Medicare Advantage 2027 Final Rule: What Plans Must Do Now

On April 6, 2026, the Centers for Medicare & Medicaid Services (CMS) published a sweeping final rule in the Federal Register — document number 2026-06600 — covering contract year 2027 policy changes (and select contract year 2026 updates) to Medicare Advantage (Part C), the Medicare Prescription Drug Benefit (Part D), and Medicare cost plan regulations. If your organization operates, administers, or supports an MA or Part D plan, this rule touches practically everything: Star Ratings methodology, marketing and communications standards, drug coverage rules, enrollment processes, and Special Needs Plan (SNP) requirements.

In my view, this is one of the more operationally dense final rules CMS has issued in recent years. The breadth of changes means there is no single team inside a health plan that gets to sit this one out.

What Changed and Why It Matters

CMS did not issue this rule in a vacuum. It reflects a multi-year effort to tighten oversight of MA plan conduct — particularly around marketing abuses, formulary transparency, and the accuracy of Star Ratings as a quality signal. According to CMS, Medicare Advantage enrollment now exceeds 33 million beneficiaries, representing more than half of all Medicare enrollees. The stakes for getting compliance wrong are correspondingly high.

The rule also carries forward several provisions that were proposed or partially implemented in contract year 2026, meaning some deadlines are closer than plans may expect.

Star Ratings: Methodology Revisions

What Changed

CMS revised the Star Ratings methodology in several meaningful ways, including updates to the cut points used to assign star values to individual measures and adjustments to how the Health Outcomes Survey (HOS) and HEDIS measures are weighted. CMS also refined its approach to handling extreme and uncontrollable circumstances (EUC) adjustments, narrowing the conditions under which plans can receive a ratings buffer.

Citation hook: Under the CY2027 final rule, CMS tightened EUC adjustment eligibility criteria, meaning plans that relied on broad EUC relief in prior years may see measurable Star Rating impacts in contract year 2027 without proactive performance improvement.

Plans that have been hovering near the 4-star threshold — the cutoff that triggers quality bonus payments — should treat this rule as a direct financial signal. A one-star reduction for a large MA plan can translate to tens of millions of dollars in lost bonus revenue.

What Plans Should Do Now

• Pull your current Star Ratings performance data and model the impact of revised cut points on each affected measure.
• Review your EUC documentation practices. The narrower eligibility standard means past justifications may not hold.
• Engage your HEDIS and HOS data teams now — don't wait for the measurement year to close.

Marketing and Communications: Tighter Rules, Higher Stakes

What Changed

This is the area where CMS has been most aggressive, and the CY2027 rule continues that trend. Key changes include:

• Stricter third-party marketing organization (TPMO) oversight: Plans bear expanded responsibility for ensuring that TPMOs — including field marketing organizations (FMOs) and independent agent networks — comply with CMS marketing guidelines. The rule adds new documentation and audit requirements.
• Prohibited marketing practices: CMS added specificity to the list of prohibited marketing activities, including restrictions on certain unsolicited direct contact methods and misleading benefit comparisons.
• Material review timelines: CMS clarified and in some cases shortened the review and approval timelines applicable to marketing and communications materials submitted through HPMS.

Citation hook: The CY2027 final rule establishes that Medicare Advantage organizations are directly accountable for TPMO conduct during beneficiary marketing interactions, even when those interactions occur outside the plan's direct supervision.

This accountability standard is not new in principle, but the rule sharpens it considerably. In practice, it means that a bad actor in your broker network is now more clearly your compliance problem.

What Plans Should Do Now

• Audit your TPMO contracts and oversight frameworks immediately. If your agreements don't include CMS-compliant conduct standards and audit rights, they need to be updated before the next marketing season.
• Review all current marketing materials against the updated prohibited practices list.
• Establish a standing process for incident-triggered broker training reviews.

Drug Coverage: Part D Formulary and Coverage Changes

What Changed

The rule includes several Part D changes with direct implications for formulary design, coverage determinations, and beneficiary access:

• Formulary transparency requirements: CMS expanded the disclosure requirements for formulary exceptions, including clearer beneficiary-facing explanations of the exceptions process.
• LIS (Low Income Subsidy) cost-sharing adjustments: The rule implements cost-sharing updates tied to LIS benchmark changes, which affect plan benefit design in ways that require careful actuarial review.
• Drug utilization management (UM) standards: CMS tightened standards around prior authorization and step therapy for certain drug classes, with a particular focus on ensuring UM tools do not create inappropriate access barriers for beneficiaries with complex conditions.

Citation hook: Under the CY2027 rule, Medicare Part D sponsors must ensure that utilization management criteria for protected drug classes are reviewed and updated to reflect current clinical evidence, with documentation maintained and available for CMS review upon request.

Across the industry, CMS audits have found that UM criteria documentation is one of the most common areas of deficiency. This rule raises the bar on what "available for review" actually means.

What Plans Should Do Now

• Review your formulary exceptions process documentation for beneficiary clarity and accessibility.
• Work with your pharmacy benefit manager (PBM) to confirm UM criteria for protected classes are clinically current and documented.
• Model the LIS cost-sharing changes against your current benefit design and flag any benefit-year gaps.

Enrollment Processes: What's Being Standardized

What Changed

CMS made targeted updates to enrollment process rules, including:

• Clearer standards for Special Enrollment Period (SEP) eligibility determinations, reducing plan-level discretion in ways that could generate compliance risk if inconsistently applied.
• Updated guidance on enrollment transaction error resolution timelines.
• Refinements to the process for handling enrollment applications from individuals who are also eligible for Medicaid (the "dual eligible" population).

For plans serving significant dual-eligible populations, the last point is particularly important. CMS has signaled — and this rule reinforces — that enrollment errors affecting low-income beneficiaries will receive heightened scrutiny in audits.

Special Needs Plans: Expanded Requirements

What Changed

Special Needs Plans — particularly Dual Eligible SNPs (D-SNPs) and Chronic Condition SNPs (C-SNPs) — face new requirements under this rule around:

• Model of care (MOC) documentation: Updated standards for what MOC submissions must include, with greater specificity around care coordination protocols.
• Integrated care requirements for D-SNPs: CMS continued its trajectory toward greater integration between Medicare and Medicaid for dual-eligible beneficiaries, adding new coordination requirements for D-SNP organizations.
• Frailty adjustment methodology: Updates to how CMS calculates the frailty adjuster for FIDE SNPs and PACE organizations, which affects risk adjustment revenue.

If you operate a D-SNP, I would put MOC documentation and integrated care coordination at the top of your CY2027 readiness checklist. These are areas where CMS has been increasing audit frequency, and the new rule gives auditors more specific criteria to work from.

Key Effective Dates and Deadlines

Plans should not treat January 1, 2027, as the start line. The Annual Election Period runs October 15 through December 7, 2026 — meaning marketing compliance, formulary filings, and benefit design changes all have operational deadlines that fall well before the contract year begins.

The Practical Compliance Picture

Here is what I think is worth naming plainly: this rule is not primarily about new concepts. Most of what CMS is doing here is tightening, clarifying, and enforcing things that were already expected. The plans that struggle with this rule will largely be the ones that treated prior-year requirements as aspirational rather than mandatory.

The areas where I see the most exposure for plans in the coming audit cycle are TPMO oversight documentation, UM criteria currency, and D-SNP care coordination records. These are not obscure corners of compliance — they are core operational functions. But they are also functions that tend to get delegated without adequate oversight, and the CY2027 rule closes several of the gaps that allowed loose delegation to go unnoticed.

If your organization needs a structured gap assessment against the CY2027 requirements, that work should start now. The Medicare compliance consulting resources at thefdaexpert.com and Certify Consulting's regulatory advisory practice are available to support plans navigating this transition.

At Certify Consulting, I've worked with more than 200 clients across the Medicare space, and in my experience the plans that come out of rule changes like this one in strong shape are the ones that treat the final rule publication as a trigger — not for reading, but for acting. Read it, yes. But then immediately translate it into a workplan with owners and deadlines. That is the move.

About the Author

Jared Clark, JD, MBA, PMP, CMQ-OE, CQA, CPGP, RAC is the Principal Consultant at Certify Consulting, with 8+ years of experience supporting Medicare Advantage and Part D organizations through regulatory change, CMS audits, and operational compliance. He has served 200+ clients with a 100% first-time audit pass rate.

Last updated: 2026-04-17