Beyond Compliance

Hospital Price Transparency: Strategy, Risk, and Revenue

Key Takeaways

In this article, we’ll cover:

The current 2026 MRF requirements—and what is likely coming next
How the MRF now drives a new Medicare cost-report worksheet
How payers weaponize your MRF, and a defensive audit approach to protect yourself

A New Era for the Machine-Readable File

For most of its short life, hospital price transparency has been treated as a compliance exercise. The initial goal was narrow and familiar: produce an accurate, complete machine-readable file (MRF), satisfy the Centers for Medicare & Medicaid Services (CMS), and avoid penalties. That work still matters and is being enforced by CMS, but the ground has shifted beneath it.

The MRF is no longer a checkbox that lives in a vacuum. It has become a multipurpose document that reaches across your organization. The same file you post to comply with CMS now feeds a new Medicare cost-report requirement. It carries the personal attestation of your CEO or a senior official. And, increasingly, it is being read by your payers — who are mining it for the rates they can use against you in your next contract negotiation.

This article’s purpose is to take you beyond compliance: to show how a file most patients will never open has quietly become one of the most consequential pieces of financial data your hospital produces, and to give you practical guidance you can act on now.

Are Patients Actually Benefiting?

It is a question asked by many healthcare consumers and industry professionals: are patients benefiting from the No Surprises Act and price transparency? The answer is unclear, as the evidence is still early and largely anecdotal, and there are not yet tangible, published studies demonstrating a measurable improvement for consumers.

For patients to truly be able to use price transparency data to effectively compare price and quality of healthcare services, they first need the awareness and education to use these files, whether through a consumer display or a patient estimation system. Most patients still choose the facility that is geographically closest, in-network, or where they were referred to. The promise of transparency is real, but it is not yet realized. That gap is precisely why the rules keep evolving.

Current and Proposed Requirements

Enforcement of the CY 2026 OPPS final rule began on April 1, 2026, with the rule itself effective January 1, 2026. You do not need to read all 1,600-plus pages to know what changed; the key points fit on a single page.

Executive Summary of the 2026 Changes

Attestation replaces affirmation. The old affirmation statement is replaced with a stronger attestation containing new specifications.
An attester name is now required. The MRF must encode the name of the hospital’s CEO, president, or a senior official designated to oversee the accuracy of the data.
NPIs must be encoded. Hospitals must report active Type 2 NPIs in the MRF, creating a shared identifier across data sets.
Enforcement is being tuned. CMS will reduce a civil monetary penalty by 35% when a hospital waives its right to an administrative law judge hearing within 30 days of notice.
The estimated allowed amount is replaced by four new fields:
- Median allowed amount
- 10th percentile allowed amount
- 90th percentile allowed amount
- Count of allowed amounts

The CEO Attestation: The Most Controversial Change

Of everything in the final rule, the attester-name requirement is the most contentious. We live in a politically charged environment in which affordability is a genuine pain point and many consumers are unhappy with healthcare costs. Inserting a named senior executive in the file puts a spotlight squarely on that person and arguably raises the personal and security stakes for them.

Panacea and many others pushed back during the comment period, but the requirement remained—and that persistence is the point. CMS wants hospitals to take the MRF far more seriously and to treat it as a true compliance artifact.

It is worth distinguishing two roles here. The technical contact named in the .txt file answers questions about specifications. The attester—the CEO or senior official—is the person CMS holds accountable for a true, accurate, and complete file, and they are the first point of contact for enforcement measures.

Attestation Language in Plain Terms

The hospital attests that it has included all applicable standard charge information as required, and that the encoded information is true, accurate, and complete as of the date in the file.

It attests that all payer-specific negotiated charges that can be expressed as a dollar amount are included as dollar amounts.

Where a charge cannot be expressed as a dollar amount, the hospital attests that it is based on a contractual algorithm, percentage, or formula, and that it has provided the information needed for the public to derive the dollar amount, including the specific fee schedule or components referenced.

Why NPIs Now Appear in the MRF

Encoding NPIs may look like a minor technical addition, but it is strategically important. Until now, there was no shared data element linking the hospital MRF to the Transparency in Coverage files that health plans publish. As a result, marrying those two data sets together was difficult at best. Incorporating the NPI as the standard identifier changes that, allowing CMS to compare hospital and payer data, flag variances that may indicate errors, and support benchmarking across payers and hospitals. Hospitals should report active Type 2 NPIs whose primary taxonomy code begins with “28” (hospital) or “27” (hospital unit).

The Shift from “Estimated” to Median, Percentile, and Count

The headline change is the retirement of the estimated allowed amount. Historically, the estimated allowed amount represented the average historical payment a payer made for a service that did not have a standard negotiated rate—for example, a DRG reimbursed at a percentage of charges, where the actual negotiated amount varies patient to patient because gross charges vary. A hybrid scenario also exists: a case-rate service that is fixed per patient but can trigger an outlier or stop-loss payment on high-dollar claims, producing both a standard negotiated rate and an estimated allowed amount.

CMS is not changing the criteria that qualify a line item for an allowed amount, so there is no need to rework your qualification logic. What will change is the math. Instead of a historical average, the file now reports the median, the 10th percentile, and the 90th percentile, plus a count.

Key Considerations

Qualification criteria are unchanged. Whatever you use today to flag a line item as needing an allowed amount (percentage or algorithm) still applies.
Source data is the EDI 835 remit, using a single standardized lookback period of 12 to 15 months prior to MRF posting, regardless of mid-period contract changes. The proposed rule would have required a different lookback per allowed amount; CMS wisely dropped that as too burdensome for the benefit.
Exclude $0 claims and payments from the analysis and from the count. Denials and similar artifacts should not skew your results. This matters even more once payers start scrutinizing your file.
Counts between 1 and 10 are reported as “1 through 10.” This was introduced in the final rule, not the proposed rule.
When a calculated percentile lands between two observed values, use the remit with the higher allowed amount. This is CMS’s own method, not a conventional statistical average.
If there is no data, do not invent it. Where no remits or historical occurrences exist, report a count of “0” and leave the median, 10th, and 90th percentile blank. Do not drop the line item from the MRF—keep it, follow the rules, and add a note in the remarks field (for example, a new or recently revised payer contract).

A Simple Example

Suppose Blue Cross Blue Shield pays 50% of charges on DRG 785 (C-section), and you have 11 remits over the most recent 12-month period with allowed amounts of $2K, $4K, $6K, $8K, $10K, $12K, $14K, $16K, $18K, $20K, and $22K. Here the average and the median are the same ($12K) so the change is invisible.

	Current Approach	New Approach
Estimated allowed amount (average)	$12K	— (retired)
Median allowed amount	—	$12K
10th percentile allowed amount	—	$4K
90th percentile allowed amount	—	$20K
Count of allowed amounts	—	11

Benefits of the New Approach: Prioritizing the Median

Now, change the data set to include outliers: $2K, $4K, $6K, $8K, $10K, $12K, $14K, $16K, $35K, $36K, and $48K. Those high-dollar claims drag the average up to $16.5K—an estimate that misrepresents what most patients actually experience. The median, by contrast, holds steady at $12K.

	Current Approach	New Approach
Estimated allowed amount (average)	$16.5K	— (retired)
Median allowed amount	—	$12K
10th percentile allowed amount	—	$4K
90th percentile allowed amount	—	$36K
Count of allowed amounts	—	11

This is the logic of median home prices: a handful of outliers should not distort the typical figure. When the Trump administration’s February 2025 executive order called for an end to “estimates,” the intent was initially unclear. In hindsight, the motivation is that averages are effectively estimates, and the shift to a median produces a number that is more accurate and more informative for the consumer.

How a Patient Is Meant to Use the New Fields

Most healthcare professionals doubt that patients open the MRF at all. This is a fair enough assumption, although the data is ultimately meant to benefit the patient. The intent traces back to 2023, when this concept was called the “consumer-friendly expected allowed amount,” then evolved into the “estimated allowed amount,” and now is simply “the amount.” The consumer-facing purpose never changed.

Imagine you need shoulder surgery, you carry a high-deductible plan, and two nearby hospitals both score well on quality. Both post a median allowed amount of $10,000—a tie, at face value. The other three fields break the tie. Hospital A shows a wide range (a 10th percentile near $5,000, a 90th near $15,000) on a count of only three. Hospital B shows a tight range ($9,000 to $11,000) on a count of 20. With far more data and far less spread, Hospital B emerges as the lower-risk choice. That is the entire point of moving to a distribution rather than a single estimate: certainty and reliability over guesswork.

In reality, however, it is not patients running this analysis today—it is payers. And as the next chapters show, they are using the same data to find your errors and your softest rates.

What’s Coming Up Next

It is important to note that the following analysis is based on proposed regulations that have yet to be finalized. We recognize that there is already a great deal of work involved in complying with price transparency requirements, and contemplating an uncertain future can add to that pressure. But it is better to be over-prepared than under-prepared. The single most important thing to internalize is that price transparency is not going away. If you are hoping it disappears, or that only payers will be impacted, that is unlikely. CMS wants accountability from both hospitals and payers, and this is a bipartisan issue with consistent support across the aisle.

The Patient Deserves Price Tags Act

A bipartisan bill introduced on July 17, 2025 by Senators John Hickenlooper (D-Colorado) and Roger Marshall (R-Kansas) is gaining momentum in Congress. HFMA members can find a strong explanation of it in a recent podcast; what follows is the short version of the provisions worth watching.

Monthly updates. MRFs and consumer displays would move from an annual to a potentially monthly cadence. Such a dramatic shift is aggressive, and a gradual move incorporating a quarterly update schedule seems more likely. The motivation is obvious: a file last updated 10 or 11 months ago does not inspire much confidence when decisions worth millions of dollars and thousands of lives ride on it.
Expansion to non-hospital sites. Clinical labs, imaging centers, and ambulatory surgical centers—and arguably physician groups—are not held to the same requirements as hospitals today. The act would extend requirements to them, with a target compliance date of July 1, 2027.
From 300 shoppable services to all schedulable. Today’s consumer display is limited to roughly 300 shoppable services, some CMS-specified and the rest chosen by the hospital. Payers already had to cover all schedulable services nearly two years ago. The act would push hospitals to all schedulable services beginning January 1, 2027.
No more patient estimation system in lieu of a consumer display. Many hospitals use a patient estimation system instead of a consumer display—and it is more helpful, because it shows real out-of-pocket cost. The Patient Deserves Price Tags Act would change this, for reasons tied to the No Surprises Act.
EOB content to match the Advanced EOB. This also connects to the No Surprises Act and raises the bar on what payers must do when they issue an advanced explanation of benefits before services are rendered.
Higher fines for persistent non-compliance, especially where noncompliance has continued for more than a year.

Your MRF as a Weapon Against You

Hospital price transparency was designed by CMS for consumers, and it was well-intentioned. But payers have discovered a new negotiating weapon: your own machine-readable file. They are mining it, identifying where you carry artificially low rates, and anchoring those rates against you in future negotiations.

Imagine a payer poring over your file—not with AI and data mining, but with a magnifying glass—hunting for vulnerabilities to justify lower rates. That is the posture to defend against. The good news? You can run the same search first.

A Defensive MRF Review Strategy: “Good Enough” Is Not Good Enough

This is the difference between an MRF that is merely “good enough”—good enough to clear the CMS validator and reduce enforcement exposure—and one that is accurate enough to provide strategic protection. A file full of stale or erroneous low rates is not a compliance success; it is a liability waiting to sink your negotiations. Adopting a proactive review strategy can help you avoid these hidden pitfalls.

The following is not an exhaustive program, but it is a concrete starting point you can act on before your next negotiation.

Think like a payer.
Review your own MRF before they do. For this exercise, do not worry about the payer’s file or your peers—just look hard at your own.
Focus your analysis (don’t boil the ocean).
These files can run to millions of rows, and trying to review every single line guarantees analysis paralysis. Extract high-volume, high-revenue services and service lines, and separate inpatient DRGs from outpatient procedures, ideally prioritizing your higher-volume surgical procedures.
Target upcoming negotiations.
If you have a Cigna PPO renewal coming, pull those rates alongside comparable plans such as Aetna, UHC, or Blue Cross that a payer might use as a benchmark. Keep it apples-to-apples: do not mix in HMO or Medicare Advantage.
Run simple statistical analysis.
Across each code and payer, identify rates that sit significantly below the median and flag those outliers, because that is exactly where payers will zero in.
Validate and correct.
Where you have both a standard negotiated rate and an allowed amount, take the lower of the two, because the payer will hold you to it. If a low rate is accurate, it is accurate—do not manipulate your file to try to fabricate an advantage. But if it is wrong, correct it before the payer discovers it and uses it to anchor their analysis.

What Payers are Actually Finding

The table below illustrates the exercise on a handful of common, high-volume services that move the needle. This is not how payers literally negotiate, but it demonstrates how they can anchor on a number that looks off. Outlier rates that a payer would target are highlighted.

Service Code	Description	BCBS PPO	Aetna PPO	Cigna PPO	UHC PPO	Median
MS-DRG 470	Major hip/knee replacement	$45,000	$42,000	$12,500	$44,500	$43,250
MS-DRG 247	Percutaneous cardiovascular	$35,000	$33,000	$34,500	$8,900	$34,125
MS-DRG 871	Septicemia w/o MV >96 hrs	$28,000	$6,200	$26,500	$27,800	$27,125
CPT 64483	Lumbar transforaminal injection	$2,850	$2,750	$485	$2,900	$2,833
CPT 45378	Diagnostic colonoscopy	$1,200	$1,150	$1,175	$125	$1,175
CPT 76700	Abdominal ultrasound	$650	$89	$625	$675	$650

Now read it as the payer. If you are Blue Cross Blue Shield looking at a major knee replacement, you can argue: “You accept $12,500 from Cigna PPO—we are a comparable network with similar characteristics, so why are we paying more?” That puts you on the defensive, forced either to justify a higher rate or to concede that your file contains errors. Neither is a good place to negotiate from. The remedy is to find and fix those numbers first by employing the defensive framework outlined above.

The MRF and Your Medicare Cost Report

Buried near the end of the OPPS final rule is a new requirement that may not apply to every reader (critical access hospitals being one exception) but reaches most hospitals that file a Medicare cost report. You must now use your machine-readable file to produce a new worksheet, supplemental to Form CMS-2552-10.

The Mandate, Purpose, and Stakes

Mandate: Calculate and report the weighted median of your Medicare Advantage (MA) negotiated rates by MS-DRG, on the supplemental worksheet to Form CMS-2552-10, as finalized in the CY 2026 OPPS final rule published November 25, 2025. The directive applies to cost-reporting periods ending on or after January 1, 2026.

Purpose: CMS will use this data to calculate new IPPS MS-DRG relative weights starting in fiscal year 2029.

Stakes: Non-compliance risks suspension of all Medicare claims payments until an acceptable cost report—including the new worksheet—is submitted.

4-Step Calculation Process

Extract MA negotiated rates. From your most recent MRF as of the cost-report filing date, identify all MA payer-specific negotiated charges for inpatient services. For percentage- or algorithm-based rates, use the median allowed amount listed in the MRF.
Tally discharges. Sum inpatient discharges for each MA plan and MS-DRG combination during the cost-reporting period. Critically, use your claims data—not the count of allowed amounts on the MRF—to get these discharge counts. Plans with more discharges carry more weight.
Create a weighted list. For each MS-DRG, list each MA negotiated charge repeatedly, matching the number of discharges for that plan. Automation can replace manual repetition, but conceptually this is how the weighting works.
Calculate the weighted median. Sort the expanded list and identify the median value.

Example

Suppose a hospital’s cost-report period ended September 30, 2026, so the MRF from January 1, 2027 is used. This leaves a month or two before the filing deadline, with the MRF dated after the reporting period. Let’s hone in on a single DRG (MS-DRG 123) across four MA plans:

Step	Action	Result for MS-DRG 123
1	Extract MA rates from MRF	MA1: $7,400; MA2: $7,200; MA3: $7,500; MA4: $7,300
2	Tally discharges (Sep ’26 period)	MA1: 2; MA2: 1; MA3: 1; MA4: 3
3	Create weighted list	[$7,200, $7,300, $7,300, $7,300, $7,400, $7,400, $7,500]
4	Calculate median per MS-DRG	Sorted list median = $7,300

Because MA4 has the most discharges (3), its $7,300 rate carries the greatest weight and exerts the strongest pull on the median. Broken into these steps, the work is not terribly difficult, but the nuances are where it gets tricky.

Key Challenges and Complications

Data reconciliation. Discharge data from the cost-reporting period and contract rates from the MRF snapshot date can be inconsistent, as contracts may have changed in between.
Complex, error-prone calculations. Running the four-step process manually for every DRG is time-consuming and invites mistakes.
Code mapping. For non-MS-DRG-based MA contracts, CMS requires crosswalking to an MS-DRG using its Grouper software. This adds an extra step and administrative burden, though it is a relatively rare scenario.
Payment risk. Inaccurate or late submission directly threatens Medicare revenue flow. If your MRF is not accurate enough today, fix it first, and be mindful of timing so you do not file late.

Panacea’s Approach

Because the Medicare cost report requirement recurs with every cost-report filing, automation makes a key difference. Panacea’s end-to-end approach securely ingests your MRF and discharge-volume data by MS-DRG and MA plan, automates the four-step process, handles edge cases such as algorithm-based outlier payments, manages any non-MS-DRG crosswalking, delivers an audit-ready worksheet ready for submission, and adds expert validation of the output for accuracy and compliance.

Learn More

Discover Panacea’s Price Transparency Solutions