Nursing home abuse and neglect reporting requirements

What do federal rules require?

Two federal duties apply, and both run on short clocks. Under 42 CFR 483.12(c), the facility must report every alleged violation involving abuse, neglect, exploitation or mistreatment. That includes injuries of unknown source and misappropriation of resident property. Under 42 CFR 483.12(b)(5), every covered individual must report a reasonable suspicion of a crime against a resident. This rule carries out section 1150B of the Social Security Act.

Surveyors cite reporting duties, including the annual notice to covered individuals, at F609. They cite investigation and protection duties at F610. F607 covers the written policies behind both.

What are the 2-hour and 24-hour clocks?

The clock depends on what happened, not on what the report is called. Alleged abuse and any event that causes serious bodily injury get 2 hours. Everything else gets 24 hours.

Who must report, and to whom?

The facility and each covered individual have separate duties. A covered individual is anyone who is an owner, operator, employee, manager, agent or contractor of the facility.

An administrator may coordinate one report for staff who ask, as long as it goes out on time. Each covered individual still owns their own duty. A facility cannot stop anyone from reporting directly to law enforcement.

What counts as an alleged violation?

An alleged violation is something staff, a resident, a relative, a visitor or another provider sees or reports that has not yet been investigated. The reporter does not need to say the word abuse. If staff could reasonably conclude abuse, neglect, exploitation or mistreatment might exist, it is reportable.

• Injury of unknown source: nobody saw the cause, the resident cannot explain it, and the injury looks suspicious from its extent, location or frequency.
• Serious bodily injury: extreme physical pain, substantial risk of death, protracted loss or impairment of a body part or function, or an injury that needs surgery, hospitalization or physical rehabilitation. Injury from criminal sexual abuse counts.
• Resident-to-resident incidents: willful actions that cause physical injury, mental anguish or pain are reportable. Examples: bullying, threats of violence, unwanted sexual contact. Ordinary disagreements are not, unless they reach that level.

If an allegation meets the definition of abuse, neglect, exploitation or mistreatment, CMS says do not judge whether it is credible before reporting it.

What must the reports say?

The first report must describe the alleged violation and show how residents are being protected. It must be accurate to the best of your knowledge at that moment. Leaving out facts or making the event look smaller can itself draw a deficiency at F609.

Keep records of what you reported and the date and time it reached the State Survey Agency. The follow-up report is due within 5 working days of the incident. It gives the investigation results and any corrective action if the allegation was verified. CMS publishes sample forms as Exhibits 358 and 359. Your state may require its own.

What must the investigation show?

F610 asks for evidence of three things. Each allegation was thoroughly investigated. Residents were protected while the investigation was open. Corrective action followed if it was verified. CMS does not require one investigation method.

• Observations of the alleged victim, the location and staff and resident interactions.
• Interviews with the resident and representative, the alleged perpetrator, witnesses, the practitioner and outside agencies.
• Record review: progress notes, incident reports, hospital and medication records, and photographs.

A report to law enforcement does not replace your own investigation. Preserve possible evidence, such as clothing and linens, as law enforcement instructs. The QAA committee is expected to monitor reporting and investigation.

What do surveyors check, and what is at stake?

Surveyors check that your policies name the covered individuals, the reportable crimes, what serious bodily injury means, the time limits and who receives the report. They look for proof that every covered individual was told each year, in a language they understand. They also review facility-reported incidents filed since your last survey.

A covered individual who fails to report on time faces a civil money penalty of up to $200,000, as adjusted annually. Exclusion from federal health care programs is also possible. If the failure worsens harm to the victim or harms someone else, the limit is $300,000, as adjusted annually.

How to run it every time

1. Protect the resident and tell the administratorMake sure the resident is safe and examined. Separate the alleged perpetrator from residents. Tell the administrator at once.
2. Pick the clockDoes it involve abuse? Did it cause serious bodily injury? Yes to either means 2 hours.
3. File with each required officeThe State Survey Agency, local law enforcement for a suspected crime, and adult protective services where required. Note the time of each report.
4. Investigate and keep the evidenceObservations, interviews and record review, ending in a written conclusion.
5. Send the results within 5 working daysCount from the incident. Include corrective action if the allegation was verified.
6. Review it at QAABring the case, the timing and the corrective action to the next meeting. See abuse reporting deadlines.

How IncidentKit supports this requirement

Product parts involved: Incident reporting, Routing and escalation, Investigations and RCA, Corrective actions (CAPA), Compliance packets, Audit trail, Analytics. Capabilities marked “rolling out” are being released in stages; see the changelog.

Frequently asked questions

Sources

• 42 CFR 483.12, Freedom from abuse, neglect, and exploitation (eCFR)
• CMS State Operations Manual, Appendix PP, guidance to surveyors for long-term care facilities (F607, F609, F610)
• CMS nursing home regulations and guidance page, including sample report Exhibits 358 and 359
• CMS Long-Term Care Survey Process (LTCSP) Procedure Guide, effective July 14, 2026 (Survey Resources package)

Reviewed against the sources above on Oct 5, 2026. Rules change: confirm current requirements with the issuing body or your counsel before relying on any summary.