Skip to content

CMS-2567: Reading Deficiencies and Writing a Plan of Correction

10 min read

A CLIA survey with findings ends in Form CMS-2567, the statement of deficiencies. This guide reads the form box by box, sets out the 10-day clock, shows what CMS counts as an acceptable plan of correction with a worked example, and follows the Subpart R path for findings left open. Every rule here was read from CMS's survey manual and 42 CFR 493 on 23 October 2026.

Frosted-glass render of an open folder of blank sheets with one tinted block
A1
One block marked out of many: a deficiency, its D-tag and the plan written opposite it.

How a CMS-2567 is laid out

Form CMS-2567 is the “Statement of Deficiencies and Plan of Correction”. The surveyor fills the left half; you fill the right half and sign the last page. This is the form's own layout, with one made-up citation in it.

X1Provider/Supplier/CLIA identification number

12D3456789

X2Multiple construction

X3Date survey completed

the last day on site

Name of facility surveyed, facility address, accrediting organization performing survey (if applicable)

The deficiency columns of Form CMS-2567, with one illustrative citation
(X4) ID prefix tagSummary statement of deficienciesID prefix tagPlan of correction(X5) Completion date
D5413§ 493.1252(b) Based on a review of temperature logs and an interview with the testing person, the lab had no written acceptable range for the reagent refrigerator for the months reviewed.D5413The manufacturer's storage range written into the procedure; logs reviewed for affected runs; daily sign-off and a monthly director review. See the four elements below.a dated day
X6Laboratory director's or provider/supplier representative's signature, title, date
Box names from CMS's blank Form CMS-2567; the CLIA number and the citation are made up.
  1. X1Your CLIA number, ten characters with a D in third place. When several sites share one number, the summary text names the site each finding came from.
  2. X3The date survey completed. The 12-month limit on every correction date counts from this box, not from the day the form arrives.
  3. X4The D-tag. Proficiency testing tags sit in the D2000s, the quality systems of Subpart K in the D5000s (D5200 general systems, D5300 preanalytic, D5400 analytic, D5800 postanalytic), and personnel in the high D5900s and the D6000s.
  4. SummaryThe regulation cited, then the evidence: what the surveyor read, saw or was told. Read it for the scope, one record or every record, because the plan has to cover the same scope.
  5. X5Your completion date, one per tag. An explicit date is required; a correction already made gets the date it was made.
  6. X6The laboratory director's or an authorized official's signature, title and date. The State Agency checks for it before it accepts the plan (SOM § 6134).

A finding written under a condition, such as Analytic Systems at § 493.1250 (D5400), carries more weight than the standard-level tags beneath it, and changes what you send back: see plan or allegation below.

Frosted-glass close-up of a blank sheet with small tags clipped down its edge
B1
Tags down the margin: each finding is filed under its D-tag, and so is your answer.

The deadlines

10 working days

for the State Agency to send you the CMS-2567 after the survey ends

SOM Ch. 6 § 6132

10 calendar days

to complete and return a plan of correction or credible allegation of compliance, counted from receipt

SOM Ch. 6 § 6132

12 months

the latest correction date a plan may carry, counted from the date survey completed (X3)

SOM Ch. 6 § 6132.2

The 10 calendar days start when the form reaches you, by email, post or fax, not when the surveyor leaves. If you need longer to work out the fix, CMS's manual tells the State Agency to ask for a preliminary plan within the 10 days, “as precisely as present information permits”, followed by a more specific one. A revisit to verify correction happens only once the agency has an acceptable plan.

The form is public. The findings and your plan can be released, with patient names, complainants and other identifying details blocked out, after you have had a chance to review them. Write every line as if a competitor will read it. CMS's manual says a plan must never allude to another laboratory or malign an individual.

Deadline

Diary the day it arrives

Log the receipt date the day the CMS-2567 lands and count 10 calendar days, weekends included. Immediate jeopardy runs on shorter time frames of its own (SOM § 6284).

What an acceptable plan of correction contains

The laboratory must submit a plan of correction that is acceptable to CMS in content and time frames.

42 CFR § 493.1816(a)

CMS's manual spells out “acceptable”. You write the plan opposite the D-tag it answers, with an expected completion date, and it must carry four elements. The right-hand column shows what each looks like for the made-up storage citation above.

The four required elements of a plan of correction, with an example for one citation
No.Required elementFor the D5413 example
1Corrective action for patients the survey found affectedRuns from the unmonitored weeks listed; the director's review of each, and any report corrected and re-sent.
2How you identified other patients who may have been affectedEvery test using reagents from that refrigerator in the period, pulled from the LIS by date and instrument.
3The correction or systemic change, so it does not recurAcceptable range from the package insert written into the procedure manual; the log form now prints the range.
4How the corrective action is monitoredDaily sign-off by the tester; monthly review by the technical consultant, filed with the QC records.

The manual adds that the plan “must be specific and time frames stated and realistic”. Corrections may be dated after the day you submit, but every date must fall “within 12 months after the ‘date survey completed’”. A fix already in place gets the date it was made. The director or another authorized official signs and dates the form, and the State Agency checks all four elements and the signature before it accepts the plan.

You may also disagree. The manual lets a lab enter its disagreement with a finding and attach documentation that the requirement is met. If the agency does not resolve it, put the protest in writing in a form fit for public release, and still give a plan and a time frame.

Takeaway

A plan that fixes only the record the surveyor saw misses element 2, which asks you to find everyone else the same practice touched. The scope of your look-back is the part to get right. Records you can pull in minutes, such as an LIS search by date and instrument, make that part short; see inspection-readiness software for tools built around it.
Frosted-glass render of a reagent bottle, control vials, a tube rack and a slide box set in order
C1
A corrected bench, set back in order: the plan describes the fix and how you will keep it.

Plan of correction or allegation of compliance

The 2567 asks for one of two things, and which one depends on the level of the finding. A plan of correction says what you will fix and by when. An allegation of compliance says you have already fixed it.

Plan of correction and allegation of compliance compared, from CMS's State Operations Manual
AspectPlan of correctionAllegation of compliance
Asked for whenThe findings are standard-levelA condition is out of compliance
Future datesAllowed, within 12 months of the date survey completedNone for the condition or the standards cited under it; standards outside the condition may carry future dates
Must containThe four elementsThe same four elements, plus a statement that is realistic, shows the problem resolved, and comes from a lab with a record of correcting when required
How it is checkedAn offsite follow-up within 12 months, normally by email, post or phoneAn onsite revisit, except for PT enrollment, unsuccessful PT and personnel qualification conditions, which are checked offsite

Four conditions are cited whenever they are not met, harm or no harm: proficiency testing enrollment, proficiency testing referral, unsuccessful proficiency testing participation and personnel qualifications. Each one, once cited, calls for an allegation rather than a plan. Source: SOM Chapter 6, §§ 6130.5 and 6132.3.

Deficiency risk

The same plan twice

A repeat deficiency is one cited again after a prior survey. If your plan for it matches the plan you sent last time, CMS's manual says it is not acceptable. The State Agency gives no more than one further chance before it can send the case to CMS for enforcement (SOM § 6134.1). Fix the cause, not the record.

If the plan is missed: the Subpart R path

Enforcement sits in Subpart R of 42 CFR 493. What happens next turns on the level of the finding, and on one date: 12 months after the last day of the inspection.

What CMS does at each level of deficiency, and what follows if it is not corrected
Level of findingFirst actionIf it is not corrected
Standard-level only§ 493.1816Submit a plan of correction acceptable to CMS in content and time frames.Not corrected within 12 months after the last day of inspection: CMS cancels the lab's approval to receive Medicare payment and gives notice of intent to suspend, limit or revoke the certificate, with the right to a hearing.
Condition-level, no immediate jeopardy§ 493.1814CMS may cancel Medicare approval or suspend, limit or revoke the certificate. If it imposes neither, it imposes one or more alternative sanctions; for unsuccessful PT it may require training and technical assistance instead (§ 493.1838).Not corrected within 12 months after the last day of inspection: Medicare approval is cancelled and, after a revisit, CMS proposes to suspend, limit or revoke the certificate.
Immediate jeopardy§ 493.1812The lab must act at once to remove the jeopardy; CMS may add alternative sanctions.Jeopardy still there on revisit: CMS suspends or limits the certificate no earlier than 5 days after notice, and may later revoke it. CMS may also go to court to stop the testing.

The sanctions. The principal CLIA sanctions are suspension, limitation or revocation of the certificate (§ 493.1806); a Medicare lab can also lose its approval to be paid (§ 493.1807). The alternatives are a directed plan of correction (§ 493.1832), State onsite monitoring and a civil money penalty (§ 493.1834), plus suspension of part or all of a Medicare lab's payments. Alternative sanctions are not used on a lab with a certificate of waiver.

The notices. Before an alternative sanction, CMS sends written notice of the noncompliance, the sanction and its rationale, and gives at least 10 days to respond (§ 493.1810(a)). A civil money penalty starts to accrue 5 days after the notice of intent when there is immediate jeopardy and 15 days after it when there is not. Its range is set in § 493.1834 and adjusted annually under 45 CFR part 102.

The way back. If at a revisit you show credible evidence that you were compliant earlier, the sanctions lift as of that earlier date (§ 493.1820(b)). Once every condition is fixed, CMS may accept a revised plan for leftover standard-level findings, but not beyond 12 months from the last day of the original inspection. A lab has 60 days from a notice of sanction to request a hearing before an administrative law judge (§ 493.1844).

Caution

Proposed, not in force

CMS's proposed rule CMS-3478-P (8 October 2026; comments close 7 December 2026) would rescind the 6-month wait before reinstatement after PT failure and keep alternative sanctions, including patient notification, running until a certificate is revoked rather than when it is suspended or limited (Federal Register). Today's text above stays the rule until a final rule says otherwise.

Takeaway

A standard-level finding becomes a Medicare and certificate problem only if it is still open 12 months after the survey. Close it well inside that, and keep the proof dated: credible evidence of an earlier fix is what lifts a sanction early.

The D-tags cited most in 2024

CMS publishes the citations it writes most. These are its 2024 lists: the ten most frequent standard-level tags, then the two most frequent conditions. “Labs” is the number of labs cited, and the share is CMS's percentage of all labs (CMS Top 10, 2024).

CMS's most frequent CLIA deficiencies in 2024, standard-level and condition-level
D-tagWhat was citedLabsShareRead next
Standard-level
D5413Storage and operating conditions defined, monitored and documented§ 493.1252(b)8185.0%Temperature monitoring
D5209Competency assessment policies§ 493.12357784.8%Competency rules
D5401Procedure manual available and followed§ 493.1251(a)6353.9%
D5403Procedure manual contents§ 493.1251(b)6093.7%
D5417Expired, deteriorated or substandard supplies in use§ 493.1252(d)6073.7%Inventory software
D5217Twice-yearly accuracy check for tests without PT§ 493.1236(c)(1)5483.4%PT guide
D5421Performance verified on an unmodified FDA-cleared test system§ 493.1253(b)(1)4512.8%
D6016Director ensures PT samples are tested as Subpart H requires§ 493.1407(e)(4)(i)4512.8%Director rules
D5429Maintenance as the manufacturer defines it§ 493.1254(a)(1)4492.8%
D5805Test report content§ 493.1291(c)4172.6%What an LIS must print
Condition-level
D2016Successful participation in proficiency testing§ 493.8037384.39%PT guide
D6000Moderate complexity laboratory director§ 493.14037094.22%Director services

Five of the ten standard-level tags (D5413, D5209, D5401, D5403, D5805) turn on what is written down: criteria, policies, the manual, the report. Those are the easiest to find before a surveyor does: walk the CLIA inspection checklist against your own files, and read what to expect on survey day. If a director finding (D6000 or D6016) is on your form, the lab director and consulting services comparison covers who can step in.

Related on AssayDeck