Compliance library · SNF F-tags

F867: QAPI/QAA improvement activities

Short answer

F867 is where QAPI becomes visible. The home must track medical errors and adverse events, find their causes and set priorities. It must fix problems at the system level and measure whether fixes hold. It must also run at least one improvement project a year.

F867 · 42 CFR 483.75(c), (d), (e) and (g)(2)(ii)-(iii)CMS
Tag title
QAPI/QAA Improvement Activities
Regulation
42 CFR 483.75(c), (d), (e) and (g)(2)(ii)-(iii). The old F866 was folded into F867
Guidance relied on
Appendix PP Rev. 232 (issued 07-23-25, in use since 04-28-25); F867 section Rev. 229 (04-25-25, implementation 04-28-25)
Improvement project
At least one distinct project a year on a high-risk or problem-prone area found through data
Data frequency
Set by the home. High-risk data is collected more often (daily, weekly or monthly) until performance is satisfactory
New in the 2025 guidance
Health equity. Feedback, sub-population data and factors such as race, language and socioeconomic status in error analysis
Severity note
CMS gives examples at levels 1 through 4

Applies to: Medicare-certified skilled nursing facilities · Medicaid-certified nursing facilities

What F867 covers

F867 enforces four parts of 42 CFR 483.75. Paragraph (c) covers policies for feedback, data and adverse event monitoring. Paragraphs (d) and (e) cover analysis, systemic action, priorities and improvement projects. Paragraph (g)(2)(ii)-(iii) covers the QAA committee's duty to act on quality deficiencies and review data, including drug regimen review data.

The home must track medical errors and adverse resident events, find causes and prevent repeats. CMS defines an adverse event as an unwanted and usually unexpected event that causes death or serious injury, or the risk of it. A near miss is a serious error that did not become an adverse event, by chance or interception.

Priorities should follow high-risk, high-volume and problem-prone areas. CMS examples: tracheostomy care, pressure injury prevention and high-risk drugs (anticoagulants, insulin, opioids) are high-risk. Transcribing orders and giving medications are high-volume. Call bell response, staff turnover and lost laundry are problem-prone.

Events CMS expects you to track

CMS and AHRQ list potentially preventable events. They cite a 2014 HHS Office of Inspector General finding. About one in three Medicare beneficiaries was harmed by an adverse or temporary harm event within 35 days of a nursing home stay. Nearly 60 percent of those events were potentially preventable.

CMS examples of potentially preventable events
CategoryExamples
MedicationDelirium with opiates or psychotropics. Hypoglycemia with antidiabetic drugs. Bleeding with antithrombotics. Drug toxicity (digoxin, phenytoin, lithium). Constipation or impaction with opiates
CareFalls, skin tears and other care-related trauma. Avoidable pressure injuries. Dehydration. Feeding tube complications. Elopement. Abuse, neglect, misappropriation and exploitation
InfectionPneumonia and influenza. Urinary tract infections, including catheter-associated. C. difficile and norovirus. Skin and wound infections

CMS says an adverse event, such as a cognitively impaired resident eloping, is a high-risk problem needing corrective action.

What surveyors check

Surveyors use the QAPI and QAA Review pathway at the end of the survey. Repeat deficiencies the committee never identified or prioritized suggest it is not doing its job.

What to have ready
Surveyors ask forHave ready
Policies for feedback and dataHow staff, resident and representative feedback is gathered and used, plus each department's data
Adverse event and error trackingA log with causes analyzed and preventive action for each, not only counts
Performance indicatorsThresholds, goals and how often each is reviewed
A systematic methodRoot cause analysis, reverse tracker, failure modes review or similar. The cause it found
Corrective action plansProblem definition with contributing causes, measurable goals, step-by-step interventions, tracking plan
Results and the annual projectData showing the fix held, and the year's project with its findings

What raises F867 severity

Severity follows what the missing QAPI work allowed. Each CMS example is a problem the committee should have caught.

CMS examples of F867 severity
LevelExample from CMS guidance
4: immediate jeopardyResidents had third-degree burns the month before. Hot water data was collected but never reviewed. The committee did not track how residents' code status reached staff
3: actual harmRepeat deficiencies on two surveys about discharge needs. A resident left without diabetes education and was rehospitalized. The committee was unaware and did not monitor discharge
2: potential for more than minimal harmA quality deficiency about inaccurate weight measurement from the prior survey was not corrected or tracked
1: minimal potential for harmA plan to check monthly for three months. No proof of checks in the second month

Clocks and frequency

F867 has no deadline for reporting an event. Collect data on the home's schedule, and more often for high-risk issues. The committee reviews at least quarterly under F868. CMS expects issues likely to cause serious harm, impairment or death to be answered immediately. Abuse and neglect clocks sit in F609.

Gaps that lead to citations

  • Events are logged and counted, but no one analyzes cause.
  • The same corrective action, usually an in-service, repeats for every event.
  • Goals are not measurable, so success cannot be shown.
  • A tracking plan has missing months.
  • The improvement project came from a list, not home data.
  • The committee does not know about a repeat survey deficiency.
  • Data is not split by sub-population, and error analysis skips equity factors.

How to show a good investigation

CMS says a corrective action fixes the cause at the systems level, not just the symptom. Tests of change or Plan-Do-Study-Act cycles are allowed until goals are met.

  1. CaptureLog the event or near miss when it happens.
  2. AnalyzeFind the cause with a systematic method.
  3. Act on the systemSet a measurable goal, an owner and a date.
  4. MeasureCheck as planned and keep proof for every period.
  5. ReportBring results to the committee. Close only when the fix held.

How IncidentKit supports F867

Incident reporting with Lauren captures events and near misses, and a person reviews and signs. Investigations record contributing factors and five whys. Corrective actions carry an owner, due date, evidence and an effectiveness check. Nothing closes until verified. Analytics show where events cluster, and compliance packets include a QAPI summary. Choosing priorities and running the committee remain your team's work.

How IncidentKit supports this requirement

What the rule asks forWhere it lives in IncidentKit
Track medical errors and adverse events and analyze their causesIncident reporting with Lauren. Investigations with contributing factors and five whys. Analytics by location, shift, equipment and cause.
Corrective actions that change the systemCorrective actions carry an owner, due date and evidence, tied back to the investigation.
Measure success and show improvements were sustainedEach corrective action has an effectiveness check. Nothing closes until verified. The audit trail keeps the history.
Set priorities from dataAnalytics show where incidents cluster, so the committee can choose high-risk and problem-prone areas.
QAA committee reviews data and acts on itCompliance packets include a QAPI summary for each meeting.
Equity analysis of errors and eventsAnalytics cluster by location, shift, equipment and cause. Breakdowns by language or race come from your own data and committee review.

Product parts involved: Incident reporting, Lauren, the AI assistant, Investigations and RCA, Corrective actions (CAPA), Analytics, Compliance packets, Audit trail. Capabilities marked “rolling out” are being released in stages; see the changelog.

Frequently asked questions

What events must a nursing home track under F867?

Medical errors and adverse resident events, plus near misses. The program must track them, find causes and prevent repeats.

How many performance improvement projects are required?

At least one distinct project a year on a high-risk or problem-prone area found through the home's own data. The number should reflect the home's services and facility assessment.

What should a corrective action plan contain?

A problem definition with contributing causes, measurable goals, step-by-step interventions and a tracking plan. It should fix the underlying cause at the systems level.

What changed in the 2025 F867 guidance?

CMS added health equity guidance. Homes should consider equity feedback and monitor outcomes for sub-populations. Error analysis should include factors such as race, sexual orientation, socioeconomic status and preferred language. Surveyors have used it since April 28, 2025.

Can monitoring gaps alone be cited at F867?

Yes. CMS's level 1 example is a plan for monthly checks for three months, with no proof the second month's checks happened. Higher levels cover unreviewed data or an unmonitored high-risk system.

Sources

Reviewed against the sources above on Oct 5, 2026. Rules change: confirm current requirements with the issuing body or your counsel before relying on any summary.

Start free

Map this requirement to your records.

IncidentKit connects each rule to the incident, investigation and corrective action that satisfy it.