Pathology Lab Compliance: CLIA Certificate Tiers + Documentation
10 min read · Last reviewed May 23, 2026
Pathology lab compliance is governed by the Clinical Laboratory Improvement Amendments (CLIA) at 42 CFR Part 493. CMS administers the program through the Division of Clinical Laboratory Improvement and Quality. Every lab that tests human specimens for diagnosis, treatment, or health assessment holds one of five certificate types under 42 CFR Part 493 Subpart B — Waiver, Provider-Performed Microscopy Procedures (PPMP), Registration, Compliance, or Accreditation — matched to the highest test complexity performed. The certificate type drives the entire compliance burden.
What CLIA actually requires for a pathology lab
The CLIA certificate types under 42 CFR § 493.3:
- Certificate of Waiver under § 493.15 — limited to FDA-categorized waived tests. Minimum QC and personnel requirements; not routinely inspected. Most physician-office point-of-care testing operates under a CoW.
- Certificate for Provider-Performed Microscopy Procedures (PPMP) under § 493.19 — limited to a specific list of microscopy procedures performed by a physician, mid-level practitioner, or dentist during a patient visit. KOH preps, wet mounts, fern tests, urine sediment microscopy.
- Certificate of Registration under § 493.45 — an interim certificate that permits a lab to perform moderate- and/or high-complexity testing while it awaits its first inspection for a Certificate of Compliance or Certificate of Accreditation. New labs operate on the Registration certificate until the AO or CMS survey is completed.
- Certificate of Compliance under § 493.43 — moderate- and/or high-complexity testing with CMS or state-agency inspection.
- Certificate of Accreditation under § 493.55 — same testing scope as Compliance but inspected by a CMS-approved AO. Most independent pathology labs hold a CoA through CAP (College of American Pathologists).
A pathology lab performing surgical pathology, cytology, or molecular diagnostics holds a Certificate of Accreditation or Compliance and must meet the full set of moderate- and high-complexity requirements at 42 CFR Part 493 Subpart K (Quality System) and Subpart M (Personnel).
What pathology labs most often miss is the relationship between test complexity and personnel qualifications. A change in the test menu — adding a new analyte, switching to a different manufacturer's assay — can change the complexity classification and create a personnel-qualification gap overnight. The complexity classification is found on the FDA CLIA Categorizations database.
The documents you must maintain
A pathology lab CLIA binder should produce on demand:
- CLIA certificate with the certificate number, type, effective and expiration dates, and the approved test categories
- CMS-116 (CLIA application) and any amendments — director changes, address changes, test-menu changes
- Director qualifications documented per 42 CFR § 493.1443 for high-complexity or § 493.1405 for moderate-complexity
- Testing-personnel qualifications under § 493.1489 (high-complexity) or § 493.1423 (moderate-complexity)
- Competency assessment at six months and annually thereafter — for moderate-complexity testing under 42 CFR § 493.1413(b)(8)-(9) and for high-complexity testing under 42 CFR § 493.1451(b)(8)-(9) — six required methods: direct observation of routine patient test performance; monitoring of recording and reporting of results; review of intermediate test results, QC, PT, and preventive-maintenance records; direct observation of instrument maintenance and function checks; testing of blind samples; assessment of problem-solving skills. Written policies and procedures governing the competency program live separately at § 493.1235.
- Quality control records per § 493.1256 — at least two levels of QC each day of testing, more frequent where the manufacturer requires
- Proficiency testing enrollment and results under § 493.801 for every regulated analyte
- PT investigation records for every unsatisfactory PT result under § 493.1236
- Quality Assessment program under § 493.1289 — monitoring of preanalytic, analytic, and postanalytic systems with documented corrective actions
- Specimen records with patient identification, collection date, condition on receipt, accession
- Calibration and calibration verification records under § 493.1255
- Cytology workload limits documented per technologist under § 493.1274(d) — the 100-slide-per-24-hour ceiling
- Pathologist review of cytology and surgical pathology cases per the applicable § 493.1274 and § 493.1273 rules
Retention: two years for most CLIA records under 42 CFR § 493.1105, five years for immunohematology, ten years for pathology slides and reports. Some state laws are stricter.
How CLIA inspections actually work
The inspection lifecycle differs by certificate tier:
Certificate of Accreditation (most pathology labs): The AO conducts a biennial on-site inspection. CAP, the largest pathology AO, uses its Checklist series — the All Common Checklist plus a checklist per discipline (Anatomic Pathology, Hematology, Chemistry, Cytopathology, Molecular). CAP inspections are conducted by peer pathologists from other labs, typically over 1-3 days for a mid-sized lab. CAP findings range from Phase I (deficiency requiring response) to Phase II (deficiency requiring on-site corrective action verification). Repeated Phase II deficiencies can lead to accreditation withdrawal and CMS direct intervention.
Certificate of Compliance: CMS or the state agency surveys biennially. The CMS-published State Operations Manual Appendix C governs the survey. Findings are issued as a Form CMS-2567 Statement of Deficiencies, and the lab responds with a plan of correction.
Both pathways: CMS validation surveys under 42 CFR § 493.563 audit a sample of AO-accredited labs to verify the AO is conducting equivalent surveys. CMS can directly intervene at any time on complaint, PT failure, or other for-cause basis.
In CLIA audits we have seen the inspection findings fall into a consistent set:
- Competency assessment incomplete — the six required methods at § 493.1413(b)(8)-(9) (moderate complexity) and § 493.1451(b)(8)-(9) (high complexity) are not all documented for every testing person on every analyte they perform. (The written-policies framework at § 493.1235 is a separate requirement.)
- PT investigation missing or pro-forma — an unsatisfactory PT result was acknowledged but no investigation documented under § 493.1236.
- QC out-of-range without corrective action documented — the run continued and patient results were reported with no documented investigation of the QC failure.
- Personnel qualifications not on file — degree, transcript, or training verification missing for moderate- or high-complexity testing personnel.
- Director's required responsibilities under § 493.1407 (moderate) or § 493.1445 (high) not documented as performed.
- Cytology workload records missing or showing the 100-slide-per-24-hour ceiling exceeded without documentation.
- Specimen identification chain-of-custody gaps between collection, accessioning, and reporting.
Common gaps unique to pathology
The gaps we see most often:
- A new test added to the menu without a complexity-classification check against the FDA database. The personnel qualification framework for the new analyte's complexity tier was not verified.
- Reagent-lot changes without documented method verification under § 493.1253.
- Calibration verification on a six-month interval per § 493.1255 treated as the same as initial calibration. Different requirement, different evidence.
- Director's "annual review" of policies and procedures under § 493.1407(e)(13) signed once and not redone in subsequent years.
- Cytology rescreen documentation under § 493.1274(c) incomplete — 10% of negative gyn cytologies rescreened by a different technologist.
- LDTs (laboratory developed tests) operated without the CLIA validation-study documentation required at § 493.1253 and the lab's AO checklist. The FDA's May 2024 LDT rule was vacated March 31, 2025 and the regulation text reverted September 19, 2025, so CLIA validation evidence is once again the primary regulatory record for LDTs.
- Histology block and slide retention not meeting the 10-year CAP and state requirements.
Maintenance cadence
- Daily: QC at the manufacturer-required frequency for every analyte; review and document corrective action for any out-of-range result; review specimen-identification audit trail.
- Weekly: Review reagent and control lot status; verify calibration is current for all analyzers.
- Monthly: Internal quality assessment review per § 493.1289; review cytology workload reports; confirm PT samples received and processed for current testing event.
- Quarterly: Sample competency assessments for currency; review director's required-responsibilities checklist completion.
- Semi-annually: Calibration verification under § 493.1255 for all quantitative tests; PT cycle results review and any required investigations.
- Annually: Competency assessment for every testing person on every analyte; director's annual review of policies and procedures; reagent and instrument inventory.
- Biennially: CLIA certificate renewal (60-90 days lead time); AO inspection (CAP, COLA, etc.).
- At every menu change: Verify FDA complexity classification, re-verify personnel qualifications, document method verification per § 493.1253, enroll in PT for the new analyte.
State preemption to watch
State CLIA programs vary materially:
- New York: Operates an independent Clinical Laboratory Evaluation Program (CLEP) with state permits in addition to CLIA. NY permits use a stricter framework than federal CLIA in many categories, particularly for cytogenetics, molecular, and parentage testing. NY permits are required for any lab testing specimens collected in New York.
- Washington: Operates a state Medical Test Site (MTS) license under WAC 246-338 alongside CLIA.
- California: Requires a California Clinical Laboratory Permit under Business and Professions Code § 1265 and the California Department of Public Health Laboratory Field Services rules.
- Florida and Pennsylvania: State-administered CLIA programs with the state functioning as the inspecting authority for Certificates of Compliance.
A pathology lab accepting out-of-state specimens often needs multiple state permits in addition to its CLIA certificate.
How d3rx fits
The d3rx compliance binder includes a CLIA section that names the certificate type, the quality control framework tied to 42 CFR Part 493 Subpart K, the personnel competency matrix per analyte, the PT enrollment log, and the menu-change-triggered re-verification workflow. See the compliance binder overview for how the CLIA section integrates with HIPAA, OSHA, and billing compliance.
D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.
Step 1 · Get the binder
Get the d3rx compliance binder for your practice
Pre-filled to address the gaps this guide covers — Pathology Lab Compliance: CLIA Certificate Tiers + Documentation. We will email you the section preview and your binder intake link.
No PHI required. We use your email to send the binder preview and intake link only.
Frequently asked
Does our point-of-care urine drug screen need CLIA?
Yes. Any testing of human specimens for the purpose of diagnosis, treatment, or health assessment is CLIA-regulated, including point-of-care urine drug screens. The minimum certificate is a Certificate of Waiver if the test is on the CMS-published [waived-test list](https://www.fda.gov/medical-devices/ivd-regulatory-assistance/clia-categorizations); a more complex confirmation test (e.g., LC-MS) requires a Certificate of Compliance or Accreditation with moderate- or high-complexity personnel and QC standards under [42 CFR § 493](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493).
What is the difference between a Certificate of Compliance and a Certificate of Accreditation?
A Certificate of Compliance authorizes a lab to perform moderate- and/or high-complexity testing with CMS or a state agency as the inspecting authority (under [42 CFR § 493.43](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B/section-493.43)). A Certificate of Accreditation under [42 CFR § 493.55](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B/section-493.55) authorizes the same testing scope but the lab is inspected by a CMS-approved accreditation organization (CAP, COLA, Joint Commission, AABB, AOA, ASHI). Most pathology labs hold a Certificate of Accreditation through CAP.
How often does CMS or my AO inspect a CLIA-certified lab?
Every two years for non-waived testing under [42 CFR § 493.1773](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-Q/section-493.1773). CMS or the state agency conducts the inspection for a Certificate of Compliance. The approved AO conducts the inspection for a Certificate of Accreditation. Waiver labs are not routinely inspected but can be inspected on complaint or for cause.
Who can be a lab director for high-complexity testing?
Under [42 CFR § 493.1443](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1443), a high-complexity lab director must be a doctor of medicine, osteopathy, or podiatric medicine certified in anatomic or clinical pathology, or hold a doctoral degree in a chemical, physical, biological, or clinical laboratory science with two years of experience directing or supervising high-complexity testing. The standards for moderate-complexity directors at [42 CFR § 493.1405](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1405) are different and somewhat more permissive.
If we perform laboratory developed tests (LDTs), what changes?
LDTs are subject to CLIA but, as of 2026, are not subject to FDA premarket review. The FDA's May 2024 LDT final rule was vacated by the U.S. District Court for the Eastern District of Texas on March 31, 2025, and FDA reverted the regulation text on September 19, 2025. CLIA at [42 CFR Part 493](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493) remains the primary regulatory framework for LDTs, with FDA enforcement discretion restored to the pre-rule posture. Pathology labs running LDTs document CLIA validation under [§ 493.1253](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1253) and the lab's AO checklist (CAP for accredited labs); FDA registration and Quality System Regulation obligations are not currently required for LDTs absent further rulemaking or congressional action.
What is proficiency testing (PT) and what happens if we fail?
PT is the external assessment of analytical performance required at [42 CFR § 493.801](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-H/section-493.801). Labs enroll with a CMS-approved PT program for every regulated analyte they test and submit results blinded to the program. Two failures of the same analyte across three consecutive testing events triggers a 'PT failure' under [42 CFR § 493.1236](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1236), which requires investigation and may result in cease-testing or sanctions. Three failures in the same specialty/subspecialty in any rolling period is a serious PT failure with stronger sanctions.
Turn this into a review-ready binder
The Security Risk Analysis is where this guide becomes documentation you can actually hand to a reviewer — assembled into one review-ready binder. Source-grounded, citation-linked, and explicit about what it does and does not do.
Editorial process. This guide was drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and edited by the D3rx team for restraint and source fidelity. A named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged to verify citations — see the team page for status. Until that reviewer engagement is finalized, this page does not claim credentialed review.
This article is an administrative documentation aid. It does not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program. References cited link to primary sources at HHS, OCR, CMS, the Code of Federal Regulations, NIST, and state regulators.
D3rx is a healthcare-billing and compliance research aid maintained by D3rx Inc. Articles are drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and reviewed for restraint and source fidelity by the D3rx team.
Reviewer status: a named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged. Until that engagement is finalized, this page does not claim credentialed review.
- 42 CFR Part 493https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493
- 42 CFR Part 493 Subpart Bhttps://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B
- 42 CFR § 493.3https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-A/section-493.3
- § 493.15https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-A/section-493.15
- § 493.19https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-A/section-493.19
- § 493.45https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B/section-493.45
- § 493.43https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B/section-493.43
- § 493.55https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-B/section-493.55
- 42 CFR Part 493 Subpart Khttps://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K
- Subpart Mhttps://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M
- FDA CLIA Categorizations databasehttps://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfclia/search.cfm
- 42 CFR § 493.1443https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1443
- § 493.1405https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1405
- § 493.1489https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1489
- § 493.1423https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1423
- 42 CFR § 493.1413(b)(8)-(9)https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1413
- 42 CFR § 493.1451(b)(8)-(9)https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1451
- § 493.1235https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1235
- § 493.1256https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1256
- § 493.801https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-H/section-493.801
- § 493.1236https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1236
- § 493.1289https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1289
- § 493.1255https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1255
- § 493.1274(d)https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1274
- § 493.1273https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1273
- 42 CFR § 493.1105https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-J/section-493.1105
- State Operations Manual Appendix Chttps://www.cms.gov/regulations-and-guidance/guidance/manuals/internet-only-manuals-ioms-items/cms1201984
- 42 CFR § 493.563https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-E/section-493.563
- § 493.1407https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1407
- § 493.1445https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-M/section-493.1445
- § 493.1253https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493/subpart-K/section-493.1253
- Business and Professions Code § 1265https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC§ionNum=1265
Sources verified as of May 23, 2026
This guide is a plain-English summary maintained by D3rx for healthcare practice administrators. It is not legal advice, medical advice, or accounting advice. The authoritative source is the cited regulation or agency document. Always confirm with qualified counsel before acting on a specific compliance question affecting your practice.
Related Guides
Related across the archive
- SRAHIPAA Risk Analysis for a Primary Care PracticeWhat a primary care practice owes under 45 CFR 164.308(a)(1)(ii)(A): ePHI scope, threats specific to family medicine and internal medicine workflows, and a Security Rule mapping that holds up to OCR's audit protocol.
- ComplianceThe Medicare 60-Day Overpayment Rule: How to Comply (and What Triggers Worse)The 60-day clock starts at identification. Miss it, and the overpayment becomes a False Claims Act violation. Here is the actual procedure.
- ComplianceOCR Investigation Letter: Your 30-Day Response PlaybookReceived an OCR HIPAA investigation letter? The first 30 days set the trajectory. Confirm the docket, freeze logs, route through counsel, and produce a tabbed response.
- SRAHIPAA Policies and Procedures: What a Small Practice Actually NeedsWhat 45 CFR 164.316 and 164.530(i) require for HIPAA policies and procedures, the minimum set a small practice should maintain, and how to keep them current without bloat.
- ComplianceBehavioral Health Compliance: 42 CFR Part 2 + HIPAA TogetherHow SAMHSA's 42 CFR Part 2 framework for substance use disorder records overlays HIPAA after the 2024 final rule alignment, and what behavioral health practices must document.
- ComplianceGastroenterology Compliance: ASC + Anesthesia + Pathology CoordinationHow ASC Conditions for Coverage at 42 CFR Part 416, CMS Pub. 100-04 anesthesia rules, propofol monitoring documentation, USPSTF colorectal screening guidance, and TC/PC pathology splits apply to GI practices.
- BillingWhat to Do When a Payer Says You're UnderbillingGot a letter saying you're underbilling? Here's what it actually means, whether you should worry, and what action to take.
- Glossary60-Day Overpayment RuleACA requirement that Medicare and Medicaid overpayments be reported and returned within 60 days of identification.