PY2027 NBPP: What the Shift in Oversight Means for Health Plans

CMS issued the PY2027 Notice of Benefit and Payment Parameters (NBPP) final rule on May 15, 2026, largely finalizing its proposed direction around network adequacy oversight while introducing a more state driven review environment for issuers operating in Exchange markets. While federal certification requirements remain in place, the day to day mechanics of how plans demonstrate access compliance may increasingly vary across states.

For health plans, the rule is less about new adequacy standards and more about how oversight may now be operationalized. States may play a larger role in provider access review, creating the potential for differing expectations around provider file accuracy, appointment availability validation, geocoding methodologies, and exception review processes depending on the market.

That shift may create new complexity for multi state issuers. Even where the underlying standards remain similar, review processes may become less uniform over time. Plans may increasingly need stronger visibility into provider data quality, network performance, and access trends across markets rather than relying primarily on periodic certification cycle remediation.

The rule also reinforces continued regulatory focus on auditability and documentation as oversight becomes more operationally driven.

Several additional finalized provisions are also notable for issuers:

• CMS retained the existing 35% Essential Community Provider threshold rather than lowering it to 20%.
• Authority for non network Qualified Health Plans (QHPs) was finalized, though implementation was delayed until PY2028.
• CMS deferred the proposed State Based Exchange Enhanced Direct Enrollment (SBE EDE) framework for PY2027.
• Exchange user fees for Federally Facilitated Exchanges (FFEs) and State Based Exchanges on the Federal Platform (SBE FPs) were finalized lower than originally proposed.

More broadly, the PY2027 NBPP suggests that network adequacy oversight is continuing to evolve from a certification focused exercise into a more continuous operational function. Plans with stronger visibility across provider access, data integrity, and network performance may be better positioned as review structures continue to evolve across states.

We also published a breakdown for state regulators and Exchanges: PY2027 NBPP: What the Final Rule Means for State Network Adequacy Oversight.