EveryAILaw.comDoes CMS Medicare Advantage AI Rule require Human Oversight?
United States • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 5 specific requirements for Human Oversight across 1 provision:
- No sole reliance on AI — Population-level algorithms or predictions alone cannot replace individual medical-necessity criteria; AI alone cannot deny an inpatient admission, downgrade it to observation, or terminate post-acute care on predicted length of stay (CMS FAQ, Question 2)
- Individual circumstances — Coverage decisions must rely on individual patient history and circumstances, not population-level algorithms alone
- No alteration of public criteria — AI tools may not alter publicly available coverage criteria
- Individualized post-acute reassessment — A predicted length of stay alone cannot support termination. Reassess the patient's individual condition and confirm that the level-of-care requirements are no longer met before issuing a termination notice (CMS FAQ, Question 2)
- Tool vetting — MA plans remain responsible for ensuring AI/algorithmic tools are used consistently with coverage criteria and applicable law; CMS guidance does not specify a standalone mandated audit requirement
Clinician Oversight Mandate
FAQ guidance (CMS memo, Feb 6, 2024) interpreting the 2024 MA final rule (CMS-4201-F); not a standalone AI-specific rule. The stored provision heading is a catalog label; the FAQ requires individual medical-necessity review, not a categorical clinician-final-approval step.
Requirements
| Requirement | Details |
|---|---|
| No sole reliance on AI | Population-level algorithms or predictions alone cannot replace individual medical-necessity criteria; AI alone cannot deny an inpatient admission, downgrade it to observation, or terminate post-acute care on predicted length of stay (CMS FAQ, Question 2) |
| Individual circumstances | Coverage decisions must rely on individual patient history and circumstances, not population-level algorithms alone |
| No alteration of public criteria | AI tools may not alter publicly available coverage criteria |
| Individualized post-acute reassessment | A predicted length of stay alone cannot support termination. Reassess the patient's individual condition and confirm that the level-of-care requirements are no longer met before issuing a termination notice (CMS FAQ, Question 2) |
| Tool vetting | MA plans remain responsible for ensuring AI/algorithmic tools are used consistently with coverage criteria and applicable law; CMS guidance does not specify a standalone mandated audit requirement |
Penalties
| Violation | Fine |
|---|---|
| Non-compliance | CMS enforcement; potential plan sanctions |