CMS Probationary Prior Authorization: What the October 15, 2026 Rule Means for New DMEPOS Suppliers
Beginning October 15, 2026, CMS places newly enrolled DMEPOS (Durable Medical Equipment, Prosthetics, Orthotics, and Supplies) suppliers, and suppliers completing certain ownership changes, into a one-year probationary period. This is the CMS Probationary Prior Authorization rule. For a defined list of HCPCS codes, prior authorization becomes a condition of payment during that year. The rule doesn’t start counting from your enrollment date. It starts from the first bill you submit for a listed code, which makes the timing of early billing something worth planning around rather than something that just happens.
What the CMS Probationary Prior Authorization Rule Actually Requires
The Probationary Prior Authorization (PPA) process is authorized under Section 1866(j)(3) of the Social Security Act and 42 CFR §424.527, which establishes a one-year probationary period for newly enrolled and ownership-changing DMEPOS suppliers. It applies to two groups: suppliers newly enrolled in Medicare on or after October 15, 2026, and suppliers completing a change of ownership effective on or after that date.
The one-year clock does not start at enrollment. It starts when the supplier submits its first bill for an item on the Probationary Prior Authorization List. Until that first bill goes out, the probationary period hasn’t begun, which means a supplier’s own billing sequence, not a calendar date, determines when the clock starts.
How Many HCPCS Codes Are on the Probationary Prior Authorization List?
The current HCPCS Prior Authorization List for this program runs 38 codes, concentrated in orthotic devices rather than the full range of DMEPOS items:
- AFO/KAFO codes: L1902, L1906, L1971, L2035, L2132, L2134, L2136, L4360, L4361, L4396, L4397
- Knee orthosis codes: L1810, L1812, L1820, L1821
- Lower-limb orthosis codes: L1652, L1653, L1686, L1690
- Spinal orthosis codes: L0626, L0627, L0628, L0630, L0633, L0635, L0641, L0642, L0643, L0649, L0720
- Upper-limb orthosis codes: L3660, L3670, L3760, L3762, L3809, L3908, L3915, L3960
L4360 and L4361 cover pneumatic and vacuum walking boots, prefabricated and custom-fitted respectively.
CMS has stated it may update this list as new vulnerabilities emerge, with changes posted to the program’s CMS.gov page.
How This List Differs from the Required Prior Authorization List
This is where most coverage gets confused. CMS runs a separate, older program: the Required Prior Authorization Process for Certain DMEPOS Items. That list is broader, sits at 74 codes as of April 2026, and includes non-orthotic categories like power mobility devices, pressure-reducing support surfaces, and osteogenesis stimulators (E0747, E0748). Probationary Prior Authorization runs alongside, not instead of, that existing process.
A newly enrolled supplier billing a code on both lists has to satisfy both, and the submission and review mechanics follow the same operational framework CMS already uses for required prior authorization.
Why CMS introduced this now
The timing lines up with a pattern of enforcement activity CMS and the HHS Office of Inspector General built through 2026. In February 2026, CMS imposed a six-month nationwide moratorium on new DMEPOS supplier enrollment, citing OIG findings on payment safeguard weaknesses. In August 2026, OIG followed with a white paper, “The Nation’s Challenge to Combat Durable Medical Equipment Fraud in Medicare” (OEI-02-24-00311), identifying three components nearly every large-scale DMEPOS fraud scheme depends on: a Medicare-enrolled supplier, a physician order, and a beneficiary identification number. The paper points to weaknesses in current enrollment safeguards, including site inspections and a $50,000 surety bond requirement that OIG notes hasn’t changed since it was introduced in 2009, as insufficient to stop bad actors from establishing new suppliers or acquiring existing ones through concealed ownership changes.
The financial backdrop supports the concern. CMS identified approximately $1.9 billion in improper DMEPOS payments in Fiscal Year 2024, a 21.4 percent improper payment rate, among the highest of any Medicare benefit category. OIG’s paper cites Operation Gold Rush, a transnational fraud scheme that billed Medicare more than $10 billion before it was shut down, as an example of how quickly organized actors can exploit enrollment and ordering gaps at scale. CMS’s Fraud Defense Operations Center, launched as a pilot in March 2025 and made a permanent program that June, is part of the same broader response, aimed at identifying suspect billing patterns and suspending payments proactively rather than relying solely on after-the-fact recovery.
Probationary Prior Authorization fits directly into that response. Rather than blocking new enrollment outright, it applies additional, item-level scrutiny specifically at the point CMS’s own data shows the greatest exposure: the first year of a new supplier relationship or a new ownership structure.
The other side: a path to fewer reviews
CMS paired this tighter entry standard with a mechanism for established suppliers to earn relief. Under CMS-1828-F, finalized December 2, 2025, suppliers that demonstrate consistent billing accuracy can qualify for exemption from required prior authorization. Suppliers that submit a minimum volume of requests and achieve a 90 percent provisional affirmation rate, assessed per PTAN and per DME MAC jurisdiction, become eligible, subject to an annual post-payment review of a smaller claim sample that must again clear the 90 percent threshold. The first exemption cycle began June 1, 2026, and runs annually.
New / Ownership-Changing Suppliers
- Placed into 1-year probationary review automatically
- Prior authorization required for listed codes
- Clock starts at first bill, not enrollment
- No opt-out; applies by rule
Established, High-Accuracy Suppliers
- May qualify for exemption from required PA
- Requires a 90% provisional affirmation rate
- Assessed per PTAN, per DME MAC jurisdiction
- Re-evaluated annually via post-payment sample
Read together, these describe one philosophy rather than two disconnected rules. New and ownership-transferring suppliers face heavier upfront review. Suppliers with a demonstrated record of accurate billing can work toward less administrative friction. The determining factor in both cases is the same: documented, verifiable billing accuracy over time.
What changed through 2026
What this means if you’re entering the program
- The clock is triggered by billing, not enrollment. Your first claim for a listed code starts the one-year period, which makes the sequencing of early billing worth planning for rather than treating as incidental.
- Documentation has to be right the first time. Prior authorization review checks that an item meets Medicare’s coverage, coding, and payment rules before delivery. Incomplete documentation here doesn’t just risk one denial, it risks setting the tone for how a new supplier’s claims get viewed for the rest of the probationary year.
- Ownership changes carry the same exposure as new enrollment. A change of ownership can reset a supplier into this heightened scrutiny category, worth factoring into any acquisition or entity restructuring timeline.
- This sits on top of, not instead of, existing requirements. The separate Required Prior Authorization list and its codes still apply. The two programs need to be managed together, not treated as interchangeable.
Getting ready for October 15 is a cross-functional readiness check, not a single form. It touches your Medicare enrollment record, your accreditation status, your documented compliance program, and the billing operation that will actually submit and track prior authorization requests. For suppliers building or tightening that readiness, our Medicare enrollment support, accreditation preparation, compliance program, credentialing, and billing and revenue cycle management services are built around exactly this kind of first-year scrutiny.
| Question | Answer |
|---|---|
| Who does this apply to? | Suppliers newly enrolled, or completing a change of ownership, on or after October 15, 2026 |
| When does the 1-year clock start? | At the first bill submitted for a listed code, not at enrollment |
| What codes are affected? | 38 HCPCS codes concentrated in orthotic devices (AFO/KAFO, knee, lower-limb, spinal, upper-limb orthoses) |
| Does this replace the Required PA list? | No, it applies alongside it; both must be satisfied where applicable |
| Is there a way to reduce future PA burden? | Yes, via the separate CMS-1828-F exemption pathway for suppliers with a 90% provisional affirmation rate |
Frequently Asked Questions
When does the Probationary Prior Authorization period take effect?
October 15, 2026. It applies to suppliers newly enrolled in Medicare on or after that date, and to suppliers completing certain changes of ownership on or after that date.
Does the one-year clock start on my enrollment date?
No. The probationary period starts when the supplier submits its first bill for an item on the Probationary Prior Authorization List, not at the moment of enrollment.
What items are on the Probationary Prior Authorization List?
38 HCPCS codes, all orthotic devices, across five categories: AFO/KAFO, knee orthosis, lower-limb orthosis, spinal orthosis, and upper-limb orthosis. This is separate from the broader Required Prior Authorization List, which covers 74 codes including non-orthotic items like osteogenesis stimulators. CMS has stated it may update the Probationary list as new vulnerabilities emerge.
Does this replace the existing Required Prior Authorization Process for Certain DMEPOS Items?
No. Probationary Prior Authorization runs alongside the required process. A supplier billing a code on both lists has to satisfy both requirements.
Can a supplier reduce future prior authorization burden?
Yes, through a separate pathway. Under CMS-1828-F, established suppliers that achieve a 90 percent provisional affirmation rate on a minimum volume of requests, assessed per PTAN and per DME MAC jurisdiction, can qualify for exemption from required prior authorization, subject to annual post-payment review.
The larger signal
Taken on its own, Probationary Prior Authorization is a procedural change affecting a defined set of orthotic codes for a defined group of suppliers. Taken alongside the enrollment moratorium, the OIG white paper, the Fraud Defense Operations Center, and the exemption pathway for established suppliers, it points toward where CMS intends to take DMEPOS oversight generally: a model where billing privileges are maintained through demonstrated compliance, not assumed on the basis of enrollment alone.
October 15, 2026 is the date to have a plan in place, not the date to start building one.
Sources
- CMS.gov — Probationary Prior Authorization Process for Newly Enrolled Suppliers of Certain DMEPOS Items
- CMS.gov — Prior Authorization Process for Certain DMEPOS Items (CMS-1828-F exemption process, effective June 1, 2026)
- CMS.gov — DMEPOS Fraud Hot Spot fact sheet (FY2024 improper payment data)
- HHS-OIG — “The Nation’s Challenge to Combat Durable Medical Equipment Fraud in Medicare” (OEI-02-24-00311), August 2026
- CMS Fraud Defense Operations Center fact sheets (launch and first-year results)
Leave a Reply
Loading comments…
Comments are reviewed before they appear on the site. We’re available Monday–Friday, 9:00 AM–6:00 PM EST (closed Saturday and Sunday), and comments are approved during those hours.