The HCBS settings rule is the federal Medicaid requirement, at 42 CFR 441.301(c)(4) and (c)(5), that sets the qualities home and community-based settings must have, lists settings that are not home and community-based (a nursing facility, an institution for mental diseases, an intermediate care facility for individuals with intellectual disabilities, a hospital, and other locations the Secretary determines have institutional qualities), and presumes certain settings institutional unless the Secretary determines otherwise through heightened scrutiny. It applies to settings under a state's section 1915(c) home and community-based waiver (42 CFR 441.301 is the 1915(c) waiver section), and CMS also cites 42 CFR 441.710(a)(1)(2) for section 1915(i) state plan home and community based services (HCBS). Whether it reaches other Medicaid HCBS authorities was not reviewed for this page; the state's waiver or plan sets what binds each provider. Integral Healthcare Solutions (IHS) translates the HCBS settings obligations into your procedures and evidence; your team and the people you serve make the support decisions.
Last reviewed: October 2026. Current eCFR text of 42 CFR 441.301 and the CMS settings pages checked on October 2, 2026.
What is the HCBS settings rule?
The governing text is 42 CFR 441.301(c)(4), qualities of home and community-based settings, and (c)(5), settings that are not home and community-based, in the current eCFR. The rule opens: "Home and community-based settings must have all of the following qualities, and such other qualities as the Secretary determines to be appropriate, based on the needs of the individual as indicated in their person-centered service plan" (42 CFR 441.301(c)(4)). CMS's compliance toolkit adds that "The regulatory requirements can be found at 42 CFR 441.301(c)(4)(5) and 441.710(a)(1)(2)," the second citation covering 1915(i) state plan HCBS (CMS settings compliance toolkit).
Two of the qualities, quoted from the rule:
- Community access: "The setting is integrated in and supports full access of individuals receiving Medicaid HCBS to the greater community, including opportunities to seek employment and work in competitive integrated settings, engage in community life, control personal resources, and receive services in the community, to the same degree of access as individuals not receiving Medicaid HCBS" (42 CFR 441.301(c)(4)(i)).
- Rights: the setting "Ensures an individual's rights of privacy, dignity and respect, and freedom from coercion and restraint" (42 CFR 441.301(c)(4)(iii)).
Provider-owned or controlled residential settings carry added conditions, including: "Units have entrance doors lockable by the individual, with only appropriate staff having keys to doors"; "Individuals have the freedom and support to control their own schedules and activities, and have access to food at any time"; and "Individuals are able to have visitors of their choosing at any time" (42 CFR 441.301(c)(4)(vi)).
Those conditions can be modified only as (vi)(F) allows: "Any modification of the additional conditions, under § 441.301(c)(4)(vi)(A) through (D), must be supported by a specific assessed need and justified in the person-centered service plan." The rule then lists eight items that must be documented in the plan: a specific and individualized assessed need; positive interventions and supports used before the modification; less intrusive methods tried that did not work; a clear description of the condition directly proportionate to the need; regular collection and review of data on effectiveness; established time limits for periodic review; the individual's informed consent; and an assurance that interventions and supports will cause no harm (42 CFR 441.301(c)(4)(vi)(F)(1)-(8)).
Who needs it and what triggers it
The rule applies to settings under a state's section 1915(c) home and community-based waiver (42 CFR 441.301 is the 1915(c) waiver section), and CMS also cites 42 CFR 441.710(a)(1)(2) for section 1915(i) state plan HCBS. Whether it reaches other Medicaid HCBS authorities was not reviewed for this page; the state's waiver or plan sets what binds each provider. Three situations tend to bring providers to this work.
- A setting with institutional features. A setting in a building that also provides inpatient institutional treatment, on the grounds of or immediately adjacent to a public institution, or that otherwise isolates people receiving Medicaid HCBS "will be presumed to be a setting that has the qualities of an institution unless the Secretary determines through heightened scrutiny ... that the setting does not have the qualities of an institution" (42 CFR 441.301(c)(5)(v)).
- A state assessment or validation of settings. CMS's toolkit includes "Exploratory questions that may assist states in the assessment of: Residential Settings[,] Non-Residential Settings" (CMS toolkit). State processes vary; this page does not quote any one state's validation process.
- A provider entering or expanding in a state waiver program, where state operating rules sit on top of the federal rule. In New Jersey, for example, DDD providers also work under the DDD policy manuals (NJ DDD Supports Program manual).
On timing, CMS states: "A State Medicaid Director Letter was released on July 14, 2020, indicating that the transition period for compliance with home and community based settings criteria is extended until March 17, 2023" (CMS HCBS final regulation page).
How IHS helps
IHS works from 42 CFR 441.301(c)(4)-(5) and the state waiver rules that apply to you. The process:
- Gap assessment, setting by setting. Client questionnaires and a site walkthrough that your staff conduct with an IHS checklist, compared against each settings quality and the state rules.
- Document and evidence mapping. A crosswalk from each settings quality to the procedure, record or observation that shows it is met.
- Drafting. IHS drafts rights, choice, community-access, visitor, food-access, lease or residency agreement, modification-documentation, incident and documentation procedures. Your program leaders review and approve them.
- Evidence-of-implementation templates. Forms and logs that show the procedures are in use, not only written.
- Mock review. IHS reviews the evidence for each setting against the rule and lists what is missing.
What you supply: your site list, current procedures, incident data and person-centered planning records.
The limit: person-centered decisions belong to the people served and their teams. The physical characteristics of each site are yours to assess and change; IHS does not inspect buildings. Under 441.301(c)(5)(v), the Secretary determines whether a setting passes heightened scrutiny. IHS's reading, as of October 2026: states carry out settings assessment and validation, and their processes vary.
What to have ready
- A list of every setting where you deliver Medicaid HCBS, marked residential or non-residential, matching the toolkit's two categories (CMS toolkit).
- For each setting, the facts that bear on 441.301(c)(5)(v): whether it shares a building with inpatient institutional treatment, sits on or next to the grounds of a public institution, or isolates the people you serve (42 CFR 441.301(c)(5)(v)).
- Evidence of community access, including employment, community life and control of personal resources (42 CFR 441.301(c)(4)(i)).
- Rights procedures covering privacy, dignity and respect, and freedom from coercion and restraint (42 CFR 441.301(c)(4)(iii)).
- For provider-owned or controlled residences, door-lock and key-control practices for "entrance doors lockable by the individual" (42 CFR 441.301(c)(4)(vi)).
- Your practice on schedules, activities and "access to food at any time" (42 CFR 441.301(c)(4)(vi)).
- Your visitor practice, since people "are able to have visitors of their choosing at any time" (42 CFR 441.301(c)(4)(vi)).
- Person-centered service plans showing any modification is "supported by a specific assessed need and justified in the person-centered service plan" and carrying the eight documentation elements in (vi)(F)(1)-(8) (42 CFR 441.301(c)(4)(vi)(F)).
- Incident data and current procedures, for comparison against the rights and restraint provisions (42 CFR 441.301(c)(4)(iii)).
- The state waiver operating rules for each program you serve, such as the DDD manuals in New Jersey (NJ DDD manual).
To go through the list with IHS, book the introductory call below.
How it compares
| Layer | What the sources say |
|---|---|
| Federal floor | 42 CFR 441.301(c)(4)-(5): the qualities every setting must have and the settings presumed institutional (eCFR). |
| State settings requirements and validation | CMS's toolkit is written to assist states in assessing residential and non-residential settings (CMS toolkit). IHS's reading, as of October 2026: states assess and validate settings and their processes vary. No single state's process is quoted here. |
| Heightened scrutiny | A presumed-institutional setting stays presumed institutional unless the Secretary determines through heightened scrutiny that it does not have institutional qualities (42 CFR 441.301(c)(5)(v)). |
| State corrective action plans | CMS's final regulation page refers to requests from states for corrective action plans (CMS). The effect on an individual provider is not stated on the pages we reviewed. |
| IHS gap assessment and drafting | Setting-by-setting assessment, drafted procedures, evidence templates and a mock review. It does not replace your team's support decisions or the state's validation. |
What it costs
CMS does not publish a fee schedule for the settings rule on the pages we reviewed; it is a federal rule, and your costs depend on scope. IHS scopes each engagement after a free introductory call.
What this is not
- IHS is not CMS or a state Medicaid agency and does not decide heightened scrutiny or settings validation.
- IHS does not contact, submit to or speak for your organization to CMS or the state. IHS drafts; your organization submits.
- IHS does not make person-centered planning decisions, and this page is not legal advice.
Frequently asked questions
What is the HCBS settings rule and which providers does it apply to?
It is the federal Medicaid rule at 42 CFR 441.301(c)(4) and (c)(5) that sets the qualities home and community-based settings must have. It applies to settings under a state's section 1915(c) home and community-based waiver (42 CFR 441.301 is the 1915(c) waiver section), and CMS also cites 42 CFR 441.710(a)(1)(2) for section 1915(i) state plan HCBS. Whether it reaches other Medicaid HCBS authorities was not reviewed for this page; the state's waiver or plan sets what binds each provider.
What qualities must a home and community-based setting have?
The rule lists them in 441.301(c)(4). They include full access to the greater community, with opportunities for employment, community life, control of personal resources and services in the community, and rights of privacy, dignity and respect and freedom from coercion and restraint.
What extra conditions apply to provider-owned or controlled residential settings?
The rule adds conditions including entrance doors lockable by the individual with only appropriate staff holding keys, freedom and support to control schedules and activities, access to food at any time, and visitors of the person's choosing at any time.
When can a provider restrict visitors, food access or schedules?
Only when the modification is supported by a specific assessed need and justified in the person-centered service plan, and the plan documents the eight elements listed in 441.301(c)(4)(vi)(F)(1)-(8), including less intrusive methods tried, time limits for review, data collection, informed consent and an assurance of no harm.
What is heightened scrutiny and which settings are presumed institutional?
Settings in a building that also provides inpatient institutional treatment, on or immediately adjacent to the grounds of a public institution, or that isolate people receiving Medicaid HCBS are presumed to have institutional qualities. The presumption holds unless the Secretary determines through heightened scrutiny that the setting does not have those qualities.
Did the HCBS settings rule compliance deadline pass?
CMS states that a State Medicaid Director Letter of July 14, 2020 extended the transition period for compliance with the settings criteria until March 17, 2023. The pages we reviewed do not state CMS's current enforcement posture, so this page does not describe it.
How do day programs and other non-residential settings fit in?
The community-access and rights qualities in 441.301(c)(4) apply to them, and CMS's toolkit includes exploratory questions to help states assess non-residential settings as well as residential ones.
How do state waiver requirements relate to the federal rule?
The federal rule is the floor, and state waiver programs add their own operating rules. In New Jersey, for example, DDD providers also work under the DDD policy manuals. IHS maps both layers for each setting.
What do we need to supply for an IHS settings assessment?
Your site list, current procedures, incident data and person-centered planning records. Your staff conduct the site walkthrough with an IHS checklist, and you decide any physical changes to a site.