The instruction and the missing tracking function

CMS’s April 5, 2024 instructions told state agencies to notify their federal oversight office about contracts for nursing-home survey work. Yet a September 2026 inspector-general audit found CMS did not track which states used contract surveyors and could not readily identify the inspections they performed. What’s the Scoop With Broach compared the complete memo with the audit and the agency’s written response to examine the gap between notification, data collection and verification.

The distinction matters because CMS moved nursing-home survey and certification operations to a new information system, iQIES, in July 2025. The audit says that the replacement had limitations similar to its predecessor for identifying whether an inspector was an employee or contractor. Changing platforms did not itself establish the worker-classification information needed to monitor outsourced inspection work.

The accountability question is not whether contractors should be prohibited from inspecting nursing homes. The record recognizes their role in addressing staffing shortages and backlogs. It is whether the agency could identify outsourced work and verify that states were checking the qualifications and independence of the people doing it.

A policy memo is only the first stage of the control

The 2024 memo says states remain responsible for federal survey requirements whether they use employees or contractors. It identifies considerations including conflicts of interest, protected data, quality assurance and training. It requires the same training for contractors before they survey independently and tells states to monitor completion. Its final instruction asks states to notify their CMS location of contracts used for survey and certification functions.

That instruction is not the same as a standardized, person-level reporting system. The audit found that the old ASPEN platform could carry contractor information in user profiles but lacked a standardized report to extract it, requiring manual review of individual surveys. CMS told auditors iQIES had similar limitations and said it planned to improve documentation and evaluate standardized reporting.

The second missing stage was independent verification. In a selected group of fourteen state agencies, all could improve their policies and procedures to conform more closely to the memo. States generally put qualification standards in their contracts, including experience, professional licensing or background checks. But when they included those standards, they relied on contractors to verify them rather than independently checking. A contractual requirement is therefore not evidence that the agency tested compliance.

What fourteen states and 167 reviews can establish

The fourteen states were not a random national sample. Auditors chose the largest nursing-home resident populations among twenty-five states reporting contractor use, covering 84% of residents in that contractor-using group. The fourteen are 56% of the twenty-five states by count, calculated by this publication, but their resident-weighted coverage is much larger. Neither measure is a nationwide percentage of bad inspections.

The audit separately examined all 167 fiscal-2023 federal monitoring surveys to determine whether the same contract surveyor performed a state survey and its federal validation. In its July 21, 2026 response, CMS emphasized that OIG did not identify surveyor conflicts of interest in that review. That is material counterevidence: the report establishes a risk and oversight deficiency, not proven self-review in those 167 cases.

Nor does the audit measure how many nursing-home violations a contractor missed, how many residents were harmed, or whether contractors perform worse than state employees. Its period ran from October 1, 2022 through July 30, 2025, and its questionnaire and contract review examine management safeguards. Converting every weak policy into a failed bedside inspection would exceed the evidence.

CMS agrees to two repairs, while explaining its resource constraints

CMS concurred with requiring worker classification in iQIES and confirming that states have adequate contractor-oversight policies. Its response says it will work to add appropriate fields and verify policies, rather than asserting the recommended change was already complete. On October 17, the official recommendation tracker still listed both recommendations open and unimplemented, with updates expected March 1, 2027. That is an expected reporting update, not a promised implementation deadline.

The agency also described pressure from rising complaint investigations and limited survey funding. It said supplemental funds helped reduce backlogs and that nearly all states had eliminated or nearly eliminated the most serious complaint-investigation backlogs in fiscal 2025. The audit acknowledges the reason states turned to contractors. These explanations provide context for outsourcing, while leaving the worker-data and verification obligations unresolved.

This is original public-record analysis of the memo’s notification instruction, the audit’s two system descriptions, its sampling denominator and CMS’s actual response. We read the underlying documents; Billy Roach did not conduct inspections or interview residents or surveyors. The distinctive finding is the missing connection between an existing notification policy and usable oversight data after modernization. The public record supports testing those two corrective actions, while preserving the audit’s important absence of identified surveyor conflicts in the federal monitoring review.

Sources and further reading

HHS OIG A-04-24-08105 full audit, September 2026; methods, system limitations and July 21 CMS response ↗

Official report and recommendation tracker, checked October 17, 2026 ↗

CMS Admin Info 24-13-ALL, April 5, 2024; full three-page contractor oversight memorandum ↗

Photograph source and attribution: Nyttend ↗

Photograph reuse terms: Public domain (released worldwide by the photographer) ↗