Ambulatory Surgery Center Compliance: CMS + State + Infection Control
9 min read · Last reviewed May 23, 2026
Ambulatory surgery centers (ASCs) operate under the CMS Conditions for Coverage at 42 CFR Part 416, enforced through the CMS State Operations Manual Appendix L, and the ASC Infection Control Surveyor Worksheet. Compliance turns on governance, quality assessment and performance improvement (QAPI), infection control, medical records, and the relationship with the receiving hospital for transfers.
What CMS actually requires for ASCs
The ASC Conditions for Coverage at 42 CFR § 416.40 et seq. cover governance (§ 416.41), surgical services (§ 416.42), QAPI (§ 416.43), environment (§ 416.44), medical staff (§ 416.45), nursing services (§ 416.46), medical records (§ 416.47), pharmaceutical services (§ 416.48), laboratory and radiology (§§ 416.49-416.50), and infection control (§ 416.51).
The CMS State Operations Manual Appendix L translates each regulatory subsection into surveyor A-tags. Each A-tag becomes a deficiency citation possibility during a state agency survey. Critical A-tags include A-0073 (immediate-transfer procedure, local hospital, and periodic written notice under the post-2019 § 416.41(b)), A-0144 (informed consent), A-0153 (advance directive policy), and the A-0760 series (infection control specifics).
The ASC Infection Control Surveyor Worksheet is a structured checklist covering hand hygiene, injection safety, point-of-care testing, equipment reprocessing, environmental cleaning, and respiratory hygiene. Every CMS recertification survey applies the worksheet. Findings on the worksheet drive Statement of Deficiencies citations under § 416.51.
Accreditation by AAAHC, Joint Commission, or AAAASF carries deemed status for CMS certification. Deemed-status ASCs are surveyed by the accreditor on the accreditor's cycle; CMS conducts validation surveys on a random sample of deemed ASCs. A material finding on a validation survey can result in loss of deemed status and reversion to state-agency survey cycle.
The ASC Covered Procedures List (CMS Pub. 100-04 Chapter 14) and the Inpatient Only List (annually published in the OPPS/ASC final rule) define which procedures are payable in the ASC setting. The CY 2026 OPPS/ASC final rule continues to migrate procedures off the Inpatient Only List with corresponding ASC payment indicators.
The Quality Reporting Program for ASCs requires reporting of specified quality measures through the ASC Quality Reporting (ASCQR) program. Non-participation reduces ASC payment by 2 percent.
The documents you must maintain
The ASC compliance binder should hold:
- Governing body bylaws with documented authority, meeting minutes, and conflict-of-interest disclosures per § 416.41
- Medical staff bylaws and credentialing files for every physician, including OPPE/FPPE documentation
- Immediate-transfer procedure identifying the local Medicare-participating hospital, the transport mechanism, and the periodic written notice provided to that hospital under 42 CFR § 416.41(b) (the prior transfer-agreement/admitting-privileges requirement was removed in 2019)
- QAPI program documentation including the annual QAPI plan, performance-improvement projects whose number and scope reflect the services and complexity of the ASC under 42 CFR § 416.43(d), and sentinel-event reviews
- Infection-prevention plan signed by the designated infection-prevention professional, with surveillance results and action items
- Reprocessing competency log for every staff member performing instrument reprocessing, with annual reassessment and manufacturer-specific instructions-for-use verification
- Biological indicator (BI) testing log for every sterilizer load containing implantable devices and for daily/weekly cycles per manufacturer and AAMI standards
- Immediate-use steam sterilization (IUSS) log documenting indication, item, load contents, and patient (IUSS for convenience is not acceptable)
- Multi-dose vial policy and log — single-patient assignment with dating, single-patient use of single-dose vials
- Patient assessment, informed consent, anesthesia evaluation for every case — comprehensive medical history and physical assessment completed within the timeframe the ASC's policy specifies under 42 CFR § 416.52(a) (CMS does not set a federal universal H&P timeframe; the ASC's written policy and applicable state law control), plus the pre-surgical assessment required immediately before the procedure, the anesthesia pre-eval, and informed consent meeting § 416.42(a)(2)
- Discharge criteria and post-anesthesia care documentation including the named discharging physician
- Medication-storage, controlled-substance inventory, and look-alike/sound-alike management under § 416.48
- Life-safety code documentation including the most recent fire-marshal inspection and CMS Life Safety survey (under NFPA 101)
- ASCQR program quality measure submission records
- Emergency preparedness plan under 42 CFR § 416.54 with annual testing and after-action documentation
What ASCs most often miss is the IUSS log discipline. Surveyors look at IUSS rates and ask why; an ASC with high IUSS rates without documented justification (instrument shortage, urgent need) draws an infection-control citation immediately.
How audits actually work in an ASC
CMS state-agency surveys are typically unannounced, lasting 2-5 days depending on case volume and complexity. Surveyors arrive, request the survey-readiness packet (governing-body documents, medical staff bylaws, QAPI plan, recent meeting minutes), then conduct observations on hand hygiene, injection safety, environmental cleaning, and reprocessing. The Infection Control Surveyor Worksheet is completed concurrently. Document requests follow each observation finding.
The Statement of Deficiencies (Form CMS-2567) is issued after the survey close. The ASC has 10 calendar days to submit a Plan of Correction. Failure to submit or an unacceptable plan triggers escalation — Immediate Jeopardy (IJ) findings can result in termination notice within 23 days; condition-level findings can result in 90-day termination.
Validation surveys on deemed-status ASCs apply the same standards but the accreditor remains the primary reviewer. Substantial CMS findings on validation can cause loss of deemed status.
Complaint surveys are triggered by patient complaints, employee complaints, or referrals from state licensing boards. Scope is typically narrower but can expand. ASCs in the practice of responding to complaints with documented investigation and corrective action have fewer expanded-scope findings.
What ASCs most often miss is the QAPI documentation as a real continuous-improvement program rather than a binder. Surveyors look at meeting minutes, the projects selected, the data collected, the conclusions drawn, and the action items. "QAPI committee met" without project documentation is a citation.
Common gaps unique to ASC practice
In ASC surveys we have responded to, the recurring patterns:
- IUSS performed without indication documented — surveyor pulls the IUSS log and compares against the same-day OR schedule; a routine IUSS for instrument turnover is an immediate finding.
- Biological indicator testing log gaps — particularly for sterilizer cycles containing implants where BI is required.
- Single-dose vials reused on multiple patients — even with appropriate aseptic technique, this is an immediate finding under CDC guidance and Appendix L.
- Multi-dose vials shared across the OR with single spike — must be patient-assigned with dating.
- Point-of-care glucose meters used across patients without dedicated lancing — CDC and CMS treat this as a bloodborne-pathogen exposure risk.
- Informed consent that does not name the specific surgeon — locum or partner-substitute cases require updated consent.
- Immediate-transfer procedure stale or undocumented — verify the procedure, the identified local Medicare-participating hospital, and the periodic written notice are current at every survey cycle under § 416.41(b).
- Patient history and physical outside the ASC's written H&P timeframe — must comply with the ASC's policy under § 416.52(a) with an updated assessment if any change.
- Anesthesia pre-evaluation not completed by anesthesia provider — must be performed by the anesthesiologist or CRNA, not a delegate.
- Discharge criteria not met but patient discharged anyway — discharging physician must document criteria met or document the rationale for discharge.
- Controlled substance waste without two-witness signature — every waste event needs two staff signatures.
Maintenance cadence
- Daily: hand hygiene observations, OR turnover cleaning checklist, sterilizer cycle logs, multi-dose vial dating
- Weekly: BI testing for high-temperature sterilizers; environmental cleaning audit
- Monthly: infection-prevention surveillance data review; controlled-substance reconciliation; QAPI project data collection
- Quarterly: medical staff peer review, OPPE/FPPE updates, mock survey covering the Infection Control Surveyor Worksheet
- Annually: governing body annual review of all policies; QAPI annual report; emergency preparedness plan testing; life-safety code inspection; review of the immediate-transfer procedure, local hospital identification, and periodic written notice under § 416.41(b); credentialing reappointment cycle initiation
- Every CY: ASC Covered Procedures List and Inpatient Only List review before the new payment year
State preemption: where state ASC licensure tightens the federal standard
California — Health and Safety Code § 1226 governs ambulatory surgical clinic licensure; 22 CCR § 70801 et seq. covers regulatory expectations. California distinguishes between accredited surgery centers and licensed surgery centers; physician-owned facilities operate primarily under accreditation by an approved body, but the state-licensed facilities face more direct state oversight. Title 22 also imposes specific physical-plant and staffing requirements that exceed Appendix L.
Texas — Texas Health and Safety Code Chapter 243 and 25 TAC § 135 govern ambulatory surgical center licensure. Texas requires a separate state license plus CMS certification for Medicare participation. The Texas Department of State Health Services conducts licensure surveys distinct from CMS recertification.
New York — Article 28 of the New York Public Health Law and 10 NYCRR Part 755 govern diagnostic and treatment centers, including ASCs. New York has a Certificate of Need (CON) requirement for new ASCs and material expansions that does not exist federally. New York Department of Health (DOH) conducts state inspections separate from CMS surveys.
Florida — Florida Statute § 395 and Florida Administrative Code 59A-5 govern ASC licensure. Florida AHCA (Agency for Health Care Administration) conducts state inspections. Florida additionally has specific requirements for Level II office-based surgery that overlap with ASC operations for some procedures.
How d3rx fits
The d3rx specialty compliance binder maintains the ASC module: governance bylaws, credentialing files, QAPI annual plan and project tracker, infection-prevention plan and surveillance log, reprocessing competency tracker, IUSS log, transfer-agreement tracker, ASCQR submission record, and Infection Control Surveyor Worksheet self-audit. It is a source-grounded administrative documentation aid. It does not certify compliance, provide legal advice, or replace counsel. See compliance binder for the binder structure or audit defense for survey and Statement-of-Deficiencies response support.
D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.
Step 1 · Get the binder
Get the d3rx compliance binder for your practice
Pre-filled to address the gaps this guide covers — Ambulatory Surgery Center Compliance: CMS + State + Infection Control. We will email you the section preview and your binder intake link.
No PHI required. We use your email to send the binder preview and intake link only.
Frequently asked
What is the CMS ASC Infection Control Surveyor Worksheet and when does it apply?
CMS surveyors use the ASC Infection Control Surveyor Worksheet on every recertification and most complaint surveys. It scores hand hygiene, injection safety, point-of-care testing, equipment reprocessing, environmental cleaning, and respiratory hygiene. Findings on the worksheet are translated into deficiency citations against 42 CFR § 416.51 (infection control). The worksheet is publicly available on the CMS Survey & Certification website; train surveyors-of-record against it in advance of every survey cycle.
How often does CMS recertify an ASC?
ASCs are recertified through an unannounced state survey or through CMS-deemed accreditation (AAAHC, Joint Commission, AAAASF) on a three-year cycle, with complaint surveys, validation surveys, and revisits in between. Accredited ASCs face deemed-status accreditation surveys on the accreditor's cycle plus CMS validation surveys conducted on a random sample of accredited ASCs. The cycle restarts on a Statement of Deficiencies finding.
Does the ASC Conditions for Coverage require a written transfer agreement with a hospital?
No. CMS removed the written transfer agreement and admitting-privileges requirement in 2019. Current [42 CFR § 416.41(b)](https://www.ecfr.gov/current/title-42/part-416/section-416.41) requires the ASC to (1) have an effective procedure for immediate transfer of patients who require emergency care beyond the ASC's capabilities, (2) be located close to a hospital that meets Medicare provider agreement standards, and (3) provide the local hospital periodic written notice of the ASC's operation and patient population. Document the immediate-transfer procedure, identify the receiving hospital, and retain proof of the periodic notice; surveyors verify those elements under CMS State Operations Manual Appendix L.
What infection-control breaches most often produce ASC Statement of Deficiencies findings?
Reprocessing failures (immediate-use steam sterilization without indication, biological-indicator testing gaps, single-use device reuse), point-of-care glucose testing without dedicated lancing devices, multi-dose vial misuse (single-patient use with shared spike), incorrect hand-hygiene technique observed by the surveyor, and environmental cleaning gaps in the operating-room turnover process. Each maps to specific A-tags under Appendix L. Internal mock surveys against the surveyor worksheet are the most effective preparation.
Can an ASC perform a procedure that requires inpatient admission under Medicare?
Medicare's ASC Covered Procedures List (CMS Pub. 100-04 Chapter 14) defines which procedures are payable in the ASC setting. The Inpatient Only List (annually published) defines procedures that Medicare will only pay in the inpatient setting; performing one in an ASC means non-payment from Medicare for that case. The CY 2026 OPPS/ASC final rule continues the transition of certain procedures off the Inpatient Only List with new ASC payment indicators. Verify the procedure status before each CY change.
Does CA HSC § 1226 apply to a physician-owned surgery center?
Yes for ambulatory surgical clinics in California. Health and Safety Code § 1226 and Title 22 CCR § 70801 govern outpatient surgical clinic licensure separate from CMS certification. CA additionally distinguishes between accredited and licensed surgery centers — accredited-only facilities operate under physician-owned models with accreditation by an approved body (AAAHC, AAAASF, Joint Commission, Medicare-deemed only). Physician-owned facilities that also bill Medicare must hold both CMS certification and meet California requirements.
Turn this into a review-ready binder
The Security Risk Analysis is where this guide becomes documentation you can actually hand to a reviewer — assembled into one review-ready binder. Source-grounded, citation-linked, and explicit about what it does and does not do.
Editorial process. This guide was drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and edited by the D3rx team for restraint and source fidelity. A named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged to verify citations — see the team page for status. Until that reviewer engagement is finalized, this page does not claim credentialed review.
This article is an administrative documentation aid. It does not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program. References cited link to primary sources at HHS, OCR, CMS, the Code of Federal Regulations, NIST, and state regulators.
D3rx is a healthcare-billing and compliance research aid maintained by D3rx Inc. Articles are drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and reviewed for restraint and source fidelity by the D3rx team.
Reviewer status: a named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged. Until that engagement is finalized, this page does not claim credentialed review.
- 42 CFR Part 416https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416
- CMS State Operations Manual Appendix Lhttps://www.cms.gov/Regulations-and-Guidance/Guidance/Manuals/Internet-Only-Manuals-IOMs-Items/CMS1201984
- ASC Infection Control Surveyor Worksheethttps://www.cms.gov/Medicare/Provider-Enrollment-and-Certification/SurveyCertificationGenInfo/Survey-and-Cert-Letter-15-12
- § 416.41https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.41
- § 416.42https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.42
- § 416.43https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.43
- § 416.44https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.44
- § 416.45https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.45
- § 416.46https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.46
- § 416.47https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.47
- § 416.48https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.48
- §§ 416.49-416.50https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.49
- § 416.51https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-C/section-416.51
- 42 CFR § 416.41(b)https://www.ecfr.gov/current/title-42/part-416/section-416.41
- 42 CFR § 416.43(d)https://www.ecfr.gov/current/title-42/part-416/section-416.43
- 42 CFR § 416.52(a)https://www.ecfr.gov/current/title-42/part-416/section-416.52
- 42 CFR § 416.54https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-416/subpart-D/section-416.54
Sources verified as of May 23, 2026
This guide is a plain-English summary maintained by D3rx for healthcare practice administrators. It is not legal advice, medical advice, or accounting advice. The authoritative source is the cited regulation or agency document. Always confirm with qualified counsel before acting on a specific compliance question affecting your practice.
Related Guides
Related across the archive
- ComplianceInfusion Center Compliance: USP 797/800 + Medication HandlingUSP 797 and USP 800 govern sterile compounding and hazardous-drug handling. State enforcement varies. Here is the actual standard set infusion centers are measured against.
- SRAHIPAA Policies and Procedures: What a Small Practice Actually NeedsWhat 45 CFR 164.316 and 164.530(i) require for HIPAA policies and procedures, the minimum set a small practice should maintain, and how to keep them current without bloat.
- ComplianceThe Medicare 60-Day Overpayment Rule: How to Comply (and What Triggers Worse)The 60-day clock starts at identification. Miss it, and the overpayment becomes a False Claims Act violation. Here is the actual procedure.
- ComplianceOCR Investigation Letter: Your 30-Day Response PlaybookReceived an OCR HIPAA investigation letter? The first 30 days set the trajectory. Confirm the docket, freeze logs, route through counsel, and produce a tabbed response.
- ComplianceGastroenterology Compliance: ASC + Anesthesia + Pathology CoordinationHow ASC Conditions for Coverage at 42 CFR Part 416, CMS Pub. 100-04 anesthesia rules, propofol monitoring documentation, USPSTF colorectal screening guidance, and TC/PC pathology splits apply to GI practices.
- ComplianceOphthalmology Compliance: ASC + Imaging + MIPS DocumentationHow ASC Conditions for Coverage at 42 CFR Part 416, IRIS Registry MIPS reporting, ICD-10-CM laterality requirements, and CMS modifier 25 documentation rules apply to ophthalmology practices in 2026.
- BillingWhat to Do When a Payer Says You're UnderbillingGot a letter saying you're underbilling? Here's what it actually means, whether you should worry, and what action to take.
- Glossary60-Day Overpayment RuleACA requirement that Medicare and Medicaid overpayments be reported and returned within 60 days of identification.