Compliance Sweep, November 8, 2026

View the illustration with Eugia recalls one lot of vancomycin injection to the hospital level for glass particulate →

What changed

Eugia US LLC announced a voluntary nationwide recall of one lot (3VM26026A) of Vancomycin Hydrochloride for Injection USP (United States Pharmacopeia) 1.25g/Vial-30mL to the hospital/healthcare facility/user level because a glass particle was identified inside a vial. The company announcement is dated November 6, 2026; FDA's publish date is November 9, 2026. The company says the entire lot shipped to wholesalers nationwide from September 2 through September 15, 2026, and that it has not received any adverse event reports. Holders of the lot are told to discontinue use and quarantine it immediately.

Background

Vancomycin hydrochloride for injection is a glycopeptide antibacterial indicated in adult and pediatric patients, neonates and older, for the treatment of septicaemia, infective endocarditis, skin and skin structure infections, bone infections and lower respiratory tract infections. When a company announces a recall, FDA posts the company's announcement as a public service and does not endorse the product or the company; the announcement says this recall is being conducted with FDA's knowledge.

Who this affects

Hospitals, health-system pharmacies and infusion sites holding Eugia vancomycin hydrochloride for injection 1.25 g vials, lot 3VM26026A.

Why it matters

The company says there is a reasonable probability that use of product containing glass particulates can cause serious adverse health consequences such as blockage and clotting in blood vessels, and that greater susceptibility may exist in neonates, infants and patients with compromised organ function. Operational reading: pharmacy should search inventory (including automated dispensing cabinets and satellite pharmacies) for National Drug Code (NDC) 55150-471-01 / 55150-471-10, lot 3VM26026A, quarantine any units, and arrange return. Inference: substitution planning may be needed if the lot was a significant share of vancomycin stock.

Required actions

• None stated as a legal requirement; the company announcement directs holders of the lot to discontinue use and quarantine immediately (2026-11-06 announcement).

Recommended action

• Search all pharmacy locations and cabinets for lot 3VM26026A and quarantine
• Inform clinicians of the recall as the announcement asks
• Document the recall response in the drug recall log

Scope and timing

Authority status

Other (company-initiated voluntary recall announcement posted by FDA)

Responsible owner

Pharmacy

Publication date

2026-11-09 (FDA publish date)

Other dates

2026-11-06 company announcement date; lot shipped 2026-09-02 to 2026-09-15

Not established

FDA recall classification not yet established (not in the openFDA drug enforcement records for this edition's coverage week).

Sources

• FDA posting of Eugia recall announcement

View the illustration with FDA early alert: ButterflyBVM bag-valve-mask resuscitators, removal of lots 000109 to 000117 and pre-use test for others →

What changed

FDA issued an Early Alert on November 3, 2026 about Compact Medical's "Urgent Medical Device Recall" for certain lots of ButterflyBVM single-use bag-valve-mask resuscitators. Lots 000109 through 000117 are to be removed; individually listed earlier lots, numbered between 000081 and 000108 on the FDA page, get a correction: perform the Pre-Use Test before every use and do not use any unit that fails. The reason is a potential hole in the bellows, which FDA says can cause inadequate ventilation and hypoxia. Compact Medical sent letters on September 26 and October 7, 2026, and as of November 2, 2026 had reported no serious injuries or deaths.

Background

The ButterflyBVM is a bag-valve-mask (BVM) resuscitator used for manual pulmonary resuscitation and emergency respiratory support. FDA issues an Early Alert to notify the public of a potentially high-risk device issue and says it will update the page as significant new information becomes available. Compact Medical first wrote to customers about possible bellows holes on September 26, 2026, and sent all affected customers a follow-up letter with recommended actions on October 7, 2026.

Who this affects

Hospitals, emergency medical services and any care area stocking ButterflyBVM single-use bag-valve-mask resuscitators (crash carts, code kits, transport).

Why it matters

If a hole develops in the bellows, tidal volume can leak from the device instead of reaching the patient; FDA says the leak can cause inadequate ventilation and hypoxia and, if not corrected, could result in serious injury or death. Clinical engineering, supply chain and respiratory therapy need to locate affected lots in every location (crash carts, kits, storage), replace removal lots only after a replacement BVM is in place, and add the pre-use test for correction lots. Inference: code-cart check lists may need a temporary step.

Required actions

• None stated as a legal requirement; the firm's recommended actions are summarized on the FDA page (letters dated 2026-09-26 and 2026-10-07).

Recommended action

• Inventory all BVMs by lot at every location
• Remove lots 000109 to 000117 once replacements are in place
• Add the Pre-Use Test for correction lots and brief staff
• Keep backup BVMs available

Scope and timing

Authority status

Other (Early Alert from FDA's Center for Devices and Radiological Health (CDRH) of a firm-initiated removal and correction)

Responsible owner

Clinical Engineering; Supply Chain; Respiratory Therapy

Publication date

2026-11-03

Other dates

Firm letters 2026-09-26 and 2026-10-07; injury status as of 2026-11-02

Not established

The FDA page is an Early Alert and states no recall classification.

Sources

• FDA Early Alert, ButterflyBVM

What changed

CDPH issued All Facilities Letter (AFL) 26-33 on November 4, 2026 to general acute care hospitals and acute psychiatric hospitals, superseding AFL 23-30. The letter gives planning and response guidance for an anticipated adult and pediatric surge in respiratory illness and updates surge measures and clinical resources for the 2026-2027 season. It says facilities that anticipate needing flexibility to prepare for surges should submit a program flexibility request through the Risk and Safety Solutions (RSS) website and obtain approval for any alternative use of space or bed classification. It restates that, where already applicable, facilities must continue to adhere to the Aerosol Transmissible Diseases (ATD) standard of Cal/OSHA (the California Division of Occupational Safety and Health), and it asks hospitals to prepare for a surge of at least 20 percent over licensed capacity.

Background

AFL 26-33 supersedes AFL 23-30. The letter explains that CDPH has the authority to grant program flexibility from regulatory requirements if the facility requesting it demonstrates its ability to meet statutory or regulatory requirements in an alternate manner, and that a request must include justification and adequate supporting documentation that the proposed alternative does not compromise patient care. It says seasonal activity for influenza and respiratory syncytial virus (RSV) is expected to increase in the coming weeks and months.

Who this affects

General acute care hospitals and acute psychiatric hospitals (the letter's addressees)

Why it matters

Inference: emergency management, nursing and infection prevention should compare current surge plans, staffing backfill plans and source-control policies against the AFL's list, and identify any space or bed-classification changes that would need a CDPH program flexibility approval before the season peaks. The ATD reference is a reminder of an existing duty, not a new one.

Required actions

• Where already applicable, continue to adhere to Cal/OSHA's Aerosol Transmissible Diseases standard (an existing duty the letter restates).

Recommended action

• Review hospital surge plans against the AFL 26-33 surge measures, including the 20 percent over licensed capacity planning figure.
• Prepare program flexibility requests in advance for anticipated alternative space use.
• Update healthcare-worker vaccination messaging and return-to-work and source-control practices to the AFL's current recommendations.
• Facilities that anticipate needing flexibility to prepare for surges: submit a program flexibility request and obtain CDPH approval for any alternative use of space or bed classification. The letter says such facilities should do this; it is guidance, not a new legal duty.

Scope and timing

Authority status

Guidance

Responsible owner

Emergency Management; Nursing; Infection Prevention; Compliance (licensing)

Publication date

2026-11-04

Other dates

Supersedes AFL 23-30

Not established

The AFL's linked California Health Advisory for Respiratory Virus Season 2026-2027 was not retrieved.

Sources

• CDPH AFL 26-33
• CDPH All Facilities Letters 2026

What changed

On November 5, 2026, CMS issued the Cutting Administrative Requirements for Excellence in Patient Care (CARE) proposed rule, which would revise Conditions of Participation after a review of the CoPs for all 21 provider and supplier types. For hospitals and critical access hospitals (CAHs) it would remove staff training requirements for emergency services readiness (and, for hospitals, transfer protocols) and for obstetric care, and remove the OB-specific Quality Assessment and Performance Improvement (QAPI) requirements that are otherwise effective January 1, 2027. It would adopt the 2024 National Fire Protection Association (NFPA) Life Safety Code and Health Care Facilities Code. CMS estimates $320 million in savings.

Background

In November 2024, in a final rule on the hospital outpatient and ambulatory surgical center payment systems for calendar year 2025, CMS finalized new Conditions of Participation for hospitals that offer obstetrical services. That rule added quality assessment and performance improvement requirements for hospitals that offer obstetric services and baseline standards for obstetric care, including staff training on evidence-based maternal health practices.

Who this affects

Hospitals, CAHs, rural emergency hospitals, long-term care facilities, intermediate care facilities for individuals with intellectual disabilities, hospice inpatient facilities and other providers subject to CoPs; state Medicaid agencies.

Why it matters

Inference: this is a proposal, so the obstetric CoP requirements otherwise effective January 1, 2027 remain on schedule unless CMS finalizes the removal; hospitals preparing OB training and QAPI programs should keep preparing while tracking the rule. Inference: facilities would need a Life Safety Code gap review against the 2024 edition if the rule is finalized.

Recommended action

• Decide whether to comment; comments received within 60 days after Federal Register publication (scheduled for 2026-11-10) are assured consideration.
• Keep January 1, 2027 OB CoP readiness work on track until a final rule says otherwise.
• Facilities and engineering: begin a gap review of the 2024 NFPA 101 and 99 editions.

Scope and timing

Authority status

Proposed

Responsible owner

Regulatory Compliance; Nursing/Women's services; Facilities

Other dates

Placed on public inspection 2026-11-05; scheduled Federal Register publication 2026-11-10 (after this edition's coverage week); CMS fact sheet dated 2026-11-05; comments assured consideration if received within 60 days after Federal Register publication (date bracketed in the public-inspection copy; calendar date not stated in that copy)

Not established

The calendar date for assured consideration of comments is not stated in the public-inspection copy (Federal Register publication scheduled for 2026-11-10, after this edition's coverage week). The CAH distance-exemption and the certified registered nurse anesthetist (CRNA) comment solicitation were not reviewed for this entry.

Sources

• CMS fact sheet: CARE proposed rule
• Public-inspection PDF 2026-22812
• Docket CMS-2026-3631

View the illustration with Labor Department finalizes PBM fee-disclosure rule for large self-insured ERISA health plans →

What changed

The Labor Department's Employee Benefits Security Administration (EBSA) published a final rule (Regulation Identifier Number (RIN) 1210-AB37, 29 CFR part 2550) requiring providers of pharmacy benefit management services, and affiliated brokerage and consulting providers, to disclose compensation to fiduciaries of large self-insured Employee Retirement Income Security Act (ERISA) group health plans as a condition of the ERISA section 408(b)(2) prohibited transaction exemption. The rule is effective January 4, 2027, and applies to plan years beginning on or after July 1, 2027. Initial disclosures are due in writing reasonably in advance of the date the contract or arrangement is entered into, extended or renewed; for an extension or renewal, the rule text deems 90 calendar days in advance a reasonable period, and the preamble describes that as applying absent an agreement between the provider and the plan to a longer timeframe, followed by semiannual disclosures or quarterly at the plan's request. Under the administrative exemption, if a service provider does not comply with a written request within 90 calendar days, the responsible plan fiduciary must decide whether to terminate or continue the arrangement and document the basis.

Background

ERISA section 408(b)(2) is a statutory exemption from ERISA's prohibited transaction rules for contracts or arrangements for services. The Labor Department proposed this rule, titled Improving Transparency Into Pharmacy Benefit Manager Fee Disclosure, on January 30, 2026, and on February 3, 2026 Congress made further changes to ERISA in the Consolidated Appropriations Act, 2026.

Who this affects

Hospitals and health systems as sponsors and fiduciaries of self-insured ERISA group health plans that are offered by a specified large employer or are specified large plans, as the rule defines those terms (a specified large plan is one established or maintained by a plan sponsor described in ERISA section 3(16)(B)(ii) or (iii) that averaged at least 100 participants on business days in the preceding plan year); their pharmacy benefit managers (PBMs) and affiliated brokers and consultants. Fully insured plans are excluded from the regulatory definition, as are plans established by a sponsor that is, or is affiliated with, a drug manufacturer, distributor, wholesaler, pharmacy benefit manager or rebate aggregator. A PBM or affiliate is a covered service provider only if it reasonably expects $1,000 or more in direct or indirect compensation for the services.

Why it matters

Inference: a health system that sponsors a covered self-insured plan should expect new PBM disclosure packages for plan years beginning on or after July 1, 2027, and needs a fiduciary process to review them, request missing information and document decisions. Inference: Title I of ERISA does not apply to governmental plans, so applicability to public systems needs legal review; the rule text does not address church plans, so faith-based systems should also confirm with counsel. PBM renewals scheduled in 2027 may fall inside the 90-day advance window.

Required actions

• For covered plans, on and after plan years beginning on or after July 1, 2027: if a covered service provider refuses to correct a failure identified in a written request, or 90 calendar days pass after the request without compliance, the responsible plan fiduciary notifies the Secretary of the failure (notice filed with the Department not later than 30 calendar days after the earlier of the refusal or the 90th day, so a refusal starts the 30 days at once, paragraphs (n)(1)(iii) and (n)(3)); where the provider has not complied within 90 calendar days of the request, the fiduciary also determines whether to terminate or continue the arrangement and documents the basis (paragraph (n)(5), which names only that 90-day failure as its trigger); these are conditions of the administrative exemption.

Recommended action

• Benefits and Legal: confirm whether each employee health plan is a covered plan (a self-insured ERISA group health plan that is either offered by a specified large employer, meaning one that averaged at least 100 employees on business days in the preceding calendar year and employs at least one employee on the first day of the calendar year, or is a specified large plan, meaning one established or maintained by a plan sponsor described in ERISA section 3(16)(B)(ii) or (iii) that averaged at least 100 participants on business days in the preceding plan year; plans of sponsors in or affiliated with the drug supply chain, including PBMs, are excluded, and the counting and aggregation rules are in paragraphs (m)(6) and (m)(7) of the rule).
• Inventory PBM, broker and consultant contracts with renewal dates on or after April 2027 and build the disclosure request and review into renewal timelines.
• Assign a fiduciary reviewer and a documentation template before July 1, 2027.

Scope and timing

Authority status

Final

Responsible owner

HR / Benefits, with Legal

Publication date

2026-11-02

Effective date

2027-01-04

Implementation date

Applicable to plan years beginning on or after 2027-07-01

Not established

Not reviewed for this entry: the full list of disclosure data elements and the temporary enforcement policy text. govinfo PDF not retrieved.

Sources

• EBSA final rule, 91 FR 69092 (govinfo PDF)

What changed

FDA's weekly Enforcement Report dated November 4, 2026 lists three Class I recall entries (Z-0208-2027, Z-0209-2027, Z-0210-2027) for Abiomed Automated Impella Controller (AIC) products, classified October 28, 2026. Abiomed's review of servicing records found controllers needing hardware, firmware or software updates, with issues including failure to recognize the purge cassette, a sticking button and possible loss of console control, and start-up instability. FDA's recall page, updated after this edition's coverage week, says hospital inventory can continue to be used while awaiting service from Abiomed.

Background

The Automated Impella Controller is the primary user control interface for Impella catheter-based heart pumps; it controls the catheter and monitors it for alarms. FDA issued an Early Alert on this issue on September 23, 2026, after Abiomed's September 18, 2026 letter to affected customers.

Who this affects

Hospitals with cardiac catheterization, cardiac surgery or critical care programs using Impella heart pumps with Automated Impella Controller consoles.

Why it matters

FDA has identified this recall as the most serious type, and its recall page says that without the hardware, firmware or software updates patients could face problems such as delay of therapy, inadequate or loss of hemodynamic result, and other serious issues. Biomedical engineering should match console serial numbers to the affected list and track Abiomed service scheduling; clinical teams should know the issues while consoles remain in use. Inference: backup console availability during service windows may need planning.

Required actions

• None stated as a legal requirement.

Recommended action

• Check AIC serial numbers against the affected list
• Coordinate service with Abiomed and log completion
• Brief cath lab and ICU staff on the listed failure modes

Scope and timing

Authority status

Other (FDA Class I recall classification of a firm-initiated removal)

Responsible owner

Biomedical Engineering; Cardiovascular Services

Publication date

2026-11-04 (FDA Enforcement Report date)

Other dates

Recall initiated 2026-09-18 (firm letter); center classification date 2026-10-28; FDA recall page update 2026-11-09 (after this edition's coverage week)

Not established

The FDA recall page was updated 2026-11-09, after this edition's coverage week; its timeline shows the Early Alert was issued 2026-09-23.

Sources

• FDA recall page, Automated Impella Controllers
• openFDA device enforcement query (report date 2026-11-01 to 2026-11-07)

What changed

FDA's medical device recall database posted on November 2, 2026 a Cardinal Health correction (record Z-0217-2027) for Presource kits containing BD Alaris pump infusion sets that were themselves recalled for performance issues; the record lists 415,636 kits. Cardinal's September 24, 2026 notice asked consignees to discontinue use of the affected BD Alaris pump infusion sets as the enclosed Becton Dickinson notice describes and, where affected kits are found, to quarantine them, alert clinicians, and affix a warning label to each kit telling clinicians to remove and discard the recalled components. Those instructions belong to record Z-0217-2027. A separate FDA recall page for Presource kits, updated November 9, 2026 (after this edition's coverage week), says the FDA has identified the recall it describes as the most serious type. The FDA records reviewed for this entry do not show that page and database record Z-0217-2027 to be the same recall event, so the classification of Z-0217-2027 is not established here.

Background

Presource kits are Cardinal Health convenience kits packaged together to be used to facilitate a single surgical or medical procedure. FDA's separate Presource recall page reports BD's statement that some Alaris pump sets with restrictive components and designs perform worse than previously disclosed, and the page lists BD's U.S. customer letter dated August 19, 2026 and FDA's recall page for the underlying BD Alaris infusion set recall dated October 5, 2026 (the FDA MedWatch feed dates that recall page October 14, 2026).

Who this affects

Hospitals using Cardinal Health Presource procedure kits that contain BD Alaris pump infusion sets.

Why it matters

Kits in stock may contain BD Alaris pump infusion sets that were recalled for performance issues, so a clinician opening a kit could use a recalled component unless the kit is labeled and the component removed. Operational reading: supply chain and nursing find affected Presource kits, quarantine them, apply the warning labels, and have clinicians remove and discard the recalled infusion-set components, as the notice in record Z-0217-2027 directs. The use-instruction guidance on the separate FDA page is not shown to apply to this record. Inference: this compounds work already under way for the BD Alaris infusion-set recall.

Required actions

• None stated as a legal requirement.

Recommended action

• Identify affected kits in inventory, quarantine them, and label them so that clinicians remove and discard the recalled components, as the notice directs
• Confirm clinicians have the BD performance disclosures

Scope and timing

Authority status

Other (FDA recall database posting of a firm-initiated correction)

Responsible owner

Supply Chain; Nursing; Clinical Engineering

Publication date

2026-11-02 (FDA recall database posting)

Other dates

Firm notice 2026-09-24 per the FDA recall database record (FDA's recall page says the letter went out on September 23); FDA recall page update 2026-11-09 (after this edition's coverage week); earlier FDA Early Alert on Presource kits dated 2026-10-20 in the FDA MedWatch feed

Not established

The FDA page Class I statement is dated after this edition's coverage week.

Sources

• FDA device recall database (openFDA), records posted November 1 to 7, 2026; this entry rests on record Z-0217-2027
• FDA recall page on Cardinal Health Presource kits (a separate page; not shown to describe the same record)

What changed

FDA's recall database posted on November 3, 2026 a set of Baxter correction entries (including Z-0350-2027) for TruSystem surgical tables and columns. Baxter reports the main lift may unexpectedly drop to its lowest position during use and the tabletop may not rise again, which could cause abrupt patient displacement during surgery; Baxter has three complaints and no reported patient injury. Baxter's September 29, 2026 letter tells customers to keep monitoring the table, stop using it if an unusual noise occurs, and post the notice by the devices until the correction is done.

Background

The recall event (number 100117) covers the Baxter TruSystem 7500 surgical table, the TruSystem 7000 U universal surgical table and a TS7500 hybrid operating table column, among other entries. Earlier Baxter TruSystem recall events, with Enforcement Reports dated October 30, 2024 and April 2, 2025, were classified Class II.

Who this affects

Hospitals and surgery centers using Baxter TruSystem 7000/7500 operating tables and columns.

Why it matters

An affected table's main lift may drop unexpectedly to its lowest position during use and the tabletop may not rise again, which may cause abrupt patient displacement during surgery. Perioperative services and biomedical engineering should identify affected tables, post the notice and brief OR staff on the monitoring step. Inference: the correction itself is not yet available.

Required actions

• None stated as a legal requirement.

Recommended action

• Identify affected tables by model and catalog number
• Post the communication at each affected table
• Acknowledge receipt through the channel the letter specifies

Scope and timing

Authority status

Other (FDA recall database posting of a firm-initiated correction)

Responsible owner

Perioperative Services; Biomedical Engineering

Publication date

2026-11-03 (FDA recall database posting)

Other dates

Firm letter dated 2026-09-29; the firm expects to begin contacting customers with more information about the correction by the end of 2026

Not established

Recall classification (Class I/II) not established: the recall application programming interface (API) record does not carry it, the Enforcement Report for this edition's coverage week has no Baxter entry, and the FDA recall database page could not be retrieved. The database record lists the recall status as 'Open, Classified' without the class. Earlier Baxter TruSystem recalls (2024, 2025) were Class II. No FDA recall page was located.

Sources

• openFDA device recall query (posted 2026-11-01 to 2026-11-07)

View the illustration with OIG adds FAQ: a gift card offered to a Federal health care program beneficiary to induce transfer to an affiliated hospital implicates the anti-kickback statute, and the Beneficiary Inducements CMP for Medicare and State health care program beneficiaries →

What changed

On November 5, 2026 HHS OIG added a third question to its FAQ page on the application of certain fraud and abuse authorities to certain types of arrangements. The new FAQ addresses whether a hospital may offer a Federal health care program beneficiary or family member a gift card as an incentive to transfer to another hospital in the same health system. For that arrangement, OIG says it would have significant concerns, that the Federal anti-kickback statute would be implicated, that the Beneficiary Inducements Civil Monetary Penalty (CMP) would be implicated if the patient is a Medicare or State health care program beneficiary, and that no safe harbor or exception would apply. OIG defines 'same health system' broadly to cover any affiliated hospital. It lists unfair competition and steering, higher program costs (for example a transfer to a critical access hospital) and quality-of-care risk, and says other forms of transfer remuneration should be evaluated case by case. The FAQ states it does not supersede EMTALA requirements or hospital Conditions of Participation.

Background

The FAQ page already answered two earlier questions: a hospital that would like to distribute naloxone rescue kits at discharge to emergency department patients who present with an opioid overdose, and a plan paying Dual Eligible Special Needs Plan enrollees for their time and expertise on its enrollee advisory committee. The Federal anti-kickback statute makes it a criminal offense to knowingly and willfully offer or pay any remuneration to induce, or in return for, the referral of an individual to a person for the furnishing of, or arranging for the furnishing of, any item or service reimbursable under a Federal health care program, and the Beneficiary Inducements CMP provides for penalties against any person who offers or transfers remuneration to a Medicare or State health care program beneficiary that the person knows or should know is likely to influence the beneficiary's selection of a particular provider, practitioner or supplier for the order or receipt of any item or service for which payment may be made, in whole or in part, by Medicare or a State health care program.

Who this affects

Hospitals and multi-hospital health systems (any affiliated hospital: common ownership, wholly owned subsidiary, joint venture or other affiliation) that move Federal health care program patients between facilities, including transfer centers, care management and patient-experience programs.

Why it matters

Inference: systems that use gift cards, cash or cash equivalents to encourage transfers (for capacity, network retention or load balancing) should stop or review those practices with counsel; other transfer incentives (any remuneration other than a gift card) are outside the FAQ but OIG says they could implicate the same laws and need case-by-case review. Inference: FAQs are OIG guidance, not a rule or safe harbor.

Recommended action

• Inventory any patient or family incentives offered in connection with inter-facility transfers within the system, including transfer-center scripts and patient-experience budgets.
• Have Legal review any non-gift-card transfer remuneration case by case against the anti-kickback statute and Beneficiary Inducements CMP, as the FAQ advises.
• Brief transfer center, case management and capacity-management leaders that the FAQ does not alter EMTALA or Conditions of Participation duties.

Scope and timing

Authority status

Guidance

Responsible owner

Compliance; Legal; Patient Access/Transfer Center

Other dates

FAQ marked updated 2026-11-05 and listed on OIG's What's New page under 2026-11-05; the page footer reads "Last updated Nov. 6, 2026". A separate publication date is not established.

Not established

The FAQ shows 'Updated 11/5/2026' while the page footer says 'Last updated Nov. 6, 2026'; whether text changed on November 6 is not established (only one retrieval, 2026-11-10 in Coordinated Universal Time). No triggering enforcement matter is named.

Sources

• OIG FAQ: Application of Certain Fraud and Abuse Authorities to Certain Types of Arrangements
• OIG What's New

View the illustration with Off-campus provider-based departments need a separate NPI and a provider-based attestation (by December 31, 2027 for departments furnishing services on or before January 1, 2028), or lose OPPS payment from January 1, 2028 →

What changed

CMS codified section 6225 of the Consolidated Appropriations Act, 2026 at new 42 CFR 419.23 and 413.65(b)(6). No Outpatient Prospective Payment System (OPPS) payment may be made for items and services furnished on or after January 1, 2028, by an off-campus outpatient department unless the department has its own NPI separate from the main provider and the main provider has submitted an initial provider-based attestation. For departments furnishing services on or before January 1, 2028, initial attestations must be submitted between January 1, 2026 and December 31, 2027; a department is all hospital operations at one physical address listed in the Provider Enrollment, Chain, and Ownership System (PECOS). Before attesting, the main provider must obtain an NPI for each department and update PECOS. Departments that received an affirmative provider-based determination before January 1, 2026 must submit a new attestation. A timely attestation counts even if CMS has not issued a determination by the first date of service. CMS will use a standardized form and a centralized electronic system, will not require supporting documentation with the initial attestation, and will use risk-based review, remote audits and site visits; until the new system is final, attestations may go to the Medicare Administrative Contractor (MAC) under existing 413.65(b)(3)(ii).

Background

42 CFR 413.65 specifies the criteria for treating a facility as provider-based and the requirements for a CMS determination of provider-based status. Compliance with provider-based rules is mandatory, but since a law passed in 2000 a provider has needed to submit an attestation only if it wished to obtain a CMS determination, and payment had not been conditioned on verification of compliance. Section 6225 of the Consolidated Appropriations Act, 2026, enacted February 3, 2026, makes a separate NPI and a main-provider attestation conditions of payment under the OPPS (or a payment system under section 1833(t)(21)) for items and services an off-campus outpatient department furnishes on or after January 1, 2028.

Who this affects

Main providers (hospitals) with off-campus outpatient departments billed under the OPPS or under section 1833(t)(21) for non-excepted departments. Excluded from the attestation requirement: critical access hospital (CAH) off-campus departments, Indian Health Service (IHS) and tribal facilities under 413.65(m), and certain Federally Qualified Health Centers (FQHCs) and look-alikes under 413.65(n). No de minimis exception.

Why it matters

A hospital with off-campus outpatient departments paid under the outpatient payment system needs a department inventory by PECOS address, an NPI for each department, PECOS updates, claim-form changes to bill under the department NPI and, where the attestation requirement applies, an attestation. For departments furnishing services on or before January 1, 2028, the initial attestation window closes December 31, 2027. Inference: this is a multi-department project touching enrollment, billing systems and compliance attestation; the rule says a failure affects payment for the items and services furnished by the specific department. Inference: the attestation is a certification of compliance with 413.65, so it carries False Claims Act exposure if inaccurate; that is not stated in the rule.

Required actions

• Obtain a separate NPI for each off-campus outpatient department and update the enrollment record in PECOS before submitting an attestation
• Submit an initial provider-based attestation for each off-campus outpatient department furnishing services on or before January 1, 2028, between January 1, 2026 and December 31, 2027
• For departments that begin services after January 1, 2028, submit the initial attestation within the 2 years before delivering billed services
• From January 1, 2028, bill each off-campus department's items and services under its separate NPI
• Furnish supporting documentation on CMS or contractor request (CMS anticipates generally not more than 60 days)

Recommended action

• Build a department-by-address inventory against PECOS now and confirm on-campus and 250-yard status, and whether the department is within 35 miles of the main provider
• Pre-assemble 413.65(d), (e), (g) and (h) compliance evidence for each department
• Track release of the standardized attestation form and centralized system (draft format posted on the CMS-1850-FC page)

Scope and timing

Authority status

Final

Responsible owner

Compliance (primary); Provider Enrollment; Revenue Cycle; Legal

Publication date

2026-11-06

Effective date

2027-01-01

Operative date

2028-01-01 (payment condition for items and services furnished on or after this date)

Compliance date

2027-12-31 (last day to submit initial attestations for departments already furnishing services when the payment condition starts; the attestation window opened in 2026)

Other dates

Statute: Consolidated Appropriations Act (CAA), 2026 section 6225, enacted 2026-02-03; subsequent attestations within a period not to exceed 5 years, which CMS anticipates addressing in the 2028 rulemaking cycle

Not established

The attestation format file was not downloaded. Regulatory text of 419.23 and 413.65(b)(6) not read line by line. Whether earlier CMS or MAC guidance on section 6225 has issued since February 2026 was not searched.

Sources

• Federal Register, CMS-1850-FC
• CMS-1850-FC rule page

What changed

The California Department of Health Care Access and Information (HCAI) posted the agenda for the November 18, 2026 Health Care Affordability Board meeting on November 6. Informational items include an overview of progressive enforcement regulations with Board follow-up and public comment, a spending target discussion covering the statewide spending target and the high-cost hospital target adjustment methodology, and an update on behavioral health spending analysis and the investment benchmark. The agenda notes the Board may take action under any agenda item. The agenda lists approval of minutes from the Board's October 29, 2026 meeting, which was before this edition's coverage week.

Background

The Office of Health Care Affordability (OHCA) was established in 2022. The Health Care Affordability Board is a decision-making body charged with setting statewide and sector-specific health care spending targets, and OHCA describes the statewide spending target as taking effect for performance year 2025.

Who this affects

Hospitals and other entities subject to OHCA spending targets, especially hospitals that a high-cost hospital target adjustment could affect

Why it matters

Inference: finance and government relations at hospitals near the high-cost criteria may want to follow the methodology discussion and submit written comment ahead of the meeting.

Recommended action

• Review meeting materials when posted and decide whether to submit written comment at least four business days before 2026-11-18.

Scope and timing

Authority status

Announced

Responsible owner

Finance; Government Relations

Publication date

2026-11-06

Other dates

Board meeting 2026-11-18, 10:00 am; written comment to be included in posted Board materials is due at least four business days before the meeting

Not established

Meeting presentation not yet posted at retrieval. The October 29, 2026 Board meeting (minutes on this agenda) is before this edition's coverage week and was not reviewed.

Sources

• November 2026 Health Care Affordability Board agenda
• Health Care Affordability Board

What changed

FDA announced a final guidance, Recommendations for Reducing the Risk of Transfusion-Transmitted Hepatitis B Virus (Docket FDA-2024-D-5942), that finalizes a July 2025 draft and supersedes several earlier hepatitis B virus (HBV) memoranda and guidances. FDA recommends that when donations are tested for HBV DNA by nucleic acid tests (NAT) and for antibody to hepatitis B core antigen (anti-HBc) with FDA-licensed, approved or cleared screening tests used in accordance with the manufacturer's instructions, hepatitis B surface antigen (HBsAg) testing is not necessary. That does not apply to Source Plasma, for which HBsAg and HBV DNA NAT testing continue to be recommended. The guidance is nonbinding. The guidance itself, dated November 2026, says licensed blood establishments that discontinue testing donations for HBsAg, make conforming changes to donor requalification, revise their circular of information or make other changes to their standard operating procedures (SOPs) consistent with its recommendations must report the change in an annual report under 21 CFR 601.12(d), noting the date of implementation; unlicensed blood establishments do not need to report those changes to FDA. It considers an HBV testing strategy or other procedures other than as recommended to be a major change, for which licensed blood establishments must submit a prior approval supplement under 21 CFR 601.12(b).

Background

FDA announced a draft of this guidance in the Federal Register of July 16, 2025, titled Recommendations for Testing Blood Donations for Hepatitis B Surface Antigen, and considered the comments it received as the guidance was finalized. The final guidance also consolidates FDA's recommendations for hepatitis B virus testing of blood and blood components that had been issued previously in various memoranda and guidance documents.

Who this affects

Hospital-based blood establishments that collect Whole Blood and blood components.

Why it matters

Inference: hospital blood collection programs may update donor testing algorithms, donor requalification and labeling SOPs; any change to a licensed establishment's procedures may require reporting under 21 CFR 601.12, which the notice references.

Required actions

• Licensed blood establishments that discontinue HBsAg testing, make conforming changes to donor requalification, revise their circular of information or make other SOP changes consistent with the guidance report the change in an annual report under 21 CFR 601.12(d), noting the date of implementation; an HBV testing strategy or other procedures other than as recommended is a major change that needs a prior approval supplement under 21 CFR 601.12(b). Unlicensed blood establishments do not need to report those changes to FDA.

Recommended action

• Laboratory / Blood Bank: compare current HBV donor testing and requalification SOPs with the final guidance.

Scope and timing

Authority status

Guidance

Responsible owner

Laboratory / Blood Bank

Publication date

2026-11-03

Other dates

Finalizes July 2025 draft guidance; comments on guidance accepted at any time

Not established

No date by which establishments are to make these changes was found in the guidance.

Sources

• FDA notice of availability, 91 FR 69258 (govinfo PDF)
• FDA guidance page: recommendations for reducing the risk of transfusion-transmitted hepatitis B virus

What changed

FDA said on November 6, 2026 that it has received postmarketing reports of malignancies after Zolgensma, including confirmed product-related insertional oncogenesis involving the Glioma-Associated Oncogene Homolog 1 (GLI1) gene, and that the risk applies to both onasemnogene abeparvovec products. FDA says the overall benefits of Zolgensma and Itvisma continue to outweigh their potential risks for their approved uses but it is evaluating whether regulatory action is appropriate, and recommends monitoring for tumor formation in patients and clinical trial participants receiving treatment with these products. FDA's Safety Communication of the same date says there have been no reported cases of neoplasia following Itvisma administration to date.

Background

Zolgensma is an adeno-associated virus vector-based gene therapy for spinal muscular atrophy, first approved on May 24, 2019; Itvisma, which contains the same vector and construct, was first approved on November 24, 2025. Their current U.S. prescribing information already lists a theoretical risk of tumorigenicity due to integration of the vector DNA into the genome, and Novartis, the sponsor, is conducting long-term follow-up safety studies.

Who this affects

Hospitals (including children's hospitals) and neuromuscular programs that administer or follow patients treated with Zolgensma (pediatric patients under 2) or Itvisma (adult and pediatric patients 2 years and older).

Why it matters

Treating programs may need to review follow-up and monitoring for treated patients. Inference.

Recommended action

• Route to pediatric neurology and gene therapy program leads
• Watch for labeling changes

Scope and timing

Authority status

Other (FDA safety communication; FDA says it is evaluating whether regulatory action is appropriate)

Responsible owner

Pharmacy; Pediatric Neurology

Other dates

FDA safety communication dated 2026-11-06 (the date printed on the page); the page's own metadata gives 2026-11-09 as its publication date

Not established

Whether FDA will take regulatory action or change the prescribing information is not established; FDA says it is evaluating whether regulatory action is appropriate and the adequacy of the current prescribing information.

Sources

• FDA MedWatch alert, Zolgensma
• FDA safety communication on Zolgensma

What changed

A joint fact sheet from the Cybersecurity and Infrastructure Security Agency (CISA), FBI, HHS, the U.S. Department of Agriculture and the Department of Transportation, published November 5, 2026, reports malicious cyber activity targeting industrial refrigeration and cold-chain monitoring systems and names the Healthcare and Public Health sector among users. The authors urge strong authentication, keeping systems updated, identifying internet-accessible systems, removing unnecessary remote access and securing any necessary remote access.

Background

Organizations in the Healthcare and Public Health sector, among others, use industrial refrigeration and cold-chain monitoring systems, including for automated and remote monitoring of temperatures. The fact sheet says the authoring agencies are aware of malicious cyber actors targeting electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities, and that the actors may exploit unpatched or internet-accessible controllers to remotely alter settings, which can cause widespread inventory loss and equipment hazards.

Who this affects

Hospitals and pharmacies that use networked refrigeration controllers or remote temperature monitoring (the fact sheet names the Healthcare and Public Health sector among users). Inference: this includes cold storage for medications, vaccines, blood or specimens.

Why it matters

Inference: an attacker who reaches an internet-exposed refrigeration or temperature-monitoring controller could change temperatures or cut off the view of current readings, putting stored medications, vaccines, blood or specimens at risk of loss; the fact sheet lists change of temperature, loss of inventory and loss of visibility into current temperatures among the possible effects.

Recommended action

• Inventory networked refrigeration and temperature-monitoring controllers
• Remove public internet exposure and secure remote access

Scope and timing

Authority status

Guidance

Responsible owner

Information Security; Facilities; Pharmacy

Publication date

2026-11-05

Sources

• CISA joint fact sheet

What changed

The Office of the National Coordinator for Health Information Technology (ONC) announced on November 5, 2026 that the Department of Veterans Affairs and the Department of War have joined the Trusted Exchange Framework and Common Agreement (TEFCA), adding to the Indian Health Service, the Consumer Product Safety Commission and the Social Security Administration among federal participants. ONC reports nearly 25,000 organizations live on TEFCA with nearly 110,000 unique connections.

Background

ONC describes TEFCA as a network helping patients, healthcare providers, public health and increasingly federal agencies securely share electronic health information. Federal agencies have been joining TEFCA since its launch in December 2023, and the release says more than 2 billion health records have been exchanged through it since then.

Who this affects

Hospitals exchanging records with VA and military treatment facilities through TEFCA-participating networks.

Why it matters

Inference: health information management and interoperability teams may see VA and Department of War record queries and responses through their TEFCA participant; no new duty.

Recommended action

• Ask the organization's Qualified Health Information Network or TEFCA participant whether VA and Department of War exchange is enabled

Scope and timing

Authority status

Announced

Responsible owner

Health information management; Interoperability / IT

Publication date

2026-11-05

Not established

Page shows 'Last Updated: November 9, 2026'; what changed after publication not established.

Sources

• ONC press release

What changed

CMS finalized, as proposed with clarifications, a new 42 CFR 488.5(a)(23) under which hospital accrediting organizations (AOs) with deeming authority review compliance with the EMTALA administrative requirements at 42 CFR 489.20(l), (m), (q) and (r) during initial accreditation and reaccreditation surveys: posting EMTALA signage, keeping a central log of individuals who present to the emergency department, retaining transfer records for 5 years and maintaining an on-call physician list. AOs cite deficiencies through their own procedures, including corrective action; findings that suggest violations of the substantive screening, stabilization and transfer rules at 489.24 stay with CMS and State Survey Agencies. Before surveying these elements, each AO must have an updated program approved by CMS, and AOs must show, as a condition of approval, that surveyors assigned to EMTALA administrative reviews have completed CMS-approved EMTALA training before conducting these assessments. CMS reported 1,071 EMTALA citations in calendar year 2025, 521 of them under 489.20.

Background

The Emergency Medical Treatment and Labor Act (EMTALA), enacted in 1986, applies to hospitals that participate in Medicare and operate emergency departments, including critical access hospitals (CAHs) and rural emergency hospitals (REHs). Its enforcement has historically occurred through complaint investigations by State Survey Agencies under CMS direction, while CMS deems a hospital to meet Medicare requirements if it is accredited by an accrediting organization with a hospital accreditation program approved by CMS.

Who this affects

Hospitals, critical access hospitals (CAHs) and rural emergency hospitals (REHs) accredited by CMS-approved accrediting organizations with deeming authority (the rule notes no REHs currently use a CMS-approved accreditation program); the accrediting organizations themselves.

Why it matters

Inference: EMTALA signage, logs, transfer-record retention and on-call lists will be checked at routine accreditation surveys, not only in complaint investigations. The underlying hospital duties are not new.

Required actions

• Accrediting organizations with CMS-approved hospital, CAH or REH programs: describe in the application the policies and procedures used to assess compliance with the EMTALA-related provider agreement requirements, and show that surveyors assigned to EMTALA administrative reviews completed CMS-approved EMTALA training before conducting those assessments, as a condition of approval (42 CFR 488.5(a)(23) and the preamble). The rule states no new duty for hospitals beyond the existing EMTALA requirements.

Recommended action

• Run a mock-survey check of the four 489.20 elements before the next accreditation survey
• Watch for the accreditor's updated standards and CMS interpretive guidance

Scope and timing

Authority status

Final

Responsible owner

Compliance / Accreditation (primary); Emergency Department leadership

Publication date

2026-11-06

Effective date

2027-01-01

Implementation date

Not fixed: each accrediting organization must first submit, and CMS approve, an updated accreditation program before surveying these elements

Not established

The rule's summary says AOs 'may assess' these requirements, while section XVIII says the amendment 'would formally require' AOs to include them, and the regulatory text requires each AO application to describe its assessment procedures. Which California-relevant AOs have filed program updates is unknown.

Sources

• Federal Register, CMS-1850-FC
• CMS fact sheet

What this is

California's Office of Health Care Affordability (OHCA) enforces health care spending targets set by its Health Care Affordability Board, and the law lets the Board adjust targets when non-supervisory organized labor costs are expected to grow faster than the target, through a Non-Supervisory Organized Labor Adjustment (NOLA). For the first year, OHCA must receive all requests for a provisional NOLA by November 16, 2026 (by the end of October in future years). NOLAs apply to providers and fully integrated delivery systems, not health plans; a labor union may initiate a request but the regulated entity must attest, and all NOLAs are provisional until confirmed with actual expenditure data.

Current status

OHCA's Slow Spending Growth page, read on November 10, 2026, states the November 16, 2026 deadline for first-year provisional NOLA requests and says requests can be submitted at the NOLA portal. The earlier edition reported this deadline without confirming it from an official page; this edition confirms it from OHCA's page.

Who this affects

Providers and fully integrated delivery systems subject to OHCA spending targets (not health plans), and labor unions initiating requests on their behalf

Why it matters

Inference: a hospital or system expecting non-supervisory organized labor cost growth above the target can have a provisional adjustment considered only if its request reaches OHCA by November 16. Without one, OHCA's page says an entity that misses the spending target is sent a notice of exceeding it and potential enforcement action, and then has 45 days to show that growth in non-supervisory organized labor costs caused all or part of the excess. Finance, labor relations and legal should confirm whether a request is being filed, and who attests, before November 16.

Required actions

• A provider seeking a first-year provisional NOLA must have its request received by OHCA by 2026-11-16 (NOLA portal).

Recommended action

• Decide whether to file; if a union initiates, prepare for the attestation step.
• Retain the projections and labor-agreement support, since NOLAs are provisional pending actual data.

Scope and timing

Authority status

Operative duty

Responsible owner

Finance; Labor Relations; Legal; Compliance

Compliance date

2026-11-16

Other dates

Page last modified 2026-11-04 per the pages API of the Department of Health Care Access and Information (HCAI) site (what changed not established); future years due end of October

Not established

The site's WordPress pages application programming interface (API) lists the page as modified 2026-11-04; whether that edit touched the NOLA text is not established. The NOLA portal itself was not opened.

Earlier article: October 18, 2026 edition →

Sources

• OHCA Slow Spending Growth (NOLA section)

What this is

FDA identified Nova Biomedical's correction of its StatStrip Glucose Hospital Meter System as the most serious type of recall (Class I): on the Gen 2.0 model only, prior patient or quality-control information may remain on the meter screen when a barcode is scanned and, if accepted, assign a glucose result to the wrong patient. FDA issued its communication on October 20, 2026 and updated it on October 30 to clarify the recommended actions. Nova intends to roll out a software update in November 2026 in a phased manner; until then users follow updated instructions or, if an alternative meter is available, stop using the affected meter.

Current status

On November 10, 2026, the FDA page showed content current as of October 30, 2026, the date FDA updated it to clarify the recommended actions. It told users with an alternative meter to stop using the affected meter until it is updated; users without one must continue the mitigation steps, including checking after every barcode scan that the patient ID displayed is for the patient being tested, until the software fix becomes available.

Who this affects

Hospitals using Nova Biomedical StatStrip Gen 2.0 glucose hospital meters

Why it matters

A glucose result assigned to the wrong patient can lead clinicians to act on another patient's value; FDA's page says this could mean delayed treatment, unnecessary treatment (including inappropriate insulin administration) or failure to treat the intended patient, and that critically ill patients and infants are at greater risk. Until the software update reaches a hospital's meters, units without an alternative meter depend on the manufacturer's mitigation steps, including staff checking the patient identification after every barcode scan and again on the result screen.

Recommended action

• If an alternative meter is available, stop using the affected StatStrip meter until it is updated (FDA recommendation)
• Otherwise follow the manufacturer's interim safeguards, including patient identification checks
• Identify affected models, review FDA's current instructions and confirm mitigation and software-update plans

Scope and timing

Authority status

Other (FDA Class I recall correction communication)

Responsible owner

Clinical operations, Laboratory (point-of-care testing), Biomedical engineering, Patient safety

Publication date

2026-10-20

Other dates

2026-10-30 FDA update; the FDA page says Nova intends to roll out the software update in November 2026, in phases (no exact date)

Not established

Manufacturer letters not retained.

Earlier article: November 4, 2026 edition →

Sources

• FDA StatStrip correction

What this is

FDA issued an Early Alert, listed October 29, 2026, on a potentially high-risk device issue: Medline told customers on October 14, 2026 that it is removing, discontinuing and exiting the market for all Medline Brand beds and associated components, including homecare, bariatric and long-term care beds, pendants, accessories, replacement parts and bed-containing order packages. Medline identified a potential fire hazard involving the beds, hand-control pendants, control/motor boxes and actuators/motors, and a separate risk of entrapment or asphyxiation when the beds are used with any bed accessories, when a user lies on a pendant being used with the bed, or when the bed is used with loose or wobbly rails, and as of October 20, 2026 had reported two deaths and 16 serious injuries associated with these issues. Under Medline's October 24, 2026 update, covered beds, rails, mattresses and accessories may remain in use under updated instructions until the bed is repaired or replaced.

Current status

On November 10, 2026, the FDA page showed content current as of October 29, 2026. It listed the updated instructions: unplug beds from electrical outlets except while repositioning the patient, do not use extension cords, have a second person assist whenever possible, and do not repair, modify or alter beds unless instructed by Medline through a Medline-authorized repair process.

Who this affects

Hospitals, long-term care and home-care programs using any Medline-brand bed, rail, mattress or accessory

Why it matters

Medline Brand beds, rails, mattresses and accessories stay in service only under the updated instructions until each bed is repaired or replaced. Medline will repair only certain beds, other customers get a replacement or a full or partial refund, and those remedies may be available for certain products bought in the last five years; older products remain subject to the field action and the updated instructions. Inference: some older beds may have to be replaced without a Medline remedy, and the precautions apply at every affected bed until each one is repaired or replaced.

Recommended action

• Identify affected products and consult the complete current FDA and manufacturer instructions
• Unplug beds except when repositioning; avoid extension cords; use a second person where possible (FDA-listed precautions)
• Do not repair or modify beds except through the Medline-authorized process

Scope and timing

Authority status

Other (FDA early alert)

Responsible owner

Facilities, Biomedical engineering, Clinical operations

Publication date

2026-10-29

Other dates

2026-10-14 earlier Medline removal announcement; 2026-10-24 Medline update

Not established

Medline's newsroom page and FDA's full list of affected products were not read for this edition.

Earlier article: November 4, 2026 edition →

Sources

• FDA Medline early alert

What this is

FDA issued an Early Alert on a potentially high-risk device issue: B. Braun Medical Inc. has recommended to customers that lots A2600099, A2600128 and A2600136 of its Streamline Bloodline Set for Dialog+, model SL-2010M2096, be removed from where they are used or sold. B. Braun stated that a required solvent application step during assembly was not performed, leaving the dialyzer connector inadequately bonded, so the bloodline connector may detach or leak during priming or dialysis treatment, potentially leading to blood loss, clotting and occlusion of the extracorporeal circuit, or air entering the blood circuit. B. Braun sent customers a letter on October 20, 2026, and the earlier article reported FDA's device-safety listing of the alert on October 27, 2026.

Current status

On November 10, 2026, the FDA page, now at a new address, showed content current as of November 2, 2026, within this edition's November 1 to 7 coverage period, and FDA's list of recalls and early alerts showed the alert in a row dated November 2, 2026. The page lists the model, the three lots, two unique device identifier (UDI) codes labeled UDI-DI, and the recommended actions, and says B. Braun had reported no serious injuries or deaths associated with this issue as of October 10.

Who this affects

Dialysis units using Streamline Bloodline Set for Dialog+ model SL-2010M2096

Why it matters

A set from an affected lot can come apart or leak during treatment; FDA's page says hemodialysis patients are medically fragile, that extracorporeal blood loss may require clinical assessment, corrective treatment, professional medical intervention or hospitalization, and that in severe cases significant blood loss could be life-threatening. Inference: dialysis units need enough unaffected sets to replace any stock they quarantine and return.

Recommended action

• Inform all users; identify and quarantine affected devices (FDA)
• Determine inventory, cease use, quarantine and return affected product (manufacturer letter as described by FDA)

Scope and timing

Authority status

Other (FDA early alert)

Responsible owner

Dialysis services, Supply chain

Publication date

2026-10-27 (FDA listing date as the earlier article states; the FDA list read on November 10, 2026 shows 11/02/2026)

Other dates

2026-10-20 manufacturer letter; FDA page content current 2026-11-02

Not established

What FDA changed on the page on November 2 is not established. B. Braun's letter to customers was not retained.

Earlier article: November 4, 2026 edition →

Sources

• FDA B. Braun early alert (current URL)

What this is

FDA identified as the most serious type of recall the removal of four lots of an assay that, with other laboratory and clinical findings, aids in determining the risk for heparin-induced thrombocytopenia (HIT): HemosIL AcuStar HIT-IgG(PF4-H), from Instrumentation Laboratories (Werfen). Werfen found a performance issue in lots B40005, B40006, B38062 and B38063 that may cause a negative bias, so sample results could be incorrectly reported below the assay cut-off (1.00 U/mL) and be interpreted as HIT IgG antibody negative. The earlier article reported FDA's listing of the confirmed recall on October 30, 2026, and FDA says a supply interruption is expected.

Current status

On November 10, 2026, the FDA page showed content current as of October 30, 2026, with the four listed lots and the destruction instructions, and FDA's list of recalls and early alerts showed the recall in a row dated October 30, 2026 with status Recall Confirmed.

Who this affects

Hospital laboratories running HemosIL AcuStar HIT-IgG(PF4-H)

Why it matters

A result from an affected lot incorrectly reported below the cut-off may delay recognition of HIT, and FDA says that in patients with HIT, continued exposure to heparin may increase the risk of thrombotic complications. Laboratories need an alternative HIT antibody method because a supply interruption is expected, and decisions about reviewing prior results, patient follow-up or repeat testing rest with the laboratory and/or the treating clinician.

Recommended action

• Check inventory for lots B40005, B40006, B38062, B38063 and destroy remaining product under facility procedures (FDA)
• Document destruction on the Urgent Mandatory Response Tracking Form (FDA)
• Identify an alternative HIT antibody testing method

Scope and timing

Authority status

Other (FDA recall)

Responsible owner

Laboratory, Hematology, Patient safety

Other dates

FDA page content current as of 2026-10-30; the earlier article gives October 30 as the recall listing date

Not established

Manufacturer letter not reviewed.

Earlier article: November 4, 2026 edition →

Sources

• FDA HemosIL recall

What this is

The Transparency in Coverage final rule (FR Doc. 2026-20447, 91 FR 63748), published in the Federal Register on October 6, 2026 and effective December 7, 2026, sets new disclosure duties for non-grandfathered group health plans and health insurance issuers: in-network rate files for each provider network, out-of-network allowed-amount files for each health insurance market, new contextual files, a website footer link labeled Price Transparency or Transparency in Coverage, attestations in the files, and cost-sharing information available by phone. The duties phase in for plan years (policy years in the individual market) beginning on or after January 1, 2027 (the amended cost-sharing disclosures, including the phone method), on March 6, 2027 (the rate and allowed-amount file changes and attestations) and on September 6, 2027 (the contextual files and footer), with the first utilization file due July 1, 2028; until each date the prior rules continue to apply.

Current status

The October 6, 2026 Transparency in Coverage final rule takes legal effect December 7, 2026; a check of the Federal Register application programming interface (API) on 2026-11-10 showed no correction on the rule's record, and a search for the quoted phrase "Transparency in Coverage" in documents published since October 7 returned zero documents (a bounded search, not proof that no related document exists). Still ahead: plan years (policy years in the individual market) beginning January 1, 2027 for the amended consumer disclosures including the phone method; March 6, 2027 for network-level rate files, market-level allowed-amount files with the 11-claim threshold, unlikely provider-rate exclusions and attestations; quarterly posting from the first calendar-year quarter after March 6, 2027 (April 1, 2027, as the earlier article reads it); contextual files and the website footer from September 6, 2027 (taxonomy and text files first post at the start of the first calendar-year quarter after September 6, 2027, which is October 1, 2027 as the earlier article reads it); and the first utilization file on July 1, 2028. Prior-rule compliance continues until each transition.

Who this affects

Non-grandfathered group health plans and health insurance issuers offering non-grandfathered group or individual coverage. Inference: this reaches a hospital or health system as sponsor of its own employee group health plan (self-insured plans stay liable when a third-party administrator (TPA) fails to deliver; insured plans can shift liability to the issuer by written agreement) and any health plan or issuer the system owns. Grandfathered plans and coverage are not otherwise subject to these rules; the rule's summary says that meeting the phone requirement also satisfies section 114 of the No Surprises Act, including for grandfathered plans and coverage (the earlier article described this as the phone-estimate provision reaching grandfathered coverage). Provider contracting and revenue-cycle teams are affected as users of payer rate files (inference).

Why it matters

A hospital or health system that sponsors a non-grandfathered group health plan carries these duties: the amended cost-sharing disclosures, including the phone method, for plan years beginning on or after January 1, 2027, the rate and allowed-amount file changes and attestations from March 6, 2027, and the contextual files and footer from September 6, 2027. A self-insured plan remains liable if its third-party administrator fails to provide the information, while under a written agreement the issuer of an insured plan, not the plan, is in violation if the issuer fails. In the playbook below, internal target dates are recommendations, not legal deadlines; legal dates are marked.

Required actions

• Until each applicability date, continue to comply with the prior Transparency in Coverage rules (2715A3(c)(1)(i) and parallel sections).
• For plan years (policy years in the individual market) beginning on or after 2027-01-01: make cost-sharing information available by phone through the number on the ID card, accurate and provided at the time of the request (2715A2(b)(2)(iii), (c)(1)).
• From 2027-03-06: in-network rate files per provider network; exclusion of provider-rate combinations unlikely to be reimbursed given specialty; market-level out-of-network allowed-amount files omitting items with fewer than 11 claims; and, in the specified machine-readable files, an attestation made to the best of the plan's or issuer's knowledge and belief as of the date in the file, naming the plan's or issuer's CEO, president or a senior official designated to oversee the encoding of the data, or, under a qualifying written agreement, the other party's CEO, president or such a designated senior official (2715A3(b)(1), (c)(1)(ii)).
• Post and update in-network rate and allowed-amount files quarterly on the first day of each calendar-year quarter after the March 6, 2027 applicability date (April 1, 2027 per the earlier article); prescription-drug file updated monthly (2715A3(b)(4)(i)-(ii)).
• Provisions applicable from 2027-09-06: the taxonomy file, the root-folder plain-text file with source URL, direct link and a monitored point of contact, and a footer link labeled Price Transparency or Transparency in Coverage. The taxonomy and text files first post on the first day of the first calendar-year quarter after September 6, 2027 (October 1, 2027 per the earlier article); after that the taxonomy file is posted on the first day of each calendar-year quarter, and it must still be posted, though it need not be updated, when no taxonomy change affects the information required in the in-network rate file from one quarter to the next; the text file is updated as soon as practicable and not later than 7 calendar days after a change; the footer link goes on the home page and on other pages that feature a footer (2715A3(b)(2), (b)(3)(iii), (b)(4)(iii)-(v), (c)(1)(ii)).
• Utilization file: first posting July 1, 2028, and annually thereafter (2715A3(b)(4)(iii)). It is not due on September 6, 2027.

Recommended action

• Inventory affected plan products and vendors, preserve the three distinct implementation phases, and test accurate consumer estimates against current data (earlier article).
• Map vendor deliverables and consumer-estimate accuracy to each separate phase (earlier article, forward horizon).
• Confirm written agreements with TPAs and issuers cover each new file, the attestation and the phone method (inference from the rule's contracting provisions).
• Do not treat every new file as due in September 2027; keep the April 1, 2027, October 1, 2027 and July 1, 2028 posting dates separate (earlier article).

Implementation playbook

1. Scope: list every group health plan the organization sponsors (self-insured and insured), any owned plan or issuer, and grandfathered status. Owner: Benefits with Legal. Due 2026-11-30.
2. Contracts: confirm written agreements with each TPA, issuer and pharmacy benefit manager (PBM) cover the new network-level files, market-level allowed-amount files, contextual files, root .txt file, footer link, phone disclosures and the attestation; for insured coverage confirm the agreement places responsibility on the issuer; for self-insured coverage record that the plan remains liable if the TPA fails. Owner: Legal and Benefits. Due 2026-12-07 (rule effective date).
3. Phone method: for plan years starting January 1, 2027, confirm the customer-service number on ID cards gives accurate cost-sharing information at the time of the request and discloses any 20-providers-per-day limit. Owner: Benefits with TPA. Due 2026-12-15 (internal), legal applicability plan years beginning on or after 2027-01-01.
4. Attestation governance: decide who is named as the senior official in each file's attestation, or document the TPA's attestation under written agreement. Owner: Compliance with Benefits. Due 2027-01-31.
5. Phase 1 testing: obtain TPA test files; check one in-network rate file per provider network with product type and network identifiers, market-level allowed-amount aggregation with the 11-claim threshold, and exclusion of unlikely provider-rate combinations. Owner: Benefits with IT/data. Due 2027-02-26 (internal); legal applicability 2027-03-06.
6. First quarterly posting: confirm posting and the last-updated date on April 1, 2027, and that the prescription-drug file continues monthly. Owner: Benefits/TPA. Due 2027-04-01.
7. Phase 2: add the footer link labeled Price Transparency or Transparency in Coverage on the plan website home page, post the root-folder .txt file with a monitored point of contact, and set a 7-calendar-day update procedure for the text file. Owner: Benefits with Web/IT. Due 2027-09-06 (legal applicability); first taxonomy and text-file posting 2027-10-01 (per the earlier article's reading of the quarter rule).
8. Utilization file: confirm the TPA build and lookback period. Owner: Benefits. Due 2028-04-01 (internal check) ahead of the 2028-07-01 first posting.
9. Provider side (inference): Managed Care Contracting reviews how payers' network-level files will present the organization's NPIs, Tax Identification Numbers (TINs) and rates and plans any reconciliation. Owner: Managed Care Contracting with Revenue Cycle. Due 2027-04-30.

Scope and timing

Authority status

Final

Responsible owner

Proposed: Benefits (plan sponsor/plan administrator) with Legal; Compliance for attestation governance; Managed Care Contracting and Revenue Cycle as data users. The prior coverage did not specify an owner.

Publication date

2026-10-06

Effective date

2026-12-07

Compliance date

2027-03-06 (in-network rate and out-of-network allowed-amount file changes and attestations; 26 CFR 54.9815-2715A3(c)(1)(ii) and parallel Department of Labor (DOL) and HHS sections); 2027-09-06 (contextual files, website footer and their timing rules)

Implementation date

2027-01-01 (amended consumer cost-sharing disclosure provisions, including the phone method, apply for plan years beginning on or after this date; 2715A2(c)(1))

Other dates

2027-04-01 first quarterly posting of rate and allowed-amount files (first calendar-year quarter after March 6, 2027, as the earlier article states); 2027-10-01 first posting of taxonomy and text files (first calendar-year quarter after September 6, 2027, as the earlier article states); 2028-07-01 first utilization file posting, annually thereafter

Not established

Technical implementation guidance and schema releases were not checked. The April 1, 2027 and October 1, 2027 first posting dates come from the earlier article's reading of the quarterly rule, not dates printed in the regulatory text. Owner and internal target dates in the playbook are proposals.

Earlier article: October 11, 2026 edition →

Sources

• Transparency in Coverage final rule (Federal Register, 2026-20447)
• GovInfo PDF, 91 FR 63748
• CMS fact sheet, Transparency in Coverage Final Rules (CMS 9882-F)

What changed

FDA's MedWatch feed lists, on November 9, 2026, a safety communication requiring application holders for all glucagon-like peptide-1 receptor agonist (GLP-1 RA) medications to add non-arteritic anterior ischemic optic neuropathy (NAION) risk information to Warnings and Precautions.

Who this affects

Prescribers and pharmacies dispensing GLP-1 RA medications.

Why it matters

Inference: pharmacy and therapeutics committee awareness.

Scope and timing

Authority status

Other (FDA safety communication; required labeling change)

Responsible owner

Pharmacy

Publication date

2026-11-09

Not established

Page date taken from the MedWatch feed; page body date not confirmed.

Sources

• FDA MedWatch alert, GLP-1 RAs

What changed

CDPH issued All Facilities Letter (AFL) 26-32 on October 30, 2026, giving acute psychiatric hospitals a 5-day notice that it proposes to readopt, on an emergency basis, Title 22 sections 71213.1 and 71215.1, which set nurse-to-patient ratio standards under Health and Safety Code section 1276.4. The 5-working-day period ran from November 2 to November 6, 2026, during this edition's coverage week. CDPH stated it will submit the readoption to the Office of Administrative Law (OAL) on November 9, 2026, to be in effect November 28, 2026, and that OAL allows five calendar days for comments after submission.

Background

Health and Safety Code section 1276.4 directs CDPH to establish nurse-to-patient ratio standards in acute psychiatric hospitals, and these emergency regulations carry out that mandate. CDPH's page for the emergency regulatory action (DPH-19-001E), read on November 11, 2026, shows the emergency regulations were filed with OAL on May 22, 2026, took effect June 1, 2026, and are in effect; AFL 26-32 is the notice of their readoption.

Who this affects

Acute psychiatric hospitals

Why it matters

Inference: if OAL approves the readoption, the emergency nurse-to-patient ratio standards continue in effect from November 28, 2026, so acute psychiatric hospitals' staffing has to keep meeting them; OAL's decision on the readoption is the point to watch.

Recommended action

• Track OAL's action on the DPH-19-001E readoption, which CDPH said it would submit to OAL on 2026-11-09.
• Confirm current staffing grids continue to meet sections 71213.1 and 71215.1.

Scope and timing

Authority status

Proposed

Responsible owner

Nursing; Compliance (licensing)

Publication date

2026-10-30

Other dates

5-working-day notice period 2026-11-02 to 2026-11-06; CDPH said it would submit the readoption to OAL on 2026-11-09 (the planned date; OAL receipt not checked); proposed to be in effect 2026-11-28; OAL comment period of five calendar days after submission

Not established

OAL's receipt and decision on the readoption were not checked (would appear in a later Notice Register). The finding of emergency, the notice of emergency readopt and the body of the proposed regulatory text linked from CDPH's DPH-19-001E page were not read.

Sources

• CDPH AFL 26-32
• CDPH DPH-19-001E page

What changed

OIG's updated Health Care Fraud Self-Disclosure Protocol (SDP), issued October 15, 2026, makes what OIG calls additional clarifying changes. One change moves the deadline for submitting the completed internal investigation and damages calculation from 90 days after acceptance into the SDP to 90 days after the initial submission; a disclosing party that cannot finish its investigation before sending its submission must certify in that initial submission that it will finish within 90 days of the date of the initial submission. The updated protocol states a general minimum multiplier of 1.5 times single damages and minimum settlements of $100,000 for kickback-related matters and $20,000 for other matters. Earlier editions did not report this update. OIG also listed an updated self-disclosure FAQ on November 2, 2026. The self-disclosure page now carries a question on where to disclose given the new self-disclosure options in 2026, and says conduct that implicates the False Claims Act (FCA), OIG administrative authorities and CMS administrative authorities should be disclosed to the FCA Self-Disclosure Pilot Program. The page does not mark which FAQ text changed on November 2.

Background

OIG first published the protocol in 1998, as the Provider Self-Disclosure Protocol, to establish a process for persons to voluntarily identify, disclose and resolve instances of potential fraud involving the Federal health care programs. OIG updated it in its entirety in 2013 and, on November 8, 2021, amended and renamed it to increase the minimum settlement amounts and make other clarifying changes.

Who this affects

Hospitals and other providers considering or making disclosures to OIG under the SDP.

Why it matters

Inference: the internal investigation and damages work for an SDP submission now has to be essentially complete within 90 days of filing, so disclosure timing decisions and the 60-day overpayment clock interplay need to be planned before filing.

Required actions

• For an SDP submission made before the internal investigation is complete: certify in the initial submission that the investigation will be completed within 90 days of the date of that submission, and report the findings of the completed investigation and the damages calculation within those 90 days (per the updated protocol).

Recommended action

• Update internal disclosure procedures and templates to the October 15, 2026 protocol.
• Re-check any pending or planned SDP disclosures against the new 90-day clock.

Scope and timing

Authority status

Guidance

Responsible owner

Compliance; Legal

Other dates

Protocol issued 2026-10-15, as the protocol states; OIG's What's New page lists the updated protocol under 2026-10-16

Not established

No redline of the prior (2021) protocol was retained, so changes other than the 90-day clock (which the protocol itself states) are not established. The $20,000 minimum for other matters appears in the protocol text but is not newly set by this update as far as the retained text shows.

Sources

• HHS-OIG Health Care Fraud Self-Disclosure Protocol (PDF)
• OIG self-disclosure page

What changed

The Board of Pharmacy's notice, dated October 20, 2026, proposes repealing Title 16 California Code of Regulations sections 1715, 1715.1, 1746, 1746.1 through 1746.5, 1747 and 1784 and amending 1732.5, 1735.1 and 1736.1. The notice says AB 1503 (effective January 1, 2026) placed the self-assessment process in statute at Business and Professions Code sections 4040.6 and 4102 and moved pharmacy practice to a standard of care model that replaces some prescriptive furnishing protocols. The forms affected include the Hospital Pharmacy Self-Assessment, 17M-14. Written comments must be received at the Board's office by Monday, December 7, 2026, or at a hearing if one is scheduled. No hearing is scheduled; the Board will hold one on a written request received at least 15 days before the written comment period closes.

Who this affects

Hospital pharmacies and other Board of Pharmacy licensees

Why it matters

Inference: hospital pharmacy self-assessment duties continue under statute; pharmacy compliance should confirm the statutory self-assessment requirements and form that will apply once the regulations are repealed.

Recommended action

• Pharmacy compliance to review the proposed text and comment by 2026-12-07 if needed.

Scope and timing

Authority status

Proposed

Responsible owner

Pharmacy

Comment deadline

2026-12-07 (written comments must reach the Board's office by this date, or be received at the hearing, should one be scheduled)

Other dates

45-day comment period listed as 2026-10-23 to 2026-12-07; AB 1503 effective 2026-01-01; notice dated 2026-10-20

Not established

Proposed text and Initial Statement of Reasons (ISOR) not retrieved; the 1735.1 compounding-definition amendment was not reviewed.

Sources

• Board of Pharmacy pending regulations
• Notice of proposed action