When HRSA Started Rejecting Child Site Registrations
In late 2024, hospitals began encountering something they hadn’t seen in years: HRSA rejecting child site registration requests that relied on cost report lines not clearly tied to reimbursable outpatient revenue. Medical record numbers matched, service areas hadn’t changed, yet Apexus replies read, “Not eligible for registration under current HRSA policy.” By January 2025, the pattern was unmistakable. HRSA had stopped tolerating expansive interpretations of “reimbursable cost center” and started treating Medicare cost report data as the definitive test for offsite clinic eligibility.
The seeds of this crackdown were planted years earlier. In 2018, HRSA updated its FAQs to warn that only sites listed on the most recently filed Medicare cost report, connected to outpatient costs and charges, could be registered. But for years, enforcement was inconsistent. Hospitals registered sites that billed under physician group NPIs, claiming they were “integrated departments.” Many auditors let that argument stand. No longer. The 2025 enforcement shows HRSA is finished negotiating with hybrid billing models, it now expects alignment between the Medicare cost report, UB‑04 billing, and the 340B database.
The Cost Report Trap for Hospital Clinics
Most hospital-based outpatient clinics operate in a gray zone. They share space, staff, and EMRs with the main hospital but bill under separate NPIs to satisfy payer or credentialing demands. On the Medicare cost report, those clinics fall under “physician practice” lines or Part B professional services instead of outpatient revenue cost centers. Under HRSA’s new enforcement approach, those clinics are simply out, no registration, no 340B eligibility, no covered outpatient drug purchases tied to their encounters.
A midsize DSH hospital in the Midwest learned this the hard way during the Q2 2025 registration window. Two endocrinology clinics, provider-based, same EMR, fully under hospital compliance oversight, were denied because they billed through the physician practice’s tax ID to retain commercial contracts. HRSA rejected both, stating the cost report didn’t link them to reimbursable outpatient services. When the hospital appealed, Apexus pointed to the 2018 FAQ, insisting the policy itself hadn’t changed. Technically true. Practically? A sea change.
And here’s the kicker: a clinic can meet CMS’s standards for provider-based status yet fail HRSA’s cost report test. HRSA isn’t syncing its child site criteria with CMS’s provider-based determination process. So one agency may deem the site part of the hospital, while another denies its 340B eligibility. Administrators have griped about this disconnect for years, but the 2025 enforcement turned it from an annoyance into a financial hazard.
How Hospitals Are Scrambling to Respond
Hospitals with sprawling outpatient networks are now redrawing their compliance maps. Pharmacy leaders are poring over cost report line assignments and realizing entire service lines, oncology infusion, rheumatology, behavioral health, sit outside HRSA’s current definition of “eligible clinic.” Some are preparing to renumber cost centers before the next Medicare filing to match HRSA expectations. It’s permissible but painful: finance teams loathe it, and auditors flag it forever. Others are converting physician groups to bill as provider-based departments under the hospital NPI. That path invites payer re-enrollment headaches and revenue cycle turbulence.
Mixed-use locations complicate things further. Say a clinic houses both an infusion suite billing under the hospital and physician offices billing under the practice. HRSA expects covered entities to isolate eligible encounters down to the location and cost report segment. If your data systems can’t make that distinction, you’ll either over‑divert or over‑accrue, each an audit failure. HRSA hasn’t said whether it will permit partial-site registration or mandate exclusion of entire ZIP codes where mixed billing occurs. Word from regional auditors: play it safe and exclude broadly.
Compliance and Audit Risk in 2025
Audits this year are rough. HRSA ramped up its volume by roughly 30% after the 2022 OIG report blasted weak child site oversight. Now, auditors start with cost report alignment before even touching covered patient criteria. If your registration pre‑dates 2025 and the site isn’t on the newest cost report, expect a request for documentation proving continuous operation. Many hospitals come up empty, especially where clinics were renamed or rebilled, and HRSA directs them to “voluntarily terminate” those listings and repay 340B savings linked to ineligible encounters.
The repayment hits can be huge. One 250‑bed hospital projected a $1.8 million loss in net 340B margin after delisting five offsite clinics. Manufacturers aren’t clawing back claims directly, and HRSA isn’t running these through ADR, but hospitals are self‑reversing credits to blunt future risk. Some shift those clinics to non‑340B purchasing and reroute high‑cost infusions through main outpatient pharmacies, creating workflow congestion and upset patients. Compliance staff, meanwhile, are stuck explaining to CFOs why HRSA’s “hospital clinic” definition diverges from CMS’s. Fun conversations.
Contract pharmacies are caught up too. If a prescription originates from a now‑ineligible clinic, it no longer ties back to a registered child site, forcing TPAs to block or reroute it. Expect contract pharmacy capture rates to dip through mid‑2025 as cleansing rules tighten. Carve‑ins stand to lose 20-25% of historical claim volume on eligibility alone.
What HRSA Hasn’t Told Us Yet
So far, HRSA hasn’t issued a Federal Register notice or posted a formal policy memorandum explaining these rejections. The agency is enforcing through Apexus and the OPAIS back‑end instead. That sidesteps a transparent appeals process; hospitals can send reconsideration emails, but the refrain is constant: “not on the cost report, not eligible.”
The timing problem also looms large. Hospitals file cost reports nearly a year post‑fiscal year. If a clinic opens in March 2025 and the most recent cost report covers 2024, it won’t appear yet. HRSA typically delays registration until the next report is filed, effectively freezing out that site for 12 to 18 months. Meanwhile, no 340B purchases for those patients. That stance isn’t grounded in statute, the 340B law never mentions cost reports, but HRSA has long used them as its proxy for child site eligibility. The 2025 enforcement just cemented it.
Unless HRSA pulls back, hospital 340B teams will spend the rest of 2025 untangling OPAIS listings, reconciling billing data, and partnering with finance to prove site eligibility. It’s not new guidance, just old language finally arriving with consequences. And honestly, it’s about time somebody called this what it is: enforcement through silence.