Price transparency enforcement is now real money.

CMS enforcement of the updated Hospital Price Transparency requirements (finalized in the CY26 OPPS rule) went live April 1, 2026. The structural changes from the original 2021 transparency rule are meaningful. The enforcement posture is the bigger change.

New requirements in the machine-readable file: median allowed amount plus 10th and 90th percentile allowed amounts, replacing the old estimated allowed amount. The percentile fields are the audit handle CMS uses to verify that the file reflects real negotiated rates rather than placeholder values.

CMS doubled its enforcement pace in 2025. The agency issued 10 CMPs that year with fines ranging from $32,301 to $309,738 per cycle. The per-day CMP scales with bed size: roughly $3,000 per day for a 300-bed community hospital, up to $5,500 per day for large systems. A 90-day cycle at the high end approaches $500,000 in cumulative penalty.

The Health Affairs audit data

A Health Affairs analysis of 3,764 hospitals reviewed in mid-2025 found 65% received at least one warning notice or CAP (corrective action plan) request from CMS. Most hospitals corrected within the CAP window. A meaningful minority did not, and those are the hospitals that received the 10 CMPs CMS issued in 2025.

The new enforcement window starting April 1, 2026 raises three operational stakes. First, the percentile fields are new, and many hospitals' transparency vendors have not yet updated their machine-readable file generation logic. Second, the affirmation statement requirements are stricter, and many hospitals are still posting the 2021-era statement. Third, the website footer URL requirement is being enforced more aggressively; the MRF link must be in the footer of every page, not just the patient billing page.

The reputational exposure

The CMP itself is real money but it is recoverable. The reputational hit is harder to recover. CMS publishes enforcement actions, and CMS-issued CMPs trigger local media coverage, particularly in markets where the hospital is the dominant local employer. A $300,000 CMP becomes a $3 million reputational story when the local newspaper covers it.

For hospitals serving competitive markets, the reputational story affects patient choice in measurable ways. For hospitals in dominant-provider positions, the reputational story affects regulator relationships and accreditation timing.

The three things to verify this month

The audit window opens April 1 and runs through the rest of the year. Three things every hospital must verify by the end of May.

• Open your MRF in a browser. Click through to the actual file. Confirm the percentile fields are populated with real numbers, not placeholder values, not zeros, not null entries.
• Verify the affirmation statement. The statement is required to be current and signed by an authorized hospital official. The 2021-era statement template is not sufficient.
• Confirm the file URL placement. The MRF link must be in the footer of every page on the website. Not just the billing page. Not just the patient resources page. Every page.

If any of those three are not in compliance today, the operational fix is doable in 30 to 60 days. If you wait until you receive a warning notice, you are operating reactively against an enforcement clock.

The CAP-to-CMP escalation path

The CMS enforcement sequence is well-documented. Warning notice first, with 30 days to respond. If the response is inadequate, a CAP request, with 45 days to demonstrate compliance. If the CAP is inadequate, the CMP follows, with the per-day clock running back to the original warning date.

The cost of one failed audit (warning, then CAP, then CMP) easily exceeds $500,000 plus reputational drag. CMS allows a 35% CMP reduction if the hospital waives the ALJ hearing, but the reduction is not available if the violation is failure to post the MRF at all.

What to watch next

CMS is expected to publish updated enforcement results in summer 2026 covering the April-to-June compliance audit cohort. Expect a meaningful uptick in warning notices and CAPs as the new percentile requirements catch hospitals with stale MRF generation logic. The CMP volume in calendar 2026 will likely exceed the calendar 2025 total of 10.