Under the CMS QAPI rules for nursing homes, every facility certified by Medicare or Medicaid must build, run, and document a Quality Assurance and Performance Improvement program that is comprehensive, data-driven, and focused on resident care outcomes and quality of life. The requirement lives at 42 CFR § 483.75, and it applies to every long-term care facility that participates in either program.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement Facilities that fall short can be cited under four F-tags, fined daily, or terminated from Medicare and Medicaid entirely.
The Rule and Who It Binds
42 CFR § 483.75 requires each nursing home to develop, implement, and maintain a QAPI program that identifies, reports, investigates, analyzes, and prevents adverse events. The facility has to keep documentation of that work and present its QAPI plan at every annual recertification survey and whenever CMS or a state survey agency asks for it.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement
Accountability sits at the top. Under 42 CFR § 483.70(d)(3), the governing body of the facility is directly responsible for QAPI.2GovInfo. 42 CFR 483.70 – Administration The same section requires a facility-wide assessment of the resources needed to care for the resident population, reviewed at least annually and updated whenever the population or services change significantly. That assessment feeds QAPI planning by identifying the staffing competencies, physical plant, and services the residents actually need.
The Five Required Elements
CMS structures QAPI around five elements. Each must be present and functioning.3CMS. Five Elements – CMS Five Elements
Design and Scope
The program must be ongoing and cover every department and service the facility provides: clinical care, quality of life, resident choice, management practices, dietary, housekeeping, everything. A program that tracks only clinical metrics and ignores resident satisfaction or environmental conditions fails this element. The facility must also use the best available evidence to define quality indicators and measure goals tied to processes predictive of good resident outcomes.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement
Governance and Leadership
The governing body and administration must designate one or more people accountable for QAPI, provide adequate resources, and build a culture where staff can report quality problems without fear of retaliation.3CMS. Five Elements – CMS Five Elements Adequate resources means real budget: staff time for meetings and project work, replacement coverage so direct-care staff can participate, funds for changes projects may require, and training. CMS guidance recommends the administrator and financial officer establish a dedicated QAPI budget and review it monthly.4Centers for Medicare & Medicaid Services. QAPI Written Plan How-To Guide
Feedback, Data Systems, and Monitoring
The facility must have written policies for collecting data from every department, gathering feedback from staff, residents, and families, and monitoring performance indicators against benchmarks the facility sets for itself.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement The data should flag high-risk, high-volume, and problem-prone areas. Every adverse event — an untoward, usually unanticipated event that causes death or serious injury, or the risk of either — must be investigated, with action plans to prevent recurrence.5Centers for Medicare & Medicaid Services. Revision to State Operations Manual – Interpretive Guidelines for 42 CFR 482.21, QAPI Program
Performance Improvement Projects
Performance Improvement Projects (PIPs) are focused, systematic efforts targeting a specific problem: facility-wide fall rates, pressure ulcer prevention on a unit, medication error reduction. Each PIP needs a defined scope, a timeline, and an interdisciplinary team. Priorities should focus on areas that are high-risk or that directly affect resident safety, health outcomes, and autonomy.3CMS. Five Elements – CMS Five Elements
Systematic Analysis and Systemic Action
When problems surface, the facility must use a structured method to find root causes rather than patching individual incidents. Corrective actions must be systemic, aimed at changing processes so the same problem doesn’t come back. CMS expects facilities to demonstrate proficiency in root cause analysis and to track whether their fixes actually produce sustained improvement.3CMS. Five Elements – CMS Five Elements
The QAA Committee
Every facility must maintain a Quality Assessment and Assurance (QAA) committee that coordinates QAPI activities. Minimum membership:
- Director of Nursing Services
- Medical Director or designee
- At least three additional staff members, at least one of whom must be the administrator, an owner, a board member, or someone else in a leadership role
- The infection preventionist
Many facilities expand beyond this floor to include dietary, social services, rehabilitation, and activities. The committee must meet at least quarterly and as often as needed to coordinate and evaluate QAPI activities.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement Facilities running active PIPs or responding to adverse events often meet monthly in practice.
The Written QAPI Plan
The program must be captured in a formal, written plan describing its purpose, scope, goals, and framework. CMS treats the plan as a living document: the QAA committee should review it at least once a year and revise it on an ongoing basis as practices and resident populations change.4Centers for Medicare & Medicaid Services. QAPI Written Plan How-To Guide The facility must present the plan to the state survey agency at every annual recertification survey and to CMS on request.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement
Goals in the plan should be specific, actionable, relevant, and time-bound. The plan should also define how data gets collected, how PIPs are selected and prioritized, and how root cause analyses are triggered. A plan written like a policy manual that never connects to real data or active projects will draw surveyor attention.
How Surveyors Evaluate QAPI
CMS surveyors assess QAPI compliance using four F-tags:
- F865: the QAPI program and plan, including disclosure requirements and evidence of good-faith implementation
- F866: data collection and monitoring under the QAA framework
- F867: improvement activities, including whether the facility is actually conducting PIPs and acting on findings
- F868: QAA committee membership, meeting frequency, and functioning
A single survey can produce citations under more than one tag if different parts of the program are failing.6Centers for Medicare & Medicaid Services. List of Revised F-Tags
Having a plan on paper is not enough. Surveyor guidance says an effective QAPI program must show evidence of ongoing improvement over time, not a one-time fix. Surveyors look for multiple rounds of data analysis showing sustained results. If a corrective action didn’t stick, the facility is expected to develop a new or revised strategy and keep monitoring.5Centers for Medicare & Medicaid Services. Revision to State Operations Manual – Interpretive Guidelines for 42 CFR 482.21, QAPI Program The most common deficiency is not the absence of data but the absence of action on it: adverse events or quality problems get identified, and then nothing happens.
Penalties and Provider Agreement Termination
QAPI noncompliance carries the same enforcement tools CMS uses for any deficiency in the conditions of participation. The consequences escalate with severity.
Civil money penalties for nursing homes are set in 42 CFR § 488.438 and adjusted annually for inflation. The base statutory ranges are:
- Immediate jeopardy deficiencies: $3,050 to $10,000 per day (base amount before inflation adjustment)
- Non-immediate jeopardy deficiencies: $50 to $3,000 per day
- Per-instance penalties: $1,000 to $10,000 per instance
After inflation adjustment the real amounts are considerably higher. For 2024, immediate jeopardy penalties ranged from $8,140 to $26,685 per day, and non-immediate jeopardy penalties ranged from $133 to $8,003 per day.7Federal Register. Annual Civil Monetary Penalties Inflation Adjustment Those amounts step up each year.8eCFR. 42 CFR 488.438 – Civil Money Penalties Amount of Penalty
At the far end of the enforcement scale, CMS can terminate a facility’s provider agreement entirely. Under 42 CFR § 489.53, CMS may terminate any provider that is not complying with Title XVIII requirements or no longer meets the conditions of participation.9eCFR. 42 CFR 489.53 – Termination by CMS For a skilled nursing facility with deficiencies posing immediate jeopardy to resident health or safety, CMS provides as little as two days’ notice before termination takes effect. Losing the provider agreement means the facility can no longer admit or bill for Medicare or Medicaid residents.
Two Boundaries Worth Knowing
HIPAA does not block QAPI data collection. The Privacy Rule expressly permits covered entities to use and disclose protected health information for their own health care operations, which includes quality assessment and improvement, case management, and care coordination.10U.S. Department of Health & Human Services. Summary of the HIPAA Privacy Rule Facilities still have to apply the minimum necessary standard, and de-identified data carries no restrictions. Facilities may also disclose protected health information to health oversight agencies for legally authorized audits and investigations.
QAA committee records get a limited federal shield. A state or the federal government generally may not require disclosure of QAA committee records except when the disclosure relates to the committee’s compliance with its regulatory requirements.1eCFR. 42 CFR 483.75 – Quality Assurance and Performance Improvement The protection does not extend to documents that exist independently of the committee process, and state peer review privileges vary. It does give staff a layer of confidence to raise problems openly inside the QAPI process.