ASC Infection Control Requirements

The section now has paragraphs (a) and (b) only. The COVID-19 staff vaccination standard briefly at 416.51(c) was removed effective 4 August 2023.

Five phrases do most of the work in a survey:

• “Professionally acceptable standards of practice” in (a) is the catch-all. CMS does not define it in the rule, and that is deliberate — it is the hook that lets a surveyor cite a deviation from national practice. Most sections of the surveyor worksheet carry the instruction that a “no” answer is cited under 416.51(a).
• “Investigate” in (b) is a distinct verb from prevent and control. It is the surveillance and outbreak workup obligation, and it is the one centers most often have no written process for.
• “Considered, selected, and implemented” is three separate documentary acts. You need a record that you looked at candidate guidelines, that you formally chose which ones govern, and that you put them into practice. The worksheet asks about the selection process separately from which guidelines you chose.
• “Immediately” in (b)(3) means corrective measures do not wait for the next quarterly committee meeting.
• “That result in improvement” in (b)(3) means the regulation asks for demonstrated effect, not just an action plan on paper.

This is the most-asked question on the topic, and the answer is better established than most people assume — not from the regulation, which says almost nothing, but from the surveyor’s own worksheet, which asks exactly four questions about the role:

Read those four questions together and five things follow:

• CIC certification is not required. Item 17b asks whether the person is certified, and 17c then provides a compliant path for someone who is not. A worksheet that asks what training an uncertified person received cannot be enforcing a certification mandate.
• The role can be part-time. 17d asks for hours per week and sets no floor.
• The role can be contracted out. 17a offers “ASC contractor” as an answer, not as an exception.
• The person must be licensed. The worksheet adds a word the regulation does not contain — “a licensed health care professional.” An unlicensed quality manager or office administrator in this role produces a “no” at item 17.
• The training has to be identifiable and documented. Item 17c asks what type of training. “Years of experience” does not answer that question; a certificate or transcript for identifiable infection control coursework does.

Nothing in the regulation or the worksheet restricts the role by job title or prohibits combining it with other duties. A licensed RN — a director of nursing or an experienced OR nurse — who is designated in writing and holds documented infection control training satisfies every element that is actually written down. That is the common arrangement in an ASC and it is a defensible one.

Exhibit 351, the ASC Infection Control Surveyor Worksheet, is at Rev. 206 dated 21 June 2022. It is mandatory on ASC surveys, published free by CMS, and it is the single best self-audit instrument available to a center because it is the instrument.

How it is used: primarily by observation, with interviews confirming what was seen. The surveyor must observe at least one surgical procedure, following one patient from registration to discharge — preferably two cases where procedures are short, such as colonoscopy. And the scoring rule, verbatim: “any single instance of a breach in infection control would constitute a breach for that practice.” No sampling threshold. No pattern requirement.

Document review and interview. Is there an explicit program. Does it follow nationally recognized guidelines. Is there documentation that guidelines were considered and selected, and which ones. The four questions about the program director. Whether the center has a system to actively identify infections related to its own procedures, how that information is obtained, whether there is supporting documentation confirming the tracking activity, and whether there is a policy for complying with state notifiable disease reporting. Then staff training: how it is delivered, which categories of staff receive it, whether it is uniform or role-specific, its frequency, and whether documentation confirms it was provided to all the categories listed.

Accessible soap and water and alcohol-based rub in all patient care areas, with rub dispensers installed per Life Safety Code placement rules. Hand hygiene after glove removal, before and after direct patient contact, before invasive procedures, and after contact with blood, body fluids or contaminated surfaces. Gloves worn for procedures involving blood or body fluids and for handling contaminated equipment, and removed before the next task or patient. No artificial fingernails or extenders for personnel with direct patient contact.

The longest observed section, and the one with the most severe consequences when it fails. One needle and one syringe per patient, including manufactured prefilled syringes. Vial septum disinfected with alcohol before every entry, whether the vial is new or previously accessed. A new needle and a new syringe on every vial entry. Pre-drawn medication labeled with date and time of draw, the initials of the person who drew it, drug name, strength and beyond-use date and time. Single-dose vials, IV bags and administration tubing used for one patient only — an IV bag is not a source of flush solution for multiple patients. Multi-dose vials dated when first opened and discarded within 28 days unless the manufacturer specifies otherwise, stored appropriately, and kept out of the immediate patient care area. Sharps in puncture-resistant containers, replaced at the fill line.

CMS clarified in June 2022 that these injection practice questions do not apply to multi-dose eye drop bottles.

Operating rooms cleaned and disinfected after each surgical or invasive procedure with an EPA-registered disinfectant, terminally cleaned daily. Environmental surfaces in patient care areas cleaned on a regular basis, when spills occur and when visibly contaminated. A written procedure for decontaminating gross blood spills.

Applies if you use a glucose meter or similar device. Hand hygiene before and after fingerstick and device use, gloves worn and removed with hand hygiene following. Finger stick devices not used for more than one patient — the worksheet is explicit that this covers both the lancet and the lancet holding device. Shared meters cleaned and disinfected after every use per manufacturer instructions.

CMS incorporated no guideline by reference into 416.51. The binding text only requires that you consider, select, implement and document some set of nationally recognized guidelines. The enforcement is indirect but real: once you select a guideline, departing from it becomes evidence of failing to adhere to professionally acceptable standards of practice under 416.51(a).

The worksheet gives a menu. Its guideline selection question offers: the CDC and HICPAC guideline for isolation precautions; CDC and HICPAC hand hygiene; CDC and HICPAC disinfection and sterilization in healthcare facilities; CDC and HICPAC environmental infection control in healthcare facilities; AORN perioperative standards and recommended practices; guidelines issued by a specialty surgical society; and “others.”

Worksheet section III is where most centers are actually cited. The recurring failure points, mapped to what the worksheet asks:

State notifiable disease reporting. The worksheet asks directly whether the center has a policy for complying with state notifiable disease reporting requirements. A “no” is a finding. There is no federal ASC-specific reportable condition list; the list, the timeframe and the mechanism are set by your state health department.

Infection control breaches. CMS memo S and C 14-36-ALL addresses breaches that could expose patients to another patient’s blood or body fluids — reusing a needle or syringe across patients, or re-entering a medication container with a used needle or syringe. It requires the surveyor or accrediting organization to make the state public health authority aware, consulting the state HAI Prevention Coordinator or State Epidemiologist. CMS is explicit that patient notification falls to state public health agencies, not to CMS.

Patient notification. CDC’s own guidance is that facilities “should consult with their local or state health department any time a patient notification is planned or considered.” The operational rule for a center is simple: do not self-launch a notification. Call the state HAI coordinator or state epidemiologist first and let the health department lead the risk assessment and the notification decision. CDC publishes a patient notification toolkit for exactly this situation.

NHSN. ASCQR no longer requires it — the last NHSN-reported measure was removed by the CY 2026 final rule. State law or accreditation may still require it, most often for surgical site infections, and CDC’s own ASC enrollment page has not been updated to reflect the ASCQR change.