Cut through the noise, find the signal: Intelligence for serious healthcare leaders
Analysis updated November 9, 2026
High-Volume Centers Face Punishing Benchmark Trap
The Achievement Domain transplant target is calculated as the average of three baseline years (July 1, 2021–June 30, 2024 for PY1) trended forward by the national growth rate. As illustrated in the Financial Fact Sheet's Example B, a high-volume center that performed 330 transplants historically had a target so elevated that achieving only 75% of it (248 transplants) yielded just 10 out of 60 Achievement points, triggering a total score of 37/100 and a downside payment of $150 per Medicare FFS transplant. For a center performing even 200 Medicare FFS transplants annually, that equals $30,000 owed to CMS — purely because historical excellence set an unachievable baseline. Centers that surged volume during COVID recovery years (which fall squarely in the PY1 baseline window) are especially exposed. Strategic mitigation requires immediate baseline year auditing against OPTN/SRTR records before CMS finalizes annual transplant targets, delivered by the first day of each PY.
Organ Offer Acceptance Incentive Conflicts With Transplant Safety Standards
The Efficiency Domain (20 points) rewards hospitals for increasing their organ offer acceptance rate ratio relative to both national ranking and their own improvement benchmark. Centers in the 20th percentile or below score zero points on achievement scoring; those below their baseline rate score zero on improvement scoring. This creates direct pressure to accept marginal or high-risk kidneys — including expanded criteria donor (ECD) or donation after circulatory death (DCD) organs — that transplant physicians might otherwise appropriately decline. Accepting such organs to chase Efficiency points could suppress the Quality Domain score (also 20 points), which measures composite graft survival rate ranked nationally: centers below the 10th percentile receive only 10 of 20 Quality points. Critically, an organ acceptance decision that boosts Efficiency points but causes graft failure degrades the cumulative graft survival denominator across all PYs, since the Quality measure is a running composite. This cross-domain scoring tension creates liability exposure under UNOS/OPTN Program Criteria requirements and poses patient safety and medical staff credentialing risks that hospital CMOs must address through explicit clinical governance protocols separating financial incentive review from individual organ acceptance decisions.
Payment Reconciliation Lag Creates Multi-Year Cash Flow Exposure
CMS notifies participants of their preliminary performance assessment only 5–9 months after each PY closes. Participants then have 30 days to request a targeted review, after which CMS issues the final score and payment determination at least 30 days later. This means PY2 downside payments (beginning July 1, 2026) may not be finalized until as late as Q2 2028. For a center with a score of 26/100 (as in Appendix Example B), the formula yields $700 per Medicare FFS transplant owed to CMS; at 200 Medicare transplants, that is a $140,000 retroactive liability. CFOs must carry downside risk reserves across open PYs simultaneously — by PY3, up to two prior PYs may be in reconciliation simultaneously — without certainty of final amounts. Targeted review is limited to data quality errors or misapplication of methodology; it is not a broad appeals mechanism. Hospitals should implement internal shadow-scoring systems that replicate CMS's three-domain calculations quarterly to anticipate year-end positions and accrue appropriate liabilities on financial statements.
Mandatory Participation With No Opt-Out Mechanism
IOTA is a mandatory model under Section 1115A authority for all eligible kidney transplant hospitals (non-pediatric, ≥15 transplants annually across three baseline years) within the approximately 50% of DSAs CMS selected. At model launch on July 1, 2025, 103 hospitals were designated; 95 remained eligible at PY2 start (July 1, 2026), suggesting 8 hospitals were affected by eligibility changes mid-model. Hospitals cannot voluntarily exit, and the PY2 Final Rule (June 1, 2026) demonstrates CMS's willingness to revise model provisions after launch, adding two-sided risk retroactively effective July 1, 2026 — a structural change that hospitals operating under PY1 upside-only assumptions could not have fully priced into multi-year capital plans. Any hospital in a mandatory DSA that subsequently drops below 15 annual transplants due to staffing shortages, program suspension, or accreditation issues faces both regulatory compliance gaps and potential mid-model exclusion without financial settlement clarity. Legal counsel should review whether a mid-model UNOS program suspension creates force majeure relief or constitutes a breach of the Data Sharing Agreement signed through the 4i platform.
Data Sharing Agreement and 4i Platform Onboarding as Compliance Gate
IOTA participants must complete onboarding to the 4Innovation (4i) platform and execute a Data Sharing Agreement before accessing any CMS-provided data, including CCLFs (shared monthly), Patient Attribution Lists (quarterly, 15 days before PY start), and the annual Transplant Target report (provided by the first day of each PY). Failure to complete 4i onboarding before the PY start date means a hospital begins the performance period without its official transplant target, attribution list, or historical claims data — operating blind on the 60-point Achievement Domain. CMS shares attribution lists only 15 days before the PY begins, leaving minimal runway for clinical workflow alignment. Additionally, the standard provisions finalized in the 2024 Final Rule include cooperation requirements in model evaluation and monitoring, audit rights, record retention mandates, and intellectual property provisions for data generated during participation. Non-compliance with these provisions can trigger remedial action or model termination by CMS under the standard provisions framework. Hospitals must designate a primary IT/compliance lead specifically for 4i credential management and ensure CMS holds current primary contact name, email, and phone — the minimum required for receiving the platform invitation.
Publicly Posted Waitlist Criteria Face Accessibility and Equity Scrutiny Under IOTA
IOTA requires participants to publicly post their kidney transplant waitlist evaluation and selection criteria on their public-facing website by the end of PY1 (June 30, 2026). Additionally, they must review transplant organ offer acceptance criteria with each Medicare-attributed waitlist patient at least every 6 months. These dual transparency requirements create distinct legal hazards. First, a JAMA study published in October 2026 examining the accessibility of publicly posted waitlist criteria under IOTA found variation in how centers have implemented this requirement, raising concerns about whether posted criteria are practically accessible and equitable — amplifying external scrutiny by civil rights organizations, plaintiffs' attorneys, and CMS's Office for Civil Rights. This is particularly acute given that OPTN data cited in the IOTA NPRM acknowledges that organ transplantation 'remains highly inequitable amongst racial and ethnic minorities.' Any waitlist criteria that disproportionately screen out protected classes (e.g., BMI thresholds, compliance scoring, transportation-dependent requirements) now carries heightened disparate impact litigation risk once publicly posted. Second, the semi-annual patient review requirement for Medicare beneficiaries on the waitlist creates a documentation burden that transplant coordinators must operationalize at scale — a center with 200+ attributed Medicare waitlist patients must conduct and document approximately 400+ review touchpoints annually. Failure to meet this cadence constitutes a model compliance violation reviewable under the standard provisions audit framework. Centers should conduct a legal and plain-language accessibility review of all posted criteria before and after each update cycle.
Quality Domain Accumulates Failure Risk Across All PYs Simultaneously
The Quality Domain's composite graft survival rate is calculated as total functioning grafts divided by total transplants completed — not just within a single PY, but cumulatively. As explicitly illustrated in the Welcome Webinar slides, by PY2 a center's denominator includes all transplants from PY1 and PY2 combined, with graft failures from any prior PY reducing the numerator. This means a center that performs aggressively in PY1 to maximize Achievement Domain points (which carry 60 of 100 possible points) is building a large transplant cohort whose long-term graft survival will be tracked through PY6 (ending June 30, 2031). A single bad clinical year — a transplant-associated infection outbreak, a suboptimal organ acceptance policy driven by Efficiency Domain incentives, or a post-transplant immunosuppression management failure — permanently degrades the cumulative Quality score for all remaining PYs. Quality Domain scoring is based on national percentile ranking against both IOTA and non-IOTA hospitals; dropping below the 10th percentile yields only 10 of 20 Quality points. Centers with large transplant volumes that underperform on quality face a compounding disadvantage: more transplants mean more graft failures in absolute terms even at the same failure rate, while national ranking is indifferent to volume. CMOs should establish prospective graft survival dashboards updated at least quarterly against SRTR benchmarks to detect deteriorating trends before they crystallize into the annual CMS performance calculation.