F610: investigate, prevent and correct alleged violations

What F610 covers

Under 42 CFR 483.12(c), the home must keep evidence that it thoroughly investigated each alleged violation. It must prevent further potential abuse, neglect, exploitation or mistreatment while it investigates. If the allegation is verified, it must take appropriate corrective action.

F610 also covers injuries of unknown source and misappropriation of resident property. A police report does not replace the home's own investigation. The home must still investigate to the extent possible, in consultation with the police.

What thorough means to surveyors

CMS prescribes no process. It expects enough evidence for the administrator to decide how to protect residents.

Do not disturb evidence. CMS says washing linens or clothing, destroying documents and bathing the resident before an exam impede investigations. So does skipping an emergency room exam, including a rape kit where appropriate.

Protecting residents while you investigate

Protection must start right away, before the facts are settled. CMS lists these failures. The accused keeps access to residents. A resident who reports is retaliated against. A resident who touches others is moved but keeps doing it. A resident with a history of striking is left unsupervised with a past target. Protections end because the investigation was inadequate.

• Assess and treat the alleged victim at once.
• Tell the practitioner and the family or representative.
• Remove access by the accused; confirm ongoing safety.
• Ask whether the resident feels safe. If not, move rooms or add supervision.
• Make unannounced management visits on different shifts to check on residents at risk.
• Tell law enforcement and other agencies as required, and involve the administrator.

Timelines

What makes an F610 deficiency more severe

The F610 guidance gives no severity examples, so surveyors use the CMS scope and severity matrix. Section 483.12 counts toward substandard quality of care, CMS's label for serious findings. It applies at immediate jeopardy (serious harm happened or is likely). It also applies at pattern or widespread actual harm, or widespread potential for more than minimal harm.

• Continued access. The accused keeps access and a resident is harmed again.
• No investigation. None was done, so the home cannot show safety.
• Lapsed protection. Safeguards ended early and a resident was affected.
• Pattern. Several allegations, shifts or units show the same gap, raising scope.

Facts like these move a finding up. F600 gives an immediate jeopardy example: staff did not report or protect a resident who said she was touched. If the home removes immediate jeopardy, surveyors lower what remains at the tag to level 2. If other residents were harmed, they lower it to harm.

Documentation gaps that lead to citations

• The investigation is one paragraph with no interviews.
• Interviews are missing or undated, including the accused.
• No record shows who protected the resident the first night or what changed.
• The conclusion says unsubstantiated, with no reasons.
• Corrective action is staff re-education with no check that practice changed.
• The 5-working-day report was never sent.
• The home stopped investigating when police got involved.

How to show a good investigation and fix

1. Secure and protectKeep proof safe, protect the resident, and record the time and steps.
2. Collect evidenceInterview, observe and review records. Date and file each item.
3. Decide and explainThe administrator or designee records the finding and why, even if unsubstantiated.
4. Correct the systemIf verified, fix what allowed it. Assign an owner and due date. Report within 5 working days.
5. Verify and reviewCheck the change held. Take the case to the QAA committee and close it with evidence. See F867.

How IncidentKit supports F610

Investigations hold the evidence file, contributing factors and disposition. A person signs the conclusion. Lauren drafts the investigation from staff answers, marked "Lauren · draft" until approved. Corrective actions carry an owner, due date, evidence and an effectiveness check. Nothing closes until verified. IncidentKit does not conduct the investigation. Your team adds interviews and notes.

How IncidentKit supports this requirement

Product parts involved: Investigations and RCA, Corrective actions (CAPA), Routing and escalation, Audit trail, Lauren, the AI assistant, Incident reporting. Capabilities marked “rolling out” are being released in stages; see the changelog.

Frequently asked questions

Sources

• eCFR, 42 CFR 483.12 (freedom from abuse, neglect, and exploitation), current through 2026-10-01
• CMS State Operations Manual, Appendix PP, Guidance to Surveyors for Long Term Care Facilities (Rev. 232, issued 07-23-25; revised guidance used on surveys since 04-28-25): F610 section (Rev. 173, issued 11-22-17, effective 11-28-17); F600 and F609 cross-references (Rev. 211)
• Example CMS-2567 (Indiana Department of Health, 2024) printing the F610 title and citation as 483.12(c)(2)-(4)
• CMS State Operations Manual, Chapter 7, Survey and Enforcement Process for Skilled Nursing Facilities and Nursing Facilities (Rev. 244, issued 06-26-26): scope and severity matrix, immediate jeopardy, substandard quality of care
• eCFR, 42 CFR 488.301 (definitions: immediate jeopardy, substandard quality of care), current through 2026-10-01
• CMS memo QSO-25-14-NH (revised 2025-03-10): Revised Long-Term Care Surveyor Guidance, effective April 28, 2025
• Wisconsin Department of Health Services, Top Ten Federal Health Citations, First Half 2026 (national, state and CMS Region 5 citation counts)

Reviewed against the sources above on Oct 5, 2026. Rules change: confirm current requirements with the issuing body or your counsel before relying on any summary.