Weekly healthcare intelligenceRegulation · Enforcement · Government payersNews & Sweeps →
Complete approved report · Compliance Sweep

Compliance Sweep, October 18, 2026

Published October 18, 2026 Coverage Oct 11, 2026 to Oct 17, 2026 Listed sources reviewed through Oct 17, 2026 Last modified Oct 23, 2026 Version 1

Read this edition’s coverage note ↓

Executive triage

Review OHCA filings, workforce authorization and proposed California requirements

  • OHCA’s labor-cost request process took effect October 12; eligible 2026 requests are due November 16, with supporting data and confidentiality planning.
  • DHS’s final EAD rule preserves the October 30, 2025 renewal-filing cutoff and separately authorized extensions; California dental, pregnancy-leave and safety amendments remain proposed.

What changed since last week

Compare with the previous published edition, Oct 11, 2026. Labels describe each development's lifecycle; absence from this list does not mean an obligation closed.

Findings, highest priority first

Each card leads with priority, lifecycle, applicability, and deadline, then the detail.

P2 NEW Operationally relevant Announced

DOJ and OIG coordinate a single qualifying criminal healthcare self-disclosure

Summary
The October 15 policy coordinates DOJ corporate-enforcement and OIG self-disclosure benefits for qualifying criminal healthcare disclosures. A duplicate OIG portal submission is unnecessary, but eligibility conditions, prosecutorial discretion and mandatory-exclusion limits remain.
What changed

On October 15, DOJ’s National Fraud Enforcement Division and HHS-OIG issued a policy coordinating voluntary self-disclosures involving potential criminal violations affecting federal healthcare programs. A qualifying disclosure to the Health Care Fraud Section within the Corporate Enforcement Policy receives the benefits of OIG’s Health Care Fraud Self-Disclosure Protocol without a second submission through OIG’s portal. The Health Care Fraud Section provides OIG a copy. The policy also preserves qualifying good-faith disclosures to another appropriate DOJ component; it does not make one named office the exclusive permissible route.

A submission only to OIG generally does not qualify as a DOJ voluntary self-disclosure for Corporate Enforcement Policy treatment, although cooperation and remediation credit may remain available. The policy retains the underlying voluntary-disclosure, full-cooperation and timely-remediation conditions and aggravating-circumstances qualifications. SDP benefits do not resolve mandatory exclusion under 42 U.S.C. 1320a-7(a), and the coordination policy creates no enforceable private right. These limits distinguish coordinated benefits from automatic immunity or a release of every potential consequence.

Why it matters
Intake teams need to distinguish potentially criminal conduct from matters suitable for OIG’s civil or administrative protocol before choosing a disclosure route. Duplicate submissions should not substitute for a timely, qualified disclosure.
Response type
Validate
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextHave counsel compare investigation intake and disclosure-routing procedures with the coordination policy, preserving eligibility analysis, evidence and the basis for any disclosure decision. The playbook dates are internal targets, not agency deadlines.

  1. Recommended internal target: Have counsel compare investigation intake and disclosure-routing procedures with the coordination policy, preserving eligibility analysis, evidence and the basis for any disclosure decision. The playbook dates are internal targets, not agency deadlines. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P2 NEW Operationally relevant Effective effective Oct 14, 2026

DHS finalizes removal of most automatic EAD renewal extensions

Summary
The October 14 final rule adopts the 2025 interim rule without change. The filing cutoff remains October 30, 2025; eligible earlier renewals and extensions provided by law or notice retain their separate treatment.
What changed

DHS published a final rule effective October 14 adopting without change the 2025 interim rule that removed most automatic employment-authorization-document extensions for renewal applications filed on or after October 30, 2025. Finalization does not create a new October 2026 filing cutoff. Employers therefore need the renewal filing date, category and applicable authority to determine which extension framework applies, rather than treating all pending renewals alike.

Eligible renewals filed before the October 30, 2025 cutoff can retain the earlier automatic extension, potentially up to 540 days from the card’s expiration date while the application is pending, subject to the applicable receipt and category conditions. Extensions provided by law or a Federal Register notice, including applicable Temporary Protected Status extensions, remain distinct. An EAD extension does not extend advance parole printed on a combination card, and expiration of an EAD does not establish loss of underlying work authorization for every status. USCIS’s M-274 summary provides background; category-specific instructions require their own review.

Why it matters
Workforce continuity depends on applying the correct filing-date and category rules. A blanket assumption that every renewal receives 540 days, or that every expired card ends authorization, can produce incorrect employment decisions.
Response type
Validate
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextHave the employment-eligibility team review pending-renewal workflows against the final rule and the actual category-specific USCIS instructions. Record the authority used for each conclusion and obtain counsel review of unresolved cases. Playbook dates are internal targets.

  1. Recommended internal target: Have the employment-eligibility team review pending-renewal workflows against the final rule and the actual category-specific USCIS instructions. Record the authority used for each conclusion and obtain counsel review of unresolved cases. Playbook dates are internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P2 NEW Operationally relevant Announced

DOJ action highlights remote IT-worker identity risks for healthcare employers

Summary
An October 13 coordinated enforcement announcement identifies healthcare companies among victims of alleged North Korean remote IT-worker schemes. The new arrests and announcement are distinct from the September searches.
What changed

DOJ announced coordinated action October 13 against alleged North Korean remote IT-worker schemes, including arrests in an Ohio case and a Texas operation involving approximately 187 computer devices. The Ohio allegations describe stolen or fabricated identities, proxy infrastructure and U.S.-based facilitators hosting employer laptops. DOJ identifies healthcare companies among more than 70 victim employers across several sectors. Charges remain allegations; the announcement does not establish that every affected employer suffered a patient-data breach.

The reported timeline contains distinct events. The October 13 release announced the Ohio indictment and arrests, while Texas searches and related action at more than 40 known or suspected laptop-farm residences occurred September 21–25. The October 13 release also points employers to a new FBI advisory about evolving facilitator recruitment and other detection issues. The mechanism connects hiring and contractor identity, device location and remote-access arrangements. It is not limited to a vendor’s written assurance that its workers are U.S.-based.

Why it matters
Healthcare employers and technology vendors may expose systems through fraudulent worker identities even when the employment or contracting arrangement appears domestic. The source does not justify assuming a breach occurred at an identified organization.
Response type
Validate
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance
Affected functions
Compliance, IT, Legal

What to do nextCoordinate HR, procurement and security review of remote-worker identity, subcontracting, issued-device custody and authorized remote access. Review the actual FBI advisory before adding its specific indicators or mitigation instructions. Playbook dates are internal targets.

  1. Recommended internal target: Coordinate HR, procurement and security review of remote-worker identity, subcontracting, issued-device custody and authorized remote access. Review the actual FBI advisory before adding its specific indicators or mitigation instructions. Playbook dates are internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P2 NEW Operationally relevant Effective

HHS delegates permissive exclusion authority to CMS while preserving OIG authority

Summary
The October14 notice delegates Social Security Act section1128(b) permissive exclusion authority to the CMS Administrator. OIG retains its authority; hearings and regulation issuance are excluded from the CMS delegation. This is an agency-authority change, not an exclusion of a named provider.
What changed

HHS published a delegation to the CMS Administrator of the Secretary’s permissive exclusion authority under section 1128(b) of the Social Security Act on October 14. The notice explains that CMS requested the authority so it can investigate, identify and develop the evidentiary basis for permissive exclusions while administering Medicare and Medicaid. It revises limitations in the earlier delegation and states that the delegation is effective immediately. The notice does not provide a separate signature date that would support assigning a different calendar effective date.

The authority may be redelegated under applicable departmental policies, procedures and regulations. The delegation expressly excludes conducting hearings and issuing regulations, and it does not diminish the Inspector General’s earlier delegated authority or actions under that delegation. HHS also affirms and ratifies earlier exercises of the delegated authority by the Administrator or subordinates. The announcement does not itself exclude an organization or create a new substantive exclusion ground; provider-specific consequences still require the applicable authority and action.

Why it matters
Provider organizations should recognize CMS as an additional source of permissive-exclusion action and route notices to counsel promptly. Existing OIG exclusion monitoring remains relevant because the delegation expressly preserves OIG authority.
Response type
Validate
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextHave Legal and Compliance review exclusion-notice intake and escalation so CMS communications receive appropriate attention alongside OIG actions. Confirm each actual notice’s grounds, appeal process and scope; do not infer an exclusion from this delegation alone. Playbook dates are internal targets.

  1. Recommended internal target: update intake routing for CMS permissive-exclusion correspondence while preserving OIG monitoring. Compliance · due Oct 23, 2026
  2. Recommended internal target: confirm counsel review of authority, hearing rights and effective scope for any actual exclusion notice. Legal · due Oct 30, 2026
P2 NEW Potentially applicable Proposed

DEA revises temporary scheduling intent for 7-hydroxymitragynine and pseudoindoxyl

Summary
DEA’s October14 notice proposes revised threshold-based ScheduleI controls for 7-hydroxymitragynine and mitragynine pseudoindoxyl. A later temporary order, announced for on or after November13, is required. The existing pseudoindoxyl order continues; below-threshold status is not a safety finding.
What changed

DEA published an October 14 notice of intent, signed October 8, to temporarily place 7-hydroxymitragynine and mitragynine pseudoindoxyl above revised thresholds in Schedule I. It follows an October 8 HHS recommendation and replaces the earlier 7-hydroxymitragynine scheduling intent through a separate withdrawal notice. DEA states that a temporary order will be published on or after November 13. This notice is the advance step, not the later order that would impose the revised controls, and November 13 is not an automatic effective date.

The proposed threshold is met when either substance alone, or their combined amount if both are present, exceeds 1 milligram per gram in solid forms or 1 milligram per milliliter in liquids, or when the mass of mitragynine divided by the mass of the relevant substance or their combined amount is less than 100. The strict greater-than and less-than conditions matter. The August 26 temporary order placing mitragynine pseudoindoxyl in Schedule I without a threshold remains effective until it expires or a replacement order is published and the prior order withdrawn, whichever occurs first. DEA expressly cautions that the threshold is not a finding that below-threshold products are safe. The notice describes eventual Schedule I controls for covered handling, research and possession when the new order takes effect.

Why it matters
Pharmacy, research and substance-use teams may encounter products with different concentration and composition claims. A proposed threshold cannot be used to treat an already controlled substance as unregulated or to equate a below-threshold product with an approved or safe treatment.
Response type
Monitor
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextIdentify any relevant products or research materials, obtain reliable composition information and have counsel compare current controls with the eventual order. Monitor the actual replacement publication before changing handling or research procedures. Internal playbook dates are preparation targets.

  1. Recommended internal target: inventory potentially affected materials and identify actual substance and concentration evidence. Clinical Operations · due Oct 30, 2026
  2. Recommended internal target: review existing controls and assign monitoring for the later temporary order, without assuming automatic November13 effectiveness. Legal · due Nov 6, 2026
P2 NEW Potentially applicable Effective compliance Nov 16, 2026

OHCA labor-cost adjustment process takes effect; 2026 requests are due November 16

Summary
OHCA’s labor-cost adjustment process took effect October 12. Eligible requestors must support projected nonsupervisory organized labor costs under the adopted specifications; 2026 requests are due November 16. Submitted material, including labor agreements, is public by default unless OHCA accepts confidentiality.
What changed

OHCA’s emergency regulations establishing requests for nonsupervisory organized labor cost adjustments took effect October 12, 2026. The process permits specified hospitals, psychiatric health facilities, physician organizations, fully integrated delivery systems and qualifying labor organizations acting on their behalf to request an adjustment to an applicable spending target when the relevant labor costs are projected to grow faster than that target. Requestors must use OHCA’s portal and the incorporated September 2026 specifications, supplying expense data, projections, methodology and supporting labor documents under penalty of perjury. Requests made in 2026 are due November 16, 2026; the ordinary deadline is the last business day of October two years before the requested adjustment year, with a separate request for each year.

Submitted information, including labor agreements, is public by default. A requestor seeking confidentiality must submit public and unredacted versions, explain the legal grounds and requested duration, and obtain OHCA’s acceptance of the designation; the unredacted material remains confidential while that determination is pending. The final addendum removed automatic confidentiality for labor agreements and clarified that a provider’s required accuracy attestation does not amount to approval of a labor organization’s request. OHCA may later request documents to determine whether an adjustment remains warranted, generally requiring a response within 10 days unless a good-cause extension applies.

Why it matters
Eligible organizations have a short2026 filing window and must distinguish a supported adjustment request from an automatic labor-cost exclusion. Confidentiality planning matters before uploading agreements or financial material because protection is conditional.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
California
Primary owner
Finance
Affected functions
Finance, Legal, Compliance

What to do nextHave Finance, labor-relations counsel and Compliance assess eligibility, prepare supported expense projections and attestations, and review public/confidential versions before submission. Confirm unresolved Board-decision timing directly with OHCA rather than calculating a deadline from inconsistent background text. Internal targets below precede the actual November 16 filing deadline.

  1. Recommended internal target: confirm requestor eligibility, adjustment years and organized-labor cost methodology. Finance · due Oct 30, 2026
  2. Recommended internal target: reconcile supporting agreements/attestations and proposed confidentiality designations before portal filing. Legal · due Nov 9, 2026
P2 NEW Potentially applicable Proposed comment Nov 30, 2026

Dental Board proposes broader infection-control plans, training and sterilization checks

Summary
California's Dental Board proposes annual infection-control plan review, employer-provided training, package-level sterilization indicators, waterline testing and respiratory-hygiene measures. Written comments are due November 30. The proposal would revise the existing dental standard; it does not establish a new implementation date.
What changed

The Dental Board's proposal, published in the October 16, 2026 Notice Register, would amend 16 CCR section 1005 for dental healthcare personnel who may be occupationally exposed to infectious materials, including potentially exposed nonclinical and unpaid personnel. It would replace the existing written-protocol requirement with an accessible infection-control plan covering all applicable standard precautions, reviewed and updated at least annually by the employer or its designated representative. Employers of dental healthcare personnel would provide training at no cost during working hours before assignment to exposure tasks and within one year of the previous training. Additional training would be required by the effective date of changes to the standard or plan and could focus on those changes. Written comments must be received by November 30; no hearing is scheduled, but one must be held if timely requested at least 15 days before the comment period closes.

The proposed processing controls would add an internal chemical indicator to every sterilization package, with an external indicator also required when the internal indicator cannot be seen from outside. Personnel would inspect indicators immediately upon removing packages from the sterilizer and repackage and sterilize instruments again when the indicator does not register penetration. The proposal retains weekly biological monitoring and 12-month result retention while specifying confirmation by authorized personnel or an independent laboratory. It expressly includes motors among rotary components subject to packaging, labeling and heat sterilization, and adds reprocessing requirements for compromised sterile packaging.

The waterline provisions would remove air purging as the start-of-day alternative to water flushing, retain the two-minute initial flush, specify at least 20 seconds of flushing after each patient, and add routine monitoring or testing according to manufacturer instructions. The proposal also adds respiratory-hygiene signs at entrances and reception or registration desks, tissues and no-touch receptacles, accessible hand-hygiene supplies, mask offers to coughing or sneezing persons, and distancing of symptomatic patients, with a separate waiting area when available. Irrigation on exposed dental pulp would have to use sterile solutions or solutions with disinfecting or antibacterial properties, reflecting the statutory provision identified in the statement of reasons. These are proposed regulatory amendments; the notice does not make the package operative or suspend existing infection-control duties.

Why it matters
Dental operations would need to connect written plans and staff training with equipment-specific processing, waterline maintenance and waiting-area controls. The changes could affect clinical workflows, procurement, training time and documented oversight across affiliated dental sites.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
California
Primary owner
Clinical Operations

What to do nextPrepare a gap assessment against the redlined text, covering plan ownership, training intervals, sterilization indicators, motor processing, waterline instructions and respiratory supplies. Distinguish newly proposed language from retained requirements and existing statutory duties. Decide whether operational issues warrant comments or a timely hearing request; track adoption before assigning a regulatory implementation date.

  1. Recommended internal target: identify affected dental sites and assign clinical, infection-prevention and training owners. Clinical Operations · due Oct 23, 2026
  2. Recommended internal target: complete a redline-based assessment of plans, training, sterilization, waterlines and respiratory controls. Quality · due Nov 6, 2026
  3. Recommended internal target: decide whether to prepare comments or request a hearing, accounting for the official requirement that a hearing request arrive at least 15 days before the November 30 comment close. Legal · due Nov 13, 2026
P2 NEW Operationally relevant Proposed comment Dec 8, 2026

CRD proposes changes to pregnancy accommodations, certification and bonding leave

Summary
The Civil Rights Council proposes broader pregnancy-accommodation guidance, tighter limits on medical-certification requests, faster individualized responses and removal of the two-week CFRA bonding-leave minimum. The package also addresses interaction with PWFA leave. Comments are due December 8 at 5 p.m.; the changes remain proposed.
What changed

The Civil Rights Council's October 16, 2026 notice proposes amendments to California's pregnancy and CFRA employment regulations. The proposal retains general coverage of private employers with five or more employees, while the harassment provision reaches employers with one or more employees. It would expand and reorganize pregnancy-related definitions, expressly address discriminatory automated employment decisions, and clarify that a qualified employee can include someone whose inability to perform an essential function can be reasonably accommodated through its temporary suspension or other arrangements. The Council will hold a hearing December 8 at 11 a.m.; written comments must be received that day by 5 p.m. The notice establishes a proposed rulemaking, not an effective date for the amendments.

Accommodation and transfer requests could be made at any time, with employer responses required as soon as practicable and unnecessary delay potentially violating the rule even if relief is eventually provided. The proposal would replace the current combined ten-calendar-day response language with separate, context-specific provisions. It identifies water, restroom, sitting or standing, and eating or drinking breaks as common accommodations for which delay will likely be unnecessary. Temporary work-enabling accommodations would count in the delay assessment; leave would count for that purpose only when selected or requested by the employee. Pregnancy-disability-leave notice would require reasonable advance notice, with 30 days creating a rebuttable presumption of reasonableness rather than a fixed minimum, and notice as soon as practicable when advance notice is impracticable.

The proposed certification section would permit medical certification only when reasonable under the circumstances, require acceptance of sufficient documentation and an opportunity to cure deficiencies, and prohibit requiring the certifier to be the treating provider. For accommodations, certification would not be reasonable when the need is obvious, sufficient information is already available, specified simple accommodations are requested, certain pumping or nursing accommodations are involved, or comparable accommodations are available to others without certification. Only employee self-confirmation could be requested for the specified simple accommodations. An unreasonable documentation demand could not justify denial, and excessive demands could constitute interference or retaliation. Return-to-work language would expressly contemplate return with or without reasonable accommodation under a uniformly applied release policy.

For CFRA bonding leave, the Council proposes deleting the two-week minimum and the rule guaranteeing only two shorter occasions, while retaining the requirement to conclude bonding leave within one year of birth or placement. The text also clarifies that pregnancy disability leave, CFRA and accommodation leave under the PWFA or FEHA are distinct entitlements. Exhausting pregnancy disability leave and any available CFRA leave would not automatically end assessment of additional reasonable-accommodation leave. That assessment remains conditional on the applicable law and, for FEHA disability accommodation, a qualifying disability; the proposal does not promise unlimited leave or remove CFRA eligibility requirements.

Why it matters
Covered private healthcare and health-tech employers may need coordinated changes across accommodation intake, leave administration, certification forms, return-to-work practices and scheduling systems. Automated HR tools and vendor workflows also warrant review because the proposal expressly addresses discriminatory selection systems.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
California
Primary owner
Legal

What to do nextMap the proposed changes against current HR and leave-vendor workflows, focusing on blanket certification demands, fixed response windows, simple accommodations, bonding-leave minimums and automatic termination after leave exhaustion. Prepare a legal assessment that distinguishes proposed amendments from existing FEHA, CFRA and federal obligations, and decide whether to comment before December 8.

  1. Recommended internal target: assign HR, legal and leave-vendor owners and identify affected forms and automated workflows. Legal · due Oct 23, 2026
  2. Recommended internal target: assess certification rules, response timing, simple accommodations, bonding minimums and leave-exhaustion decisions. Compliance · due Nov 6, 2026
  3. Recommended internal target: prepare any proposed comments and implementation questions for review before the official December 8, 5 p.m. comment deadline. Legal · due Nov 20, 2026
P2 NEW Operationally relevant Proposed comment Nov 30, 2026

Cal/OSHA proposes per-employee and multi-worksite penalty procedures

Summary
Cal/OSHA proposes regulatory procedures for existing SB 606 egregious and enterprise-wide violation categories, including penalties tied to exposed employees or covered worksites. The package also changes history, posting and abatement provisions. Written comments are due November 30, with further submission permitted at the December 3 hearing.
What changed

The October 16, 2026 Notice Register announces proposed amendments to title 8 sections 332.4, 334, 335, 336 and 340.4 governing Cal/OSHA classifications, penalties, postings and abatement documentation. The principal provisions implement the egregious and enterprise-wide citation categories already created by SB 606 in Labor Code sections 6317 and 6317.8. This is a proposed regulatory framework, rather than a newly enacted statutory enforcement authority. Written comments must be received by November 30, or may be submitted at the December 3 public hearing beginning at 10 a.m. The notice does not establish an effective date for the proposed amendments.

An egregious violation would require a willful violation plus a qualifying factor within the specified five-year period. The proposed prior-history thresholds include one final repeat, willful or egregious violation, five final serious violations, or ten final general or regulatory violations. Other grounds include intentional disregard of safety duties, clear bad faith, specified fatality or injury history, or an experience modifier above 125 percent. A catastrophe would include inpatient hospitalization of at least three employees, regardless of duration, resulting from a workplace hazard. The proposed penalty procedure would issue a separate citation and willful-calculation penalty for each exposed employee; ten exposed employees would mean ten separate penalties, rather than one penalty for the group.

For employers with employees at multiple worksites, a violative written policy applying at more than one site, or evidence of a pattern or practice across sites, would create a rebuttable enterprise-wide presumption. The written-policy basis would retain the statutory exception for emergency regulations during the first 30 days after the Standards Board votes to adopt or amend them. The proposed enterprise-wide calculation multiplies the penalty by covered worksites, using only classifications, characterizations and credits shared by every covered violation. The draft caps the resulting enterprise-wide penalty at $162,851 and generally limits section 336(d) reductions to size. Enterprise-wide general violations would lose the presumed abatement credit but could receive the specified 50 percent credit upon qualifying timely abatement; egregious general and serious violations would not receive abatement credit.

The package would also change the penalty-history lookback from three to five years and expand citation posting to customary notice locations as well as the violation site, with effective notice and an infeasibility qualification. Abatement certification would be due within ten working days after the abatement date, replacing calendar-day wording to align the regulation with the cited statute; the existing exception for an officer who promptly observes and records abatement remains. For enterprise-wide failures to abate, the proposed penalty would follow the worksites that remain unabated, rather than treating correction at some sites as correction everywhere. These details make site-level evidence and enterprise policy governance central to the proposed process.

Why it matters
A shared safety-policy defect or repeated condition across facilities can create broader exposure than a single-site citation. Covered private healthcare employers should be able to identify common policies, final citation history, exposed employees and completed abatement separately for each affected site.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
California
Primary owner
Compliance

What to do nextAssess enterprise safety-policy governance, five-year citation-history records and evidence of site-specific correction. Review the proposed classifications, credit limits and emergency-rule exception with counsel before modeling exposure. Prepare any comments ahead of November 30 and track final adoption while continuing compliance with existing safety laws.

  1. Recommended internal target: assign safety, compliance and legal owners for enterprise policy and citation-history assessment. Compliance · due Oct 23, 2026
  2. Recommended internal target: assess shared policies, five-year final citation history and site-level abatement evidence against the proposal. Clinical Operations · due Nov 6, 2026
  3. Recommended internal target: complete any proposed comments for review before the official November 30 deadline; note the separate December 3 hearing opportunity. Legal · due Nov 20, 2026
P2 NEW Potentially applicable Final

FDA announces final guidance on biosimilar manufacturing changes

Summary
FDA's October 13 availability notice identifies final recommendations for manufacturing changes to licensed biosimilars and interchangeable biosimilars. HHS dates issuance October 9. The guidance addresses reporting categories, comparability evidence, shared manufacturing facilities and new strengths or dosage forms, without creating a general provider deadline.
What changed

FDA's October 13, 2026 Federal Register notice announces availability of final guidance on postapproval manufacturing changes to licensed biosimilar and interchangeable biosimilar products. HHS lists the guidance's issue date as October 9, so October 13 is the availability-announcement date. The guidance finalizes the July 2024 draft and supersedes the earlier Q&A I.20 recommendations. FDA identifies further alignment with ICH Q5E, clarification of how original comparative analytical assessment data can be leveraged, and clarification of supplements for new strengths or dosage forms as changes from the draft. The guidance is nonbinding; the manufacturing-change duties it cites under 21 CFR 601.12 remain regulatory requirements. It establishes no general provider implementation deadline, and guidance comments may be submitted at any time.

For section 351(k) license holders, the document explains the existing risk-based reporting categories: major changes require a prior-approval supplement and approval before distribution; moderate changes generally use a CBE-30 supplement received at least 30 days before distribution, with CBE-0 available in qualifying circumstances; minor changes are documented in an annual report. If FDA notifies the applicant within 30 days that prior approval is required or required supplement information is missing, the changed product must not be distributed until FDA determines compliance. FDA recommends a comparability exercise proportionate to the change's risks, including suitable analytical comparisons, stability information and process-validation evidence. Historical data may support the assessment when quality attributes remain comparable, but selected subsets need scientific justification and changed assays need appropriate bridging data. A qualified in-house reference material generally supports the exercise; the document does not require a fresh comparison against the reference product for every manufacturing change.

The guidance also addresses introducing a product into a multiproduct or contract manufacturing facility. Where related products could be confused, a single identity test may not distinguish them, so applicable manufacturing and procedural controls must address cross-contamination and mix-ups. For a new strength or dosage form not previously licensed in the 351(k) application, FDA generally anticipates a prior-approval supplement supported by risk-based comparability, manufacturing and comparative analytical assessment information. The proposed dosage form and strength must match the reference product, and the supplement must support biosimilarity and any interchangeability determination. Previously submitted analytical data may be leveraged when justified, while observed quality differences may require targeted additional comparisons and some changes may need other data. The guidance recommends discussing the package with the review division before submission and expressly does not cover route-of-administration changes.

Why it matters
The guidance is directly relevant to organizations holding or supporting affected biologics licenses and manufacturing arrangements. It can affect change classification, evidence planning and contract-facility controls. Purchasing or administering a biosimilar alone does not make a provider responsible for submitting a manufacturer's supplement.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Quality

What to do nextFirst determine whether the organization has an affected license-holder, manufacturing or product-development role. For applicable programs, review pending changes against the final reporting and comparability recommendations, justify any reliance on historical analytical data, and assess shared-facility controls. Keep FDA recommendations distinct from cited regulatory duties and seek product-specific review-division advice where the guidance recommends it.

  1. Recommended internal target: identify affected section 351(k) license-holder, manufacturing and development activities. Quality · due Oct 23, 2026
  2. Recommended internal target: review applicable pending changes, reporting categories, comparability evidence and contract-facility controls against the final guidance. Compliance · due Oct 30, 2026
  3. Recommended internal target: document product-specific questions and determine whether review-division discussion is appropriate before a supplement. Legal · due Nov 6, 2026
P2 NEW Operationally relevant Announced comment Dec 11, 2026

FDA launches rare-disease framework initiative and schedules public input

Summary
FDA launched a prospective rare-disease framework initiative October 14, seeking more consistent, tailored development and review while preserving statutory safety and effectiveness standards. A hybrid meeting is scheduled October 28, and the public docket will run October 28 through December 11.
What changed

FDA announced its Rare Disease Framework Initiative on October 14, 2026 and published an accompanying white paper describing a prospective review of rare-disease development and regulatory-review practices. Led by the Rare Disease Innovation Hub with CDER, CBER and the Office of the Commissioner, the initiative extends from pre-IND engagement through postapproval obligations and chemistry, manufacturing and controls. Its stated aim is to tailor advice and evidentiary expectations to the disease, product, patient population and evidence reasonably attainable in small populations. The white paper expressly preserves statutory safety and effectiveness requirements; the announcement does not itself approve a therapy or put a completed replacement review framework into effect.

The planned approach emphasizes early patient input, external disease expertise, shared institutional knowledge, innovative trial and statistical methods, and risk-based CMC review and preapproval inspections. FDA intends to use public input, sector-specific roundtables and internal feedback to assess possible regulatory revisions, new or revised guidance, reviewer training and organizational changes. These are potential outputs rather than completed legal amendments. The October 16 Federal Register notice asks for specific feedback in four areas: fit-for-purpose review and attainable evidence, consistency and predictability, engagement with patients and external experts, and rare-disease CMC considerations.

The hybrid public meeting is scheduled for October 28 from 1 to 5 p.m. Eastern Time, at FDA's White Oak campus and virtually. The notice says the public docket, FDA-2026-N-12214, will open October 28 and close December 11; it should not be described as already open at the October 17 cutoff. Electronic comments are due by 11:59 p.m. Eastern Time on December 11, while paper comments must be received by that date. Disability-accommodation requests are due October 26 at 11:59 p.m. Eastern Time. In-person places are limited and registration is subject to acceptance. Electronic comments and attachments will be publicly posted; confidential submissions must follow the notice's separate paper-submission instructions.

Why it matters
Rare-disease sponsors, research programs, clinicians and data partners have an opportunity to identify practical barriers involving evidence generation, endpoints, patient participation and CMC. The initiative may shape future policy, but it does not justify relaxing current protocols, manufacturing controls or approval standards.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Legal

What to do nextIdentify relevant rare-disease development and clinical-research programs, decide whether to participate in the October 28 meeting, and prepare specific evidence-based feedback organized by FDA's four topic areas. Review any confidentiality needs before preparing a submission. Track later framework outputs separately from the announced engagement process.

  1. Recommended internal target: identify interested programs, decide on meeting participation and assess any accommodation request before the official October 26, 11:59 p.m. Eastern deadline. Clinical Operations · due Oct 23, 2026
  2. Recommended internal target: assemble specific development, evidence, engagement and CMC feedback under the four numbered topics. Quality · due Nov 6, 2026
  3. Recommended internal target: complete legal and confidentiality review of any proposed submission before the official December 11 comment deadline. Legal · due Dec 4, 2026
P2 NEW Potentially applicable Final effective Dec 14, 2026

EPA extends hazardous-substance response-plan compliance dates

Summary
EPA's October 13 final rule will move the initial Clean Water Act hazardous-substance facility response-plan deadline from June 1, 2027, to June 1, 2030, effective December 14, 2026. Other facility categories retain distinct submission schedules. Hospitals appear among potentially affected industries, but coverage requires a facility-specific applicability determination.
What changed

EPA published a final rule on October 13, 2026, extending the initial compliance date for Clean Water Act hazardous-substance facility response plans from June 1, 2027, to June 1, 2030. The rule takes effect December 14, 2026. The program concerns onshore, non-transportation-related facilities that could reasonably be expected to cause substantial environmental harm from a worst-case hazardous-substance discharge to navigable waters, adjoining shorelines or the exclusive economic zone. EPA lists hospitals among potentially affected industries, while expressly directing entities to the applicability criteria in 40 CFR 118.3. A hospital's industry classification alone does not establish coverage.

The amended schedule distinguishes five facility categories. An initially regulated facility operating on November 30, 2029, and satisfying section 118.3 must submit its response plan and Appendix A Substantial Harm Certification Form by June 1, 2030. A facility that first satisfies those criteria after November 30, 2029, or receives a Regional Administrator notification under section 118.5, generally must submit within six months of meeting the criteria or receiving notification. Covered newly constructed facilities beginning operations after June 1, 2030, must submit before operations start. A planned change creating coverage after that date requires submission before the affected portion begins operating; an unplanned change creating coverage requires submission within six months. The new-construction and planned-change provisions also require plan adjustments after a 60-day operational trial period.

The final rule also removes explicit climate-change and environmental-justice references from specified provisions. Its revised adverse-weather definition still requires consideration of conditions that make response equipment and personnel less able to clean up or respond to a discharge. The revised response-plan provision continues to require chemical-specific hazard information and evaluation of worst-case discharge effects in adverse weather. Revised Regional Administrator factors include lack of passive mitigation, reportable discharge history, relevant site-specific environmental characteristics and nearby facility density. These amendments change specified planning language; they do not eliminate the response-plan program.

Why it matters
An organization with a potentially covered facility may need to revise its response-plan calendar and planning documents. The June 2030 date is not a universal deadline: construction, changes in facility characteristics and Regional Administrator notification can produce different submission requirements. Healthcare organizations should establish actual facility coverage before treating the extension as applicable.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance
Affected functions
Compliance, Legal, Clinical Operations

What to do nextHave Compliance and the responsible facility specialists document the applicability assessment using the operative part 118 criteria. For covered facilities, identify the correct facility category and corresponding submission trigger, then update the compliance calendar for the December 14 effective date and revised submission schedule. Review response-plan templates against the amended language while retaining the required adverse-weather and chemical-hazard analysis.

  1. Recommended internal target: identify potentially affected facilities and assign a documented part 118 applicability assessment. Compliance · due Oct 30, 2026
  2. Recommended internal target: for covered facilities, confirm the applicable facility category, submission trigger and response-plan owner. Legal · due Nov 13, 2026
  3. Recommended internal target: update applicable calendars and planning templates before the official December 14, 2026 effective date. Compliance · due Dec 11, 2026
P2 NEW Potentially applicable Interim final compliance Mar 10, 2027

EPA moves the 2025 greenhouse-gas reporting deadline to March 10

Summary
EPA's interim final rule, effective October 14, moves the Greenhouse Gas Reporting Program deadline for reporting-year 2025 annual reports from October 30, 2026, to March 10, 2027. It changes no other requirements. Comments are due November 30; the October 29 virtual hearing is conditional on a timely hearing request.
What changed

EPA published an interim final rule on October 14, 2026, immediately extending the Greenhouse Gas Reporting Program deadline for reporting-year 2025 annual reports from October 30, 2026, to March 10, 2027. The operative amendment to 40 CFR 98.3(b)(6) applies specifically to reporting year 2025. EPA states that the action changes only that reporting deadline and makes no other changes to the rule. The extension follows the February 2026 rule that had moved the same reporting deadline from March 31 to October 30, 2026.

The extension concerns entities required to submit annual reports under 40 CFR part 98, including covered direct emitters, suppliers and underground carbon-dioxide sequestration operations. EPA's examples include general stationary fuel-combustion sources and health services, but an organization's healthcare identity or ownership of combustion equipment does not by itself resolve its reporting status. EPA explains that the extension provides more time to consider comments on its separate 2025 program-reconsideration proposal and prepare the reporting system. That proposal included eliminating reporting-year 2025 reports, but this interim final rule does not adopt that proposal or remove the applicable annual-report requirement.

EPA requests comments on the interim final rule by November 30, 2026. If someone requests a hearing on or before October 19, EPA will hold a virtual hearing on October 29; the notice does not establish that a hearing request had already been received. If the hearing occurs, the last day to preregister to speak is October 26, and requests for special accommodation should be made by October 21. EPA directs participants to its program website for hearing updates. These participation dates are separate from the March 10, 2027 reporting deadline.

Why it matters
A healthcare organization already subject to part 98 may have additional time to complete its 2025 annual report. The extension should not be treated as an exemption, a general suspension of monitoring or recordkeeping, or a change to every reporting year. Organizations evaluating possible coverage still need the applicable regulatory criteria rather than relying on EPA's illustrative industry list.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance
Affected functions
Compliance, Legal, Finance

What to do nextConfirm whether the organization has a reporting-year 2025 obligation under part 98. If it does, replace the October 30 deadline with March 10, 2027, while continuing applicable preparation and other unchanged duties. Assign an owner to monitor the separate reconsideration and e-GGRT instructions. Decide promptly whether to request a hearing or comment, observing the official participation dates if participating.

  1. Recommended internal target: confirm reporting-year 2025 applicability and decide whether to request a hearing. The official hearing-request cutoff is October 19, 2026. Compliance · due Oct 19, 2026
  2. Recommended internal target: complete any proposed written comments and participation review before the official November 30, 2026 comment deadline. Legal · due Nov 20, 2026
  3. Recommended internal target: for an applicable report, complete reporting-readiness review before the official March 10, 2027 submission deadline. Compliance · due Feb 26, 2027
P2 NEW Directly applicable Announced

CDPH reminds listed facilities to report PSPS outages, patient impacts and resource needs

Summary
CDPH’s October 16 letter restates existing unusual-occurrence reporting for thirteen facility types during Public Safety Power Shutoff outages. It identifies the reporting recipients, outage and backup-power information to supply, and separate after-hours routes for facilities inside and outside Los Angeles County.
What changed

In AFL 26-29, dated October 16, CDPH reminds facilities that a power outage related to a planned Public Safety Power Shutoff (PSPS) is an unusual occurrence reportable under existing Title 22 requirements. Although the letter is addressed to All Facilities, its mandatory reporting list names thirteen facility types: Acute Psychiatric Hospitals; Adult Day Health Centers; Chemical Dependency Recovery Hospitals; Congregate Living Health Facilities; Correctional Treatment Centers; Intermediate Care Facilities; Intermediate Care Facilities/Developmentally Disabled; Intermediate Care Facilities/Developmentally Disabled, Habilitative; General Acute Care Hospitals; Pediatric Day Health and Respite Care Facilities; Primary Care Clinics; Psychology Clinics; and Skilled Nursing Facilities. At issuance, CDPH said it was monitoring PSPS events expected over the next few days in 29 counties. That statement describes the October 16 monitoring context.

For the listed facilities, the letter directs reporting of PSPS outages, generator and fuel status, patient impacts and resource needs to the local Center for Health Care Quality district office, local public health officer and Medical Health Operational Area Coordinator (MHOAC). During normal business hours, Monday through Friday, 8 a.m. to 5 p.m., facilities contact their usual local district office. After hours, or if that office is non-operational because of an emergency or disaster, facilities outside Los Angeles County contact the CDPH duty officer at 1-916-328-3605; Los Angeles County facilities contact the county operator at 1-213-974-1234 and ask for notification of the on-call Health Facilities Inspector Division supervisor. MHOAC notification follows local protocols. The requested details include whether the generator is functioning, the days or supply of fuel available, plans to obtain more fuel or evacuate if necessary, patient impacts and resource needs. The letter also reiterates that facilities must have power-loss contingency plans and recommends reviewing emergency plans and adequate backup power.

Why it matters
Power continuity and external reporting are distinct parts of the response. The local public health officer and MHOAC are reporting recipients alongside the district office, and the different Los Angeles after-hours route matters when an organization maintains a shared escalation process across counties.
Response type
Validate
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
California
Primary owner
Clinical Operations
Affected functions
Clinical Operations, Compliance, IT

What to do nextSuggested internal actions: confirm which sites fall within the thirteen listed facility types, review their PSPS contingency and reporting procedures, and assign responsibility for assembling outage, generator, fuel, patient-impact and resource information. Review utility-alert contact records against the letter’s strong recommendation for at least two 24-hour contacts per facility. Use the location-specific reporting route and local MHOAC protocol when an event occurs.

  1. Suggested internal check: map each licensed site to the thirteen facility types named in the reporting list and confirm its usual district office and local notification protocol. Compliance
  2. Suggested internal preparation: assign an outage-reporting owner and a process for collecting generator status, fuel endurance and replenishment or evacuation plans, patient impacts and resource needs. Clinical Operations
  3. Suggested internal review: check PSPS power-contingency arrangements and the utility-alert roster, including the letter’s recommendation for at least two 24-hour contacts per facility. Clinical Operations
  4. Suggested internal exercise: walk through normal-hours and after-hours reporting, including the Los Angeles County route and local public health officer and MHOAC notifications. Compliance
P3 NEW Operationally relevant Proposed comment Nov 13, 2026

USCIS proposes removing required deference in Form I-129 extension decisions

Summary
A proposed rule would remove the regulatory requirement to defer to certain earlier petition approvals. It reaches covered Form I-129 requests beyond H-1B and remains a proposal, with comments due November 13.
What changed

DHS proposed on October 14 to remove the regulatory requirement that USCIS generally defer to an earlier approval when deciding a Form I-129 request involving the same parties and underlying facts. The proposal concerns the adjudication standard for covered nonimmigrant-worker petitions and is broader than H-1B alone. Comments are due November 13 before midnight Eastern Time. Publication does not itself change the current adjudication rule.

The proposed change would allow a fresh assessment of eligibility without treating the earlier approval as presumptively controlling. It would not prohibit USCIS from considering relevant prior approvals and supporting evidence. The current rule already contains exceptions to deference; those existing exceptions should not be presented as newly operative October requirements. For healthcare employers using affected nonimmigrant classifications, the practical question is how extension files document continuing eligibility rather than whether an earlier approval can simply be attached.

Why it matters
Extension planning may need stronger contemporaneous support if the proposal is finalized. Current filings should continue to follow the rule actually in force.
Response type
Comment
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextAsk immigration counsel to identify affected petition categories and assess whether comments or future documentation changes are useful. Keep proposed changes separate from current filing requirements. Playbook dates are internal targets.

  1. Recommended internal target: Ask immigration counsel to identify affected petition categories and assess whether comments or future documentation changes are useful. Keep proposed changes separate from current filing requirements. Playbook dates are internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P3 NEW Potentially applicable Announced implementation Jan 16, 2027

FDA enables eCTD forward compatibility and sets a validation rejection date

Summary
Two October 16 notices enable eCTD 4.0 follow-on submissions for applications begun in 3.2.2 and announce January 16, 2027 rejection for specified high-severity validation failures. They do not require every existing application to migrate immediately.
What changed

FDA announced October 16 support for forward compatibility in electronic Common Technical Document submissions. An application originally established in eCTD version 3.2.2 can use version 4.0 for subsequent submissions under the specified standards. This makes a transition pathway available rather than imposing an immediate universal migration. Applicable electronic-submission requirements, exemptions and waivers still need to be considered for each submission type.

A separate notice states that submissions with specified high-severity validation failures will be rejected beginning January 16, 2027. The cited version 3.2.2 identifiers are 2024 and 2025, which are validation identifiers rather than established release years. The notice also identifies eCTD4-084 and eCTD4-085 and regional identifiers US-eCTD4-561 through US-eCTD4-564 for version 4.0. The exact implementation and validation files must be matched to the submission pathway. FDA’s older general landing-page statement that forward compatibility was not yet available should not override the later October notice.

Why it matters
Organizations making affected drug or biologic submissions need version-aware validation. Availability of forward compatibility and the later rejection date are different implementation events.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextHave the regulatory-submissions team obtain the exact current FDA standards and validation files, assess affected pipelines and test representative submissions before January 16. Do not assume every application must migrate to version 4.0. Playbook dates are internal targets.

  1. Recommended internal target: Have the regulatory-submissions team obtain the exact current FDA standards and validation files, assess affected pipelines and test representative submissions before January 16. Do not assume every application must migrate to version 4.0. Playbook dates are internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P3 NEW Nice to Know Potentially applicable Announced

HHS launches a voluntary healthy-lifestyle commitment for health centers

Summary
The October 14 initiative encourages prevention, nutrition education and community connections in HRSA-supported health centers. Participation creates no new federal requirement or standard of care and does not affect HRSA funding eligibility or receipt.
What changed

HHS and HRSA launched the Health Center Healthy Lifestyle Commitment on October 14. The voluntary initiative encourages health centers to integrate nutrition, physical activity, healthy sleep and prevention into everyday care. It also encourages use of patient education materials associated with the Dietary Guidelines for Americans, 2025–2030, and resources on HRSA’s health-centers-and-nutrition webpage.

The announcement describes practical activities such as connecting patients with fresh-produce and community programs, training the prevention workforce and providing actionable information to families. It expressly states that participation establishes no new federal requirements or standards of care and that a center’s participation decision will not affect eligibility for or receipt of HRSA funding. Those qualifications are material: the initiative is a program option, rather than a new grant condition or mandatory clinical protocol.

Why it matters
Interested health centers can assess whether the optional resources fit existing prevention work without treating the announcement as a new funding compliance obligation.
Response type
Monitor
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextIf relevant, have clinical and community-health leaders assess the optional materials against existing evidence-based prevention programs. Record the voluntary status in any internal communication. Playbook dates are suggested internal targets.

  1. Recommended internal target: If relevant, have clinical and community-health leaders assess the optional materials against existing evidence-based prevention programs. Record the voluntary status in any internal communication. Playbook dates are suggested internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P3 NEW Potentially applicable Announced

HHS requests updated pediatric-care positions from medical organizations

Summary
October 14 letters ask named medical organizations to state their current positions, identify planned guidance changes and provide timelines within 10 business days. The requests target the recipients and do not themselves establish a new universal provider mandate.
What changed

HHS announced October 14 that it sent further requests to medical organizations concerning their positions on gender-related procedures for minors. The posted letters ask for a clear current position, identification of updates or corrections to guidance and educational content, and a concrete timeline for forthcoming changes. Recipients include the American Medical Association, American Psychiatric Association, American Psychological Association, Endocrine Society, WPATH and the American Academy of Pediatrics. HHS requests written responses within 10 business days.

The AMA letter describes an earlier December 30, 2025 request and states HHS had received no substantive response. The new letter presents the Department’s assessment of the evidence and its criticism of the organization’s position. Those statements should be attributed to HHS rather than presented as an independently established clinical consensus. The posted request does not itself adjudicate a violation, impose a generally applicable hospital compliance deadline or establish the legal status of separate federal funding restrictions mentioned in its background.

Why it matters
The development is relevant to organizations tracking agency scrutiny and guidance changes. The requested response clock belongs to the named recipients, and clinical or funding decisions require their own governing-authority review.
Response type
Monitor
Confidence
High
Who this affects
Health systems, Provider networks, Health-tech
Jurisdiction
Federal
Primary owner
Compliance

What to do nextHave Legal monitor responses and subsequent official action relevant to the organization’s services. Preserve the distinction between a request letter, an agency policy position and an enforceable requirement. Playbook dates are internal targets.

  1. Recommended internal target: Have Legal monitor responses and subsequent official action relevant to the organization’s services. Preserve the distinction between a request letter, an agency policy position and an enforceable requirement. Playbook dates are internal targets. Compliance · due Oct 23, 2026
  2. Recommended internal target: document the scoped assessment, accountable functions and any required follow-through; escalate unresolved legal questions. Legal · due Oct 30, 2026
P3 NEW Potentially applicable Final

DTSC denies a pharmaceutical-waste petition as moot while retaining its rulemaking plan

Summary
DTSC’s petition response, published October 16, says it plans to adopt federal hazardous-waste pharmaceutical standards through California rulemaking, with adjustments for state law. Denying the petition as moot does not itself adopt federal Subpart P or set a new facility compliance deadline.
What changed

The October 16, 2026 California Notice Register publishes DTSC’s response denying as moot a California Retailers Association petition dated September 8. The petition requested permanent adoption of the federal Management Standards for Hazardous Waste Pharmaceuticals in 40 CFR sections 266.500–266.510. DTSC says it has evaluated the rule and already plans adoption through the Administrative Procedure Act process. The response is a petition decision announcing that intended rulemaking path, rather than a completed California adoption of all federal Subpart P provisions.

DTSC explains that authorized states must adopt federal changes that are more stringent than their existing programs, while less stringent changes need not be adopted. It also states that California’s program is more stringent and broader in several respects and that some pharmaceutical-rule provisions will be altered to align with state hazardous-waste requirements and other California law. The response supplies no final regulatory text, adoption date or new facility implementation deadline. Healthcare facilities and pharmacies therefore cannot treat the petition denial as permission to replace existing California waste procedures wholesale with the federal framework.

Why it matters
Pharmaceutical-waste procedures depend on the actual applicable state requirements and the eventual California text. An announced adoption plan can warrant preparation, but assumptions about exemptions, disposal pathways or management standards could be premature.
Response type
Monitor
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
California
Primary owner
Compliance

What to do nextAssign environmental compliance and pharmacy owners to track the California proposal and compare it with existing procedures once the actual text is available. Retain current waste classifications and controls unless an applicable legal change supports revision; do not infer a new deadline from this petition response.

  1. Recommended internal target: identify pharmaceutical-waste procedures and vendors potentially affected by the planned California rulemaking. Compliance · due Oct 30, 2026
  2. Recommended internal target: assign monitoring for proposed text, comment dates and California-specific differences before planning implementation. Legal · due Nov 6, 2026
P3 NEW Operationally relevant Proposed

Cal/OSHA proposes higher boiler and pressure-vessel inspection and permit fees

Summary
The October 15 emergency proposal would raise specified inspection charges from $150 to $180 per hour and permit-processing fees from $45 to $55. Covered equipment, services and public-entity exemptions matter. The operative package makes effectiveness conditional on Secretary of State filing.
What changed

Cal/OSHA issued an October 15, 2026 notice proposing emergency amendments to title 8 sections 344, 344.1 and 344.2. Specified shop, field and resale inspection services under section 344(a), and permit inspections and qualifying follow-up inspections under section 344.1(a) and (b), would increase from $150 to $180 per hour. Processing each permit to operate under section 344.2(b) would increase from $45 to $55. The proposed text retains billing for travel time and upward rounding to quarter-hour increments.

The notice concerns covered tanks and boilers and distinguishes equipment exemptions from the Government Code section 6103 prohibition on charging these inspection and permit fees for equipment owned or operated by public entities. The proposed text retains the follow-up fee exception when safety-order requirements are met, and the Division notified, within 15 days of the compliance date on the preliminary order. Its existing penalty provisions concern fees unpaid within 60 days of the invoice date and equal 100 percent of the unpaid fee; these are not newly proposed penalty increases. Labor Code section 7721(e), quoted in the notice, exempts these emergency fee regulations from OAL review and approval and makes them effective immediately upon filing with the Secretary of State. The notice supplies no completed filing date or public-comment closing date, so these documents establish a proposal without establishing that the higher charges were already effective.

Why it matters
Private healthcare facilities with covered equipment and services may face higher inspection and permit costs. Equipment-specific exceptions and public-entity fee exemptions require an applicability check before budgeting or changing payment instructions.
Response type
Assess
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
California
Primary owner
Compliance

What to do nextHave Facilities and Finance identify covered equipment, inspection arrangements and applicable exemptions. Check actual filing and effective status before applying higher charges. Treat an October 23 status and budget check as an internal planning target, rather than an agency deadline.

  1. Recommended internal target: inventory potentially covered equipment and identify equipment or public-entity fee exemptions. Clinical Operations · due Oct 23, 2026
  2. Recommended internal target: confirm actual Secretary of State filing and effective status before updating inspection budgets or payment instructions. Finance · due Oct 23, 2026
Watch NEW Nice to Know General intelligence Announced

Nice to Know: Puerto Rico announces an interagency fraud task force

Summary
Puerto Rico prosecutors announced an interagency fraud task force after its October 15 first meeting. HHS-OIG and the Medicaid Fraud Control Unit participate alongside agencies covering many programs. The announcement signals investigative coordination and establishes no new provider duty or case-specific remedy.
What changed

The Puerto Rico U.S. Attorney's Office announced October 16 the creation of an interagency fraud task force, following its first meeting on October 15. Prosecutors and participating agencies discussed intelligence sharing, investigative leads and directing resources toward significant fraud schemes. The announcement identifies an organizational coordination development. It does not report a healthcare defendant, monetary resolution, charging action or new reporting deadline.

Participants include HHS-OIG, the Puerto Rico Medicaid Fraud Control Unit, VA-OIG and numerous agencies responsible for tax, housing, education, labor and other programs. Their stated mission is to investigate fraud involving public funds through coordinated criminal, civil and administrative work. Healthcare therefore falls within the task force's broader remit, but the announcement supplies no healthcare-specific investigative initiative or additional compliance standard.

Why it matters
The development may be useful regional enforcement intelligence for organizations operating in Puerto Rico. Its practical significance depends on subsequent healthcare-specific actions rather than creation of the task force alone.
Response type
Monitor
Confidence
High
Who this affects
Health systems, Provider networks
Jurisdiction
Federal
Primary owner
Compliance
Affected functions
Compliance, Legal

What to do nextMonitor subsequent official healthcare-related actions where relevant to Puerto Rico operations. Preserve existing investigation-response and evidence-retention procedures without treating the announcement as a new provider mandate.

  1. Recommended internal target: determine whether Puerto Rico operations warrant monitoring of healthcare-specific task-force announcements. Compliance · due Oct 23, 2026
  2. Recommended internal target: confirm that regional investigation-response contacts and evidence-retention procedures are current. Legal · due Oct 30, 2026

Routine reminders and continuing duties

These retain the approved explanation and ongoing duty; they are separate from this edition’s new developments.

OHCA seeks comments on proposed hospital infection measures

Review the hospital-infection measure proposal and consider comments due November 8. No meeting outcome or measure adoption is inferred.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-11-08
Status
Proposed
Read the prior approved explanation

OHCA releases proposed spending-target enforcement procedures for October 30 comments

Review OHCA’s three October 8 progressive-enforcement drafts and consider informal comments due October 30. Proposed response and improvement-plan clocks are not presently due solely because the drafts were released.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-10-30
Status
Proposed
Read the prior approved explanation

AB 1979 regulates healthcare chatbot functions and confidentiality

Review clinical AI deployment for retained professional judgment, licensed-function limits and health-chatbot confidentiality. Preserve the supervised-trainee and nonjudgment documentation/communication exceptions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 503 adds clinical decision-support bias duties

Inventory covered clinical decision-support tools and developer/deployer roles, obtain available bias documentation and plan proportionate monitoring and mitigation. Internal-use documentation and administrative-tool exceptions do not replace other discrimination obligations.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2448 requires sensitive medical information access controls

For businesses covered by Civil Code section 56.101(c), assess enabling the specified access, segregation and out-of-state safeguards. Preserve the exclusion for providers, plans and contractors as defined in section 56.05.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California signs AB 1760 dentistry changes

Review training and the supervising dentist’s clinical-competence determination before RDAEFs licensed on or after January 1, 2010 use contemporary techniques or materials. Keep direct supervision, the dentist’s order and full professional responsibility.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2341 changes local-agency emergency translation calculations immediately

Use the enacted AB 2341 changes to review local-agency emergency-language calculations and five-year reassessment processes. August 31 records immediate effectiveness, rather than a new filing deadline.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-08-31
Status
Effective
Read the prior approved explanation

AB 173 health budget law changes Medi-Cal enrollment integrity controls

Review Medi-Cal enrollment disclosures and escalation of Medicare or other-state Medicaid/CHIP terminations. Keep discretionary investigation suspensions distinct from mandatory enrollment bars, and do not treat prior charges without conviction as an automatic denial.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Effective
Read the prior approved explanation

AB 1199 changes medical staff reappointment and competency review intervals

Review covered hospital medical-staff bylaws and competency procedures for the three-year reappointment framework. The restriction on more frequent routine reappointment requirements applies to CDPH; it does not forbid a hospital’s additional review.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB-1018 Automated decision systems

Assess the retained AB 1018 proposal as historical planning material only; verify later legislative disposition before describing it as currently proposed.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Proposed
Read the prior approved explanation

AB-1405 Artificial intelligence: auditors: registration

Inventory vendors performing covered state-law AI audits and prepare for the January 1, 2029 registration requirement. Registration is an auditor requirement and does not constitute state endorsement.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2029-01-01
Status
Final
Read the prior approved explanation

AB-2311 Health care districts: employment

Before relying on the district-employment exception, verify the hospital’s qualifying loan or payer mix, medical-staff vote, professional independence, nonsupplanting protection and offered contracting option. Plan separately for annual website reports beginning in 2028.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2562 requires suicide prevention policies in covered substance-use programs

Review suicide-prevention plans for covered licensed facilities and certified-program operation manuals. Keep the department’s January 2031 regulation deadline separate from preparation for the enacted plan requirements.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2598 changes facility notification after a patient or resident death

Review documented death-notification workflows for covered hospitals and SNFs, including the 72-hour reasonable-attempt standard, representative or written-preference alternatives and conditional two-business-day public-administrator notice. Preserve the incarcerated-person exclusion.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California requires added electronic notices when health plan provider contracts terminate

Review added electronic contract-termination and renewed-agreement notices alongside mailed notices. Electronic delivery is conditional on the enrollee’s opt-in and contact information; the new amendments exclude specified Medi-Cal managed-care contracts.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California expands Covered California plan options and application intake

Prepare for the July 1, 2027 Exchange intake and plan-selection changes while preserving pre-effective-date notices and premium instructions. Review the separate federal-law fallback before treating January enrollment dates as fixed.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-07-01
Status
Final
Read the prior approved explanation

California establishes sequencing and disclosure rules for repayable continuing-care contracts

Separate resale-conditioned from sequential-order continuing-care repayments. Review the applicable 14-day trigger, sequential repayment account, accrued interest and contract disclosures rather than treating termination alone as the same payment trigger.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California requires county procedures for involuntary-commitment designations

Review county procedures for designating, training and monitoring professionals performing section 5150 functions. Emergency physicians must be an eligible discipline, while the applicable training, approval and revocation processes remain.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California health omnibus changes patient-safety and surveillance requirements

Review covered facilities’ patient-safety plans, reporting, annual revision and biennial submission. For syndromic surveillance, reconcile December 31, 2028 with an earlier one-year notification trigger and the qualifying local-reporting route; do not infer that notice has already issued.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2028-12-31
Status
Final
Read the prior approved explanation

California adds notice controls for records involving protected health care

Route covered protected-healthcare legal-process requests through counsel for Attorney General notice, the seven-business-day production interval and statutory exceptions. Preserve shorter federal obligations and contemporaneous notice where applicable.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California updates restrictions involving conversion therapy

Review the under-18 prohibition on efforts directing a patient toward a predetermined sexual orientation or gender identity. Preserve nondirective exploration, appropriate safety interventions and supportive care within the statutory exclusions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California changes health coverage requirements for antiretroviral products

Review HIV-prevention product coverage and, for contracts issued, amended or renewed from January 1, 2027, the dual medical/pharmacy benefit requirement for non-self-administered products. Preserve therapeutic-equivalent, specialized-contract and applicable Medi-Cal exclusions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California changes disclosure rules for sexual orientation, gender identity, and intersex data

Review identifiable SOGISC-data disclosures for covered state-agency workflows, statutory exceptions and minimum-necessary sharing. Keep voluntary self-identification, agency-specific phases and automation-dependent separation distinct from a universal provider reporting duty.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2150 adds employer-paid naloxone training for employees required to certify in CPR

Where employees must obtain CPR certification, prepare employer-paid approved naloxone training or document qualifying equivalent training. Training alone does not expand medication-administration authority or create an independent duty to administer naloxone.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 1302 changes nursing medication-order authority, education and credentialing requirements

Review nursing medication-order workflows against the enumerated prescriber and APRN scope limits. Keep the January 2029 renewal-proof phase separate from January 2027 preparation; education-program details need their own complete operative review.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 923 expands CCPA deletion controls for nonexempt personal information

For nonexempt information subject to CCPA, review deletion of data collected from or about consumers, downstream deletion notices and limited suppression records. Preserve statutory retention exceptions and the business/service-provider distinction.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2011 preserves specified mental health parity standards in state law

Review California parity implementation against the state law’s incorporated January 1, 2025 federal standards. Route conflicts or material differences for regulator-guidance review; do not describe the act as a new benefit mandate.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 1798 restricts genetic information in life and disability underwriting

Review life and disability underwriting controls for genetic tests and full-genome information. Preserve the narrow consent-based medical-record exception, benefit/therapeutic uses and distinction between genetic information and manifested disease.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California COMPETE Act expands public single-firm antitrust enforcement

Review single-firm competition and employment practices against the COMPETE Act standard. Preserve the substantial-market-power requirement, defined small-business and supervised-authority exclusions, and public-enforcement limitation.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 1637 limits changes to physician medical record entries

Review permissions for editing physician patient notes. Preserve author responsibility and the specific delegated-assistant, transferred-care addition and supervised-trainee exceptions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 1854 strengthens protected healthcare legal process safeguards

Route covered out-of-state protected-healthcare requests through counsel for declaration and cooperation safeguards. Apply the correct government, contractor or covered-corporation scope, preserving federal-law limits and permitted California investigations.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 1696 clarifies nurse-midwife authority in obstetric emergency settings

Review nurse-midwife protocols for the specified labor, obstetric-triage and emergency-obstetric settings. The supervision exception is limited to authorized practice or specifically requested obstetric consultation and does not expand licensure or override transfer protections.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 1323 strengthens patient access notices and immigration-response procedures

Review visitor procedures, the main-public-entrance notice, nonpublic treatment areas and immediate escalation of immigration-enforcement requests. Preserve legal-access exceptions and distinguish the January 2030 replacement provisions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 626 changes perinatal screening and treatment duties

Review maternal-mental-health screening, positive-screen evaluation or referral, treatment and existing care-coordination workflows. Preserve practitioner scope, emergency-care exceptions, plan exclusions and conditional Medi-Cal implementation.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 1088 updates portable life-sustaining treatment orders

Review voluntary POLST completion, authorized signers, capacity, revocation and the most recent instructions. Keep medically ineffective-care exceptions and the difference between POLST and an advance directive explicit.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2292 prohibits charges for disability benefit certificates

Remove administrative charges solely for required disability certificates and continued-eligibility forms. Preserve comparable examination/service charges and applicable cost sharing where charges are not imposed solely for completing the form.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

SB 947 adds employment automated decision system protections

Prepare July 1, 2027 workflows for human corroboration and contemporaneous notice when employment discipline or termination primarily relies on ADS output. Preserve the employee-data description right, anonymization and specific statutory exclusions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-07-01
Status
Final
Read the prior approved explanation

AB 1609 changes covered customer service chatbot requirements

Check the large-private-business threshold and exclusions before applying customer-service chatbot disclosure and human-access controls. Response targets require good-faith efforts; covered hospital healthcare communications are specifically excluded.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2561 protects affirmative application privacy settings

Review application and operating-system changes for preservation of affirmatively configured privacy settings. Obtain consent where required and preserve the legal-process and privacy-maintaining discontinuation exceptions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2009 revises plasma center personnel and donor controls

For licensed plasma centers, review the five-day notice and 30-day replacement-application pathway when the biologics lead changes. Keep medical-director coverage, interim qualifications, competency records and scope-limited delegation controls separate.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 2321 strengthens workplace safety investigation controls

Review workplace-incident escalation and evidence-preservation procedures against the expanded safety-investigation framework. Preserve reasonable inspection limits, the warrant route and the distinction between investigation/referral and a criminal finding.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

AB 883 shortens qualifying data broker deletion checks

For covered data-broker activity, reconcile 30-day deletion-mechanism, processing and recurring deletion controls with the statutory exceptions. Keep the January 2028 audit and July 2027 officials/judges notice phases separate from already commenced requirements.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California limits workplace surveillance and emotional AI use

Inventory workplace surveillance for bathroom monitoring, emotional inference and neural-data collection. Review the actual safety, device, legal-requirement and limited federal-operation exceptions before classifying a tool as prohibited.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California refines behavioral crisis transport and law enforcement access

Review crisis-transport destination agreements and access-to-care escalation. Preserve closest-appropriate-destination rules, reasonable preference consideration, local policies, safety conditions and the specified corrections exclusions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-01-01
Status
Final
Read the prior approved explanation

California home health licensure moratorium continues; management filings due March 31

Prepare the management-personnel filing identified in AFL 26-28 for March 31, 2027, and review ten-business-day change reporting and the parent-HHA branch exemption. Verify separately the disposition of any application affected by the elapsed October 9 response date.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2027-03-31
Status
Effective
Read the prior approved explanation

OCR clarifies civil-rights protections against antisemitic discrimination

Use OCR’s September 3 letter to review protected-status discrimination, complaint escalation, retaliation and restoration of equal access. Preserve its First Amendment protections, individualized safety judgments and limits on employment jurisdiction.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Announced
Read the prior approved explanation

DOJ revises False Claims Act enforcement policy on sub-regulatory guidance and declined qui tam dismissals

Map high-risk controls to binding statutory, regulatory or contractual authority, using the September 18 DOJ announcement as background. Counsel should assess case-specific dismissal questions; declined intervention is not automatic dismissal.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Final
Read the prior approved explanation

California reaffirms disability-integration enforcement after reported federal Section 504 regulatory vacatur

Use the Attorney General’s September 25 announcement as a historical reminder to review disability-access and community-integration controls. Attribute federal-court descriptions to that release; counsel must check the operative order before drawing current litigation conclusions.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Announced
Read the prior approved explanation

HRSA living-donor reimbursement guidelines remove recipient-income eligibility test

Review donor-assistance screening using the September 30 application-review cutoff and remove the recipient-income test. Preserve donor-income priorities, other-payer exclusions, available-funds limits and qualifying-expense rules; do not infer current funding availability.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Final
Read the prior approved explanation

California conditions St. Elizabeth Care Center sale on care and oversight protections

Use the historical St. Elizabeth conditional approval to review transaction-specific care, staffing, affiliate-payment and monitoring safeguards. Its conditions bind that transaction; closing and compliance performance are not established by the announcement.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Final
Read the prior approved explanation

Transparency in Coverage final rule sets phased machine readable file changes

Plan Transparency in Coverage file changes against March 6 and September 6, 2027 applicability, the separate July 1, 2028 first-utilization posting and the plan/policy-year 2027 telephone phase. Preserve prior-rule compliance until the applicable transition.

Priority
P1
Owner
Not specified in prior approved coverage
Deadline
2027-03-06
Status
Final
Read the prior approved explanation

FTC hospital pricing warnings reinforce accurate total price estimates

Review scheduled-care estimates for timely, accurate and complete pricing, including reasonably available professional and facility charges. The FTC warning letters do not establish a violation by every recipient, and CMS compliance is not an FTC safe harbor.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Announced
Read the prior approved explanation

FDA codifies six device classifications with specific special controls

Inventory devices potentially affected by the six FDA classification orders and distinguish October codification from earlier classification applicability. Apply category-specific identification and controls before changing procurement or use; these orders do not provide blanket new product clearance.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Final
Read the prior approved explanation

FDA drug application notices distinguish withdrawals from preserved approvals

Reconcile application-specific FDA withdrawals, corrections preserving approvals and non-safety/effectiveness determinations. Keep October 9 and November 9 actions distinct and apply any inventory-dispensing allowance only to the applications and conditions actually covered.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Final
Read the prior approved explanation

Federal independent dispute resolution rule corrected, payment determination text restored and applied back to August 3

Reconcile IDR procedures with the August 28 correction applicable from August 3, including restored binding-determination language. Calendar each case’s actual selection or eligibility trigger rather than treating either historical date as a new filing deadline.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Effective
Read the prior approved explanation

CLIA proposal would permit specified virtual access and digital cytology proficiency testing

Assess optional comments on the CLIA proposal by December 7. The proposed virtual-access flexibility excludes cytology and PPM certificates; proposed digital cytology proficiency testing is a separate change, not current blanket authorization.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-12-07
Status
Proposed
Read the prior approved explanation

California extends skilled nursing consolidated financial reporting deadline to eight months

Reconcile the SNF annual consolidated financial-report calendar with the eight-month interval after fiscal year-end. October 1 is the amendment’s effective date, not a single statewide reporting due date.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
No fixed date
Status
Effective
Read the prior approved explanation

DMHC requires contracted PBM information by October 1

Reconcile the elapsed October 1 contracted-PBM filing and review the separate requirement to ensure contracted PBMs are licensed before January 1, 2027. Application confirmation is distinct from actual licensure.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-10-01
Status
Final
Read the prior approved explanation

CMS makes revised Critical Access Hospital emergency-services readiness guidance effective immediately

For Critical Access Hospitals, review emergency protocols and readiness evidence against retained SOM Transmittal 247. Assess protocol use, staff access, equipment, supplies and escalation arrangements; September 18 is the historical guidance effective date.

Priority
P2
Owner
Not specified in prior approved coverage
Deadline
2026-09-18
Status
Final
Read the prior approved explanation

Forward regulatory horizon

What is coming, what triggers it, and what to do before it lands.

OHCA 2026 labor-cost adjustment requests

Expected timing
November 16, 2026 filing deadline
Applicability
Potentially applicable
Trigger
Scope: Eligible requestors seeking an adjustment under the adopted NOLA specifications. An eligible requestor elects to seek an adjustment for projected nonsupervisory organized labor costs.
Prepare now
As a recommended internal step, assess eligibility, data and labor-document support and confidentiality needs before filing.

Proposed California infection-control and safety amendments

Expected timing
November 30 pre-hearing written-comment deadlines; Cal/OSHA hearing December 3 at 10 a.m.; Dental hearing comments if a hearing is scheduled.
Applicability
Potentially applicable
Trigger
Scope: Affected dental operations and employers evaluating the proposed Cal/OSHA procedures. An organization identifies operational issues warranting comment on the actual proposed text.
Prepare now
As a recommended internal step, assess redlined changes and prepare any comments while continuing existing obligations.

Pregnancy accommodation and bonding-leave rulemaking

Expected timing
December 8 hearing at 11 a.m.; written comments due that day at 5 p.m.
Applicability
Potentially applicable
Trigger
Scope: Employers within the proposed California employment regulations’ coverage. The organization evaluates intake, certification, leave and return-to-work implications.
Prepare now
As a recommended internal step, compare current HR and vendor workflows with the proposal and decide whether to comment.

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies