1. (a) General.

   1. (1) MIPS data may be submitted on behalf of a MIPS eligible clinician, group, virtual group, subgroup, or APM Entity by any of the following third party intermediaries:

      1. (i) QCDR;
      2. (ii) Qualified registry;
      3. (iii) Before the CY 2025 performance period/2027 payment year, Health IT vendor;
      4. (iv) CMS-approved survey vendor.

   2. (2) Third party intermediary approval criteria—

      1. (i) To be approved as a third party intermediary, an organization must meet the following requirements:

         1. (A) The organization's principal place of business and the location in which it stores data must be in the U.S.
         2. (B) The organization must have the ability to indicate the source of any data it will submit to CMS if the data will be derived from CEHRT, a QCDR, qualified registry, or health IT vendor.
         3. (C) The organization must certify that it intends to provide services throughout the entire performance period and applicable data submission period.

      2. (ii) The determination of whether to approve an entity as a third party intermediary for a MIPS payment year may take into account:

         1. (A) Whether the organization failed to comply with the requirements of this section for any prior MIPS payment year for which it was approved as third party intermediary, including past compliance; and
         2. (B) Whether the entity provided inaccurate information regarding the requirements of this subpart to any eligible clinician.
      3. (iii) Beginning with the 2023 MIPS payment year, third party intermediaries must attend and complete training and support sessions in the form and manner, and at the times, specified by CMS.

   3. (3) For third-party intermediary program requirements:

      1. (i) All data submitted to CMS by a third party intermediary on behalf of a MIPS eligible clinician, group, virtual group, subgroup, or APM Entity must be certified by the third party intermediary as true, accurate, and complete to the best of its knowledge. Such certification must be made in a form and manner and at such time as specified by CMS.

      2. (ii) All data submitted to CMS by a third party intermediary must be submitted in the form and manner specified by CMS.

         1. (A) The submission of data on measures by a third party intermediary to CMS must include data on all of the MIPS eligible clinician's patients, regardless of payer, unless otherwise specified by the collection type.
         2. (B) [Reserved]
      3. (iii) If the clinician chooses to opt-in to participate in MIPS in accordance with § 414.130, the third party intermediary must be able to transmit that decision to CMS.

      4. (iv) Prior to discontinuing services to any MIPS eligible clinician, group, virtual group, subgroup, or APM Entity during a performance period, a third party intermediary must support the transition of such MIPS eligible clinician, group, virtual group, subgroup, or APM Entity to an alternate third party intermediary, submitter type, or, for any measure on which data has been collected, collection type according to a CMS approved transition plan by a date specified by CMS. The transition plan must address the following issues, unless different or additional information is specified by CMS:

         1. (A) The issues that contributed to the withdrawal mid-performance period or discontinuation of services mid-performance period.

         2. (B) Impacted entities:

            (1) The number of clinicians, groups, virtual groups, subgroups or APM entities (inclusive of MIPS eligible, opt-in and voluntary participants) that would need to find another way to report.

            (2) As applicable, identify any QCDRs that were granted licenses to QCDR measures which would no longer be available for reporting due to the transition.

         3. (C) The steps the third party intermediary will take to ensure that the clinicians, groups, virtual groups, subgroups, or APM Entities identified in paragraph (a)(3)(iv)(B)(1) of this section are notified of the transition in a timely manner, and successfully transitioned to an alternate third party intermediary, submitter type, or, for any measure or activity on which data has been collected, collection type, as applicable.
         4. (D) A detailed timeline that outlines timing for communications, the start of the transition, and completion of the transition of these clinicians, groups, virtual groups, subgroups, or APM Entities.
         5. (E) The third party intermediary must communicate to CMS that the transition was completed by the date included in the detailed timeline.

      5. (v) As a condition of its qualification and approval to participate in MIPS as a third party intermediary, a third party intermediary must:

         1. (A) Make available to CMS the contact information of each MIPS eligible clinician, group, virtual group, subgroup, or APM Entity on behalf of whom it submits data. The contact information must include, at a minimum, the MIPS eligible clinician, group, virtual group, subgroup, or APM Entity phone number, address, and, if available, email.
         2. (B) Retain all data submitted to CMS for purposes of MIPS for 6 years from the end of the MIPS performance period.
         3. (C) Upon request, provide CMS with any records or data retained in connection with its operation as a third party intermediary for up to 6 years from the end of the MIPS performance period.
      6. (vi) Beginning with the 2023 MIPS payment year, third party intermediaries must attend and complete training and support sessions in the form and manner, and at the times, specified by CMS.

2. (b) Additional requirements for QCDRs and qualified registries—(1) General.

   1. (i) Beginning with the CY 2021 performance period/2023 MIPS payment year, QCDRs and qualified registries must be able to submit data for all of the following MIPS performance categories:

      1. (A) Quality, except:

         (1)The CAHPS for MIPS survey; and

         (2) For qualified registries, QCDR measures;

      2. (B) Improvement activities; and
      3. (C) Promoting Interoperability, if the eligible clinician, group, virtual group, or subgroup is using CEHRT, unless the third party intermediary's MIPS eligible clinicians, groups, virtual groups, or subgroups fall under the reweighting policies at § 414.1380(c)(2)(i)(A)(4)(i) through (iii) or (c)(2)(i)(C)(1) through (7) or (c)(2)(i)(C)(9).

   2. (ii)

      1. (A) Beginning with the CY 2023 performance period/2025 MIPS payment year through the CY 2025 performance period/2027 MIPS payment year, QCDRs and qualified registries must support MVPs that are applicable to the MVP participant on whose behalf they submit MIPS data.

      2. (B) Beginning with the CY 2026 performance period/2028 MIPS payment year, QCDRs and qualified registries must support MVPs that are applicable to the MVP participant on whose behalf they submit MIPS data no later than 1 year after finalization of the MVP in accordance with the current requirement.

         (1) QCDRs and qualified registries may also support the APP.

         (2) A QCDR or qualified registry must support all measures and activities included in the MVP with the following exceptions:

         (i) If an MVP is intended for reporting by multiple specialties, a QCDR or a qualified registry are required to report those measures pertinent to the specialty of its MIPS eligible clinicians.

         (ii) If an MVP includes a QCDR measure, it is not required to be reported by a QCDR other than the measure owner.

   3. (iii) Beginning with the CY 2023 performance period/2025 MIPS payment year, A QCDR or qualified registry must support subgroup reporting.
   4. (2) Self-nomination. For the CY 2019 performance period/2021 MIPS payment year and future years, an existing QCDR or qualified registry that is in good standing may use the Simplified Self-Nomination process form during the self-nomination period, from July 1 and September 1 of the CY preceding the applicable performance period.

   5. (3) Conditions for approval.

      1. (i) Beginning with the CY 2020 performance period/2022 MIPS payment year, the QCDR or qualified registry must have at least 25 participants by January 1 of the year prior to the applicable performance period.
      2. (ii) If an entity seeking to qualify as a QCDR or qualified registry uses an external organization for purposes of data collection, calculation, or transmission, it must have a signed, written agreement with the external organization that specifically details the responsibilities of the entity and the external organization. The written agreement must be effective as of September 1 of the year preceding the applicable performance period.
      3. (iii) Beginning with the CY 2021 performance period/2023 MIPS payment year, the QCDR or qualified registry must provide performance feedback to their clinicians and groups at least 4 times a year, and provide specific feedback to their clinicians and groups on how they compare to other clinicians who have submitted data on a given measure within the QCDR or qualified registry. Exceptions to this requirement may occur if the QCDR or qualified registry submits notification to CMS within the performance period promptly within the month of realization of the impending deficiency and provides sufficient rationale as to why they do not believe they would be able to meet this requirement (for example, if the QCDR does not receive the data from their clinician until the end of the performance period).
      4. (iv) Beginning with the CY 2023 performance period/2025 MIPS payment year, the QCDR or qualified registry must submit a data validation plan annually, at the time of self-nomination for CMS' approval and may not change the plan once approved without the prior approval of the agency.

      5. (v) Beginning with the CY 2021 performance period/2023 MIPS payment year, the QCDR or qualified registry must conduct annual data validation audits in accordance with this paragraph (b)(3)(v).

         1. (A) The QCDR or qualified registry must conduct data validation for the payment year prior to submitting any data for that payment year to CMS for purposes of the MIPS program.
         2. (B) The QCDR or qualified registry must conduct data validation on data for each performance category for which it will submit data, including if applicable the Quality, Improvement Activities, and Promoting Interoperability performance categories.
         3. (C) The QCDR or qualified registry must conduct data validation on data for each submitter type for which it will submit data, including MIPS eligible clinicians, groups, virtual groups, subgroups, APM entities, voluntary participants, and opt-in participants, if applicable.
         4. (D) The QCDR or qualified registry must use clinical documentation (provided by the clinicians they are submitting data for) to validate that the action or outcome measured actually occurred or was performed.

         5. (E) The QCDR or qualified registry must conduct each data validation audit using a sampling methodology that meets the following requirements:

            (1) Uses a sample size of at least 3 percent of a combination of the individual MIPS eligible clinicians, groups, virtual groups, subgroups and APM entities for which the QCDR or qualified registry will submit data to CMS, except that the sample size may be no fewer than a combination of 10 individual clinicians, groups, virtual groups, subgroups and APM entities, no more than a combination of 50 individual clinicians, groups, virtual groups, subgroups and APM entities.

            (2) Uses a sample that includes at least 25 percent of the patients of each individual clinician, group, virtual group, subgroup or APM entity in the sample, except that the sample for each individual clinician, group, virtual group, subgroup or APM entity must include a minimum of 5 patients and need not include more than 50 patients.

         6. (F) Each QCDR or qualified registry data validation audit must include the following:

            (1) Verification of the eligibility status of each eligible clinician, group, virtual group, subgroup, opt-in participant, and voluntary participant.

            (2) Verification of the accuracy of TINs and NPIs.

            (3) Calculation of reporting and performance rates.

            (4) Verification that only the MIPS quality measures and QCDR measures, as applicable, that are relevant to the performance period will be used for MIPS submission.

         7. (G) In a form and manner and by a deadline specified by CMS, the QCDR or qualified registry must report the results of each data validation audit, including the overall data deficiencies or data error rate, the types of deficiencies or data errors discovered, the percentage of clinicians impacted by any deficiency or error, and, how and when each deficiency or data error type was corrected.

            (1) QCDRs and qualified registries must conduct validation on the data they intend to submit for the MIPS performance period and provide the results of the executed data validation plan by May 31st of the year following the performance period.

            (2) [Reserved]

      6. (vi) Beginning with the CY 2021 performance period/2023 MIPS payment year, the QCDR or qualified registry must conduct targeted audits in accordance with this paragraph (b)(3)(vi).

         1. (A) If a data validation audit under paragraph (b)(3)(v) of this section identifies one or more deficiency or data error, the QCDR or qualified registry must conduct a targeted audit into the impact and root cause of each such deficiency or data error for that MIPS payment year.
         2. (B) The QCDR or qualified registry must conduct any required targeted audits for the MIPS payment year and correct any deficiencies or data errors identified through such audit prior to the submission of data for that MIPS payment year.
         3. (C) The QCDR or qualified registry must conduct the targeted audit using the sampling methodology that meets the requirements described in paragraph (b)(3)(iv)(E) of this section. The sample for the targeted audit must not include data from the sample used for the data validation audit in which the deficiency or data error was identified.
         4. (D) In a form and manner and by a deadline specified by CMS, the QCDR or qualified registry must report the results of each targeted audit, including the overall deficiency or data error rate, the types of deficiencies or data errors discovered, the percentage of clinicians impacted by each deficiency or data error, and how and when each deficiency or data error type was corrected.
      7. (vii) For the CY 2023 performance period/2025 MIPS payment year, a QCDR or qualified registry that was approved but did not submit any MIPS data for any of the 2019 through 2023 MIPS payment years must submit a participation plan for CMS' approval. The participation plan must include the QCDR and/or qualified registry's detailed plans about how the QCDR or qualified registry intends to encourage clinicians to submit MIPS data to CMS through the QCDR or qualified registry.
      8. (viii) Beginning with the CY 2024 performance period/2026 MIPS payment year, a QCDR or qualified registry that was approved but did not submit any MIPS data for either of the 2 years preceding the applicable self-nomination period must submit a participation plan for CMS' approval. This participation plan must include the QCDR's and/or qualified registry's detailed plans about how the QCDR or qualified registry intends to encourage clinicians to submit MIPS data to CMS through the QCDR or qualified registry.
      9. (ix) During the self-nomination period, a QCDR or a qualified registry must submit to CMS quality measure numbers, Promoting Interoperability identifiers, improvement activity identifiers and MVP titles.

      10. (x) A QCDR or a qualified registry must be able to submit to CMS data for at least six quality measures including at least one outcome measure.

          1. (A) If no outcome measure is available, a QCDR or qualified registry must be able to submit to CMS results for at least one other high priority measure.
          2. (B) [Reserved]
      11. (xi) A QCDR or a qualified registry must submit to CMS risk-adjusted measure results when submitting data for measures that include risk adjustment in the measure specification.
      12. (xii) A QCDRs or qualified registry must enter into appropriate Business Associate Agreements with MIPS eligible clinicians to collect and process their data.

      13. (xiii) A QCDR or a qualified registry must maintain records of their authorization to submit data to CMS for the purpose of MIPS participation for each NPI whom the QCDR or qualified registry will submit data to CMS for. The records must:

          1. (A) Be annually obtained by the QCDR or qualified registry at the time the clinician or group enters into an agreement with the QCDR or qualified registry for the submission of MIPS data to the QCDR or qualified registry.
          2. (B) Be signed by an eligible clinician, if reporting individually, or by an authorized representative of the reporting group, subgroup, Virtual Group, or APM Entity.
          3. (C) Records of the authorization must be maintained for 6 years after the performance period ends.
      14. (xiv) A QCDR or a qualified registry must attest that the information listed on the qualified posting is accurate.
      15. (xv) A QCDR or a qualified registry must provide to CMS, upon request, the data submitted by the QCDR or qualified registry for purposes of MIPS.

      16. (xvi) A QCDR or qualified registry must attest to the following:

          1. (A) A QCDR or a qualified registry must attest that it has required each MIPS eligible clinician on whose behalf it reports to provide the QCDR or qualified registry with all documentation necessary to verify the accuracy of the data on quality measures that the eligible clinician submitted to the QCDR or qualified registry.
          2. (B) A QCDR or qualified registry must also attest that it has required each MIPS eligible clinician to permit the QCDR or qualified registry to provide the information described in paragraph (b)(3)(xviii)(A) of this section to CMS upon request.
      17. (xvii) A QCDR or a qualified registry must accept and maintain clinician data by January 1 of the applicable performance period.

   6. (4) QCDR measures for the quality performance category—(i) QCDR measure self-nomination requirements. For the CY 2018 performance period/2020 MIPS payment year and future years, at the time of self-nomination an entity seeking to become a QCDR must submit the following information for any measure it intends to submit for the payment year.

      1. (A) For MIPS quality measures, the entity must submit specifications including the MIPS measure IDs and specialty-specific measure sets, as applicable.
      2. (B) For a QCDR measure, the entity must submit for CMS approval measure specifications including: Name/title of measure, descriptions of the denominator, numerator, and when applicable, denominator exceptions, denominator exclusions, risk adjustment variables, and risk adjustment algorithms. In addition, no later than 15 calendar days following CMS posting of all approved specifications for a QCDR measure, the entity must publicly post the CMS-approved measure specifications for the QCDR measure (including the CMS-assigned QCDR measure ID) and provide CMS with a link to where this information is posted. The approved QCDR measure specifications must remain published through the performance period and data submission period.
      3. (C) For a QCDR measure, the QCDR must provide, if available, data from years prior before the start of the performance period.
      4. (ii) QCDR measure submission requirements. A QCDR must include the CMS-assigned QCDR measure ID when submitting data on any QCDR measure to CMS.

      5. (iii) QCDR measure approval criteria.

         1. (A) QCDR measure requirements for approval are:

            (1) QCDR measures that are beyond the measure concept phase of development.

            (2) QCDR measures that address significant variation in performance.

            (3) Beginning with the CY 2022 performance period/2024 MIPS payment year, CMS may approve a QCDR measure only if the QCDR measure meets face validity. Beginning with the CY 2024 performance period/2026 MIPS payment year, a QCDR measure approved for a previous performance year must be fully developed and tested, with complete testing results at the clinician level, prior to self-nomination.

            (4) Beginning with the CY 2022 performance period/2023 MIPS payment year, QCDRs are required to collect data on a QCDR measure, appropriate to the measure type, prior to submitting the QCDR measure for CMS consideration during the self-nomination period.

            (5) Beginning with the CY 2020 performance period/2022 MIPS payment year, CMS may provisionally approve the individual QCDR measures for 1 year with the condition that QCDRs address certain areas of duplication with other approved QCDR measures or MIPS quality measures in order to be considered for the program in subsequent years. If such areas of duplication are not addressed, CMS may reject the duplicative QCDR measure.

         2. (B) QCDR measure considerations for approval include, but are not limited to:

            (1) Measures that are outcome-based rather than clinical process measures.

            (2) Measures that address patient safety and adverse events.

            (3) Measures that identify appropriate use of diagnosis and therapeutics.

            (4) Measures that address the domain of care coordination.

            (5) Measures that address the domain for patient and caregiver experience.

            (6) Measures that address efficiency, cost, and resource use.

            (7) Beginning with the CY 2021 performance period/2023 MIPS payment year -

            (i) That QCDRs link their QCDR measures as feasible to at least one cost measure, improvement activity, or an MVP at the time of self-nomination.

            (ii) In cases where a QCDR measure does not have a clear link to a cost measure, improvement activity, or an MVP, CMS would consider exceptions if the potential QCDR measure otherwise meets the QCDR measure requirements and considerations.

            (8) Beginning with the CY 2020 performance period/2022 MIPS payment year CMS may consider the extent to which a QCDR measure is available to MIPS eligible clinicians reporting through QCDRs other than the QCDR measure owner for purposes of MIPS. If CMS determines that a QCDR measure is not available to MIPS eligible clinicians, groups, and virtual groups reporting through other QCDRs, CMS may not approve the measure.

            (9) Greater consideration is given to measures for which QCDRs:

            (i) Conducted an environmental scan of existing QCDR measures; MIPS quality measures; quality measures retired from the legacy Physician Quality Reporting System (PQRS) program; and

            (ii) Utilized the CMS Quality Measure Development Plan Annual Report and the Blueprint in the CMS Measures Management System to identify measurement gaps prior to measure development.

            (10) Beginning with the CY 2020 performance period/2022 MIPS payment year, CMS places greater preference on QCDR measures that meet case minimum and reporting volumes required for benchmarking after being in the program for 2 consecutive CY performance periods. Those that do not, may not continue to be approved.

            (i) Beginning with the CY 2020 performance period/2022 MIPS payment year, in instances where a QCDR believes the low-reported QCDR measure that did not meet benchmarking thresholds is still important and relevant to a specialist's practice, that the QCDR may develop and submit a QCDR measure participation plan for our consideration. This QCDR measure participation plan must include the QCDR's detailed plans and changes to encourage eligible clinicians and groups to submit data on the low-reported QCDR measure for purposes of the MIPS program.

            (ii) [Reserved]

         3. (C) Beginning with the CY 2021 performance period/2023 MIPS payment year, QCDR measures may be approved for 2 years, at CMS discretion by attaining approval status by meeting QCDR measure considerations and requirements. Upon annual review, CMS may revoke a QCDR measure's second year approval, if the QCDR measure is found to be: Topped out; duplicative of a more robust measure; reflects an outdated clinical guideline; or if the QCDR self-nominating the QCDR measure is no longer in good standing.

      6. (iv) QCDR measure rejection criteria. Beginning with the CY 2020 performance period/2022 MIPS payment year, QCDR measure rejection considerations include, but are not limited to:

         1. (A) QCDR measures that are duplicative or identical to other QCDR measures or MIPS quality measures that are currently in the program.
         2. (B) QCDR measures that are duplicative or identical to MIPS quality measures that have been removed from MIPS through rulemaking.
         3. (C) QCDR measures that are duplicative or identical to quality measures used under the legacy Physician Quality Reporting System (PQRS) program, which have been retired.
         4. (D) QCDR measures that meet the topped out definition as described at § 414.1305.
         5. (E) QCDR measures that are process-based, with consideration to whether the removal of the process measure impacts the number of measures available for a specific specialty.
         6. (F) Whether the QCDR measure has potential unintended consequences to a patient's care.
         7. (G) Considerations and evaluation of the measure's performance data, to determine whether performance variance exists.
         8. (H) QCDR measures that split a single clinical practice or action into several QCDR measures.
         9. (I) QCDR measures that are “check-box” with no actionable quality action.
         10. (J) QCDR measures that do not meet the case minimum and reporting volumes required for benchmarking after being in the program for 2 consecutive years.
         11. (K) QCDR measures with clinician attribution issues, where the quality action is not under the direct control of the reporting clinician.
         12. (L) QCDR measures that focus on rare events or “never events” in the measurement period.
         13. (M) QCDR does not have permission to use a QCDR measure owned by another QCDR for the applicable performance period.
         14. (N) If a QCDR measure owner is not approved or is not in good standing, any associated QCDR measures will not be approved.
         15. (O) QCDR measures submitted after self-nomination.
         16. (P) More than 30 QCDR measures are submitted by a single QCDR.

3. (c) Additional requirements for Health IT vendors.

   1. (1) Beginning with the CY 2021 performance period/2023 MIPS payment year, health IT vendors must be able to submit data for the MIPS performance categories as follows:

      1. (i) Health IT vendors that support MVPs must be able to submit data for all of the MIPS performance categories:

         1. (A) Quality, except:

            (1) The CAHPS for MIPS survey; and

            (2) QCDR measures;

         2. (B) Improvement activities; and

         3. (C) Promoting Interoperability, if the eligible clinician, group, virtual group, or subgroup is using CEHRT, unless:

            (1) The third party intermediary's MIPS eligible clinicians, groups, virtual groups, or subgroups fall under the reweighting policies at § 414.1380(c)(2)(i)(A)(4)(i) through (iii) or (c)(2)(i)(C)(1) through (7) or (c)(2)(i)(C)(9).

            (2) [Reserved]

      2. (ii) Health IT vendors that do not support MVPs must be able to submit data for at least one of the MIPS performance categories described in paragraphs (c)(1)(i) of this section.
      3. (iii) Beginning with the CY 2023 performance period/2025 MIPS payment year, Health IT vendors must support MVPs that are applicable to the MVP participant on whose behalf they submit MIPS data. Health IT vendors may also support the APP.
   2. (2) [Reserved]

4. (d) Additional requirements for CMS-approved survey vendors.

   1. (1) CMS-approved survey vendors may submit data on the CAHPS for MIPS survey for the MIPS quality performance category.
   2. (2) Entities seeking to be a CMS-approved survey vendor for any MIPS performance period must submit a survey vendor application to CMS in a form and manner specified by CMS for each MIPS performance period for which it wishes to transmit such data. The application and any supplemental information requested by CMS must be submitted by deadlines specified by CMS. For an entity to be a CMS-approved survey vendor, it must meet the following criteria:

   3. (3) The entity must have sufficient experience, capability, and capacity to accurately report CAHPS data, including all of the following:

      1. (i) At least 3 years of experience administering surveys in which mail survey administration is followed by survey administration via Computer Assisted Telephone Interview (CATI);
      2. (ii) At least 3 years of experience administering surveys to a Medicare population.
      3. (iii) At least 3 years of experience administering CAHPS surveys within the past 5 years.

      4. (iv) Experience administering surveys in English and at least one other language for which a translation of the CAHPS for MIPS survey is available;

         1. (A) Beginning January 1, 2024, in addition to administering the survey in English, entities must administer the Spanish survey translation to Spanish-preferring patients using the procedures detailed in subregulatory guidance to standardize the CAHPS data collection process for MIPS and to make sure the survey data collected across survey vendors are comparable within the program or model;.
         2. (B) [Reserved]

      5. (v) Use equipment, software, computer programs, systems, and facilities that can verify addresses and phone numbers of sampled beneficiaries, monitor interviewers, collect data via CATI, electronically administer the survey and schedule call-backs to beneficiaries at varying times of the day and week, track fielded surveys, assign final disposition codes to reflect the outcome of data collection of each sampled case, and track cases from mail surveys through telephone follow-up activities; and

         1. (A) Beginning January 1, 2027, use equipment, software, computer programs, systems, and facilities that can send survey invitations via email that include a patient-specific hyperlink to a web survey, collect data via web, and track cases from web surveys through telephone follow-up activities.
         2. (B) [Reserved]

      6. (vi) Employment of a program manager, information systems specialist, call center supervisor and mail center supervisor to administer the survey.

         1. (A) Beginning January 1, 2027, employ a web survey administrator.
         2. (B) [Reserved]
      7. (vii) Beginning January 1, 2027, at least 3 years of experience administering surveys in which web survey administration is followed by survey administration via mail survey or Computer Assisted Telephone Interview (CATI).
   4. (4) The entity has certified that it has the ability to maintain and transmit quality data in a manner that preserves the security and integrity of the data.
   5. (5) The entity has successfully completed, and has required its subcontractors to successfully complete, vendor training(s) administered by CMS or its contractors.
   6. (6) The entity has submitted a quality assurance plan and other materials relevant to survey administration, as determined by CMS, including cover letters, questionnaires and telephone scripts.
   7. (7) The entity has agreed to participate and cooperate, and has required its subcontractors to participate and cooperate, in all oversight activities related to survey administration conducted by CMS or its contractors.
   8. (8) From January 1, 2019 through December 31, 2025, the entity has sent an interim survey data file to CMS that establishes the entity's ability to accurately report CAHPS data.
   9. (9) Beginning with January 1, 2026, the entity seeking to be a CMS-approved survey vendor must include on its application the range of costs of its third-party intermediary services.
   10. (10) Beginning with the CY 2027 performance period/2029 MIPS payment year, the CMS-approved survey vendor must administer the survey via a web-mail-phone protocol.

5. (e) Remedial action and termination of third party intermediaries.

   1. (1) If CMS determines that a third party intermediary has ceased to meet one or more of the applicable criteria for approval, failed to comply with the program requirements of this section, has submitted a false certification under paragraph (a)(3) of this section, or has submitted data that are inaccurate, unusable, or otherwise compromised, CMS may take one or more of the following remedial actions after providing written notice to the third party intermediary:

      1. (i) Require the third party intermediary to submit a corrective action plan (CAP) by a date specified by CMS. The CAP must address the following issues, unless different or additional information is specified by CMS:

         1. (A) The issues that contributed to the non-compliance.
         2. (B) The impact to individual clinicians, groups, virtual groups, subgroups, or APM Entities, regardless of whether they are participating in the program because they are MIPS eligible, voluntarily participating, or opting in to participating in the MIPS program, and any QCDRs that were granted licenses to the measures of a QCDR upon which a CAP has been imposed.
         3. (C) The corrective actions to be implemented by the third party intermediary to ensure that the non-compliance has been resolved and will not recur in the future.
         4. (D) The detailed timeline for achieving compliance with the applicable requirements.
         5. (E) The communication plan for communicating the impact to the parties identified in paragraph (e)(1)(i)(B) of this section.
         6. (F) Once the issue has been resolved, the detailed final resolution and an update, if any, to the monitoring plan provided pursuant to § 414.1400(e)(1)(i)(C).

      2. (ii) Publicly disclose as follows:

         1. (A) For the purposes of the CY 2025 performance period/2027 MIPS payment year and prior reporting periods and payment years, publicly disclose the entity's data error rate on the CMS website until the data error rate falls below 3 percent.
         2. (B) Beginning with the CY 2025 performance period/2027 MIPS payment year, publicly disclose on the CMS website that CMS took remedial action against or terminated the third party intermediary.

   2. (2) CMS may immediately or with advance notice terminate a third party intermediary for one or more of the following reasons:

      1. (i) CMS has grounds to impose remedial action;
      2. (ii) CMS has not received a CAP within the specified time-period or the CAP is not accepted by CMS; or
      3. (iii) The third party intermediary fails to correct the deficiencies or data errors by the date specified by CMS.
      4. (iv) The third party intermediary has not maintained current contact information for correspondence.
      5. (v) The third party intermediary is on remedial action for 2 consecutive years.
   3. (3) A data submission that contains data inaccuracies affecting the third party intermediary's clinicians may lead to remedial action/termination of the third party intermediary for future program year(s) based on CMS discretion.
   4. (4) For purposes of this paragraph (e), CMS may determine that submitted data are inaccurate, unusable, or otherwise compromised, if the submitted data includes, without limitation, TIN/NPI mismatches, formatting issues, calculation errors, or data audit discrepancies.
   5. (5) Beginning with the CY 2024 performance period/2026 MIPS payment year, a QCDR or qualified registry that submits a participation plan as required under paragraph (b)(3)(viii) of this section, but does not submit MIPS data for the applicable performance period for which they self-nominated under paragraph (b)(3)(viii) of this section, will be terminated.
6. (f) Auditing of entities submitting MIPS data. Third party intermediaries may be randomly selected for compliance evaluation or may be selected at the suggestion of CMS if there is an area of concern regarding the third party intermediary. For example, areas of concern could include, but are not limited to: high data errors, support call absences, delinquent deliverables, remedial action status, clinician concerns regarding the third party intermediary, a continuing pattern of Quality Payment Program Service Center inquiries or support call questions, and/or CMS concerns regarding the third party intermediary.

[86 FR 65677, Nov. 19, 2021, as amended at 87 FR 70229, Nov. 18, 2022; 88 FR 79536, Nov. 16, 2023; 90 FR 50011, Nov. 5, 2025]