The CAT Act of 2025 amends section 1862(o) of the Social Security Act to place new procedural and transparency constraints on the suspension of Medicare payments while CMS or its contractors investigate a “credible allegation of fraud.” It limits initial suspensions to 180 days unless the Secretary finds good cause to extend, requires advance notice and recurring updates to affected providers, and compels CMS to establish an independent appeals process and deliver annual metrics to Congress.
This bill matters because it rewrites the operational tradeoffs between program integrity and provider financial stability. By forcing earlier disclosure of the basis for a suspension and regular case updates — and by penalizing failures to disclose with immediate reinstatement and interest — the bill reduces the likelihood that providers acting in good faith will be driven out of business while an audit proceeds.
It also creates new administrative work for CMS, its contractors (including UPICs), and providers, and raises open questions about the scope of exceptions for active law‑enforcement or sensitive probes.
At a Glance
What It Does
Amends 42 U.S.C. 1395y(o) to require a 30‑day pre‑suspension notice of each allegation’s specifics, monthly updates during the suspension, a 180‑day default cap on suspensions (extendable for good cause), an annual report to Congress, and an independent appeals process for suspended providers.
Who It Affects
Medicare providers and suppliers subject to payment suspensions, CMS and its program‑integrity contractors (including UPICs), the HHS Office of Inspector General and State auditors when exceptions are invoked, and compliance/legal teams that respond to audits and appeals.
Why It Matters
It shifts the balance toward greater provider notice and procedural remedies, reducing the risk that otherwise lawful providers lose operating capital because of prolonged, undisclosed investigations — while imposing new disclosure, reporting, and appeals obligations on CMS and audit contractors.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill modifies the statutory authority CMS uses to pause Medicare payments during fraud probes. It adds a new gatekeeping paragraph that makes any suspension subject to specific transparency rules and a 180‑day presumptive limit.
CMS can extend beyond 180 days only upon a documented finding of “good cause.” That change intends to stop indefinite or routine extensions and to force periodic justification for lengthy suspensions.
Before suspending payments, CMS must give the affected provider a written notice at least 30 days in advance that explains each credible allegation and the factual basis for it: what is alleged, when it purportedly occurred, and whether the allegation arose from a hotline tip, data mining, or an audit pattern. During any suspension CMS must update the provider not less than once every 30 days with the findings so far, an anticipated timeline for finishing the probe, and an opportunity for the provider to ask questions.
The Secretary may withhold the pre‑suspension disclosure only when providing it would compromise the investigation; that determination must be made in consultation with HHS OIG and State auditors where appropriate.If CMS fails to meet the notice-and-update requirements, the statute requires immediate resumption of payments and payment of amounts withheld with interest. The bill also requires an annual report to Congress enumerating the number of suspensions, the bases for them, average suspension and investigation durations, and the lag between investigation completion and payment reinstatement.
Finally, the Secretary must establish an independent appeals process for suspended providers and develop it in consultation with affected stakeholders; the appeals mechanism is to be made available promptly after enactment and will be the vehicle for a timely resolution of disputes over suspensions.The text also alters the enumerated bases for what counts as a “credible allegation of fraud,” replacing a single reference to a “fraud hotline tip” with a short list that includes hotline tips, “mere error,” and billing errors attributed to human error — an edit that could narrow or reframe which triggers warrant suspension. The bill applies prospectively to investigations initiated after enactment and extends coverage to related provisions in title XVIII, certain Part D and Medicaid references identified in the statute.
The Five Things You Need to Know
The bill imposes a 180‑day presumptive limit on payment suspensions; CMS may extend a suspension past 180 days only after it documents a finding of “good cause.”, CMS must give affected providers at least 30 days’ written notice before suspending payments that specifies each allegation, the date(s) of the alleged conduct, and whether the allegation stems from a hotline tip, data mining, or an audit pattern.
During a suspension CMS must provide updates at least every 30 days that list investigation findings to date, an anticipated completion timeline, and an opportunity for the provider to ask questions.
If CMS does not deliver the required pre‑suspension notice or the monthly updates, the statute mandates immediate resumption of payments and payment of the withheld amounts plus any accrued interest.
The Secretary must create an independent appeals process for suspended providers and submit an annual report to Congress with counts, bases, average suspension and investigation lengths, and the average time from investigation close to payment reinstatement.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Names the measure the “Centers for Medicare & Medicaid Services Auditor Transparency Act of 2025” or the “CAT Act of 2025.” This is strictly a caption but signals the bill’s policy focus on CMS audit transparency and contractor practices.
Congressional findings
Sets out the legislative findings underpinning the bill: large federal spending on Medicare/Medicaid, measurable fraud losses, claims that UPICs identify bad actors but that current suspension authority harms good‑faith providers, and anecdotal reports of routine suspension extensions. These findings frame the bill as a response to administrative practice rather than to a change in fraud detection standards.
180‑day limit and supervisorial discretion
Amends the opening language of 1862(o) so suspensions are “subject to paragraph (5),” introducing a statutory check requiring justification for longer suspensions. Practically, CMS retains authority to suspend but must document “good cause” to go beyond 180 days; investigators and contractors will need to build and preserve contemporaneous justification to support extensions.
Revises what counts as the basis for an allegation
Replaces the prior single reference to a ‘fraud hotline tip’ with an enumerated list: a fraud hotline tip, ‘mere error,’ and a billing error attributable to human error. That textual change reshapes the statutory list of triggers and may narrow or clarify which referral sources are sufficient to support a suspension—raising interpretive questions for counsel and auditors about when a referral crosses the line into a ‘credible allegation of fraud.’
30‑day notice, 30‑day updates, exception, and automatic reinstatement
Creates the core transparency regime. CMS must provide specified factual information to the provider at least 30 days before a suspension and then not less frequently than every 30 days while payments are suspended. The statute allows the Secretary to withhold notice only when disclosure would compromise the investigation, and requires consultation with the HHS OIG and State auditors for that determination. If CMS fails to provide the statutorily required information, it must immediately resume payments and pay withheld amounts with interest. The provision also mandates an annual report to Congress with enumerated metrics (number of suspensions, bases, average lengths of suspension and investigation, and the time to payment reinstatement).
Independent appeals process and consultation mandate
Requires the Secretary to establish an independent appeals mechanism for providers suspended under the statute and to do so promptly (statute gives 180 days after enactment to provide the appeals process). The statute directs the Secretary to consult relevant stakeholders — including providers across titles XVIII, XIX and XXI — when designing the appeals pathway, which implicates both federal and state program actors and suggests a multilayered administrative remedy rather than leaving providers primarily to district‑court challenges or existing contractor complaint channels.
Prospective application to new investigations
Specifies that the amendments apply only to investigations initiated after enactment and enumerates the cross‑references to related provisions in Part D and Medicaid cited in the bill. That forward application leaves pre‑existing suspensions and active investigations started before enactment governed by the prior statutory regime.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Medicare providers and suppliers with thin operating margins — the notice, monthly updates, and a cap on routine extensions reduce the risk that a prolonged, undisclosed suspension will force closure or insolvency.
- Medicare beneficiaries in local markets — by reducing the odds that in‑good‑faith providers are put out of business, the bill helps preserve patient access to care in communities with limited provider options.
- Compliance, practice management, and legal teams at provider organizations — clearer pre‑suspension information and a scheduled update cadence give these teams earlier and more actionable detail to investigate, cure errors, or mount defenses before cash flow collapses.
- Congress and program oversight bodies — the required annual report supplies standardized metrics that policymakers and auditors can use to spot systemic issues with suspensions, UPIC practices, or investigative timelines.
Who Bears the Cost
- CMS and its program integrity contractors (including UPICs) — the statute creates recurrent administrative duties (30‑day notices, monthly updates, annual reporting) and an obligation to justify extensions and to coordinate exception determinations with OIG and State auditors.
- UPICs and other auditors — they will need to change intake and evidence‑gathering practices so that suspensions are supported with the information CMS must disclose, and they may face more frequent challenges and appeals to their suspensions.
- Providers (operational costs) — even with better notice, providers must spend legal and compliance resources to respond, participate in monthly exchanges, and pursue appeals when appropriate; smaller providers may still bear substantial transaction costs.
- HHS OIG and State auditors — the statute imports them into exception determinations and may require additional coordination time and resources when CMS claims that disclosure would compromise a probe.
Key Issues
The Core Tension
The bill confronts an unavoidable trade‑off: aggressive, often secretive suspensions stop suspected fraud quickly but can starve legitimate providers of working capital and harm patient access; forcing transparency and faster procedural remedies protects honest providers but risks slowing or compromising investigations into fraud. Choosing where to land on that spectrum requires balancing program‑integrity effectiveness against provider financial stability — a balance the bill leaves to CMS rulemaking and the contours of the forthcoming appeals process.
Several implementation questions could determine whether the bill effectively protects providers or merely adds procedural steps that slow investigations. The statute leaves undefined key concepts such as what constitutes “good cause” for an extension and when a pre‑suspension disclosure would truly “compromise the integrity of the investigation.” Those are discretionary standards that will likely become the focus of rulemaking and litigation, and administrative guidance will shape much of the bill’s real‑world effect.
Operationally, the 30‑day notice requirement creates tension with urgent or emergent fraud referrals. Some investigations — especially criminal or multi‑jurisdictional matters — may legitimately require rapid suspension or limited disclosure.
While the bill allows an exception, the administrator’s burden to consult with OIG and State auditors may itself slow decisions or push CMS to over‑invoke the exception. The appeals requirement is also underspecified: the statute mandates an “independent process” but not who will adjudicate it, what the evidentiary standard will be, or how quickly an appeal must be resolved.
Building an appeals system that is both fair and sufficiently rapid to protect provider liquidity will require funding, staffing, and clear procedural rules that are not provided in the text.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.