COVID19 Vaccination Requirements for Medicare & Medicaid Certified Providers and Suppliers

The Centers for Medicare & Medicaid Services (CMS) has issued a series of rules that require most providers and suppliers participating in Medicare and Medicaid to be fully vaccinated against COVID19. The rules apply to a wide range of healthcare settings, from hospitals and skillednursing facilities to home health agencies and durable medical equipment (DME) suppliers. This page summarizes the current requirements, compliance timelines, exemptions, reporting procedures, and consequences for noncompliance.

1. Who Must Be Vaccinated?

CMS requires vaccination for the following categories of individuals and entities:

• Employees all frontline staff who provide direct patient care, including nurses, therapists, aides, and support staff.
• Contracted Personnel any nonemployee staff who work on a providers premises (e.g., staffing agencies, consultants, volunteers).
• Suppliers manufacturers, distributors, and service technicians who deliver or maintain medical equipment in a Medicare/Medicaidcertified setting.
• Facilitywide requirement the entire organization must demonstrate that at least 90% of its workforce is fully vaccinated, unless a valid exemption applies.

2. Definition of Fully Vaccinated

CMS follows the CDC definition:

• Completion of the primary series of an FDAapproved or -authorized COVID19 vaccine (two-dose mRNA series or singledose Janssen).
  
• At least 14 days have passed since the final dose.

3. Timeline for Compliance

4. Exemptions

Exemptions are limited and must be documented in accordance with CMS guidance.

4.1 Medical Exemptions

• Certified medical condition that contraindicates vaccination.
• Must be supported by a licensed healthcare professional and entered into the employees health record.
• Exempted individuals are required to undergo weekly COVID19 testing at the providers expense.

4.2 Religious Exemptions

• Provider must receive a written request stating the sincerely held religious belief.
• CMS expects a goodfaith review; blanket or generic statements are insufficient.
• Religious exemptions are also subject to weekly testing and additional infectioncontrol measures.

4.3 Documentation

All exemption requests must be retained for at least three years and made available to CMS auditors upon request.

5. Reporting Mechanism

CMS requires the use of the Provider Enrollment, Chain, and Ownership System (PECOS) to upload vaccination data. Key steps include:

1. Log in to PECOS with your National Provider Identifier (NPI).
2. Select COVID19 Vaccination Reporting from the dashboard.
3. Enter employee name, NPI (if applicable), vaccination dates, vaccine product, and exemption status.
4. Upload supporting documents for exemptions (PDF, max 5MB per file).
5. Submit and receive a confirmation receipt number.

6. Enforcement and Penalties

Failure to meet the 90% vaccination threshold can result in:

• Withholding of Medicare and Medicaid reimbursement for up to 30days.
• Termination of participation agreements for repeat violators.
• Potential civil monetary penalties under the Health Care Fraud Statute.

CMS may also place a provider on a Compliance Review List, which can affect future bidding opportunities and eligibility for incentive programs.

7. Best Practices for Providers

• Early Communication Notify staff of upcoming requirements and offer vaccination clinics on site.
• Track Vaccination Status Use a secure HR system that can generate the required PECOS upload files.
• Plan for Exemptions Establish a clear, documented process for reviewing medical and religious exemption requests.
• Weekly Testing Logistics Partner with a certified laboratory to streamline testing for exempted individuals.
• Audit Trail Keep all vaccination records, exemption letters, and testing results in a searchable repository for at least three years.

8. Frequently Asked Questions

Q: Does the 90% requirement apply to parttime staff?

A: Yes. All individuals who provide direct care, regardless of hours worked, must be counted toward the threshold.

Q: What if my organization employs seasonal workers?

A: Seasonal staff are subject to the same vaccination requirements for the period they are on the payroll. Include them in the PECOS report for the months they work.

Q: Can a provider request an extension?

A: Extensions are only granted in rare circumstances and must be accompanied by documented evidence of unavoidable barriers (e.g., vaccine shortages). Requests are submitted through the CMS Provider Relief Portal.

Q: Are contractors who only provide nonclinical services (e.g., IT support) required to vaccinate?

A: The rule focuses on individuals who have direct patient contact. Nonclinical contractors are exempt unless they enter patient care areas.

9. Resources

• CMS COVID19 Updates
• CDC Vaccine Recommendations
• HHS Guidance Memo (Jan2024)
• CMS Transmittal 202301

Staying current with CMS vaccination mandates protects patients, staff, and your organizations reimbursement eligibility. Begin preparing now to meet the July312024 deadline and avoid costly penalties.