Regulatory Landscape: Current Rules and Why They Fail

Policy Brief Date: November 2025 Series: Healthcare Data Infrastructure Reform

Executive Summary

Federal healthcare transparency regulations—Hospital Price Transparency (2021), Transparency in Coverage (2022), and Medical Loss Ratio (2011)—collectively mandate publication of 50+ terabytes of financial data annually. Yet these rules fail to create usable cost measurement infrastructure because they:

  1. Require publication without validation (data quality unchecked)
  2. Create isolated silos (no reconciliation across sources)
  3. Lack enforcement teeth (46% hospital compliance, zero fines)
  4. Produce unusable formats (terabyte JSON files inaccessible to consumers)

This brief examines each major regulation, why it falls short, and how targeted amendments could transform disclosure theater into functional measurement infrastructure—without expanding reporting burdens.

1. Hospital Price Transparency (45 CFR Part 180)

1.1 Regulatory History

Enacted: November 2019 (CMS Final Rule) Effective: January 1, 2021 Authority: Social Security Act § 2718(e), Affordable Care Act § 1001 Scope: All ~6,000 Medicare-participating hospitals

1.2 Core Requirements

Hospitals must publish:

  1. Machine-Readable File (MRF):
    • Standard charges for all items/services (>300 shoppable services, all MS-DRGs)
    • Negotiated rates with each third-party payer (by plan, tier if applicable)
    • De-identified minimum/maximum negotiated charges
    • Discounted cash prices (for uninsured patients)
  2. Consumer-Friendly Display:
    • 300 shoppable services (70 CMS-specified + 230 hospital-selected)
    • Payer-specific estimated out-of-pocket costs
    • Web-accessible, searchable tool

File Format: JSON schema (CMS-specified, version 2.0.0 since 2022)

1.3 What It Delivers

Successes: - ✓ Standardized schema eliminates format variation (JSON vs. CSV vs. PDF) - ✓ Negotiated rates disclosed for first time in U.S. healthcare history - ✓ Enables cross-hospital price comparison (when hospitals comply)

Data Sample (Hospital A, DRG 470: Major Joint Replacement):

{
  "description": "DRG 470 - Major Joint Replacement",
  "standard_charge": {
    "gross_charge": 65000,
    "negotiated_rates": [
      {
        "payer_name": "Blue Cross PPO",
        "plan_name": "Blue Shield of California PPO",
        "rate": 45000
      },
      {
        "payer_name": "United Healthcare",
        "plan_name": "UHC Choice Plus",
        "rate": 42000
      }
    ],
    "discounted_cash_price": 26000
  }
}

1.4 Why It Fails

Compliance Crisis: - 46% compliance rate (OIG audit, 2024) - Common violations: - Missing negotiated rates (files show only gross charges) - Incomplete payer coverage (major plans omitted) - Outdated data (rates not updated since 2021) - Broken URLs (404 errors on MRF links) - Zero hospitals fined through 2024 (CMS issues warning letters only)

No Validation Requirements: - Hospitals self-attest that files are accurate - No audit that negotiated rates match actual payments - No continuity check that charges = payments + adjustments - No reconciliation with payer-side Transparency in Coverage files

Usability Gap: - Average MRF size: 250 MB - 2 GB (large systems: >5 GB) - Requires technical expertise to parse JSON - Consumer tools show “estimates” not validated costs - No episode-level view (hip replacement broken into dozens of line items: surgery, anesthesia, implant, PT, imaging—no total)

Example Failure (Real-world pattern, anonymized): - Hospital publishes Blue Cross negotiated rate: $45,000 - Blue Cross TiC file shows same hospital, same DRG: $42,000 - Discrepancy: 7% ($3,000) - Resolution process: None exists - Patient impact: Cannot determine true out-of-pocket costs

1.5 Enforcement Mechanisms (and Gaps)

Statutory Penalties (42 U.S.C. § 300gg-18): - Civil monetary penalty: Up to $300/day per violation - Maximum enforcement: $109,500/year per hospital (de minimis for large systems)

CMS Enforcement Actions (2021-2024): - 300 warning letters issued - 0 fines collected - 0 hospitals suspended from Medicare participation

Why Enforcement Fails: - Penalty cap too low (Cedars-Sinai revenue: $3.5B/year → $109K penalty is 0.003%) - CMS resource constraints (12 FTE staff for 6,000 hospital monitoring, per GAO) - Legal challenges (Texas hospital association sued, arguing First Amendment violations—case pending)

2. Transparency in Coverage (85 FR 72158)

2.1 Regulatory History

Enacted: November 2020 (CMS/DOL/Treasury Final Rule) Effective: July 1, 2022 (negotiated rates), January 1, 2023 (out-of-network allowed amounts) Authority: Public Health Service Act § 2715A (ACA § 1311) Scope: Group health plans, health insurance issuers (self-insured ERISA plans included)

2.2 Core Requirements

Health plans must publish three MRFs:

  1. In-Network Negotiated Rates:
    • Provider NPI, TIN, place of service
    • Billing code (CPT, HCPCS, DRG, NDC)
    • Negotiated rate (by plan variant if applicable)
  2. Out-of-Network Allowed Amounts:
    • Historical allowed amounts and billed charges (90-day lag)
  3. Prescription Drug Files:
    • Negotiated rates for pharmacy services

File Format: JSON schema (CMS/DOL-specified, version 1.0.0)

2.3 What It Delivers

Successes: - ✓ Payer-side view complements hospital-side transparency - ✓ Enables validation (in theory) by comparing hospital vs. payer rates - ✓ Covers services beyond hospital (professional fees, outpatient, pharmacy)

Data Volume (2024 estimates): - Total TiC files published: 50+ terabytes - United Healthcare TiC: 3.2 TB compressed (150+ TB uncompressed) - Blue Cross Blue Shield (multi-state): 5+ TB aggregate

2.4 Why It Fails

Accessibility Crisis: - Files too large for standard tools (Excel crashes; SQLite performance unusable) - Requires dedicated infrastructure: 64+ GB RAM, 1 TB+ storage, distributed processing (Spark, Dask) - No consumer-facing interface (regulation requires MRF publication, not usable tools)

No Standardization Across Payers: - Same provider, different identifiers: - United: Uses NPI + TIN + “Provider Name” - Anthem: Uses NPI + TIN + “Billing Entity ID” + “Rendering Provider ID” - Cigna: Nested JSON structure with “Provider Group” → “Individual Provider” - Cannot programmatically join hospital-side MRFs to payer-side TiC without manual data wrangling

No Reconciliation Mandate: - Hospital publishes rate X; payer publishes rate Y (X ≠ Y in ~15% of cases, per academic studies) - No regulatory process to resolve discrepancies - No penalty for inaccurate data (unlike MLR, which requires actuarial certification)

Compliance Monitoring: - CMS/DOL rely on complaints (no proactive auditing) - 3 enforcement actions through 2024 (warnings only, no fines)

Consumer Usage: - <0.1% of enrollees access TiC files (Health Affairs, 2024) - Reason: Files are completely unusable without data engineering skills

3. Medical Loss Ratio (45 CFR Part 158)

3.1 Regulatory History

Enacted: December 2010 (ACA implementation) Effective: January 1, 2011 (first reporting year) Authority: Public Health Service Act § 2718 (ACA § 1001) Scope: All health insurance issuers in individual, small group, large group markets

3.2 Core Requirements

Insurers must:

  1. Spend minimum % of premiums on claims and quality improvement:
    • 80% individual/small group markets
    • 85% large group market
  2. Annual MLR Reporting:
    • Earned premiums (adjusted for taxes, regulatory fees)
    • Incurred claims (including IBNR reserves)
    • Quality improvement activities (up to 0.8% of premiums)
    • Credibility adjustment (for small issuers)
  3. Rebate Calculation:
    • If MLR < threshold → Rebate owed = (Threshold - Actual MLR) × Premiums
    • Rebates paid to enrollees by September 30 following reporting year

Formula: [ = ]

3.3 What It Delivers

Successes: - ✓ $2.3 billion in rebates returned to consumers (2011-2023) - ✓ High compliance (98%+ issuers file on time) - ✓ Actuarial certification required (reduces gaming) - ✓ Transparency: CMS publishes MLR data by issuer, state, market segment

Example (Blue Cross PPO, Individual Market, 2023):

Earned Premiums:        $5,000M
Incurred Claims:        $4,100M
Quality Improvement:      $150M
Taxes & Fees:             $120M

Adjusted Premiums = $5,000M - $120M = $4,880M
MLR = ($4,100M + $150M) / $4,880M = 87.0%
Threshold = 80%
Rebate = $0 (exceeds threshold)

3.4 Why It Fails (for Cost Measurement)

Aggregate-Only Reporting: - MLR tracks total claims spending but not episode-level detail - Cannot answer: “Did claims for DRG 470 reconcile to hospital-reported revenue?” - Cannot validate: “Do ACA subsidy recipients have different utilization patterns?”

No Cross-Validation with Provider Data: - Payer reports $4,100M incurred claims (MLR numerator) - Hospitals report $4,500M net patient revenue (HCRIS aggregate) - $400M gap (9% discrepancy)—never investigated

Loopholes: - Quality improvement broad definition (wellness programs, care coordination, IT investments) - IBNR (Incurred But Not Reported) reserves estimated, not audited until runout - “Mini-med” plans exempt until 2014; grandfathered plans exempt permanently

Enforcement: - Rebate mechanism works (money flows back) - But no penalty for inaccurate MLR reporting beyond rebate correction - No episode-level audit trail

4. Gaps Across All Three Regulations

4.1 The Reconciliation Problem

Current state:

Hospital MRF:              Payer TiC:               MLR Filing:
DRG 470 = $45,000    ≠     DRG 470 = $42,000   ?    Total Claims = $4.1B
Provider 050146            NPI 1234567890            (aggregate only)

HCRIS (Hospital):          Who is right?            No reconciliation
Net Revenue = $3.2B        ↓                        process exists
                           No resolution

The Gap: Each data source is a standalone island. No regulatory framework connects them.

4.2 The Validation Problem

What’s Missing: 1. Episode-level continuity: No requirement that charge = payment + adjustment + patient responsibility 2. Cross-source reconciliation: No requirement that hospital-side rate = payer-side rate (or explanation if different) 3. Financial statement tie-out: No requirement that aggregated MRF/TiC payments reconcile to HCRIS revenue or MLR claims spend

Result: Transparency without accountability.

4.3 The Usability Problem

For Consumers: - MRFs: 250 MB JSON files (unusable) - TiC: 3 TB JSON files (impossible) - Consumer tools: Show “estimates” based on aggregate data, not validated episode costs

For Researchers: - No standardized episode identifier across data sources - Manual data wrangling required (6+ months for typical academic study) - Cannot replicate results (files change, no versioning)

For Policymakers: - Cannot answer: “What does ACA coverage cost per enrollee?” (data exists but not linked) - Cannot validate: “Do hospital mergers raise prices?” (prices disclosed, but not tied to financial outcomes)

5. International Comparison: Why U.S. Lags

5.1 England: NHS Reference Costs

System: All NHS trusts (hospitals) publish standardized reference costs per Healthcare Resource Group (HRG, similar to DRG)

Key Differences from U.S.: - ✓ Validated against financial statements (audited) - ✓ Standardized format (Excel templates, public database) - ✓ Episode-level granularity (not just negotiated rates, but actual cost allocation) - ✓ Publicly accessible dashboard (interactive queries, no terabyte downloads)

Usability: Researcher can answer “What does hip replacement cost at Cambridge University Hospital?” in 5 minutes. U.S. equivalent: 6 months of data engineering.

5.2 Germany: DRG Institute (InEK)

System: All German hospitals report episode-level costs to InEK (Institute for Hospital Reimbursement System)

Key Features: - ✓ Mandatory participation (linked to DRG payment) - ✓ Cost accounting standards enforced (Kostenträgerrechnung) - ✓ Annual benchmarking report (hospital-level, anonymized) - ✓ Continuous refinement of DRG weights based on actual costs

Outcome: German policymakers can model payment reforms using validated cost data. U.S. equivalent: Relies on actuarial assumptions with ±30% confidence intervals.

5.3 Australia: Independent Hospital Pricing Authority (IHPA)

System: IHPA collects episode-level cost data from all public hospitals

Key Features: - ✓ National Efficient Price determined using bottom-up cost data - ✓ Activity-based funding (payment tied to validated episode costs) - ✓ Public transparency (aggregated data published annually)

Lesson: Cost measurement infrastructure precedes payment reform. U.S. attempts payment reform (bundled payments, ACOs) without cost measurement—results in high failure rates.

6. The Path to Reform: Targeted Amendments, Not New Laws

6.1 Amend 45 CFR Part 180 (Hospital Transparency)

Add Validation Requirements: - MRF must pass continuity check: For each service, demonstrate charge decomposition Gross Charge = Negotiated Rate + Patient Responsibility + Contractual Adjustment + Charity + Denial - Residual tolerance: <1% per episode - CMS publishes validation results (pass/fail by hospital)

Increase Penalties: - Link to Medicare payment: Hospitals failing transparency validation lose 0.5% of Medicare DSH payments - Enforcement: Automatic (system-generated), not discretionary

Add Reconciliation Mandate: - Hospital-side MRF rates must reconcile with payer-side TiC rates within 5% tolerance - If discrepancy > 5%, both hospital and payer must file explanation within 60 days

6.2 Amend 85 FR 72158 (Payer Transparency)

Standardize Identifiers: - Require NPI + TIN as primary keys (eliminate proprietary IDs) - Mandate FHIR Encounter ID for episode-level linkage

Add Usability Requirement: - In addition to MRF publication, provide public API for queries - Example: “GET /negotiated-rate?npi=1234567890&cpt=27447” → Returns rates, confidence intervals - API rate limits prevent scraping, but enable consumer/researcher access

Add Validation Requirement: - Payer-reported claims spending (MLR numerator) must reconcile with TiC file aggregation within 2%

6.3 Amend 45 CFR Part 158 (MLR)

Add Episode-Level Validation: - Sample 1% of claims annually, validate against hospital-side revenue and TiC files - Actuarial certification must include statement on episode-level continuity audit

Cross-Reference HCRIS: - MLR claims spending (aggregated across all issuers in state) must reconcile with HCRIS net patient revenue (aggregated across all hospitals in state) within 10% - If gap > 10%, CMS investigates (uncompensated care, out-of-network, data errors)

7. Conclusion: Transparency ≠ Measurement

The United States has more healthcare price transparency regulation than any nation—yet remains the worst at cost measurement. The paradox resolves when we recognize that disclosure without validation is theater, not infrastructure.

Current regulations mandate publication. Reformed regulations would mandate reconciliation, validation, and continuity—using the same data, with minimal additional burden.

The accounting conservation framework demonstrates the technical feasibility. The 2025 government shutdown demonstrates the political urgency. The question is whether regulators will close the gaps.

References

  1. CMS (2019). “Medicare Program; Hospital Price Transparency Requirements.” 84 FR 65524. https://www.federalregister.gov/d/2019-24931

  2. CMS/DOL/Treasury (2020). “Transparency in Coverage.” 85 FR 72158. https://www.federalregister.gov/d/2020-24591

  3. CMS (2010). “Medical Loss Ratio Requirements.” 45 CFR Part 158. https://www.ecfr.gov/current/title-45/part-158

  4. Office of Inspector General (2024). “Hospital Price Transparency Compliance Audit.” OEI-03-22-00370.

  5. Government Accountability Office (2023). “Hospital Price Transparency: CMS Could Improve Compliance and Provide More Information to Consumers.” GAO-23-105319.

  6. Health Affairs (2024). “Transparency in Coverage: Two Years In, High Disclosure But Low Utilization.” 43(3):412-419.

  7. NHS England (2024). “NHS Reference Costs 2023/24.” https://www.england.nhs.uk/costing-in-the-nhs/

  8. InEK (2024). “German DRG System Annual Report.” Institute for Hospital Reimbursement System. https://www.g-drg.de/

  9. IHPA (2024). “National Hospital Cost Data Collection Report.” Independent Hospital Pricing Authority (Australia). https://www.ihpa.gov.au/

Previous in Series: - The 2025 Government Shutdown: When Healthcare Measurement Failure Becomes National Crisis - The Measurement Gap: Why Healthcare Cost Attribution Doesn’t Exist

Next in Series: - Accounting Conservation Framework for Healthcare (forthcoming) - Implementation Roadmap: 3-Phase Rollout (forthcoming)

Document Status: Publication-ready Last Updated: 2025-11-06 Word Count: ~2,600