If your hospital has received notification that a CMS EMTALA complaint investigation has been authorized, the next several weeks will be consequential. The stakes are real: a confirmed violation can result in civil monetary penalties of up to $133,420 per violation and, in the most serious cases, termination of your Medicare provider agreement. Understanding exactly what is coming, in what order, and what your team needs to do at each stage is not optional. It is the foundation of an effective response.
This guide walks through the investigation process step by step, drawing on CMS's own investigative procedures as set out in the State Operations Manual Appendix V. It covers what surveyors are instructed to examine, where hospitals most commonly undermine their own response, and how the physician review phase works and why it matters more than most legal teams realize.
How an Investigation Gets Started
EMTALA enforcement is entirely complaint-driven. A complaint can be filed by a patient, a family member, a physician, a hospital employee, or any member of the public. CMS now operates a dedicated online complaint portal in both English and Spanish, and has actively promoted public awareness of EMTALA rights in recent years. The volume of complaints has increased materially as a result.
Once a complaint is received by CMS, the Regional Office (RO) evaluates whether it alleges a potential EMTALA violation and warrants investigation. If it does, the RO authorizes the State Survey Agency (SA) to investigate. From that authorization, the SA is required to initiate an on-site investigation within two business days.1 The hospital will receive no advance notice. Surveyors arrive unannounced.
Important: Complaints categorized as potential Immediate Jeopardy (IJ) trigger the two-business-day timeline. Complaints categorized as Non-IJ High are initiated within 45 business days of RO authorization. The categorization is made by the RO based on the nature of the allegation, and the hospital has no input into that determination.
Stage 1: The Unannounced On-Site Survey
Entrance Conference
Surveyors begin with a brief entrance conference with the CEO or designee. They will explain the nature of the allegation and the scope of the investigation. The identity of the complainant and patient are kept strictly confidential throughout.
At this conference, surveyors will request a substantial set of documents. Having these organized and readily accessible signals operational competence and avoids the appearance of disorganization. Be prepared to produce:
- ED logs for the past 6 to 12 months
- ED policies and procedures manual
- Consent and transfer forms
- ED committee meeting minutes for the past 12 months
- Medical staff bylaws and rules and regulations
- Physician on-call lists for the past 6 months
- QAPI plan and relevant minutes
- Staffing schedules for relevant periods
- Ambulance trip reports and transfer records where applicable
- Designate a single point of contact to accompany surveyors throughout the visit
- Notify your legal counsel immediately but do not allow counsel to obstruct or interfere with surveyor access
- Do not volunteer information beyond what is asked
- Ensure staff are aware surveyors may interview them and that they should answer honestly and factually
Case Selection and Record Review
Surveyors will review a minimum of 20 records, selected from the ED log. They will not allow hospital staff to select the sample. They focus on transfers to other facilities, gaps in the log, AMA departures, patients who left without being seen, and patients who returned within 48 hours.
Critically, the scope of the investigation is not limited to the complaint case. Surveyors are instructed to identify additional violations and patterns of non-compliance within the preceding six months. A single complaint can and frequently does result in the identification of multiple violations across unrelated cases.
Record review focuses on whether the MSE was appropriate, whether an EMC was identified, whether stabilizing treatment was provided within the hospital's capability and capacity, and whether any transfers met the requirements of an appropriate transfer. For psychiatric cases, reviewers look specifically for documented assessment of suicide or homicide risk and danger to self or others. For obstetric cases, they look for documentation of fetal heart tones, contraction patterns, cervical status, and membrane integrity.
- Produce records promptly when requested. Delays create an unfavorable impression and can suggest reluctance to cooperate
- Do not alter, supplement, or add to medical records after the investigation is initiated. This is illegal and devastating if discovered
- Pull your own review of the records being examined so your team is not surprised by what surveyors find
Staff Interviews
Surveyors will interview physicians, nurses, admitting staff, the ED director, and quality improvement personnel. They may also interview the patient and family if applicable. Interviews at a receiving hospital may also occur in transfer cases.
Surveyors are trained to gather information about what actually happened, not just what the records show. Inconsistencies between staff accounts and documentation are significant findings. Staff who are unprepared, evasive, or who contradict each other or the record are a substantial vulnerability.
- Brief all ED staff in advance that investigators may speak with them and that they should be honest, specific, and avoid speculation
- Staff should not guess about what happened if they do not remember. "I do not recall" is a better answer than an inaccurate one
- Do not coach staff on what to say. This constitutes obstruction and is an independent violation risk
Exit Conference
Surveyors will hold an exit conference with hospital leadership to explain the scope of the investigation and any potential findings. Surveyors will not tell the hospital whether a violation was found at this stage. That determination is made by the Regional Office, not the surveyors on site. Do not expect a definitive answer at the exit conference.
Surveyors will also not leave a draft of any deficiency citation (Form CMS-2567) with the hospital at the exit conference. That document will be sent by the RO once it is finalized.
- Listen carefully and take detailed notes on everything surveyors describe as a potential concern
- Ask clarifying questions about the scope of the review if anything is unclear
- Do not argue with or attempt to rebut findings at the exit conference. Save that for the formal response process
Stage 2: Regional Office Review and Physician Review
After the on-site survey, the SA submits its report to the Regional Office within ten business days of completing the investigation. The RO then reviews the SA findings and determines whether a violation occurred. For cases involving potential CMPs or termination, a physician review is required before any enforcement action can be taken.
The 5-Day QIO Physician Review
For cases where physician review is needed to inform the compliance determination, the RO may request a 5-day medical advisory review from the regional Beneficiary and Family Centered Care QIO (BFCC-QIO). This review is not mandated by the statute or regulations, though in practice it occurs in the majority of cases. It is advisory. The QIO physician, who must be board-certified and experienced in peer review, conducts an independent clinical assessment of the case using only information that was available to the hospital at the time of the alleged violation.
The reviewer assesses whether the MSE was appropriate, whether an EMC existed and what it was, whether stabilizing treatment was appropriate within the hospital's capability, and whether any transfer met the applicable standards. The standard for the MSE is not diagnostic correctness. It is whether the examination was suitable for the symptoms presented and conducted in a non-disparate manner. A physician may have been clinically negligent without the case rising to the level of an EMTALA violation.
The RO may release the 5-day review results to the affected hospital and physician at its discretion. The hospital has no guaranteed right to receive it. Critically, the 5-day review is advisory to the RO, not binding: the RO can disagree with the reviewer's conclusions, seek a second opinion from a physician outside the QIO, or make a different determination entirely. The RO is not required to give the hospital a formal opportunity to respond specifically to the 5-day review before making its compliance determination. The hospital's opportunity to engage is through the broader process of presenting evidence and commenting on the RO's findings, not through a specific right tied to the 5-day review itself.
This matters significantly when a case is not referred to OIG. If the hospital submits a Plan of Correction and the matter resolves at the termination and compliance level without an OIG referral, the 60-day review never occurs. In that scenario, the 5-day review findings, if the RO releases them at all, are the only independent clinical analysis of the case the hospital will ever see. The primary opportunity to push back on the clinical reasoning behind a violation finding is in the response to the RO, before the compliance determination becomes final, and it must be pursued proactively.
The 60-Day QIO Review
The 5-day review and the 60-day review are separate processes with different purposes and different legal bases. The 60-day review is mandated by statute under Section 1867(d)(3) of the Social Security Act and is triggered when CMS refers a confirmed EMTALA violation case to the HHS Office of Inspector General for possible civil monetary penalty or physician exclusion action.
The 60-day review is conducted by the same BFCC-QIO but is an independent review from the 5-day advisory. If there is a discrepancy in findings between the two reviews, that discrepancy may affect whether OIG pursues the case for CMPs or physician exclusion, but it does not change the RO's original compliance determination. The RO has already acted on the basis of its own investigation and, if applicable, the 5-day review. The 60-day review operates in a separate lane.
During the 60-day review, the QIO is required to provide the hospital and the affected physician an opportunity to discuss the case and submit additional information. This is a formal opportunity to engage the reviewer's clinical analysis, and it is one of the most consequential and underutilized junctures in the entire enforcement process.
Critical disclosure rule (QSO-24-09, March 2024): The 60-day QIO report may not be released to the affected hospital or physician until after the OIG investigation is completed and the OIG closes the case. Hospitals often do not know what the 60-day review found until long after the OIG proceeding has concluded. This makes effective engagement during the discussion opportunity, before the 60-day review is finalized, especially important.
The Most Critical Juncture: Your Response to the Violation Finding
If the RO determines that a violation occurred, the hospital receives a Notice of Violation outlining the specific finding. The hospital then has the opportunity to present evidence and comment on the findings before a final determination is made. This is where the outcome of the investigation is most frequently determined, and where hospitals most commonly leave the most powerful defense on the table.
Most hospital responses to an EMTALA violation finding are written entirely by their legal team. The result is typically a well-crafted legal argument that misses the most direct and often most effective rebuttal available: demonstrating to the physician reviewer that the clinical facts or the applicable EMTALA definitions were misunderstood or misapplied.
EMTALA determinations are ultimately medical and regulatory, not purely legal. The physician reviewer's finding about whether an EMC existed, whether the MSE was appropriate, or whether stabilizing treatment met the standard of the hospital's capabilities is a clinical judgment call. Legal arguments about process and documentation, while important, do not directly address the clinical analysis that drove the finding.
The most effective responses engage the physician reviewer's reasoning directly, with a clinically grounded counter-analysis of the specific facts. This requires understanding not just how EMTALA is written, but how physician reviewers are trained to apply it, what definitions they are working from, where those definitions create ambiguity, and where a reasonable clinical reading of the case supports a different conclusion. That is a different skill set from traditional healthcare legal practice, and it is the gap where hospitals are most consistently underserved.
Immediate Jeopardy vs. Non-Immediate Jeopardy
If a violation is confirmed, the RO determines whether it constitutes Immediate Jeopardy (IJ) to patient health and safety. This determination controls the termination timeline and the urgency of the corrective action required.
Immediate Jeopardy violations, such as a complete failure to screen patients or a pattern of refusing to provide stabilizing treatment, place the hospital on a 23-day termination track. The hospital must remove the immediate jeopardy before a revisit occurs.
Non-Immediate Jeopardy violations, such as a transfer that was appropriate in substance but had an unsigned physician certification, or a functioning log with one incomplete entry, place the hospital on a 90-day termination track.
In either case, termination of the Medicare provider agreement is avoided if the hospital submits an acceptable Plan of Correction within the applicable timeframe and demonstrates compliance at a revisit survey.
Stage 3: The Plan of Correction
If a violation is confirmed and not successfully rebutted, the hospital must submit a Plan of Correction (PoC) on Form CMS-2567. The PoC is the hospital's formal commitment to CMS that it has identified the root cause of the violation, implemented corrective actions, and established ongoing monitoring to prevent recurrence.
A credible Plan of Correction addresses four things for each cited deficiency: what corrective action was taken, who is responsible, the date by which correction will be or has been achieved, and how the hospital will monitor ongoing compliance. Vague commitments to "educate staff" or "review policies" without specifics, timelines, or monitoring mechanisms are routinely rejected.
The PoC should demonstrate operational specificity. If the cited violation involved a failure to document physician certification on a transfer form, the PoC should describe exactly how the transfer documentation process has been redesigned, who audits it, at what frequency, and what happens when a gap is identified. CMS is looking for evidence that the hospital understands what went wrong and has built a durable system to prevent recurrence, not a one-time remediation.
- Address each cited deficiency individually and completely. Do not bundle multiple citations into a single generic response
- Include specific dates, named responsible parties, and concrete monitoring mechanisms
- Document any corrective actions already taken before the PoC is submitted. Demonstrating immediate responsiveness strengthens the submission
- Do not overcorrect in the PoC by committing to monitoring mechanisms the hospital cannot realistically sustain. CMS will hold you to whatever you commit to at the revisit
Stage 4: The Revisit Survey
Once the PoC is accepted, CMS will conduct an on-site revisit to verify that the hospital has implemented its corrective actions and achieved compliance. Surveyors will review a minimum of 10 records and will focus specifically on whether the violations identified in the original survey have been corrected and whether the monitoring mechanisms described in the PoC are actually functioning.
If the hospital is found in compliance at the revisit, the matter is closed for CMS purposes, though the case may still be referred to the OIG for potential CMP assessment. If the hospital is not in compliance, it remains on the termination track.
The OIG CMP Process
CMS's only direct sanction is termination of the provider agreement. Civil monetary penalties are assessed by the HHS Office of Inspector General (OIG), which receives referrals from CMS. The OIG conducts its own evaluation of legal liability and the appropriate penalty amount. Hospitals have the right to request a hearing before an Administrative Law Judge challenging both the finding of a violation and the amount of the proposed penalty.
What Your Legal Team and Clinical Leadership Cannot Do Alone
EMTALA investigations sit at the intersection of federal regulatory law and clinical medicine in a way that does not align neatly with how most hospitals are structured to respond. Your legal team understands the regulatory framework and the procedural requirements. Your medical director or CMO understands the clinical facts and the standard of care. What is consistently missing is the bridge between those two domains: an understanding of how physician reviewers are trained to apply EMTALA's specific definitions and standards to clinical facts, and how to craft a response that engages that analysis directly rather than talking past it.
That is the expertise EMTALA Advisors brings to investigation response. We have operated on the investigative side of this process, which means we understand what the reviewer is looking for, where the analysis is most likely to be contestable, and how to present a clinically grounded counter-argument in terms that directly address the basis of the finding.
This article is for educational purposes and does not constitute legal advice. Each EMTALA investigation is fact-specific and hospital leadership should engage qualified healthcare legal counsel promptly upon receiving notice of an investigation. Please contact us for assistance with an active investigation or to discuss how we can support your response.
References
- CMS QSO-19-14 (June 4, 2019) – Revision of EMTALA investigation timelines from completion in five working days to initiation within two business days of RO authorization.
- CMS State Operations Manual, Appendix V – Interpretive Guidelines: Responsibilities of Medicare Participating Hospitals in Emergency Cases, Rev. 191 (07-19-19). The primary source governing the investigative process described in this article.
- 42 CFR ยง489.24 – Special responsibilities of Medicare hospitals in emergency cases, including the definitions and standards applied during investigations.
- CMS Overview of the EMTALA Process – CMS process flow document describing the pathway from complaint through termination or compliance determination.
- HHS Office of Inspector General – EMTALA Enforcement overview, describing OIG's role in CMP assessment following CMS referral.
Get New Insights Delivered.
Subscribe to be notified when new EMTALA compliance resources are published.
Facing an active investigation?
Your legal team knows the law. Your CMO knows the medicine. We know how the two interact in the room where it matters, and we can help you respond effectively at every stage of the process.