Nursing Home Infection Control Requirements: 42 CFR 483.80 Explained

Every Medicare- and Medicaid-certified nursing home must meet the federal infection control requirements set out in 42 CFR 483.80, which obligate the facility to maintain a written infection prevention and control program (IPCP) covering surveillance, precautions, isolation, antibiotic stewardship, vaccinations, respiratory illness reporting, and an annual program review.¹ The program has to follow accepted national standards and be tailored to the facility’s own assessment of its residents, staff, and services. Facilities that fall short face civil money penalties that can exceed $27,000 per day for the most serious violations.

What the Written Program Must Cover

The IPCP is a system for preventing, identifying, reporting, investigating, and controlling infections among residents, staff, volunteers, visitors, and contractors.¹ Within that system, the facility has to adopt written standards, policies, and procedures for several specific areas.

Surveillance

The policies must describe a surveillance system designed to catch possible communicable diseases or infections before they spread. In practice, that means logging symptoms, test results, onset dates, and the location within the facility where exposure may have occurred. The written policies also have to spell out when and to whom incidents of communicable disease should be reported, which typically includes state and local health departments. Reporting timelines vary by jurisdiction, though most require notification within 24 hours of a suspected outbreak.¹

Standard and Transmission-Based Precautions

Facilities must define both standard precautions (the baseline practices applied to every resident regardless of infection status) and transmission-based precautions (extra steps triggered when a resident is known or suspected to harbor a highly contagious pathogen). The policies must also specify the hand hygiene procedures that all staff with direct resident contact are expected to follow.¹

Isolation

When isolation becomes necessary, the program has to address the type and expected duration based on the specific pathogen. The regulation requires that any isolation be the least restrictive possible for the resident under the circumstances.¹ That language matters. A facility cannot default to the most aggressive form of separation because it is easier to manage; the approach must be calibrated to the actual risk.

Employee Restrictions

The program has to identify when an employee with a communicable disease or an open skin lesion is barred from direct contact with residents or their food.¹ The restriction applies only when direct contact would transmit the disease, so the written criteria need to be specific enough for supervisors to make quick, defensible calls during a shift.

Incident Records

Separate from the surveillance system, the facility must maintain a system for recording every incident identified through its IPCP and the corrective actions taken.² These records become the evidence base during surveys. Incomplete documentation is one of the most common reasons facilities receive deficiency citations, because inspectors have no way to confirm the facility actually responded to a known risk.

Designating an Infection Preventionist

The regulation requires every facility to designate at least one infection preventionist (IP) responsible for the program. The IP must have primary training in nursing, medical technology, microbiology, epidemiology, or a related field, and must have completed specialized training in infection prevention and control. The IP has to work at the facility at least part-time, not simply consult remotely.¹

CMS and the CDC developed the Nursing Home Infection Preventionist Training Course, available through the CDC’s TRAIN platform, which provides roughly 19 hours of continuing education credit to satisfy the specialized training piece.³

At least one IP must also sit on the facility’s quality assessment and assurance committee and report regularly on the program’s status.¹ The structure is deliberate. It gives the person closest to infection data a direct line into leadership rather than filtering reports through layers of administration.

Antibiotic Stewardship

Every facility must maintain an antibiotic stewardship program that includes antibiotic use protocols and a system to monitor antibiotic use.¹ The regulation is intentionally flexible about program design, but the CDC has published seven core elements facilities commonly use as a framework: leadership commitment, accountability, drug expertise, action, tracking, reporting, and education.⁴

The regulation does not require a written rationale for each individual prescription. It does require a monitoring system robust enough to catch problematic prescribing patterns before they generate resistant organisms. Facilities that treat stewardship as a paper exercise rather than active review tend to be the ones cited.

Vaccination Education and Offers

The IPCP has to incorporate vaccination protocols for influenza, pneumococcal disease, and COVID-19. For each vaccine, the regulation follows the same structure: educate, offer, document.

Influenza and Pneumococcal

Before offering either vaccine, the facility must give the resident or their representative information on the benefits and potential side effects. Every resident must then be offered a pneumococcal immunization (unless they have already received it or it is medically contraindicated) and an annual influenza immunization between October 1 and March 31. The resident or representative must be allowed to refuse, and the medical record has to document whether the resident received the vaccine, refused it, or had a medical contraindication.¹

COVID-19

COVID-19 requirements extend to both residents and staff. When vaccine is available to the facility, every resident and staff member must be offered the vaccine unless it is medically contraindicated or they have already been immunized. Education on benefits, risks, and side effects must be provided before any dose. For multi-dose regimens, updated information has to be provided before each additional dose. Residents and staff retain the right to accept or refuse at any point and to change their decision later.¹

Documentation is more granular for COVID-19 than for the other two vaccines. The resident’s medical record must confirm that education was provided, note each dose administered, and record any refusal or medical contraindication. On the staff side, the facility has to maintain records showing employees received education, were offered the vaccine, and document each employee’s vaccination status as required by the CDC’s National Healthcare Safety Network (NHSN).¹

Respiratory Illness Reporting to NHSN

Beyond internal surveillance, the regulation imposes a separate electronic reporting obligation. Facilities must submit ongoing reports to NHSN on influenza, SARS-CoV-2/COVID-19, and respiratory syncytial virus (RSV) in a format and on a schedule set by the Secretary of HHS. Reports must include:

Facility census (residents occupying a bed for at least 24 hours during the reporting week)
Resident vaccination status for influenza, COVID-19, and RSV
Confirmed resident cases of each of the three illnesses
Hospitalizations of residents with confirmed cases⁵

During a declared public health emergency for an acute infectious illness, the reporting requirements expand. Facilities must additionally report staff infections, supply inventory shortages, staffing shortages, and relevant medical countermeasure inventories or usage.⁵

Linen Handling

Personnel must handle, store, process, and transport linens in a way that prevents the spread of infection.¹ The regulation does not prescribe a specific laundering temperature or bagging protocol. Surveyors evaluate whether the facility’s actual practices match its written policies and whether soiled linens are separated and contained in a way that minimizes contamination during transport.

Water Management and Legionella

CMS guidance requires all certified facilities to maintain a water management program aimed at reducing the risk of Legionella and other waterborne pathogens such as Pseudomonas and nontuberculous mycobacteria, tying that obligation to the general infection prevention duties under 42 CFR 483.80. A compliant water management program has to include:

A facility risk assessment identifying where waterborne pathogens could grow and spread within the building’s water system
A water management plan that incorporates the ASHRAE industry standard (Standard 188) and the CDC toolkit for Legionella control
Testing protocols with documented acceptable ranges, along with records of test results and corrective actions when those ranges are exceeded⁶

CMS does not require routine water cultures for Legionella. The choice of testing method is left to the facility, but the facility has to be able to demonstrate it has assessed the risk and put a documented plan in place. Facilities that lack any written water management program are vulnerable to citations even if no one has gotten sick, because the regulation targets prevention, not just response.

Annual Review

The facility must conduct a full review of its IPCP at least once every 12 months and update the program as necessary.¹ This is where the surveillance logs, antibiotic stewardship data, and incident records from the preceding year come together. If those records reveal gaps in current procedures, the facility is expected to revise its written policies promptly rather than waiting for the next annual cycle.

Maintaining a documented history of each review matters for more than compliance. When surveyors audit a facility, one of the first things they check is whether the IPCP has evolved in response to real data. A program that looks identical year after year despite changing resident acuity or documented incidents signals a perfunctory review.

Penalties for Non-Compliance

Infection control violations are tracked under F-tag F880 in the CMS survey process. Consequences depend on severity and whether the deficiency poses immediate jeopardy to residents. Civil money penalties fall into two tiers, adjusted annually for inflation:

CMS can also impose per-instance penalties ranging from $2,739 to $27,378 instead of daily penalties.⁸ Beyond financial penalties, CMS has authority to require directed plans of correction or, in extreme cases, install temporary management. Deficiency citations also affect the facility’s public quality rating and can jeopardize eligibility for federal reimbursement.

1
eCFR. 42 CFR 483.80 – Infection Control
2
GovInfo. 42 CFR 483.80 – Infection Control
3
Centers for Medicare & Medicaid Services. Specialized Infection Prevention and Control Training for Nursing Home Staff in the Long-Term Care Setting is Now Available
4
Centers for Disease Control and Prevention. Core Elements of Antibiotic Stewardship for Nursing Homes
5
eCFR. 42 CFR 483.80 – Infection Control
6
Centers for Medicare & Medicaid Services. Requirement to Reduce Legionella Risk in Healthcare Facility Water Systems to Prevent Cases and Outbreaks of Legionnaires Disease
7
eCFR. 42 CFR 488.438 – Civil Money Penalties: Amount of Penalty
8
eCFR. 45 CFR Part 102 – Adjustment of Civil Monetary Penalties for Inflation