1. (a) Definitions. As used in this section, the following definitions apply:

   Accredited DMEPOS suppliers means suppliers that have been accredited by a recognized independent accreditation organization approved by CMS in accordance with the requirements at § 424.58.

   Affiliate means a person or organization that is related to another person or organization through a compensation arrangement or ownership.

   Assessment means a sum certain that CMS or the Office of Inspector General (OIG) may assess against a DMEPOS supplier under Titles XI, XVIII, or XXI of the Social Security Act or as specified in this chapter.

   Attended facility-based polysomnogram means a comprehensive diagnostic sleep test including at least electroencephalography, electro-oculography, electromyography, heart rate or electrocardiography, airflow, breathing effort, and arterial oxygen saturation furnished in a sleep laboratory facility in which a technologist supervises the recording during sleep time and has the ability to intervene if needed.

   Authorized surety means a surety that has been issued a Certificate of Authority by the U.S. Department of the Treasury as an acceptable surety on Federal bonds and the certificate has neither expired nor been revoked.

   Civil money penalty (CMP) means a sum that CMS has the authority, as implemented by 42 CFR 402.1(c); or OIG has the authority, under section 1128A of the Act or 42 CFR part 1003, to impose on a supplier as a penalty.

   CMS approved accreditation organization means a recognized independent accreditation organization approved by CMS under § 424.58.

   Continuous positive airway pressure (CPAP) device means a machine that introduces air into the breathing passages at pressures high enough to overcome obstructions in the airway in order to improve airflow. The airway pressure delivered into the upper airway is continuous during both inspiration and expiration.

   DMEPOS stands for durable medical equipment, prosthetics, orthotics and supplies.

   DMEPOS supplier means an entity or individual, including a physician or a Part A provider, which sells or rents Part B covered items to Medicare beneficiaries and which meets the standards in paragraphs (c) and (d) of this section.

   Final adverse action means one or more of the following actions:

   1. (i) A Medicare-imposed revocation of any Medicare billing privileges.
   2. (ii) Suspension or revocation of a license to provide health care by any State licensing authority.
   3. (iii) Revocation for failure to meet DMEPOS quality standards.
   4. (iv) A conviction of a Federal or State felony offense (as defined in § 424.535(a)(3)(i) within the last 10 years preceding enrollment, revalidation, or re-enrollment.

   5. (v) An exclusion or debarment from participation in a Federal or State health care program.

      Government-operated supplier is a DMEPOS supplier owned or operated by a Federal, State, or Tribal entity.

   Independent accreditation organization means an accreditation organization that accredits a supplier of DMEPOS and other items and services for a specific DMEPOS product category or a full line of DMEPOS product categories.

   Medicare covered items means medical equipment and supplies as defined in section 1834(j)(5) of the Act.

   Penal sum is the maximum obligation of the surety if a loss occurs.

   Rider means a notice issued by a surety that a change in the bond has occurred or will occur.

   Sleep test means an attended or unattended diagnostic test for a sleep disorder whether performed in or out of a sleep laboratory. The ‘provider of the sleep test’ is the individual or entity that directly or indirectly administers and/or interprets the sleep test and/or furnishes the sleep test device used to administer the sleep test.

   Sufficient evidence means documents CMS may supply to the surety in order to establish that a DMEPOS supplier had received Medicare funds in excess of the amount due and payable under the statute and regulations, the amount of a CMP, or the amount of some other assessment against the DMEPOS supplier.

   Surety bond means a bond issued by one or more sureties under 31 U.S.C. 9304 through 9308 and 31 CFR parts 223, 224, and 225.

   Unpaid claim means an overpayment made by the Medicare program to the DMEPOS supplier for which the DMEPOS supplier is responsible, plus accrued interest that is effective 90 days after the date of the notice sent to the DMEPOS supplier of the overpayment. If a written agreement for payment, acceptable to CMS, is made, an unpaid claim also means a Medicare overpayment for which the DMEPOS supplier is responsible, plus accrued interest after the DME supplier's default on the arrangement.

2. (b) General rule. A DMEPOS supplier must meet the following conditions in order to be eligible to receive payment for a Medicare-covered item:

   1. (1) The supplier has submitted a completed application to CMS to furnish Medicare-covered items including required enrollment forms. (The supplier must enroll separate physical locations it uses to furnish Medicare-covered DMEPOS, with the exception of locations that it uses solely as warehouses or repair facilities.)
   2. (2) The item was furnished on or after the date CMS issued to the supplier a DMEPOS supplier number conveying billing privileges. (CMS issues only one supplier number for each location.) This requirement does not apply to items furnished incident to a physician's service.
   3. (3) CMS has not revoked or excluded the DMEPOS supplier's privileges during the period which the item was furnished has not been revoked or excluded.
   4. (4) A supplier that furnishes a drug used as a Medicare-covered supply with durable medical equipment or prosthetic devices must be licensed by the State to dispense drugs (A supplier of drugs must bill and receive payment for the drug in its own name. A physician, who is enrolled as a DMEPOS supplier, may dispense, and bill for, drugs under this standard if authorized by the State as part of the physician's license.)
   5. (5) The supplier has furnished to CMS all information or documentation required to process the claim.
   6. (6) The supplier is in compliance with all conditions of payment in paragraph (b) of this section, as well as with paragraph (c)(1)(ii)(A) of this section, at the time the item or service is furnished.

3. (c) Application certification standards. The supplier must meet and must certify in its application for billing privileges that it meets and will continue to meet the following standards:

   1. (1) Operates its business and furnishes Medicare-covered items in compliance with the following applicable laws:

      1. (i) Federal regulatory requirements that specify requirements for the provision of DMEPOS and ensure accessibility for the disabled.

      2. (ii) State licensure and regulatory requirements. If a State requires licensure to furnish certain items or services, a DMEPOS supplier—

         1. (A) Must be licensed to provide the item or service; and
         2. (B) May contract with a licensed individual or other entity to provide the licensed services unless expressly prohibited by State law.
   2. (2) Has not made, or caused to be made, any false statement or misrepresentation of a material fact on its application for billing privileges. (The supplier must provide complete and accurate information in response to questions on its application for billing privileges. The supplier must report to CMS any changes in information supplied on the application within 30 days of the change.);
   3. (3) Must have the application for billing privileges signed by an individual whose signature binds a supplier;
   4. (4) Fills orders, frabicates, or fits items from its own inventory or by contracting with other companies for the purchase of items necessary to fill the order. If it does, it must provide, upon request, copies of contracts or other documentation showing compliance with this standard. A supplier may not contract with any entity that is currently excluded from the Medicare program, any State health care programs, or from any other Federal Government Executive Branch procurement or nonprocurement program or activity;
   5. (5) Advises beneficiaries that they may either rent or purchase inexpensive or routinely purchased durable medical equipment, and of the purchase option for capped rental durable medical equipment, as defined in § 414.220(a) of this subchapter. (The supplier must provide, upon request, documentation that it has provided beneficiaries with this information, in the form of copies of letters, logs, or signed notices.);
   6. (6) Honors all warranties expressed and implied under applicable State law. A supplier must not charge the beneficiary or the Medicare program for the repair or replacement of Medicare covered items or for services covered under warranty. This standard applies to all purchased and rented items, including capped rental items, as described in § 414.229 of this subchapter. The supplier must provide, upon request, documentation that it has provided beneficiaries with information about Medicare covered items covered under warranty, in the form of copies of letters, logs, or signed notices;

   7. (7) Maintains a physical facility on an appropriate site. An appropriate site must meet all of the following:

      1. (i) Must meet the following criteria:

         1. (A) (1) Except for orthotic and prosthetic personnel described in paragraph (c)(7)(i)(A)(2) of this section, maintains a practice location that is at least 200 square feet beginning—

            (i) September 27, 2010 for a prospective DMEPOS supplier;

            (ii) The first day after termination of an expiring lease for an existing DMEPOS supplier with a lease that expires on or after September 27, 2010 and before September 27, 2013; or

            (iii) September 27, 2013, for an existing DMEPOS supplier with a lease that expires on or after September 27, 2013.

            (2) Orthotic and prosthetic personnel providing custom fabricated orthotics or prosthetics in private practice do not have to meet the practice location requirements in paragraph (c)(7)(i)(A)(1) of this section if the orthotic and prosthetic personnel are—

            (i) State-licensed; or

            (ii) Practicing in a State that does not offer State licensure for orthotic and prosthetic personnel.

         2. (B) Is in a location that is accessible to the public, Medicare beneficiaries, CMS, NSC, and its agents. (The location must not be in a gated community or other area where access is restricted.)
         3. (C) Is accessible and staffed during posted hours of operation.
         4. (D) Maintains a permanent visible sign in plain view and posts hours of operation. If the supplier's place of business is located within a building complex, the sign must be visible at the main entrance of the building or the hours can be posted at the entrance of the supplier.
         5. (E) Except for business records that are stored in centralized location as described in paragraph (c)(7)(ii) of this section, is in a location that contains space for storing business records (including the supplier's delivery, maintenance, and beneficiary communication records).
         6. (F) Is in a location that contains space for retaining the necessary ordering and referring documentation specified in § 424.516(f).
      2. (ii) May be the centralized location for all of the business records and the ordering and referring documentation of a multisite supplier.
      3. (iii) May be a “closed door” business, such as a pharmacy or supplier providing services only to beneficiaries residing in a nursing home, that complies with all applicable Federal, State, and local laws and regulations. “Closed door” businesses must comply with all the requirements in this paragraph.
   8. (8) Permits CMS, the NSC, or agents of CMS or the NSC to conduct on-site inspections to ascertain supplier compliance with the requirements of this section.

   9. (9) Maintains a primary business telephone that is operating at the appropriate site listed under the name of the business locally or toll-free for beneficiaries.

      1. (i) Cellular phones, beepers, or pagers must not be used as the primary business telephone.
      2. (ii) Calls must not be exclusively forwarded from the primary business telephone listed under the name of the business to a cellular phone, beeper, or pager.
      3. (iii) Answering machines, answering services, facsimile machines or combination of these options must not be used exclusively as the primary business telephone during posted operating hours.

   10. (10) Has a comprehensive liability insurance policy in the amount of at least $300,000 that covers both the supplier's place of business and all customers and employees of the supplier.

       1. (i) In the case of a supplier that manufactures its own items, this insurance must also cover product liability and completed operations.
       2. (ii) Failure to maintain required insurance at all times results in revocation of the supplier's billing privileges retroactive to the date the insurance lapsed.
       3. (iii) An authorized official of the supplier (as that term is defined in § 424.502) must sign the liability insurance policy.

   11. (11) Must agree not to contact a beneficiary by telephone when supplying a Medicare-covered item unless one of the following applies:

       1. (i) The individual has given written permission to the supplier to contact them by telephone concerning the furnishing of a Medicare-covered item that is to be rented or purchased.
       2. (ii) The supplier has furnished a Medicare-covered item to the individual and the supplier is contacting the individual to coordinate the delivery of the item.
       3. (iii) If the contact concerns the furnishing of a Medicare-covered item other than a covered item already furnished to the individual, the supplier has furnished at least one covered item to the individual during the 15-month period preceding the date on which the supplier makes such contact.
   12. (12) Must be responsible for the delivery of Medicare covered items to beneficiaries and maintain proof of delivery. (The supplier must document that it or another qualified party has at an appropriate time, provided beneficiaries with necessary information and instructions on how to use Medicare-covered items safely and effectively);
   13. (13) Must answer questions and respond to complaints a beneficiary has about the Medicare-covered item that was sold or rented. A supplier must refer beneficiaries with Medicare questions to the appropriate carrier. A supplier must maintain documentation of contacts with beneficiaries regarding complaints or questions;
   14. (14) Must maintain and replace at no charge or repair directly, or through a service contract with another company, Medicare-covered items it has rented to beneficiaries. The item must function as required and intended after being repaired or replaced;
   15. (15) Must accept returns from beneficiaries of substandard (less than full quality for the particular item or unsuitable items, inappropriate for the beneficiary at the time it was fitted and rented or sold);
   16. (16) Must disclose these supplier standards to each beneficiary to whom it supplies a Medicare-covered item;
   17. (17) Must comply with the disclosure provisions in § 420.206 of this subchapter;
   18. (18) Must not convey or reassign a supplier number;
   19. (19) Must have a complaint resolution protocol to address beneficiary complaints that relate to supplier standards in paragraph (c) of this section and keep written complaints, related correspondence and any notes of actions taken in response to written and oral complaints. Failure to maintain such information may be considered evidence that supplier standards have not been met. (This information must be kept at its physical facility and made available to CMS, upon request.);

   20. (20) Must maintain the following information on all written and oral beneficiary complaints, including telephone complaints, it receives:

       1. (i) The name, address, telephone number, and health insurance claim number of the beneficiary.
       2. (ii) A summary of the complaint; the date it was received; the name of the person receiving the complaint, and a summary of actions taken to resolve the complaint.
       3. (iii) If an investigation was not conducted, the name of the person making the decision and the reason for the decision.
   21. (21) Provides to CMS, upon request, any information required by the Medicare statute and implementing regulations.

   22. (22)

       1. (i) All suppliers of DMEPOS and other items and services, and all of their locations whether owned or subcontracted, must meet the DMEPOS quality standards and be separately accredited to enroll in and bill Medicare.
       2. (ii) The accreditation must indicate the specific products and services for which the DMEPOS supplier is accredited in order for the supplier to receive payment for those specific products and services.
       3. (iii) An accredited DMEPOS supplier may be denied enrollment, or its enrollment may be revoked, if CMS determines that it is not compliant with the DMEPOS quality standards.
   23. (23) All DMEPOS suppliers must notify their DMEPOS accrediting organization when a new DMEPOS location is opened.
   24. (24) All accredited DMEPOS suppliers must be surveyed and reaccredited at least once every 12 months.
   25. (25) All DMEPOS suppliers must disclose upon enrollment all products and services, including the addition of new product lines for which they are seeking accreditation. If a new product line is added after enrollment, the DMEPOS supplier will be responsible for notifying the accrediting body of the new product so that the DMEPOS supplier can be re-surveyed and accredited for these new products.
   26. (26) Must meet the surety bond requirements specified in paragraph (d) of this section.
   27. (27) Must obtain oxygen from a State-licensed oxygen supplier (applicable only to those suppliers in States that require oxygen licensure.)
   28. (28) Is required to maintain ordering and referring documentation consistent with the provisions found in § 424.516(f)

   29. (29)

       1. (i) Except as specified in paragraph (c)(29)(ii) of this section, is prohibited from sharing a practice location with any other Medicare supplier or provider.

       2. (ii) The prohibition specified in paragraph (c)(29)(i) of this section is not applicable at a practice location that meets one of the following:

          1. (A) Where a physician whose services are defined in section 1848(j)(3) of the Act or a nonphysician practitioner, as described in section 1842(b)(18)(C) of the Act, furnishes items to his or her own patient as part of his or her professional service.
          2. (B) Where a physical or occupational therapist whose services are defined in sections 1861(p) and 1861(g) of the Act, furnishes items to his or her own patient as part of his or her professional service.

          3. (C) Where a DMEPOS supplier is co-located with and owned by an enrolled Medicare provider (as described in § 489.2(b) of this chapter). The DMEPOS supplier—

             (1) Must operate as a separate unit; and

             (2) Meet all other DMEPOS supplier standards.

   30. (30)

       1. (i) Except as specified in paragraph (c)(30)(ii) of this section, is open to the public a minimum of 30 hours per week.

       2. (ii) The provision of paragraph (c)(30)(i) of this section is not applicable at a practice location where a—

          1. (A) Physician whose services are defined in section 1848(j)(3) of the Act furnishes items to his or her own patient(s) as part of his or her professional service;
          2. (B) A physical or occupational therapist whose services are defined in sections 1861(p) and 1861(g) of the Act furnishes items to his or her own patient(s) as part of his or her professional service; or
          3. (C) DMEPOS supplier is working with custom made orthotics and prosthetics.
4. (d) Surety bonds requirements—(1) Effective date of surety bond requirements—(i) DMEPOS suppliers seeking enrollment or with a change in ownership. Except as provided in paragraph (d)(15) of this section, beginning May 4, 2009, DMEPOS suppliers seeking to enroll or to change the ownership of a supplier of DMEPOS must meet the requirements of paragraph (d) of this section for each assigned NPI for which the DMEPOS supplier is seeking to obtain Medicare billing privileges.
5. (ii) Existing DMEPOS suppliers. Except as provided in paragraph (d)(15) of this section, beginning October 2, 2009, each Medicare-enrolled DMEPOS supplier must meet the requirements of paragraph (d) of this section for each assigned NPI to which Medicare has granted billing privileges.

6. (2) Minimum requirements for a DMEPOS supplier.

   1. (i) A DMEPOS supplier enrolling in the Medicare program, making a change in ownership, or responding to a revalidation or reenrollment request must submit to the CMS contractor a surety bond from an authorized surety of $50,000 and, if required by the CMS contractor, an elevated bond amount as described in paragraph (d)(3) of this section with its paper or electronic Medicare enrollment application (CMS-855S, OMB number 0938-1056). The term of the initial surety bond must be effective on the date that the application is submitted to the CMS contractor.
   2. (ii) A supplier that seeks to become an enrolled DMEPOS supplier through a purchase or transfer of assets or ownership interest must submit to the CMS contractor surety bond from an authorized surety of $50,000 and, if required by the CMS contractor, an elevated bond amount as described in paragraph (d)(3) of this section that is effective from the date of the purchase or transfer in order to exercise billing privileges as of that date. If the bond is effective at a later date, the effective date of the new DMEPOS supplier billing privileges is the effective date of the surety bond as validated by the CMS contractor.
   3. (iii) A DMEPOS supplier enrolling a new practice location must submit to the CMS contractor a new surety bond from an authorized surety or an amendment or rider to the existing bond, showing that the new practice location is covered by an additional base surety bond of $50,000 or, as necessary, an elevated surety bond amount as described in paragraph (d)(3) of this section.

7. (3) Elevated surety bond amounts.

   1. (i) If required, a DMEPOS supplier must obtain and maintain a base surety bond in the amount of $50,000 as specified in paragraph (d)(2) of this section and an elevated surety bond in the amount prescribed by the CMS contractor as described in paragraph (d)(3)(ii) of this section.
   2. (ii) The CMS contractor prescribes an elevated surety bond amount of $50,000 per occurrence of an adverse legal action within the 10 years preceding enrollment, revalidation, or reenrollment, as defined in paragraph (a) of this section.
8. (4) Type and terms of the surety bond—(i) Type of bond. A DMEPOS supplier must submit a bond that is continuous.

9. (ii) Minimum requirements of liability coverage.

   1. (A) The terms of the bond submitted by a DMEPOS supplier for the purpose of complying with this section must meet the minimum requirements of liability coverage ($50,000) and surety and DMEPOS supplier responsibility as set forth in this section.
   2. (B) CMS requires a DMEPOS supplier to submit a bond that on its face reflects the requirements of this section. CMS revokes or denies a DMEPOS supplier's billing privileges based upon the submission of a bond that does not reflect the requirements of paragraph (d) of this section.

   3. (5) Specific surety bond requirements.

      1. (i) The bond must guarantee that the surety will, within 30 days of receiving written notice from CMS containing sufficient evidence to establish the surety's liability under the bond of unpaid claims, CMPs, or assessments, pay CMS a total of up to the full penal amount of the bond in the following amounts:

         1. (A) The amount of any unpaid claim, plus accrued interest, for which the DMEPOS supplier is responsible.
         2. (B) The amount of any unpaid claims, CMPs, or assessments imposed by CMS or OIG on the DMEPOS supplier, plus accrued interest.
      2. (ii) The bond must provide the following: The surety is liable for unpaid claims, CMPs, or assessments that occur during the term of the bond.

      3. (iii) If the DMEPOS supplier fails to furnish a bond meeting the requirements of paragraph (d) of this section, fails to submit a rider when required, or if the DMEPOS supplier's billing privileges are revoked, the last bond or rider submitted by the DMEPOS supplier remains in effect until the last day of the surety bond coverage period and the surety remains liable for unpaid claims, CMPs, or assessments that—

         1. (A) CMS or the OIG imposes or asserts against the DMEPOS supplier based on overpayments or other events that took place during the term of the bond or rider; and
         2. (B) Were imposed or assessed by CMS or the OIG during the 2 years following the date that the DMEPOS supplier failed to submit a bond or required rider, or the date the DMEPOS supplier's billing privileges were terminated, whichever is later.

   4. (6) Cancellation of a bond and lapse of surety bond coverage.

      1. (i) A DMEPOS supplier may cancel its surety bond and must provide written notice at least 30 days before the effective date of the cancellation to the CMS contractor and the surety.
      2. (ii) Cancellation of a surety bond is grounds for revocation of the DMEPOS supplier's Medicare billing privileges unless the DMEPOS supplier provides a new bond before the effective date of the cancellation. The liability of the surety continues through the termination effective date.
      3. (iii) If CMS receives notification of a lapse in bond coverage from the surety, the DMEPOS supplier's billing privileges are revoked. During this lapse, Medicare does not pay for items or services furnished during the gap in coverage, and the DMEPOS supplier is held liable for the items or services (that is, the DMEPOS supplier would not be permitted to charge the beneficiary for the items or services).
      4. (iv) The surety must immediately notify the CMS contractor if there is a lapse in the surety's coverage of the DMEPOS supplier's coverage.
   5. (7) Actions under the surety bond. The bond must provide that actions under the bond may be brought by CMS or by CMS contractors.
   6. (8) Required surety information on the surety bond. The bond must provide the surety's name, street address or post office box number, city, state, and zip code.
   7. (9) Change of surety. A DMEPOS supplier that obtains a replacement surety bond from a different surety to cover the remaining term of a previously obtained bond must submit the new surety bond to the CMS contractor at least 30 days prior to the expiration of the previous surety bond. There must be no gap in the coverage of the surety bond periods. If a gap in coverage exists, the CMS contractor revokes the DMEPOS supplier's billing privileges and does not pay for any items or services furnished by the DMEPOS supplier during the period for which no bond coverage was available. If a DMEPOS supplier changes its surety during the term of the bond, the new surety is responsible for any overpayments, CMPs, or assessments incurred by the DMEPOS supplier beginning with the effective date of the new surety bond. The previous surety is responsible for any overpayments, CMPs, or assessments that occurred up to the date of the change of surety.
   8. (10) Parties to the surety bond. The surety bond must name the DMEPOS supplier as Principal, CMS as Obligee, and the surety (and its heirs, executors, administrators, successors and assignees, jointly and severally) as surety.

   9. (11) Effect of DMEPOS supplier's failure to obtain, maintain, and timely file a surety bond.

      1. (i) CMS revokes the DMEPOS supplier's billing privileges if an enrolled DMEPOS supplier fails to obtain, file timely, or maintain a surety bond as specified in this subpart and CMS instructions. Notwithstanding paragraph (e) of this section, the revocation is effective the date the bond lapsed and any payments for items furnished on or after that date must be repaid to CMS by the DMEPOS supplier.
      2. (ii) CMS denies billing privileges to a DMEPOS supplier if the supplier seeking to become an enrolled DMEPOS supplier fails to obtain and file timely a surety bond as specified with this subpart and CMS instructions.
   10. (12) Evidence of DMEPOS supplier's compliance. CMS may at any time require a DMEPOS supplier to show compliance with the requirements of paragraph (d) of this section.
   11. (13) Effect of subsequent DMEPOS supplier payment. If a surety has paid an amount to CMS on the basis of liability incurred under a bond and CMS subsequently collects from the DMEPOS supplier, in whole or in part, on the unpaid claim, CMPs, or assessment that was the basis for the surety's liability, CMS reimburses the surety the amount that it collected from the DMEPOS supplier, up to the amount paid by the surety to CMS, provided the surety has no other liability to CMS under the bond.
   12. (14) Effect of review reversing determination. If a surety has paid CMS on the basis of liability incurred under a surety bond and to the extent the DMEPOS supplier that obtained the bond is subsequently successful in appealing the determination that was the basis of the unpaid claim, CMP, or assessment that caused the DMEPOS supplier to pay CMS under the bond, CMS refunds the DMEPOS supplier the amount the DMEPOS supplier paid to CMS to the extent that the amount relates to the matter that was successfully appealed, provided all review, including judicial review, has been completed on the matter.

   13. (15) Exception to the surety bond requirement—(i) Qualifying entities and requirements.

       1. (A) Government-operated DMEPOS suppliers are provided an exception to the surety bond requirement if the DMEPOS supplier has provided CMS with a comparable surety bond under State law.

       2. (B) State-licensed orthotic and prosthetic personnel in private practice making custom made orthotics and prosthetics are provided an exception to the surety bond requirement if—

          (1) The business is solely-owned and operated by the orthotic and prosthetic personnel, and

          (2) The business is only billing for orthotic, prosthetics, and supplies.

       3. (C) Physicians and nonphysician practitioners as defined in section 1842(b)(18) of the Act are provided an exception to the surety bond requirement when items are furnished only to the physician or nonphysician practitioner's own patients as part of his or her physician service.

       4. (D) Physical and occupational therapists in private practice are provided an exception to the surety bond requirement if—

          (1) The business is solely-owned and operated by the physical or occupational therapist;

          (2) The items are furnished only to the physical or occupational therapist's own patients as part of his or her professional service; and

          (3) The business is only billing for orthotics, prosthetics, and supplies.

       5. (ii) Loss of a DMEPOS supplier exception. A DMEPOS supplier that no longer qualifies for an exception as described in paragraph (d)(15)(i) of this section must submit a surety bond to the CMS contractor in accordance with requirements of paragraph (d) of this section within 60 days after it knows or has reason to know that it no longer meets the criteria for an exception.
       6. (e) Failure to meet standards—(1) Revocation. CMS revokes a supplier's billing privileges if it is found not to meet the conditions or standards in paragraphs (b) and (c) of this section. Except as otherwise provided in this section, the revocation effective date is as specified in § 424.535.
       7. (2) Overpayments associated with final adverse actions. CMS or a CMS contractor may reopen (in accordance with § 405.980 of this chapter) all Medicare claims paid on or after the date of a final adverse action (as defined in paragraph (a) of this section) in order to establish an overpayment determination.
       8. (f) Payment prohibition. No Medicare payment will be made to the supplier of a CPAP device if that supplier, or its affiliate, is directly or indirectly the provider of the sleep test used to diagnose the beneficiary with obstructive sleep apnea. This prohibition does not apply if the sleep test is an attended facility-based polysomnogram.
       9. (g) Revalidation of billing privileges. A supplier must revalidate its application for billing privileges every 3 years after the billing privileges are first granted. (Each supplier must complete a new application for billing privileges 3 years after its last revalidation.)
       10. (h) Change in majority ownership. A supplier must comply with the provisions of § 424.551 if it undergoes a change in majority ownership.

[65 FR 60377, Oct. 11, 2000, as amended at 71 FR 48409, Aug. 18, 2006; 73 FR 69939, Nov. 19, 2008; 75 FR 52648, Aug. 27, 2010; 76 FR 5962, Feb. 2, 2011; 77 FR 14994, Mar. 14, 2012; 79 FR 69773, Nov. 24, 2014; 87 FR 70231, Nov. 18, 2022; 90 FR 55607, Dec. 2, 2025]