CMS Emergency Preparedness Rule: What 42 CFR 482.15 Requires for Hospital Backup Power
The CMS Emergency Preparedness Rule is the federal regulation that ties hospital emergency readiness directly to Medicare and Medicaid reimbursement. Unlike the Joint Commission — which is a voluntary accreditation body — CMS is the federal government. Non-compliance with 42 CFR 482.15 can result in the loss of Medicare and Medicaid participation, which for most hospitals would be financially catastrophic.
This guide explains what 42 CFR 482.15 requires for emergency power systems, how it connects to NFPA standards, what the 2024-2025 updates change, and how the 96-hour planning requirement actually works. Every requirement is cited to its regulatory source so you can verify it against the Code of Federal Regulations.
Quick navigation:
- What 42 CFR 482.15 requires
- The four core elements
- Emergency power and generator requirements
- The 96-hour planning requirement
- NFPA standards incorporated by reference
- 2024-2025 updates
- CMS vs. Joint Commission: understanding the overlap
- Survey process and enforcement
- FAQ
What 42 CFR 482.15 Requires
The CMS Emergency Preparedness Rule, codified at 42 CFR 482.15, was finalized on September 16, 2016, in the Federal Register and took effect on November 15, 2017. It establishes national emergency preparedness requirements for all 17 categories of Medicare- and Medicaid-participating providers and suppliers.
For hospitals specifically, the rule is a Condition of Participation (CoP) — meaning it is not optional. A hospital that does not comply is at risk of losing its ability to bill Medicare and Medicaid, which collectively account for approximately 60% of revenue at the average US hospital.
The rule was developed in response to lessons learned from major disasters, including Hurricane Katrina (2005), the Joplin tornado (2011), and Hurricane Sandy (2012). These events exposed critical gaps in healthcare facility preparedness, particularly in emergency power, communications, and coordination with external agencies.
Source: Federal Register, September 16, 2016
The Four Core Elements
42 CFR 482.15 requires hospitals to develop and maintain an emergency preparedness program built on four core elements:
1. Risk Assessment and Emergency Plan (482.15(a))
Hospitals must develop an emergency plan based on an all-hazards approach — a comprehensive assessment that considers both natural and man-made disasters relevant to the facility’s geographic location and patient population. The plan must be reviewed and updated at least annually.
The all-hazards approach was updated in CMS’s revised Appendix Z of the State Operations Manual to explicitly include emerging infectious diseases, reflecting lessons from the COVID-19 pandemic.
2. Policies and Procedures (482.15(b))
Hospitals must develop and implement policies addressing:
- Subsistence needs: food, water, medical supplies, and pharmaceuticals
- Alternate energy sources, including emergency and standby power systems
- Sewage and waste disposal
- The role of volunteers and staff during emergencies
- Patient evacuation procedures
- Means to shelter in place
Under 482.15(b)(1)(ii)(C), hospitals must specifically address “a means to provide for the continuation of essential building utility systems, including heating, cooling, lighting, medical gas, fire alarm, and other safety systems.”
3. Communication Plan (482.15(c))
A communication plan that coordinates patient care within the facility and with external entities, including local emergency management agencies, other healthcare providers, and volunteers.
4. Training and Testing (482.15(d))
The emergency plan must be exercised through drills, tabletop exercises, or actual emergency activations. Hospitals must conduct at least two exercises per year — one of which must be a full-scale, community-based exercise (or an actual emergency activation). Training must be provided to all staff at initial hire and annually thereafter.
Emergency Power and Generator Requirements
42 CFR 482.15 does not prescribe specific generator models, sizes, or configurations. Instead, it requires hospitals to address emergency power through their risk assessment and policies, incorporating the NFPA standards referenced by CMS.
What CMS actually requires
Per CMS Tag E-0041, hospitals with emergency and standby power systems must comply with:
- NFPA 99 (2012 edition) — Health Care Facilities Code
- NFPA 110 (2010 edition) — Standard for Emergency and Standby Power Systems
- NFPA 101 (2012 edition) — Life Safety Code
CMS has clarified that 42 CFR 482.15 “does not require facilities to have or install generators or any other specific type of energy source.” However, a hospital’s risk assessment will almost always conclude that an emergency generator is necessary to maintain patient safety during power outages. And once a hospital has a generator, NFPA 99, 110, and 101 compliance becomes mandatory under CMS.
What CMS surveyors check
CMS surveyors verify emergency power compliance under Tag E-0041 by reviewing:
- Generator inspection and testing documentation (per NFPA 110)
- Transfer switch testing records
- Fuel supply adequacy and quality
- Essential Electrical System configuration (per NFPA 99)
- Emergency lighting and exit sign functionality
- Staff knowledge of emergency power procedures
The 96-Hour Planning Requirement
The 96-hour fuel rule is one of the most misunderstood requirements in healthcare emergency preparedness. Here is what it actually requires:
The Joint Commission interpretation
The Joint Commission’s Emergency Management standard (EM.02.02.09) requires hospitals to identify an alternative means of providing fuel for building operations, generators, and essential transport for 96 hours. This is a planning requirement — not necessarily an on-site storage requirement.
The NFPA 110 classification
Under NFPA 110, hospital generators are typically classified as Class X, meaning the Authority Having Jurisdiction (AHJ) determines the required fuel storage duration. Most AHJs require between 24 and 96 hours of on-site fuel storage.
Practical compliance
Most hospitals comply through a combination of:
- On-site fuel storage for 24-48 hours of continuous operation at full rated load
- Contractual fuel delivery agreements with at least two suppliers
- A documented plan showing how 96 hours of fuel availability will be maintained
Use the 96-Hour Fuel Rule Calculator to determine your facility’s specific fuel storage needs based on generator size, load profile, and tank capacity.
Whether you store fuel for 24 hours or 96 hours, NFPA 110 requires annual fuel quality testing to ASTM D975 standards. Degraded fuel is a reliability risk regardless of how much you store.
NFPA Standards Incorporated by Reference
CMS incorporates specific editions of NFPA standards by reference. This is important because newer editions of these standards exist, but CMS surveys are conducted against the editions listed in the regulation.
| Standard | Edition Required by CMS | Key Requirements |
|---|---|---|
| NFPA 99 | 2012 | Health Care Facilities Code — defines Essential Electrical System (EES) types, risk categories, and performance requirements |
| NFPA 110 | 2010 | Emergency and Standby Power Systems — classification (Type 10, Class X, Level 1), testing and maintenance, fuel storage |
| NFPA 101 | 2012 | Life Safety Code — egress lighting, fire alarm power, exit signs |
Why the edition matters
NFPA releases updated editions regularly. The 2024 edition of NFPA 99, for example, contains requirements that differ from the 2012 edition. CMS surveys are conducted against the 2012 edition unless and until CMS formally adopts a newer edition through rulemaking. Some state regulations may reference more recent editions, creating situations where state and federal requirements diverge.
For the full scope of NFPA 110 testing requirements, see our NFPA 110 requirements guide.
2024-2025 Updates
CMS has made several updates that affect emergency preparedness:
November 2024 Final Rule
On November 27, 2024, CMS issued a Final Rule updating the Medicare Conditions of Participation for hospitals (42 CFR Part 482) and Critical Access Hospitals (42 CFR Part 485). Key changes include:
- Three-phase rollout from 2025 through 2027 for new emergency services readiness standards
- Phase 1 compliance deadline: July 1, 2025 — requires compliance with a new “Emergency Services Readiness” standard under 42 CFR 482.55 and 485.618
- Enhanced transfer protocols for patients requiring services not available at the originating facility
Appendix Z Revisions
CMS revised Appendix Z of the State Operations Manual to:
- Add emerging infectious diseases to the all-hazards approach definition
- Provide clarifications on portable and mobile generators under alternate source power and emergency standby systems
- Update survey guidance for emergency power system evaluation
Implications for hospitals
The portable/mobile generator clarification is particularly relevant for hospitals that rely on portable generators as part of their emergency power strategy. CMS surveyors will now evaluate whether portable generators:
- Are included in the facility’s emergency plan with documented connection procedures
- Have been tested as part of emergency drills
- Meet NFPA 110 requirements when used as part of the EPSS
- Have adequate fuel supply planning
CMS vs. Joint Commission: Understanding the Overlap
Many hospitals hold Joint Commission accreditation, which grants them “deemed status” — meaning the Joint Commission survey substitutes for a direct CMS survey. However, this does not eliminate CMS oversight.
| Aspect | CMS (42 CFR 482.15) | Joint Commission (EC.02.05.07) |
|---|---|---|
| Authority | Federal regulation | Voluntary accreditation |
| Consequence of non-compliance | Loss of Medicare/Medicaid participation | Loss of accreditation; triggers CMS survey |
| Generator testing requirements | References NFPA 110 (2010) | References NFPA 110 (2010) |
| Survey frequency | Validation surveys (~5% of accredited hospitals annually) | Every 3 years (unannounced) |
| Emergency plan scope | All-hazards, community-based | Emergency Management chapter |
| 96-hour fuel planning | Through NFPA 110 / risk assessment | EM.02.02.09 (explicit 96-hour plan) |
CMS conducts validation surveys on approximately 5% of Joint Commission-accredited hospitals each year, according to AHA data. These surveys compare CMS findings against Joint Commission survey results. When discrepancies are found, it raises questions about the effectiveness of the accreditation process.
For a detailed breakdown of Joint Commission generator testing requirements, see our companion guide.
Survey Process and Enforcement
How CMS surveys work
CMS surveys are conducted by State Survey Agencies under contract with CMS. For hospitals with deemed status (Joint Commission accreditation), CMS conducts validation surveys on a sample basis.
Surveyors use the State Operations Manual (SOM) as their guide. Emergency preparedness is evaluated under Tags E-0001 through E-0042, with Tag E-0041 specifically addressing emergency and standby power systems.
Deficiency types
CMS issues two types of deficiency citations:
- Standard-level deficiency: The hospital is out of compliance with one aspect of the regulation but the issue is limited in scope. Requires a corrective action plan.
- Condition-level deficiency: The hospital is not in substantial compliance with the Condition of Participation. This is serious — CMS can initiate termination proceedings if the deficiency is not corrected within specified timeframes.
Penalties
Unlike nursing facilities, CMS does not have statutory authority to levy civil monetary penalties against hospitals for CoP violations. However, the ultimate penalty — termination of the Medicare provider agreement — is far more severe than any fine. A hospital that loses Medicare participation loses access to approximately 60% of its revenue.
State-level penalties vary. In California, for example, administrative penalties for licensing violations can reach $75,000 for a first deficiency constituting immediate jeopardy, $100,000 for a second, and $125,000 for subsequent deficiencies, according to the California Department of Public Health.
Compliance Checklist
Emergency plan (annual review required):
- [ ] All-hazards risk assessment completed and documented
- [ ] Emergency plan addresses alternate energy sources
- [ ] Plan includes 96-hour fuel supply strategy
- [ ] Emerging infectious diseases addressed (per 2024 Appendix Z update)
- [ ] Plan coordinated with local emergency management agencies
Policies and procedures:
- [ ] Subsistence needs (food, water, medical supplies) for 96 hours
- [ ] Generator operation procedures documented
- [ ] Portable/mobile generator connection procedures documented
- [ ] Patient evacuation procedures
- [ ] Shelter-in-place procedures
Emergency power system:
- [ ] Generator(s) inspected weekly per NFPA 110
- [ ] Monthly load tests at 30%+ nameplate rating for 30 minutes
- [ ] Transfer switches tested monthly
- [ ] Triennial 4-hour load test completed
- [ ] Annual fuel quality testing per ASTM D975
- [ ] Fuel delivery contracts current and documented
- [ ] All testing documented with dates, readings, and corrective actions
Training and exercises:
- [ ] Two exercises per year conducted
- [ ] At least one full-scale community-based exercise (or actual emergency)
- [ ] All staff trained at hire and annually
Need help with emergency power compliance? FuelCare provides fuel testing and tank compliance services for hospitals across the western United States. Schedule a consultation →
Stay Current on CMS Compliance
CMS rules evolve. New final rules roll out in phases. Get concise, no-spam updates on CMS Conditions of Participation, NFPA standards, and emergency preparedness requirements.
Subscribe to compliance updates →
FAQ
What is the CMS Emergency Preparedness Rule?
The CMS Emergency Preparedness Rule (42 CFR 482.15) is a federal regulation establishing national emergency preparedness requirements for all Medicare- and Medicaid-participating healthcare facilities. It was finalized in September 2016 and took effect November 15, 2017. Hospitals must comply as a Condition of Participation in the Medicare program.
Does 42 CFR 482.15 require hospitals to have generators?
Not explicitly. CMS has clarified that the rule does not require facilities to install generators or any specific energy source. However, the risk assessment required by the rule will almost always conclude that emergency generators are necessary for patient safety. Once a hospital has a generator, it must comply with NFPA 99, 110, and 101.
What happens if a hospital does not comply with 42 CFR 482.15?
Non-compliance can result in a condition-level deficiency citation. CMS can initiate termination of the hospital’s Medicare provider agreement, which would cut off Medicare and Medicaid reimbursement — approximately 60% of revenue for the average US hospital.
Does CMS require 96 hours of on-site fuel storage?
No. The 96-hour requirement is a planning standard, not a storage mandate. Hospitals must demonstrate they can maintain generator fuel for 96 hours through on-site storage, fuel delivery contracts, or a combination. NFPA 110 classifies hospital generators as Class X, leaving fuel storage duration to the Authority Having Jurisdiction.
What changed in the November 2024 CMS Final Rule?
The November 2024 Final Rule introduced a three-phase rollout of new emergency services readiness standards from 2025-2027. Phase 1 (effective July 1, 2025) requires compliance with new emergency services and transfer protocol standards. CMS also revised Appendix Z to address portable generators and emerging infectious diseases.
What NFPA standards does CMS require hospitals to follow?
CMS incorporates by reference NFPA 99 (2012 edition), NFPA 110 (2010 edition), and NFPA 101 (2012 edition). These standards govern the Essential Electrical System design, generator testing and maintenance, and life safety requirements respectively.
How does CMS relate to Joint Commission accreditation?
Joint Commission accreditation grants deemed status, substituting the Joint Commission survey for a direct CMS survey. However, CMS conducts validation surveys on approximately 5% of accredited hospitals annually to verify compliance. Both reference the same NFPA 110 (2010) testing requirements for generators.