CLIA and CAP Inspections: What to Expect

A lab with a certificate of compliance is surveyed by its State Agency or CMS. The rule says CMS "may conduct subsequent inspections on a biennial basis or with such other frequency as CMS determines to be necessary" (§ 493.1777(b)), and CMS's own fact sheet puts it plainly: "Surveys happen every 2 years at CoC laboratories" (MLN006270).

A lab with a certificate of accreditation is inspected by its accreditor instead: "An AO inspects laboratories once every 2 years." CMS keeps the right to run validation surveys on a sample of accredited labs and complaint surveys on any of them (§ 493.1780). The seven approved accreditors are on CMS's list of accreditation organizations.

Waiver and PPM labs are "not subject to biennial inspections" (§ 493.1775(a)). CMS may still visit one at any time during its hours to check for an imminent and serious risk to public health, evaluate a complaint, see whether it tests beyond its certificate, or collect information about waived or PPM tests (§ 493.1775(b)).

Who walks in: State Agency surveyors who meet CMS's training rules, sized to your lab. Before the visit they weigh the number of sites under the certificate, the scope and volume of testing, and its complexity. When there is more than one, they survey together.

CMS's manual says "it is generally CMS' policy to use announced surveys" and "For announced surveys, allow up to two weeks' notice." The notice comes in writing, often by email, and may give the date and time. Complaint surveys and follow-up revisits are unannounced, and so is the next attempt after a lab cancels one appointment.

The window is predictable even when the day is not. A first survey is scheduled at least 90 days after the State Agency enters your Form CMS-116, so testing can be watched, and no later than 12 months after. A recertification survey lands between 12 and 6 months before your certificate expires. With the notice, the State Agency sends Form CMS-209, the personnel report, to fill in before the visit or have ready on the day (CMS-209, 09/2025).

CAP states that US labs in its Laboratory Accreditation Program get a two-week notice from the inspection team leader for routine inspections, and that every inspection falls in the 90 days before the lab's anniversary date (CAP Guide to Accreditation). The first inspection is scheduled with your staff.

It opens with an entrance interview. The surveyor shows identification, explains the purpose and schedule, and asks for a contact person. You are told the survey will include "a tour of the laboratory, record review, observation, and interviews with personnel involved in the preanalytic, analytic, and postanalytic phases", and that an exit conference may follow.

CMS calls its method the outcome-oriented survey process. The surveyor samples a cross-section of your operation to judge whether your own quality system finds and fixes problems. If it does, and nothing warrants a deeper look, the survey ends there. CMS also describes the survey as educational, "especially on the initial laboratory surveys".

Expect three things at once. Observation: specimen processing, testing, QC being run, and whether reagents and equipment match your test menu. Interviews: open questions to testing staff, with each person's name or code noted; managers generally should not sit in. Record review: a cross-section going back to the last survey. The SOM is plain that surveyors should not let the lab choose which records they review, and should avoid predictable patterns.

The regulation backs each step: the surveyor may have you test samples, including PT samples, interview any staff, watch every phase of testing, enter every area under the certificate, and take copies of records (§ 493.1773(b)).

CMS tells State Agencies to ask labs to have these "accessible and retrievable at the time of survey" (SOM § 6102.1). The regulation adds that everything must be retrievable "within a reasonable time frame during the course of the inspection".

Two reviews go deeper than most labs expect. On personnel, a first survey checks the director, consultants, supervisors and a sample of testing personnel; later surveys check every change since last time plus a new sample. Surveyors want the document itself, at the highest level the position needs (CLIA personnel requirements). On PT, they check enrollment and the twice-yearly checks "for the entire period of time the laboratory has been performing each test or procedure (not just shortly before the survey)", and they look for PT samples talked about or sent out before the deadline (the CLIA proficiency testing rules set out each one).

Every row above is an item in the CLIA inspection checklist, with its section of 42 CFR 493, so you can mark it off area by area and print it.

CAP describes a peer model: a team led by a pathologist or lab director, made of practicing laboratory professionals, matched to your lab's size and scope, with a peer inspector for each discipline. For molecular pathology, clinical biochemical genetics, cytogenetics, histocompatibility and flow cytometry it sends specialty inspectors. It says routine inspections of a US or Canadian lab are "typically completed within one day" (CAP peer inspections).

Its method is R.O.A.D.: read a sample of documents, observe work against your written procedures, ask open questions, and discover by following specimens through the process, a tracer. The team inspects with the same customized checklist you were sent, built from your test menu. At the summation conference the team leader hands the director a preliminary summary of findings (CAP Guide to Accreditation).

The CMS survey closes with an exit conference, usually with the director, administrator or supervisor. The surveyor describes what is out of compliance in plain terms, deliberately "without using data tags or regulation citations", and you may answer and add information on the spot. What you hear is preliminary. It is also the start of the period in which you can correct things.

The official findings arrive on Form CMS-2567, the "Statement of Deficiencies, Plan of Correction and Allegation of Compliance". Each finding sits beside a D-tag, the code tied to a section of 42 CFR 493. CMS's manual: "The SA sends … the laboratory a copy of the Form CMS-2567 within 10 working days of completing the survey. If there are citations, the SA allows the laboratory 10 calendar days to complete and return a PoC or credible AoC after receipt." The form also "Discloses to the public the laboratory's deficiencies and what is being done to remedy them".

Your plan of correction goes opposite each D-tag: what you will do and by when. CMS lists four elements a plan must carry: corrective action for patients found affected, how you identified other affected patients, the systemic change so it does not recur, and how you will monitor it. Correction dates must fall "within 12 months after the 'date survey completed'".

Findings come in two weights. A standard-level deficiency is a specific failure. A condition-level deficiency is so serious that, in the SOM's words, correction becomes "a condition for allowing the laboratory to continue with patient testing"; left uncorrected it can limit a specialty or the whole certificate. The surveyor must cite four conditions whenever they are not met, harm or no harm: PT enrollment, PT referral, unsuccessful PT participation, and personnel qualifications. Above both sits immediate jeopardy, for noncompliance that has caused or is likely to cause serious injury, harm or death.

CAP runs its own clock. Its guide says the lab must "Submit all responses online within 30 calendar days after the inspection date", and to "Anticipate an accreditation decision within 50 days of the inspection date" (CAP Guide to Accreditation). COLA says that when its experts finalize the survey report with non-compliant criteria, you build and carry out a corrective action plan and send documentation (COLA).

CMS publishes its most frequent citations. For 2024 the top three standard-level deficiencies were storage conditions, competency policies and the procedure manual, and the top condition-level citation was proficiency testing.

The rest of the 2024 standard-level list reads like a bench audit: procedure manual contents (D5403), expired reagents (D5417), twice-yearly accuracy checks for tests without PT (D5217), performance verification of new systems (D5421), the director's PT duties (D6016), maintenance (D5429) and test report contents (D5805).

Most of these are records problems, not testing problems. A temperature log with no written range can be cited under D5413 even when every reading was fine, because § 493.1252(b) asks you to define the criteria first. For the tools labs use to close these gaps, see lab temperature monitoring systems and competency assessment software, and for the rule itself, what the competency rules ask.

The survey reviews records "encompassing the time period since the last certification survey" (SOM § 6116.4), so a week of tidying cannot fix two years of gaps. What works is a standing habit: run the CLIA inspection checklist each quarter, fix what is open, and keep the last CMS-2567 and your plan of correction where you can lay hands on them.

Labs that would rather not keep this on paper use software that tracks competency, PT, corrective actions and documents in one place; see inspection-readiness software for CLIA labs. If the gap is oversight itself, such as a director who cannot make the required on-site visits, an outside CLIA lab director or consulting service can fill it.

CAP's lines on this page are CAP's own statements, from its accreditation pages and its Guide to Accreditation (November 2025), read 23 October 2026. Confirm the current process with CAP before you plan around it.