Price Transparency Compliance Checklist: What CMS Actually Requires in 2026

First: Understand What "Compliant" Actually Means in 2026

Before walking through the checklist, it's worth addressing the most dangerous misconception in the market: that posting a machine-readable file is the same as being compliant.

It is not.

According to the most recent analysis from Patient Rights Advocate, only 21.1% of U.S. hospitals are fully compliant with federal price transparency requirements — despite the fact that the vast majority have posted some form of machine-readable file. Posting a file is the floor, not the ceiling. CMS is now auditing for accuracy, completeness, proper formatting, accessibility, and data quality - not simply for the existence of a document. With that context, here is what full compliance requires in 2026.

The 2026 Hospital Price Transparency Compliance Checklist

REQUIREMENT 1: Machine-Readable File (MRF) Published and Publicly Accessible

The foundational requirement of the Hospital Price Transparency Rule is a comprehensive machine-readable file containing standard charge information for all items and services provided by the hospital. This requirement has been in place since 2021, but the specifications have tightened significantly.

Your MRF must:

• Be publicly available online without any login, CAPTCHA, paywall, or access barrier
• Be hosted in one of three CMS-approved formats: CSV "tall," CSV "wide," or JSON — conforming to the CMS template available on the agency's GitHub repository
• Follow CMS's required file naming convention exactly (e.g., <ein>_<hospital-name>_standardcharges.json or .csv), with "standardcharges" written as a single lowercase word
• Be linked from a dedicated webpage, with a footer link on the hospital's homepage directing users to that page
• Include a links.json (TXT) file in the root folder of the hospital's website containing the MRF location and contact information
• Be updated at least once per year, with the date of the most recent update encoded in the file

Common failure points: files posted behind login screens, files using deprecated formats, naming convention errors, missing homepage footer links, and files that haven't been updated in more than 12 months.

REQUIREMENT 2: All Five Standard Charge Types Must Be Included

The MRF must contain all five types of standard charges for every item and service the hospital provides:

1. Gross charge:  the charge before any discounts or contractual adjustments
2. Discounted cash price: the price offered to patients paying without insurance
3. Payer-specific negotiated charges: the actual negotiated rate for each payer and plan combination
4. De-identified minimum negotiated charge:  the lowest negotiated rate across all payers, without identifying the specific payer
5. De-identified maximum negotiated charge: the highest negotiated rate across all payers, without identifying the specific payer

Common failure point: Hospitals frequently omit payer-specific negotiated charges for some or all payers -  often because pulling this data from managed care contracts is operationally complex. This is consistently cited as the most common source of noncompliance.

REQUIREMENT 3: Median and Percentile Allowed Amounts NEW for 2026 (Enforced April 1, 2026)

This is the most significant new requirement introduced in the CY 2026 OPPS/ASC Final Rule, and it represents a fundamental shift in how hospitals must report charges when payer-specific negotiated rates are based on a percentage or algorithm.

Prior requirement: Hospitals were required to report an "estimated allowed amount" when a payer-specific negotiated charge was expressed as a percentage or algorithm rather than a fixed dollar amount.

2026 requirement: Estimated allowed amounts are eliminated. Hospitals must now report:

• The median allowed amount - derived from actual historical claim payment data
• The 10th percentile allowed amount
• The 90th percentile allowed amount
• The count of claims that factored into each calculation

Data source and lookback period:

• Calculations must be drawn from EDI 835 electronic remittance advice (ERA) files or an equivalent source of actual remittance data
• The lookback period must be no less than 12 months and no longer than 15 months prior to the date the MRF is posted
• If fewer than 12 months of data exist for a specific item or service, hospitals must encode "0" for the count and leave the median and percentile fields blank

Important calculation note: CMS requires that when the calculated median or percentile value falls between two observed allowed amounts, hospitals must use the next highest observed value -  not the standard statistical midpoint. This is a non-standard calculation that requires custom logic and cannot be handled by most off-the-shelf formulas.

Common failure points: Relying on estimated or approximated figures rather than actual ERA data; using incorrect lookback periods; applying standard statistical formulas rather than the CMS-specified rounding convention; lacking access to historical 835 data for all relevant payer contracts.

REQUIREMENT 4: Payer-Specific Charges Must Be Expressed in Dollars Wherever Possible

Related to the allowed amounts requirement, CMS has made clear that hospitals must express payer-specific negotiated charges as dollar amounts whenever the contract structure allows for it. This applies to contracts based on case rates, per diems, or known fee schedules — not just percentage-of-billed-charges arrangements.

Where a dollar amount truly cannot be calculated in advance (because the contract is based on a percentage or algorithm that varies by claim), hospitals must include all information necessary for the public to derive the dollar amount — including the specific fee schedule, percentage, or formula components that apply.

Common failure point: Hospitals that default to leaving payer-specific charges blank or encoding placeholder values (such as the now-discontinued "nine 9s" placeholder) when a dollar amount could in fact be calculated.

REQUIREMENT 5: Strengthened Attestation Statement in the MRF

Beginning January 1, 2026, CMS replaced the prior affirmation statement with a significantly more rigorous attestation requirement. The new attestation - which must be encoded directly in the MRF - requires hospitals to formally certify all of the following:

• That the hospital has included all applicable standard charge information in accordance with 45 CFR § 180.50
• That the information encoded is true, accurate, and complete as of the date in the file
• That the hospital has included all payer-specific negotiated charges in dollars that can be expressed as dollar amounts
• That for charges that cannot be expressed as a dollar amount, the hospital has provided all necessary information for the public to derive the amount, including specific fee schedules, percentages, algorithms, or formulas

The phrase "to the best of its knowledge and belief" is retained as a qualifier — acknowledging that hospitals cannot be held responsible for information they could not reasonably know. But this qualifier does not create a broad safe harbor. It applies to genuinely unknowable information, not to data a hospital could have obtained through standard operational processes.

Common failure point: Using the prior-year affirmation language rather than the updated 2026 attestation; failing to encode the attestation in the file itself rather than in accompanying documentation.

REQUIREMENT 6: Organizational NPI Encoded in the MRF -  NEW for 2026

Effective January 1, 2026, CMS requires hospitals to encode their organizational (Type 2) National Provider Identifier(s) in a newly created general data element within the MRF.

Specifically, hospitals must report any Type 2 NPI associated with a primary taxonomy code of '28' (indicating a hospital) or '27' (indicating a hospital unit) that is active as of the date of the most recent update to the standard charge information.

Important: CMS has specified that hospitals will not be compliant if they use other identifiers, such as employer identification numbers (EINs), in place of the required NPI. This requirement exists to advance comparability between hospital MRFs and health plan transparency files.

Common failure point: Omitting the NPI field entirely, or populating it with an EIN or other organizational identifier rather than the required Type 2 NPI.

REQUIREMENT 7: Senior Official Information Encoded in the MRF. NEW for 2026

The 2026 rule adds a requirement that hospitals encode the name of the hospital CEO, president, or designated senior official responsible for overseeing the accuracy and completeness of the MRF data. This information must be included in the MRF as a general data element.

This requirement reflects CMS's intent to establish direct accountability for the accuracy of published pricing data at the executive level - not simply at the compliance or IT department level.

REQUIREMENT 8: Consumer-Friendly Shoppable Services Display

Separate from the MRF requirement, hospitals must maintain a consumer-friendly display of pricing for at least 300 shoppable services - services that can be scheduled in advance. This requirement has been in place since 2021 and was not modified by the 2026 rule, but it remains a core compliance obligation and a frequent source of noncompliance.

The shoppable services display must:

• Be publicly accessible on the hospital's website without any access barriers
• Include plain-language descriptions of each service
• Group shoppable services with associated ancillary services (e.g., facility fees, lab work, anesthesia)
• Display the discounted cash price, payer-specific negotiated charges, and de-identified minimum and maximum negotiated charges for each service
• Be formatted in a way that is genuinely consumer-friendly — not a technical file that patients cannot interpret

Alternatively, hospitals may satisfy this requirement with a functioning online price estimator tool that meets the consumer-friendly standard.

Important enforcement note: Failing to post any shoppable services display at all — or failing to post any MRF at all - constitutes a "core" violation of the HPT requirements. For these violations, the 35% CMP reduction that CMS offers to hospitals who waive their right to an administrative law judge hearing is explicitly not available. The most serious violations will be penalized in full.

REQUIREMENT 9: Annual Updates and Ongoing Maintenance

Compliance is not a one-time project. CMS requires that MRF data be updated at least annually, and that updates occur whenever pricing information changes materially — including when:

• New payer contracts are executed or existing contracts are renegotiated
• New service lines are added or existing services are discontinued
• The hospital undergoes organizational changes that affect its license, NPI, or provider structure (e.g., a Critical Access Hospital redesignation)
• Contract terms are amended in ways that change charge structures or negotiated rates

For hospitals that experience frequent contract changes or operate across multiple facilities, this means price transparency is an ongoing operational discipline — not an annual compliance checkbox.

Common failure point: Treating price transparency as a one-time IT project and failing to update MRF data as contracts and operations change throughout the year.

The Enforcement Reality: What Happens If You're Not Compliant

CMS calculates civil monetary penalties on a daily basis, beginning from the date it issues a warning notice - not from the date a hospital becomes noncompliant. Penalty amounts scale with hospital size:

Hospital Size	Maximum Daily Penalty
30 or fewer beds	Up to $300/day
31–550 beds	$10 per bed per day
More than 550 beds	Up to $5,500/day

CMS fined 10 hospitals in 2025 alone - more than double the pace of prior enforcement years. Fine amounts have ranged into the hundreds of thousands of dollars per enforcement cycle. And CMS publicly lists every hospital that receives a civil monetary penalty on its enforcement actions webpage, creating reputational risk well beyond the financial exposure.

The 35% CMP reduction - available to hospitals that waive their right to an ALJ hearing - provides some relief for minor violations, but it is explicitly unavailable for the most serious noncompliance: failing to post an MRF or failing to publish any shoppable services. The message from CMS is clear: core violations will be pursued and penalized in full.

 

Why Compliance Is Operationally Complex And What to Do About It

The checklist above makes clear that full price transparency compliance is not a technology problem that can be solved with a spreadsheet or a one-time file upload. It requires:

• Access to actual ERA/835 remittance data going back 12–15 months for every relevant payer and service
• Accurate modeling of managed care contract structures, including percentage-based, algorithm-based, case rate, and per diem arrangements
• Custom calculation logic for median and percentile allowed amounts that follows CMS's specific conventions
• Ongoing updates tied to contract changes, operational changes, and annual refresh cycles
• Governance and executive accountability, now required to be encoded directly in the MRF

For community hospitals and specialty practices with lean compliance and IT teams, this operational burden is significant. And the compliance data makes clear that most organizations are not meeting it: fewer than one in four U.S. hospitals is fully compliant, even after more than four years of enforcement.

How SlicedHealth Makes Compliance Achievable

SlicedHealth's Price Transparency solution is purpose-built for hospitals, health systems, and specialty practices navigating exactly this challenge.

Powered by SlicedIQ - SlicedHealth's AI-driven contract modeling and revenue intelligence engine - the platform delivers:

• CMS-compliant MRFs and shoppable service displays, including the new 2026 requirements for median and percentile allowed amounts drawn from actual ERA data
• Accurate dollar-amount encoding for all charge types, including complex percentage-based and algorithm-based contract structures
• Branded, consumer-friendly patient pricing experiences that meet regulatory intent, not just technical format requirements
• Continuous compliance maintenance — not a one-time file upload — so that pricing data stays accurate as contracts and operations evolve throughout the year
• Audit readiness, with data that is structured correctly, sourced accurately, and defensible under CMS scrutiny
• Fast implementation and minimal IT burden, so hospitals can achieve compliance without disrupting workflows or overburdening internal teams

And because SlicedHealth is more than a technology vendor - it's a team of healthcare veterans who understand how payer contracts actually work - the platform is designed to close the compliance gap between what CMS requires in regulation and what that means in practice for your specific contract portfolio.

As enforcement tightens and the bar for what constitutes genuine compliance continues to rise, having a partner who can keep pace with regulatory change is not optional. It's essential.

 

Summary: Your 2026 Price Transparency Compliance Checklist

Requirement	Enforced Since	Key 2026 Change?
Machine-readable file published without access barriers	2021	No (ongoing)
All five standard charge types included	2021	No (ongoing)
Median + 10th/90th percentile allowed amounts	April 1, 2026	✅ Yes — replaces estimated amounts
Claim count encoded for allowed amounts	April 1, 2026	✅ Yes — new requirement
Payer charges expressed in dollars where possible	2021 / clarified 2026	✅ Clarified and strengthened
Strengthened attestation in the MRF	January 1, 2026	✅ Yes — replaces prior affirmation
Organizational Type 2 NPI encoded in MRF	January 1, 2026	✅ Yes — new requirement
Senior official name encoded in MRF	January 1, 2026	✅ Yes — new requirement
Consumer-friendly shoppable services display	2021	No (ongoing)
Annual updates + ongoing maintenance	2021	No (ongoing)

 

Ready to close your compliance gaps before CMS comes knocking? Schedule a 1:1 demo with SlicedHealth at slicedhealth.com to see how our Price Transparency solution helps your organization meet every requirement - accurately, continuously, and without adding operational burden.

About SlicedHealth

SlicedHealth brings clarity and control to the revenue cycle for health systems and community hospitals. Grounded in hands-on support and built on a rules-based foundation, our platform equips hospital CEOs and CFOs with the tools they need to optimize contract performance, streamline operations without additional staff, and maximize revenue recovery. Our next-generation contract management platform delivers real-time visibility into hospital payer contracts and revenue cycle performance. Driven by SlicedIQ, our AI-powered engine that provides detailed, easy-to-use insights for contract modeling and variance analysis, the SlicedHealth platform automates better decisions across the entire revenue cycle. From claim estimation and business intelligence to a robust price transparency module built for compliance, SlicedHealth helps all hospital leaders recover revenue lost to denials and underpayments. Learn more at https://slicedhealth.com