PY2027 NBPP: What the Final Rule Means for State Network Adequacy Oversight

CMS issued the PY2027 Notice of Benefit and Payment Parameters (“NBPP”) final rule on May 15, 2026, further signaling a shift toward a more operationally balanced approach to network adequacy oversight. While CMS maintains federal certification standards and oversight guardrails, the rule creates a clearer pathway for states to take a more direct role in provider access review and network oversight execution.

At the center of the rule is the finalized “Effective Provider Access Review Program” framework, which allows states to assume responsibility for provider access reviews that would otherwise occur at the federal level. CMS largely finalized the proposal as introduced, reinforcing a broader move toward state driven operational oversight within a federally defined framework.

For states, the challenge is less about policy authority and more about operational infrastructure. States seeking to assume a larger role in access review will still need consistent methodologies, reliable provider data, appointment availability review processes, geocoding standards, exception workflows, and audit ready reporting structures. As oversight responsibilities evolve, execution and operational consistency will likely become increasingly important across fragmented provider markets.

Several notable provisions for state regulators and Exchanges:

• CMS retained the existing 35% Essential Community Provider threshold rather than lowering it to 20%, citing concerns around access protections.
• Authority for non network QHPs was finalized, though implementation was delayed until PY2028.
• CMS deferred the proposed SBE EDE framework, meaning State Exchanges will not yet be permitted to operate EDE exclusive enrollment pathways for PY2027.
• The rule also finalized several Exchange establishment flexibilities and lower than proposed user fees for FFEs and SBE FPs.

More broadly, the PY2027 NBPP reflects continued federal focus on auditability, documentation standards, and more structured oversight expectations across Exchange markets. The broader takeaway is that CMS appears increasingly focused on a model where federal standards remain centralized, while operational execution of provider access oversight becomes more state driven.

We also published a breakdown of what this means for health plans: PY2027 NBPP: What the Shift in Oversight Means for Health Plans.