Received a CMS Deficiency Notice?
Here's Exactly What to Do.
CMS deficiency notices give you 30 calendar days to cure network gaps, request an exception, or reduce your service area. This guide covers all three pathways, required documentation, and how Blueprint automates your corrective action package.
Response Timeline
Your 30-Day Action Plan
Thirty calendar days sounds like a long time. It isn't — especially when provider contracting, credentialing, and documentation each take time. Front-load the work.
Triage the Notice
- Download and read the full deficiency notice from HPMS
- Map each cited gap to county, specialty, and standard threshold
- Determine which of the three response pathways applies
- Assign a dedicated response lead and set internal milestones
Identify & Contract Providers
- Run an emergency gap analysis for every deficient county/specialty
- Prioritize providers who are already credentialed elsewhere in your network
- Launch expedited outreach — phone first, email same day
- Execute Letters of Intent or interim agreements to establish compliance date
Compile Documentation
- Collect signed contracts, rosters, and credentialing status for new providers
- Pull complete outreach logs with dates, channels, and provider responses
- Draft good faith effort narrative for any remaining gaps
- Prepare exception request package if cure is partial
Submit to CMS via HPMS
- Upload corrective action package to HPMS deficiency module
- Include signed attestation by authorized plan officer
- Confirm receipt and document submission timestamp
- Monitor HPMS for CMS acknowledgment or follow-up questions
Response Pathways
Three Ways to Resolve a Deficiency
CMS allows three resolution pathways. Most deficiencies should be cured — exception requests and service area reductions are reserved for demonstrably unavailable provider markets.
Cure the Gap
Add compliant, credentialed providers in the deficient county/specialty and resubmit the network adequacy filing with updated rosters. CMS expects this pathway whenever feasible.
Required
- Executed provider agreements (not just LOIs)
- Active or provisional credentialing status
- Provider listed in updated HPMS network file
- Authorized officer attestation on resubmission
Exception Request
If no willing providers exist, request a CMS exception (Access Exception, Geographic Exception, or SAR). Requires proof of good faith effort — typically four documented outreach attempts per provider.
Required
- Minimum four outreach attempts per targeted provider
- Documentation of all declinations with stated reasons
- Narrative explaining why the gap cannot be cured
- Supporting data (HRSA shortage designations, provider ratios)
Service Area Reduction
Voluntarily drop the deficient county from your service area to resolve the adequacy gap. CMS must approve the reduction, and member notifications are required. Not available after the enrollment freeze trigger.
Required
- CMS prior approval for service area change
- Required member advance notice (60 days minimum)
- Coordination with state insurance department
- Updated PBP and benefit filings to reflect the reduction
Corrective Action Package
What CMS Expects in Your Submission
The corrective action package is your legal response to CMS. Incomplete packages are rejected — build it systematically, not at the last minute.
Provider Evidence
- Executed contracts or signed Letters of Intent for all newly added providers
- Current credentialing status for each added provider (active or provisional)
- Provider roster extract from HPMS showing updated network composition
- Panel status confirmation (open to new Medicare patients)
Outreach Documentation (for gaps not cured)
- Chronological outreach log: date, time, channel, staff member, outcome
- Copies of outreach materials sent (emails, letters, voicemail scripts)
- Provider declination records with stated reasons
- Minimum four documented contact attempts per provider per CMS standard
Narrative & Analysis
- Gap analysis showing remaining deficiency and why providers are unavailable
- Exception request narrative (if applicable) with legal and market reasoning
- HRSA shortage designation data or rural access documentation where relevant
- Timeline showing corrective actions taken within the 30-day window
Certifications
- Signed corrective action attestation by authorized plan officer
- Compliance officer sign-off on documentation completeness
- HPMS submission confirmation with timestamp
What to Avoid
Six Deficiency Response Mistakes That Escalate to Enrollment Freeze
CMS reviewers see thousands of corrective action submissions. These are the errors that turn a manageable deficiency into an enrollment freeze.
Submitting uncredentialed providers
CMS will reject the cure — providers must be credentialed or in active credentialing with a firm completion date
Incomplete outreach logs
Missing dates, channels, or outcome records invalidate the good faith effort claim and defeat the exception request
Missing the 30-day window
Late submissions trigger automatic escalation to enrollment freeze review — there is no grace period
Submitting only LOIs, not executed contracts
Letters of Intent are insufficient for cure; executed agreements are required for the HPMS resubmission
Requesting an exception without the four-attempt standard
CMS will deny the exception request and escalate the deficiency if evidence of four documented attempts is absent
Not tracking mid-cycle provider changes
Providers added during the response period must be entered in HPMS in real time — retroactive updates are scrutinized
Blueprint Platform
Blueprint Automates Your Deficiency Response
Most plans scramble to compile outreach logs and provider evidence under the 30-day deadline. With Blueprint, the documentation is already built — because you logged every outreach attempt in real time.
Deficiency Notice Intake
Import the CMS deficiency notice directly into Blueprint. The system maps each cited gap to your county-specialty tracking and flags affected providers automatically.
Good Faith Evidence Package
Blueprint's outreach log is already formatted to CMS standards. Every contact attempt is timestamped, channeled, and outcome-coded — ready to export as a deficiency response exhibit.
Live Cure Progress Dashboard
Track your corrective action progress in real time. Blueprint shows which gaps are cured, which are pending credentialing, and which require exception documentation — updated as each contract is signed.
One-Click Package Export
When ready to submit, Blueprint generates a CMS-structured corrective action package: provider roster, outreach log, exception narrative (if needed), and attestation cover sheet — all in a single PDF.
FAQ