How a bed-count fine repriced hospital price secrecy
CMS’s July 2021 proposal scaled price transparency penalties to hospital size, so the largest systems lost their cheapest option. Compliance then became a standing data product whose most attentive readers were payers, employers and competitors, not patients.
Looking Back revisits one week at a time, from January 2020 to today, and asks what it meant for the banks, health systems and public agencies we serve. The series was written in 2026, with the benefit of hindsight, and each article says which week it looks back on.
The week
On July 19, 2021, CMS released its proposed Hospital Outpatient Prospective Payment System rule for calendar year 2022. It included a proposal to raise the civil monetary penalties for hospitals that did not comply with the hospital price transparency rule, in effect since January 1, 2021. That rule required each hospital to post a machine-readable file of its standard charges, including payer-specific negotiated rates, and a consumer-friendly display of shoppable services or a price estimator. Reviews by researchers and journalists in the first half of 2021 had found widespread non-compliance. The maximum penalty was $300 a day, whatever the hospital’s size. CMS proposed keeping $300 a day for hospitals with 30 or fewer beds and charging larger hospitals $10 per bed per day, up to $5,500 a day. CMS finalized the change in November 2021, effective January 1, 2022.
A fine of $300 a day comes to about $110,000 a year. For a large hospital, that was small next to what executives feared from publishing negotiated rates: competitors seeing their prices and payers using them at the bargaining table. Some hospitals made that trade openly in 2021, posting incomplete files or none at all. The July proposal was designed to make the trade unattractive for the hospitals where it mattered most. Its consequences come in three parts, in the order hospitals met them: the arithmetic of the new penalty and whom it changed, the build of a file that turned out to be a data engineering problem, and the readers who actually used what hospitals published.
The arithmetic: a penalty sized to the hospitals that held out
Under the proposal, a hospital with more than 550 beds would face the maximum of $5,500 a day, just over $2 million a year. A 300-bed hospital would face $3,000 a day. Small and critical access hospitals stayed at $300. Penalties apply per hospital, so a system with a dozen large campuses faced exposure in the tens of millions of dollars a year.
The scaling was deliberate. A flat fine is a rounding error for a large academic medical center and a real cost for a rural hospital. Tying the penalty to beds put the pressure on the large urban systems whose negotiated rates were most commercially sensitive and most valuable to the market.
The new figure also changed internal politics. While non-compliance was cheap, the decision sat with managed care and strategy leaders weighing competitive risk. Once it carried a seven-figure annual price and a credible enforcement signal, it moved to the chief financial officer and the board as a compliance exposure, and the argument became how to comply well. CMS backed the signal with action, issuing its first penalties in June 2022.
The build: a file that is really a pipeline
A machine-readable file of all standard charges sounds like an export. It is not. Negotiated rates live in payer contracts and contract management systems, often expressed as percentages of charges, per diems, case rates, carve-outs and fee schedules tied to a payer’s own codes. Many do not reduce to one dollar figure for an item or service. Converting them into a consistent file for every payer and plan meant interpreting contract language, joining the chargemaster with contract terms, and making judgment calls that someone had to own.
The early files showed the strain. Some were so large that ordinary tools could not open them. Others omitted payers, used inconsistent column names or mixed formats within the same file. Without a standard template, comparing hospitals was slow even for experts.
Hospitals that handled this well treated the file as a data product. That meant a defined schema, an automated pipeline from source systems, validation rules such as checking that every active payer contract appears and that rates fall within plausible ranges, version control, a documented refresh schedule, and a named owner. The work required data engineers, revenue cycle analysts and contract managers together, and it did not end. Contracts renew, plans are added, chargemasters change. A one-time compliance project decays within a year.
The same foundation also served the second requirement. The consumer-facing display or estimator depends on the same negotiated rates, combined with a patient’s benefit details. Hospitals that bought an estimator tool without fixing the underlying contract data paid twice and still produced unreliable estimates. Those that built one governed source of negotiated rates fed both from it.
The readers: payers, employers and competitors
The rule was presented as a way to help patients shop. In practice, few patients opened machine-readable files, and use of consumer tools was uneven. The heaviest users were organizations: health plans checking whether they paid more than rivals, employers and their benefits advisers preparing for negotiations, data companies aggregating prices into products, researchers, journalists and competing hospitals.
That shifted the economics of the files. Published rates narrow the information gap in hospital-payer negotiations. A hospital priced well above its peers for common services should expect that comparison to appear across the table. A hospital priced below peers has evidence for a rate increase. Either way, the data that compliance teams publish is market intelligence, and the managed care team should read competitors’ files as carefully as payers read theirs.
Quality matters here in a second way. An error in a published file is not just a compliance defect. It is a number a payer or employer may quote back in a negotiation, or a journalist may cite. Validation before publication protects the hospital’s position as well as its compliance record.
The three parts connect. The scaled penalty made non-compliance costly for the hospitals with the most sensitive rates. The build turned compliance into a permanent data function. The readers turned that function’s output into a negotiating input. A hospital that saw only the first part paid for compliance and got nothing else from it.
With hindsight
From 2026, the July 2021 proposal began a steady tightening. CMS issued its first price transparency penalties in June 2022, against two hospitals, and more followed. Later rules required a standard file template from July 2024, an attestation that files are accurate and complete, and more specific data elements. A February 2025 executive order directed agencies to strengthen enforcement and move toward disclosure of actual prices, and CMS followed with rulemaking requiring more detail on amounts actually paid, so hospitals should check current requirements. The parallel Transparency in Coverage rule required health plans to publish negotiated rates from July 2022, creating a second large dataset that researchers, employers and vendors combine with hospital files. Patient shopping has stayed limited. Rate comparison in contract negotiations has become routine, which is where the files have had their clearest economic effect.