Is Event Reporting Required by CMS?

CMS requires Medicare-participating hospitals to track and analyze adverse patient events as part of their Quality Assessment and Performance Improvement (QAPI) programs. However, that does not mean every adverse event must be externally reported to CMS.

External reporting requirements vary depending on the event, applicable CMS quality program, measure requirements, and state reporting requirements.

What CMS requires hospitals to track

Under the Medicare Conditions of Participation for hospitals, a hospital's QAPI program must measure, analyze, and track quality indicators, including adverse patient events.

Hospitals must also use quality data to monitor the safety and effectiveness of care, identify opportunities for improvement, and support ongoing performance improvement efforts.

This makes tracking adverse events an important part of a hospital's broader patient safety and quality improvement responsibilities.

Does every adverse event have to be reported to CMS?

No. There is an important distinction between internally tracking an adverse event and externally reporting information to CMS or another oversight organization.

CMS requires hospitals to maintain processes for identifying, tracking, and analyzing adverse patient events through QAPI. But external reporting requirements depend on the circumstances.

An event may be subject to reporting requirements associated with a specific CMS program, while other events may fall under state reporting requirements or other regulatory requirements. Some events may need to be tracked internally without being individually reported to CMS.

That distinction makes it important for quality teams to understand which requirements apply to their organization rather than treating "event reporting" as a single CMS requirement.

How does event reporting connect to CMS quality programs?

Patient safety data also intersects with several CMS quality and payment programs.

For example, the Hospital Inpatient Quality Reporting (IQR) Program requires applicable acute care hospitals to submit data on specified quality measures. Healthcare-associated infection (HAI) measure data are submitted through the Centers for Disease Control and Prevention's National Healthcare Safety Network (NHSN) and then provided to CMS.

CMS also uses patient safety and HAI measures in the Hospital-Acquired Condition (HAC) Reduction Program. The program evaluates applicable hospitals using the CMS Patient Safety and Adverse Events Composite (CMS PSI 90) and five HAI measures: CLABSI, CAUTI, certain surgical site infections, MRSA bacteremia, and C. difficile infection.

Hospitals that fall within the worst-performing quartile under the HAC Reduction Program receive a 1% reduction in applicable Medicare payments.

These requirements illustrate why hospitals need to distinguish among internal adverse-event tracking, quality measure reporting, and other external reporting obligations.

Why accurate reporting processes matter

Keeping track of overlapping CMS program requirements can be challenging, particularly as measures, specifications, reporting periods, and program requirements change.

Recent HHS Office of Inspector General findings have also highlighted gaps between patient harm events hospitals identify internally and events that are required to be reported externally.

For hospital quality teams, a strong reporting strategy starts with understanding which requirements apply, maintaining reliable data and documentation, and monitoring changes to CMS quality programs.

Sources:

• Centers for Medicare & Medicaid Services, 42 CFR §482.21, Quality Assessment and Performance Improvement Program
• Centers for Medicare & Medicaid Services, Hospital Inpatient Quality Reporting Program
• Centers for Medicare & Medicaid Services, Hospital-Acquired Condition Reduction Program
• U.S. Department of Health and Human Services Office of Inspector General, Hospitals Reported Few Captured Patient Harm Events to CMS and States