When a Waiver Lab Gets Inspected

"Not routinely surveyed" is how CMS's Quick Start Guide describes both Certificate of Waiver and PPM labs, and it is accurate: 42 CFR 493.1775(a) says a lab with either certificate "is not subject to biennial inspections." It does not mean never inspected. The same section, and the conditions a waiver lab accepts when it applies, give CMS and the State Agency several reasons to walk in.

Why would a surveyor visit a waiver lab?

Under 493.1775(b), CMS or a CMS agent may inspect a waiver or PPM lab "at any time during the laboratory's hours of operation" to:

1. determine whether the lab is operated and testing is performed in a manner that does not constitute "an imminent and serious risk to public health";
2. evaluate a complaint from the public;
3. determine whether the lab "is performing tests beyond the scope of the certificate"; and
4. collect information on whether tests are appropriately categorized as waived or PPM.

When it applies, a waiver lab agrees to "announced and unannounced inspections" for those reasons, including "on a random basis to determine whether the laboratory is performing tests not listed in § 493.15" (493.35(d)(2)). CMS's waiver brochure puts it plainly: if CMS or the State Agency receives a complaint, "you may receive an unannounced on-site survey, even though you only perform waived tests or PPM procedures."

What can the inspector ask for?

Every certified lab, waiver labs included, must meet the basic inspection requirements in 493.1773. The inspector may require the lab to:

• test samples or perform procedures;
• permit interviews of all personnel about compliance;
• permit staff to be observed performing every phase of testing, from specimen collection to reporting;
• allow access to specimen collection areas, storage for specimens, reagents, records and reports, and testing and reporting areas; and
• provide copies of all records and data it requires.

Records must be "accessible and retrievable within a reasonable time frame during the course of the inspection" (493.1773(c)). For a waiver lab, the two federal standards under review are narrow: does the site have a current certificate covering what it does, and does it "follow manufacturers' instructions for performing the test" (493.15(e)(1))?

What usually comes up during a waiver lab visit?

Following the instructions sounds simple until you list what a package insert actually requires. Inspectors can check things like:

• tests on the menu that are not waived, or a waived kit used in a way its instructions do not allow (which CMS says "defaults to high complexity");
• quality control run as the insert directs, such as on a new lot or shipment;
• kits stored at the temperature the insert requires, and none used past expiration;
• the right specimen type and read time;
• a current certificate that shows the right address and director; and
• staff who know the procedure for the test they run.

CDC's waived testing page lists the root causes it sees: errors "can occur in testing if manufacturer's instructions are not followed or if personnel are unfamiliar with the test system." CDC's free Ready? Set? Test! booklet and self-assessment checklist are built around exactly these points, and our post on the waiver lab compliance binder turns them into a set of records.

What happens if a site refuses an inspection?

Refusing is treated severely. "Failure to permit CMS or a CMS agent to conduct an inspection or reinspection results in the suspension or cancellation of the laboratory's participation in Medicare and Medicaid for payment, and suspension or limitation of, or action to revoke the laboratory's CLIA certificate" (493.1773(g)). Refusing a reasonable request to inspect is also a stand-alone ground for adverse action (493.1840(a)(5)), and one of the few that lets CMS suspend or limit a certificate before a hearing (493.1840(d)(2)(iii)).

What if the inspector finds a problem?

It depends on what is found. Testing beyond the certificate is a ground to suspend, limit or revoke it (493.1840(a)(2)). Since January 27, 2024, CMS may also impose alternative sanctions on Certificate of Waiver labs, including a directed plan of correction, state onsite monitoring and civil money penalties (CMS-3326-F). CMS explained that waiver labs, while not routinely surveyed, "are surveyed as a result of a complaint, and based on the complaint survey, may be found to be out of compliance with a condition-level requirement." A waiver lab can also be billed for the cost of a substantiated complaint investigation (493.645(b)). See CLIA sanctions, including penalties for waiver labs.

Survey results are recorded in CMS systems and are publicly available through CMS's QCOR reporting site, according to CMS's October 2026 special alert.

How do you stay ready without a routine survey?

• Keep the certificate current and posted where staff can find it, with the right director and address.
• Keep a test menu that matches the certificate, with each kit's FDA categorization on file. See how to tell whether a test is CLIA-waived.
• Keep the package inserts for the lots in use, and the quality control, temperature and training records the inserts imply.
• Report changes within 30 days, and notify the State Agency before adding anything that is not waived (493.39).

White Glove CLIA's Waiver Application with Compliance Binder ($549 per site) and Renewal and Compliance Tracking ($299 per year, first lab) cover the paperwork side; see pricing. We do not attend inspections on the lab's behalf or speak for the lab to the State Agency. The Certificate of Waiver hub has the rest.