must preserve potential evidence, such as clothing and linens, as instructed.

### How soon must residents be protected after an allegation?

Right away. Protective measures must start at once and last while the investigation is in progress.

### When are investigation results due?

Within 5 working days of the incident. Send them to the administrator or designee and other officials under state law, including the State Survey Agency. The F609 guidance covers timing and a sample report form.

### What is the difference between F609 and F610?

F609 covers reporting: the 2-hour and 24-hour initial reports, the 5-working-day results report and crime reporting. F610 covers the investigation, protecting residents and fixing problems. One event can be cited at both.

## Sources

- [eCFR, 42 CFR 483.12 (freedom from abuse, neglect, and exploitation), current through 2026-10-01](https://www.ecfr.gov/current/title-42/section-483.12)
- [CMS State Operations Manual, Appendix PP, Guidance to Surveyors for Long Term Care Facilities (Rev. 232, issued 07-23-25; revised guidance used on surveys since 04-28-25): F610 section (Rev. 173, issued 11-22-17, effective 11-28-17); F600 and F609 cross-references (Rev. 211)](https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/som107ap_pp_guidelines_ltcf.pdf)
- [Example CMS-2567 (Indiana Department of Health, 2024) printing the F610 title and citation as 483.12(c)(2)-(4)](https://www.in.gov/health/reports/QAMIS/ltccr/ow8911_2567.pdf)
- [CMS State Operations Manual, Chapter 7, Survey and Enforcement Process for Skilled Nursing Facilities and Nursing Facilities (Rev. 244, issued 06-26-26): scope and severity matrix, immediate jeopardy, substandard quality of care](https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/som107c07pdf.pdf)
- [eCFR, 42 CFR 488.301 (definitions: immediate jeopardy, substandard quality of care), current through 2026-10-01](https://www.ecfr.gov/current/title-42/section-488.301)
- [CMS memo QSO-25-14-NH (revised 2025-03-10): Revised Long-Term Care Surveyor Guidance, effective April 28, 2025](https://www.cms.gov/files/document/qso-25-14-nh-revised-2025-03-10.pdf)
- [Wisconsin Department of Health Services, Top Ten Federal Health Citations, First Half 2026 (national, state and CMS Region 5 citation counts)](https://www.dhs.wisconsin.gov/regulations/nh/2026-h1-dqa-bnhrc-top-citations-region.pdf)

## Related

- [F600 free from abuse and neglect: what surveyors cite](https://incidentkit.ai/compliance/f-tags/f600)
- [F609 reporting alleged violations: 2-hour and 24-hour rules](https://incidentkit.ai/compliance/f-tags/f609)
- [F867 QAPI improvement activities: adverse event tracking](https://incidentkit.ai/compliance/f-tags/f867)
- [Root Cause Analysis: How to Run One That Leads to Action](https://incidentkit.ai/use-cases/root-cause-analysis)
- [Corrective Actions: How to Close Them With Proof](https://incidentkit.ai/use-cases/close-corrective-actions)
- [Nursing Home Incident Report Template (Printable)](https://incidentkit.ai/templates/nursing-home-incident-report)
- [Plan of correction (CMS-2567): elements and 10-day deadline](https://incidentkit.ai/compliance/survey-readiness/plan-of-correction)