Off-Campus HOPDs: Prepare Now for Mandatory Provider-Based Attestations

Summary — Off-campus hospital outpatient departments (HOPDs) must submit provider-based attestations evidencing compliance with the Medicare provider-based regulations and obtain a separate NPI for each off-campus HOPD. HOPDs that fail to take these steps are not eligible for Medicare payments, beginning January 1, 2028.

The Consolidated Appropriations Act of 2026 (the “Act”), enacted on February 3, 2026, included two new requirements for HOPDs:  

1. Beginning January 1, 2028, hospitals must have submitted a provider-based attestation dated on or after January 1, 2026 for each off-campus HOPD evidencing compliance with the Medicare provider-based regulations at 42 C.F.R. § 413.65. This requirement applies even if the hospital previously submitted a voluntary provider-based attestation prior to January 1, 2026. Additionally, the statute requires that hospitals routinely submit provider-based attestations on a go-forward basis for their off-campus HOPDs on a cadence to be developed by CMS in the future.  
2. Beginning January 1, 2028, hospitals are required to obtain and bill under a separate NPI for each off-campus HOPD.  

Off-campus HOPDs that do not comply with both #1 and #2 are not eligible for Medicare payments, even if the HOPD was “grandfathered” under the site neutrality rules that were previously passed as part of the Balanced Budget Act of 2015. In addition to the significant reimbursement implications, failure to satisfy these new requirements may also potentially jeopardize the off-campus HOPD’s access to 340B pricing.

As a refresher, “off-campus HOPD” means any site located more than 250 yards from the main hospital campus or more than 250 yards from a remote location of the hospital. A “remote location of a hospital” is a facility that furnishes inpatient hospital services under the name, ownership, and financial and administrative control of the main hospital. 

A provider-based attestation is a formal representation to CMS that the HOPD qualifies as a department of the hospital, i.e., that it meets the requirements set forth in 42 C.F.R. § 413.65.  Provider-based attestations have historically been voluntary since 2002, and while some health systems previously submitted voluntary attestations, many have not. The preparation of provider-based attestations is an administratively tedious and time-consuming process, often involving significant back-and-forth exchanges of information with the applicable Medicare Administrative Contractor (MAC) before the MAC (and ultimately CMS) is willing to reach a determination as to whether the site meets the provider-based requirements. 

The Act requires CMS to establish rules regarding the new provider-based attestation process, which have not yet been released. In the meantime, the Act permits hospitals to submit attestations under the existing framework set forth in 42 C.F.R. § 413.65(b)(3). Understandably, some providers may wish to hold off on submitting attestations until the new CMS rules are released in case the new rules streamline the prior process. We recommend that these providers nevertheless take steps now to assess their current compliance by conducting an inventory of their off-campus HOPD sites and evaluating each site’s compliance with the provider-based requirements at 42 C.F.R. § 413.65 so they are ready to move forward with the attestations when the new CMS rules are released.