Per the National Institutes of Health – National Institute on Aging, abuse is the intentional or reckless infliction of physical harm, pain, or coercion. Neglect is a caregiver’s or facility’s failure to provide the goods or services necessary to maintain a resident’s health or safety, such as adequate hygiene, nutrition, or supervision. Exploitation is the misappropriation or improper use of a resident’s funds, property, or assets, including forged signatures, unauthorized account access, or coerced changes to legal documents. All three categories are addressed together under the federal resident-rights regulation at 42 C.F.R. § 483.12, “Freedom from Abuse, Neglect, and Exploitation.”
The Federal Compliance Framework
Section 483.12 requires every Medicare- and Medicaid-certified facility to maintain written policies prohibiting abuse, neglect, and exploitation, to screen staff for a history of abuse prior to hire, and to train employees on prevention and reporting. When an allegation arises, CMS guidance requires facilities to report it to the administrator and, per state law, to the State Survey Agency and adult protective services immediately and in no event later than two hours if the allegation involves abuse or serious bodily injury, or twenty-four hours for other reportable events. Investigation results are due to the same officials within five working days, and separately, Section 1150B of the Social Security Act requires covered individuals to report reasonable suspicion of a crime against a resident directly to law enforcement.
Why Reporting Compliance Is a Recurring Weak Point
The HHS Office of Inspector General has repeatedly found a gap between policy and practice. In a national review of 2012 data, OIG found that 85 percent of nursing facilities reported at least one allegation of abuse or neglect, totaling more than 149,000 allegations, and that abuse accounted for roughly half of them. While 76 percent of facilities maintained policies addressing the federal reporting requirements, only 53 percent of allegations and their investigation results were reported as required. This is not just a historical finding: in a 2025 report, OIG found nursing homes still failed to report 43 percent of falls with major injury and hospitalization among Medicare-enrolled residents, as required, with for-profit, chain, and larger facilities underreporting most often — evidence that reporting gaps remain a live, current compliance risk.
Staffing Rule Repeal Raises the Stakes on Neglect
In December 2025, CMS rescinded the 2024 federal minimum nurse-staffing rule — including the 0.55 RN and 3.48 total nurse hours-per-resident-day thresholds and the 24/7 RN-onsite requirement — with the repeal effective February 2, 2026. CMS cited a congressional enforcement moratorium through 2034 and adverse federal court rulings. Facilities are no longer bound by a federal staffing mandate, but adequate staffing remains a factor surveyors weigh directly when investigating neglect allegations under § 483.12, so the repeal should not be read as reduced scrutiny of understaffing-driven neglect.
Rising Enforcement Stakes
CMS enforcement data show the financial risk is climbing. In 2024, CMS imposed roughly $202.9 million in civil money penalties (CMPs) against nursing homes, with average per-diem penalties of about $57,567 and average per-instance penalties of about $11,852. Automatic “Double G” penalties — triggered when a facility is cited at a harm level or higher (scope/severity G or above) in two consecutive surveys — rose from $55.87 million in 2023 to $65.97 million in 2024. A final rule effective March 2025 further expands CMS authority to impose multiple per-instance penalties, combine per-day and per-instance penalties from a single survey, and look back across the last three standard surveys when assessing noncompliance.
Compliance Takeaways
Facilities should treat abuse, neglect, and exploitation as a single, tightly monitored compliance domain rather than three separate issues. That means written policies that mirror the current 42 C.F.R. § 483.12 timelines, documented staff screening and training, a clear internal escalation path that meets the two-hour/twenty-four-hour reporting windows, and audit trails showing investigations close within five working days. Given the growing size and reach of CMS penalties, and the removal of a federal staffing mandate, facilities that have not recently tested their reporting workflow and staffing-related neglect safeguards against these standards should do so now.