What does CMS regulate in medical device procurement?

CMS doesn't regulate devices directly (that's FDA) — but CMS reimbursement policies determine whether US hospitals can profitably purchase a device. HCPCS coding, Medicare/Medicaid coverage, DMEPOS standards, and Value-Based Purchasing programs all shape procurement decisions. Without CMS-aware tender response, US hospital sales become significantly harder regardless of clinical merit.

Why are HCPCS codes important for medical device tenders?

HCPCS codes are how hospitals bill Medicare and Medicaid for procedures involving devices. Without an applicable HCPCS code, the hospital can't bill — making the device commercially uncompetitive. Tender response should always include applicable HCPCS code(s) for the supplied device's primary use. Outdated or missing HCPCS references signal a non-US-aware supplier.

What is a National Coverage Determination (NCD)?

An NCD is a CMS policy stating whether and under what conditions Medicare covers a specific item or service nationwide. NCDs apply uniformly across the US. They differ from Local Coverage Determinations (LCDs), which are issued by regional Medicare Administrative Contractors and may create coverage variations across the country.

How does Value-Based Purchasing affect device procurement?

VBP programs (HVBP, HRRP, HACRP, BPCI) link hospital reimbursement to outcomes. Hospitals increasingly prefer devices that demonstrably improve VBP-relevant metrics (lower readmissions, fewer infections, shorter length-of-stay) even at higher unit cost. Tender responses leading with outcome evidence outperform responses leading with specifications alone.

What are DMEPOS supplier standards?

DMEPOS Supplier Standards are 30+ requirements suppliers must meet to sell durable medical equipment, prosthetics, orthotics, and supplies to Medicare beneficiaries. Requirements include PECOS enrollment, accreditation, surety bonds, and physical location standards. Without DMEPOS compliance, suppliers can't sell DME to US Medicare beneficiaries — a major commercial barrier.

How do Medicaid procurement rules differ from Medicare?

Medicaid is state-administered with federal oversight, creating 50+ distinct coverage and reimbursement frameworks. Each state has unique coverage determinations, reimbursement methodology, supplier enrollment, and prior authorization rules. Selling broadly to US safety-net hospitals requires multi-state Medicaid compliance — significantly more complex than Medicare's single national framework. Comprehensive tender automation must handle state-level variations.

← Journal

RegulatoryProcurementCompliance

CMS Compliance for Hospital Procurement: 2026 Guide for Medical Device Suppliers

4 May 2026

The Centers for Medicare & Medicaid Services (CMS) does not regulate medical devices directly — that's FDA — but CMS reimbursement policies dictate which devices US hospitals can profitably purchase. For medical device suppliers, CMS compliance is procurement compliance: get the reimbursement architecture right and your products fit hospital budgets; get it wrong and you're effectively excluded from US markets regardless of clinical merit.

This guide is the definitive 2026 reference for how CMS shapes US hospital procurement and what suppliers must do to align.

The CMS reimbursement landscape

CMS programs that affect medical device procurement:

Medicare: Covers ~65 million Americans (seniors, disabled). Reimbursement rules drive a third of US healthcare spending.
Medicaid: State-administered, federally funded program for low-income populations. Variable rules across 50 states + DC + territories.
Medicare Advantage: Private insurance plans replacing traditional Medicare. ~30 million enrollees and growing. Reimbursement methodology overlaps with Medicare but has plan-level variations.
Value-Based Purchasing (VBP): Performance-based reimbursement linking hospital payments to quality metrics. Drives device selection toward outcomes-improving products.

HCPCS codes: the procurement gating mechanism

The Healthcare Common Procedure Coding System (HCPCS) assigns codes to every reimbursable procedure, supply, and device. For a hospital to bill Medicare for a device-involved procedure, an applicable HCPCS code must exist.

Three relevant levels:

Level I (CPT): Procedures performed by clinicians (administered by AMA)
Level II: Supplies, durable medical equipment, drugs (administered by CMS)
Level III: State-specific (mostly retired)

Medical device suppliers care primarily about Level II for billing-eligible products. Without an applicable HCPCS code, the hospital cannot bill Medicare; the device often becomes uncompetitive on cost grounds.

Medicare coverage determinations

National Coverage Determinations (NCDs)

CMS issues NCDs for specific items/services that apply uniformly across the US. Examples: bariatric surgery coverage criteria, cardiac device monitoring requirements.

Local Coverage Determinations (LCDs)

Medicare Administrative Contractors (MACs) issue LCDs for their region. Coverage may vary across regions for the same product. Suppliers must track LCDs across all their hospital customers' regions.

Coverage with Evidence Development (CED)

For new technologies, CMS may approve coverage contingent on clinical evidence collection. Suppliers must support data collection requirements.

DMEPOS supplier standards

For durable medical equipment, prosthetics, orthotics, and supplies (DMEPOS), suppliers selling to Medicare beneficiaries must:

Be enrolled in Medicare via PECOS (Provider Enrollment, Chain, and Ownership System)
Meet 30+ DMEPOS Supplier Standards
Pass accreditation by a CMS-approved accrediting organization
Maintain surety bonds
Comply with Competitive Bidding Program (where applicable)

Value-Based Purchasing and procurement priorities

CMS's VBP programs (HVBP, HRRP, HACRP, BPCI) link hospital reimbursement to outcomes:

HVBP (Hospital Value-Based Purchasing): Adjusts payments based on quality measures.
HRRP (Hospital Readmissions Reduction Program): Penalizes excess readmissions.
HACRP (Hospital-Acquired Condition Reduction Program): Penalizes hospital-acquired complications.
BPCI (Bundled Payments for Care Improvement): Single payment for an episode of care.

For suppliers, this changes procurement decision criteria. Hospitals increasingly prefer devices that demonstrably improve VBP-relevant outcomes (lower readmissions, fewer infections, shorter LOS) even at higher unit cost. The tender response must surface outcome-relevant evidence, not just specifications.

Inpatient vs outpatient reimbursement

Inpatient (DRG-based)

Medicare pays a fixed amount per Diagnosis-Related Group (DRG). The hospital absorbs device costs within the DRG payment. This favors lower-cost devices and devices that reduce length-of-stay or complications.

Outpatient (APC-based)

Ambulatory Payment Classifications (APCs) under OPPS. Some devices are pass-through paid (separately reimbursed); others are bundled into APC payment. Pass-through status is a major commercial advantage.

Implants and pass-through payments

For new technologies, transitional pass-through payments (typically 2-3 years) provide reimbursement above the APC bundle while the device builds adoption. Suppliers should model their commercialization around pass-through windows.

The CMS-aware tender response

For US hospital tenders, the response should include:

HCPCS code(s) applicable to the device's primary use
Medicare coverage status (NCD/LCD references)
Pass-through status if applicable
Outcome-relevant clinical evidence (VBP-aligned)
DMEPOS supplier credentials if applicable
Competitive Bidding pricing if subject to CBP

Common CMS compliance failures in tender response

Outdated HCPCS references: CMS updates codes annually. Tender responses citing retired codes look careless.
Missed LCD variations: A device covered in one region may not be covered in another. Generic "Medicare covers this" claims fail when LCDs differ.
Misclassified DMEPOS items: Wrong HCPCS Level II code categorization triggers claim denials and tender losses.
Pass-through status confusion: Pass-through windows expire. Outdated tender materials over-claim reimbursement.
VBP evidence gap: Hospitals prioritize VBP-improving devices. Tender responses that lead with specs instead of outcomes lose to competitors who lead with outcomes data.

State-level layering

Some states add procurement requirements beyond federal CMS rules:

California: Prop 65 disclosures, supplier diversity tracking
New York: Excelsior Pass for certain device categories
Massachusetts: Health Policy Commission cost containment review
Florida: Strict licensing requirements for certain device types

National tender automation must handle state-level variations or risk regional ineligibility.

Medicaid considerations

Medicaid is state-administered with federal oversight. Each state has unique:

Coverage determinations
Reimbursement methodology
Supplier enrollment requirements
Prior authorization rules

Selling broadly to US safety-net hospitals requires multi-state Medicaid compliance — significantly more complex than Medicare's single national framework.

Tender automation requirements for CMS compliance

Mature US-focused tender automation platforms include:

Live HCPCS database (annual updates)
NCD/LCD lookup by region
Pass-through status tracking
VBP outcome evidence chains
State-level rule engine
Medicaid by-state coverage data
DMEPOS credential management

Generic tender response tools (RFP automation, document parsing) miss the CMS layer entirely. US hospital procurement requires US-specific tooling.

Pricing strategy implications

CMS reimbursement rates anchor US procurement pricing in ways that don't apply in other markets:

Pricing above effective Medicare reimbursement squeezes hospital margins
Devices with weak outcome data face downward pressure as VBP penalties accumulate
Pass-through payments enable premium pricing during the transitional window
State-specific Medicaid rates create regional pricing necessity

US tender responses must include reimbursement-aligned pricing strategy, not just unit price.

2026-2027 outlook

Site-neutral payment expansion: CMS continues pushing toward site-neutral reimbursement, eliminating outpatient department vs ASC vs office payment differentials. This compresses pricing power for devices used across settings.
VBP measure expansion: Quality measures linked to reimbursement keep growing. Devices need stronger outcome evidence to remain competitive.
Direct contracting models: ACO REACH, Direct Contracting, and similar models shift risk to providers. Devices that reduce total cost of care gain traction over devices that improve narrow procedural metrics.
Medicaid managed care growth: ~80% of Medicaid enrollees now in managed care. Coverage and payment increasingly determined by health plans, not state agencies directly.
AI-enabled prior authorization: CMS pushing payers toward standardized, automated PA decisions. Devices with strong evidence chains will see faster authorization than devices with weak evidence packages.