Medicare Enrollment Revocation 2027: CMS Final Rule Adds Retroactive Clawbacks Worth $82 Million a Year

Medicare enrollment revocation 2027 just got teeth. CMS issued its calendar year 2027 home health final rule on November 4, 2026, and buried inside it is a package of Medicare enrollment enforcement changes that reach far past home health. The rule publishes in the Federal Register today, November 9, 2026.

The headline change is one sentence long. Every Medicare enrollment revocation now takes effect retroactively, back to the date your noncompliance began. Before this rule, most revocations took effect 30 days after CMS mailed the notice. That 30-day gap is gone. CMS can now recover every dollar it paid you between the day you slipped out of compliance and the day the letter arrived.

Most of the new provisions apply to all Medicare provider types, not just home health agencies. Hospitals, physician groups, labs, hospices, and equipment suppliers all sit under the same rules. CMS puts the price tag at about $82 million a year in recovered payments and barred enrollments.

Here is what the rule changes, what CMS dropped after pushback, and the math on what a retroactive revocation costs a practice that bills $150,000 a month from Medicare.

Table of contents

• What CMS finalized on November 4
• The change that rewrites the math: every revocation goes retroactive
• The 7 new grounds that can cost you your billing privileges
• What CMS dropped after 375 comments
• The money side: $415 million up, 3% still coming off
• The freeze clock: November 13 decides the next 6 months
• What a retroactive revocation costs your practice
• Old rule vs new rule
• Your 90-day enrollment health check
• What happens next
• What this means for your revenue
• Frequently asked questions

Key takeaways

• CMS issued the CY 2027 home health final rule (CMS-1844-F) on November 4, 2026. It publishes in the Federal Register on November 9, 2026.
• Every Medicare enrollment revocation is now retroactive to the date noncompliance began. CMS estimates the change will save taxpayers about $82 million a year.
• Most enrollment provisions apply to all Medicare provider and supplier types, not just home health agencies, per the CMS fact sheet.
• New grounds include owner and manager misconduct, misdemeanor convictions from the past 10 years, geographic risk, same-address locations, risky affiliations, and ownership changes inside 36 months.
• A denied enrollment can now carry a reapplication bar of up to 10 years, on any ground.
• A separate nationwide freeze on new home health and hospice enrollments expires November 13, 2026, unless CMS extends it.
• Our worked example: an agency billing $150,000 a month from Medicare with noncompliance starting 8 months before the revocation letter now has $1,200,000 in payments at risk, against $0 under the old 30-day rule.

What CMS finalized on November 4

CMS issued the Calendar Year 2027 Home Health Prospective Payment System final rule on November 4, 2026. The rule number is CMS-1844-F. It sets home health payment rates for 2027, and it carries a package of Medicare provider enrollment changes that reach far past home health. The CMS fact sheet states plainly that most of the enrollment provisions will apply to all provider types enrolled in Medicare.

CMS Administrator Dr. Mehmet Oz framed the changes as protection for the program. Home Health Care News reported his words: "These changes will help protect seniors, safeguard taxpayer dollars, and preserve access to the care beneficiaries need."

The CMS press release puts the enforcement goal in dollars. The agency expects the enrollment changes to save taxpayers about $82 million a year by recovering payments from noncompliant providers and keeping high-risk providers out of the program.

The rule did not come out of nowhere. CMS proposed most of these provisions on July 6, 2026, in the proposed rule at 91 Federal Register 41216. The agency received 375 sets of stakeholder comments, per McKnight's Long-Term Care News. Industry groups pushed back hard on the July draft. CMS kept most of it and dropped a few of the harshest pieces. The ones that survived are the ones that now govern your enrollment.

This is the second big Medicare enforcement move in a month for billing teams. The WISeR prior authorization pilot already put AI screening on traditional Medicare claims in 6 states. Our Medicare AI prior authorization post covers the 20% drop in targeted services that pilot produced. The enrollment rule hits a different pressure point. WISeR decides whether a single service gets paid. Revocation decides whether you can bill Medicare at all.

The change that rewrites the math: every revocation goes retroactive

Under the old regulations, most Medicare enrollment revocations took effect 30 days after CMS or its contractor mailed the notice. A provider that fell out of compliance could keep billing through that window, and the payments it collected in the months before the notice stayed paid. Only some revocation grounds were retroactive.

The final rule ends that split. CMS is making all revocation grounds retroactive, effective on the date the provider's noncompliance began. The CMS fact sheet says the change will help CMS recover money paid to noncompliant providers and make sure taxpayer money goes only to legitimate, compliant providers.

Medical Daily reported the rule on November 6, 2026, and spelled out the gap it closes. A noncompliant provider could keep billing for months while CMS built its case, then keep the money because the revocation only ran forward from the notice date. That window is now closed in both directions.

Two open questions sit inside the new power. CMS has not said how often it expects to use retroactive revocations, how far back recoveries could reach in practice, or how it will pin down the start of noncompliance in disputed cases. The American Society of Echocardiography urged CMS to spell out the evidence it will use to set that start date, per Medical Daily. Until CMS issues guidance, the start date is the number that decides how much money is at stake, and the provider has to argue it after the fact.

Revocation is not the same as exclusion, and the difference matters for your response. Exclusion is an OIG action that bars a person or entity from all federal health care programs. Revocation ends your Medicare billing number. Our CMS provider exclusion post covers the exclusion side. The new rule makes revocation faster, wider, and retroactive. Treat it as the more immediate threat to a working practice.

The 7 new grounds that can cost you your billing privileges

CMS added several new grounds for denying or revoking enrollment and widened some it already had. The table below lists the ones that carry the most weight for a working practice, with the exact trigger CMS wrote into the rule.

Three of these deserve a closer look, because they reach past the provider itself.

Owner conduct is the first. Before this rule, CMS could deny or revoke enrollment if the provider itself had a suspended license in another state or was suspended from Medicaid or another federal program. The final rule extends that reach to the provider's owners and managing employees or organizations. A licensing action against a part-owner in another state can now cost the whole practice its Medicare billing. TechTarget covered the change on November 6, 2026, and noted the rule also pulls in parent companies that run into trouble in other federal health programs.

Geographic risk is the second. CMS can now revoke an enrollment it deems a high risk of fraud, waste, or abuse because the provider sits in a small area with too many providers and suppliers. McKnight's Home Care called this guilty by location. Your address alone can now count against you, even with a clean record. CMS also finalized a new denial ground for a provider whose practice sits in the same suite or office as a provider whose enrollment was revoked or denied, though CMS noted denials on that ground will be the exception, not the norm.

Ownership change is the third. Home health agencies, hospices, and equipment suppliers that go through a change in majority ownership within 36 months of initial enrollment or their most recent change must enroll as a new provider and undergo a state survey or accreditation. CMS can deny or revoke enrollment for failure to comply. That rule bites hardest on private equity deals, where a quick flip inside 3 years now forces a full re-enrollment. The LeadingAge Minnesota summary flags the same point for nonprofit providers that restructure.

Two more provisions round out the package. CMS can now deny or revoke enrollment based on false or misleading information on any CMS or Medicare enrollment-related form or document, not just the enrollment application. A wrong answer on a revalidation or a change-of-information form now carries the same weight as a wrong answer on the 855. Hospices face added grounds tied to their medical director or administrator, including a director who serves multiple other hospices, sits too far away to do the job, or lacks an active physician license in the state where they practice.

CMS also widened its use of disenrollment when individuals are convicted of misdemeanor financial misconduct or sexual assault, and when circumstances present a high risk of fraud because of an excessive concentration of providers in a small area, per McKnight's Long-Term Care News. The reapplication bar after a denial now runs up to 10 years, on any ground. A denial is no longer a 1-year timeout. It can end a Medicare career.

What CMS dropped after 375 comments

The final rule is narrower than the July proposal in ways that matter, and practices should know which fights industry groups won.

CMS dropped the plan that would have let the denial of one enrollment trigger revocation of a provider's other enrollments. That change mattered most for chains running many locations, per McKnight's Long-Term Care News. A denied application in one state will not now cascade across a multi-state chain.

CMS also withdrew proposed expansions of debt-based and payment-suspension denial authorities. The agency will not extend the denial ground for existing Medicare debt to managing employees, managing organizations, or parties with any other form of business or financial relationship with the provider. The same goes for the denial ground tied to current Medicare or Medicaid payment suspensions. Both stay limited to the provider itself.

Provider groups won smaller fixes too. The American Health Care Association said CMS clarified that providers do not have to continuously investigate or monitor their affiliations, codified corrective action plans for certain enrollment denials, and created a way to challenge reactivation effective dates, per Medical Daily.

The Medical Group Management Association warned during the comment period that retroactive revocations should be reserved for big violations, not small admin or data entry errors, per Medical Daily. CMS kept the retroactive power anyway. That is the warning to carry into 2027. A paperwork error and a fraud scheme now sit under the same retroactive tool, and the only thing separating them is how CMS chooses to use it.

LeadingAge put the industry worry in plain words. President and CEO Katie Smith Sloan said the group is deeply concerned the provisions will raise the risks and uncertainty that nonprofit and mission-driven members face as scrutiny of Medicare providers grows. Her statement added that CMS treats program integrity risk, not the finding of fraud, as the main goal of the new grounds. McKnight's Home Care carried the statement on November 6, 2026.

The money side: $415 million up, 3% still coming off

The enrollment crackdown rides inside a payment rule, and the payment side has its own numbers. CMS estimates Medicare payments to home health agencies will rise 2.4% in aggregate in 2027, or $415 million, compared with 2026. That breaks into a 2.1% payment update worth $365 million and a 0.3% increase from the updated fixed dollar loss amount worth $50 million, per the CMS fact sheet.

The increase comes with a haircut that stays in place. CMS finalized a temporary adjustment of negative 3.0% to the 2027 national standardized 30-day payment rate, continuing the recoupment of overpayments from 2020 through 2025 tied to the Patient-Driven Groupings Model. CMS added no new permanent adjustment for 2027. The final fixed dollar loss ratio for 2027 is 0.29%, and CMS recalibrated the case-mix weights for all 432 PDGM payment groups using 2025 data.

Two smaller provisions are worth noting for billing teams. The DME benefit expands on April 1, 2027, to cover certain external infusion pumps and associated home infusion drugs, under section 6222(a) of the Consolidated Appropriations Act, 2026. CMS also said it will issue future guidance with examples of palliative care services that can be provided through the existing home health benefit. Neither changes what Medicare covers today, but both set up billing work for the first half of 2027.

The freeze clock: November 13 decides the next 6 months

The revocation rule lands on top of a separate enforcement freeze that is about to hit its deadline. CMS imposed three nationwide enrollment moratoria in 2026, and two of them expire this week.

CMS froze new Medicare enrollment for certain equipment suppliers on February 27, 2026, after identifying more than $1.5 billion in suspected fraudulent DMEPOS billing, per Baker Donelson. On May 13, 2026, CMS froze new enrollment for home health agencies and hospices nationwide for 6 months. Both moratoria run through November 13, 2026, unless CMS extends them in 6-month steps.

The freeze blocks initial enrollment applications, new branches, and new practice locations. It also blocks re-enrollments triggered by a change in majority ownership inside 36 months. Applications the Medicare contractor received before May 13, 2026, are grandfathered. Anything after that date gets denied. Nixon Peabody warned in May 2026 that any deal structure needing a new Medicare enrollment number was effectively off the table for the freeze period.

The numbers behind the freeze are stark. As of late October 2026, CMS had suspended payments to 899 hospice and home health providers, 812 of them in California, per Medical Daily. CMS said about 800 Los Angeles-area agencies that billed $1.4 billion to Medicare the prior year had payments suspended. California providers carry the most exposure under the geographic risk ground, and the multi-state enrollment post on our site covers how California enrollment rules already complicate billing there.

If CMS lifts the freeze, the relief comes with a catch. Providers that apply to enroll within 6 months of the lift date get assigned to the high screening level, which triggers site visits and fingerprint-based criminal background checks of owners at 5% or more, per Nixon Peabody. Watch November 13. An extension notice would come through the Federal Register, and it would reset the clock for another 6 months.

What a retroactive revocation costs your practice

Percentages hide the dollars, so here is the math on a round practice, with every input tied to a published number or labeled as an illustration.

Take a home health agency that collects $150,000 a month from Medicare. That is $1,800,000 a year, labeled here as an illustration figure, not a published rate. Your monthly collections will differ. Suppose CMS finds the agency fell out of compliance 8 months before the revocation letter arrived. The noncompliance date is the day an owner failed to report a license action, or the day a required ownership change went unreported.

Under the old rule, the revocation took effect 30 days after CMS mailed the notice. The 8 months of payments before the notice, $150,000 times 8, or $1,200,000, stayed paid. Only the 30-day tail was at stake.

Under the new rule, the revocation reaches back to the day noncompliance began. The full $1,200,000 is recoverable. The change in the rule turns $0 of exposure into $1,200,000 on the same facts.

These are illustration numbers built on the rule's retroactive mechanism, not your numbers. Your monthly collections and your noncompliance window will differ. But the shape holds: every month between the start of noncompliance and the revocation letter is now a month of payments CMS can take back.

The tail costs money too. Revoked providers generally get 15 calendar days from the revocation letter to submit claims for services furnished before the revocation took effect, per Wolters Kluwer's summary. Miss that window and those claims die unpaid, on top of the recovery.

Then count the bar. A denial now carries a reapplication bar of up to 10 years. At $150,000 a month, a 10-year bar is $18,000,000 in Medicare revenue over the bar, assuming flat collections. That is an illustration, not a prediction, since CMS sets the bar case by case. But it shows why a denial letter is now a business-ending event for a Medicare-heavy practice, not a paperwork delay.

Run the same math on your own numbers. Pull your monthly Medicare collections, count the months since your last clean enrollment check, and multiply. Our medical billing services team runs this math inside the free audit, and our pricing page shows what that work costs. The revenue cycle management team tracks the same exposure across your whole payer mix, so one Medicare problem does not quietly spread to your commercial claims.

Old rule vs new rule

Your 90-day enrollment health check

The rule rewards practices that can prove their enrollment record is clean, dated, and current. Run this check before the end of the year, while the enrollment provisions are still weeks from taking effect.

Start with PECOS. Pull your enrollment record and confirm every owner, managing employee, officer, and director is listed with the right percentage and role. Confirm your practice locations match the addresses where you actually see patients. A location mismatch is the kind of small error that now sits under a retroactive tool.

Write the ownership check down like this, dated and signed: "Ownership disclosure verified in PECOS on November 12, 2026. Owners: [name], 60%, managing member; [name], 40%, member. No owner, managing employee, officer, or director has a license action, program suspension, or conviction in the past 10 years. Verified by [name], [title]."

For a revalidation, attach a cover note that does the reviewer's work for them: "Revalidation for [legal business name], PTAN [number], NPI [number]. Enclosed: updated ownership disclosure dated [date], license verifications for [state] dated [date], and practice location list with [number] locations. No changes in majority ownership in the past 36 months."

Three habits cut your exposure. First, report ownership changes and adverse legal actions the week they happen, not at revalidation, since the revocation date for a late report runs from the day after you were required to report. Second, screen every new owner, partner, and managing employee for license actions, program suspensions, and convictions before they sign, since their history now attaches to your enrollment. Third, track your revalidation date in the same calendar as your license renewals, and chase it 90 days early.

Our Medicare revalidation post gives you the control calendar for that third habit. The psychiatry Medicare enrollment post walks through the enrollment steps for one specialty. A billing compliance program turns these checks into a routine instead of a scramble.

What happens next

Four dates decide what happens next, and two of them land this month.

First, today, November 9, 2026, the final rule publishes in the Federal Register as document 2026-22750. The Federal Register document carries the full text, including the enrollment provisions.

Second, November 13, 2026, the home health and hospice enrollment moratoria expire unless CMS extends them. An extension would run another 6 months. A lift would reopen new enrollments and trigger high-level screening for applicants in the first 6 months after the lift.

Third, January 1, 2027, the home health payment provisions take effect, including the 2.4% aggregate increase and the temporary 3.0% cut to the base rate. The same date brings the rest of the 2027 Medicare changes, including the physician fee schedule final rule our 2027 Medicare fee schedule post covers, with the conversion factor falling to $32.63.

Fourth, the enrollment provisions take effect 60 days after the rule was filed for public inspection, which lands in early January 2027. CMS will also issue future guidance with examples of palliative care services under the home health benefit, and the DME infusion pump expansion takes effect April 1, 2027.

Denials were already the top pressure on practices before this rule. Our claim denials post covers the Experian survey that found 75% of providers say denials are increasing. The enrollment rule adds a new front. A denial costs you a claim. A revocation costs you the right to bill.

What this means for your revenue

Medicare enrollment revocation 2027 is no longer a back-office formality. CMS can now revoke your enrollment back to the day you slipped out of compliance, recover every payment in between, and bar you from reapplying for up to 10 years. The agency expects to recover about $82 million a year with the new powers, and it has 899 suspended hospice and home health providers behind it already.

Good providers with clean records have little to fear from the substance of the rule. The risk sits with practices that treat enrollment as a form they filed once and forgot. An unreported ownership change, a part-owner with a license action in another state, a practice address that does not match PECOS, a revalidation that slipped past its date. Each one is now a retroactive exposure measured in months of Medicare revenue.

Your defense is the file CMS sees. Keep PECOS current, report changes the week they happen, screen every owner before they sign, and track your revalidation date 90 days early. Run the math from this article on your own collections. If you bill $150,000 a month from Medicare and your noncompliance started 8 months ago, you have $1,200,000 at risk under the new rule.

Get a free audit of your enrollment record and your last 90 days of Medicare claims. We price your retroactive exposure, flag the gaps, and show you the 3 fixes worth the most money, in 48 hours.

Frequently asked questions

Sources

• Centers for Medicare and Medicaid Services, CMS Finalizes Broad Medicare Integrity Changes in Home Health Final Rule, press release, November 4, 2026: https://www.cms.gov/newsroom/press-releases/cms-finalizes-broad-medicare-integrity-changes-home-health-final-rule-expected-save-taxpayers-tens
• Centers for Medicare and Medicaid Services, Calendar Year 2027 Home Health Prospective Payment System Final Rule fact sheet (CMS-1844-F), November 4, 2026: https://www.cms.gov/newsroom/fact-sheets/calendar-year-cy-2027-home-health-prospective-payment-system-final-rule-cms-1844-f
• Federal Register, Calendar Year 2027 Home Health Prospective Payment System final rule (CMS-1844-F), document 2026-22750, scheduled for publication November 9, 2026: https://www.federalregister.gov/d/2026-22750
• Medical Daily, Medicare Can Recover Payments Back to the Day Noncompliance Began Under Final CMS Home Health Rule, November 6, 2026: https://www.medicaldaily.com/cms-retroactive-medicare-enrollment-revocations-2027-480926
• TechTarget, New CMS rule ties Medicare billing privileges to owners' misconduct, November 6, 2026: https://www.techtarget.com/revcyclemanagement/news/366653952/New-CMS-rule-ties-Medicare-billing-privileges-to-owners-misconduct
• McKnight's Home Care, Medicare providers beware new harsh enrollment provisions, November 6, 2026: https://www.mcknightshomecare.com/medicare-providers-beware-new-harsh-enrollment-provisions/
• McKnight's Long-Term Care News, CMS finalizes new provider disenrollment, revocation rules with few guardrails, November 2026: https://www.mcknights.com/news/cms-finalizes-new-provider-disenrollment-revocation-rules-with-few-guardrails/
• LeadingAge Minnesota, CMS Finalizes Medicare Provider Enrollment Changes in 2027 Home Health Rule, November 5, 2026: https://www.leadingagemn.org/news-insights/cms-finalizes-medicare-provider-enrollment-changes-in-2027-home-health-rule/
• Home Health Care News, CMS Finalizes 2027 Home Health Medicare Payment Rule With 2.4% Rate Increase, November 4, 2026: https://homehealthcarenews.com/2026/11/cms-finalizes-2027-home-health-medicare-payment-rule-with-2-4-rate-increase/
• Baker Donelson, CMS Enrollment Moratoria and the 2026 Fraud and Abuse Enforcement Surge, 2026: https://www.bakerdonelson.com/cms-enrollment-moratoria-and-the-2026-fraud-and-abuse-enforcement-surge-what-health-care-providers-need-to-know-now
• Nixon Peabody, CMS hospice and home health agency moratorium: Impact on M and A and ownership, May 14, 2026: https://www.nixonpeabody.com/-/media/files/alerts/2026/05/healthcare_alert_cms_moratorium.pdf
• DLA Piper, CMS receives permissive exclusion authority and proposes expanded Medicare enrollment enforcement tools, October 28, 2026: https://www.dlapiper.com/en/insights/publications/2026/10/cms-receives-permissive-exclusion-authority-and-proposes-medicare-enforcement-tools
• Wolters Kluwer VitalLaw, CMS paired home health payment increase with broader Medicare integrity controls, November 6, 2026: https://www.vitallaw.com/news/health-care-reimbursement-news-cms-paired-home-health-payment-increase-with-broader-medicare-integrity-controls/hld01fd5db4e7e6084f5eab7d6f24d3c2ef42
• Experian Health, State of Claims 2026: Why denials remain an uphill climb, October 28, 2026: https://www.experian.com/blogs/healthcare/state-of-claims-2026-why-denials-remain-an-uphill-climb/