Hospital price transparency: what hospitals must publish, and what it is worth

Yes, most of them are required to. A federal regulation, 45 CFR Part 180, implements section 2718(e) of the Public Health Service Act, which requires each hospital operating in the United States to establish, update, and make public a list of its standard charges for the items and services it provides. CMS says the requirement started on January 1, 2021.

The rule asks for two separate things. First, a machine-readable file containing a list of all standard charges for all items and services. Second, a consumer-friendly list of standard charges for a limited set of shoppable services. A "shoppable service" is defined simply as a service that can be scheduled by a healthcare consumer in advance. Both have to be made public electronically via the internet.

"Standard charge" is a defined term covering five things, and this is the part worth remembering, because they are very different numbers. The gross charge is the chargemaster price absent any discounts. The discounted cash price is what applies to someone paying cash. The payer-specific negotiated charge is what the hospital has negotiated with a particular third party payer. The de-identified minimum and maximum negotiated charges are the lowest and highest charges the hospital has negotiated with all payers for that item.

For the shoppable-services display, the hospital must cover as many of the 70 CMS-specified shoppable services as it provides, plus enough of its own choosing to reach a combined total of at least 300 — or, if it does not provide 300, as many as it does provide. A hospital is deemed to meet that requirement instead if it maintains an internet-based price estimator tool that covers the same services, lets a consumer obtain an estimate of what they will owe the hospital at the time they use it, and is prominently displayed and free without registration.

Not every hospital is covered. The definition of "hospital" turns on state licensing, and CMS deems federal and state hospitals to be in compliance already — including federally owned facilities such as VA hospitals and Department of Defense military treatment facilities, hospitals operated by an Indian Health Program, and state forensic hospitals treating only people in the custody of penal authorities.

The regulation is unusually specific about placement, which is helpful if you are hunting. Since January 1, 2024, a hospital must ensure the website hosting its machine-readable file carries a link in the footer — including on the homepage — labeled "Price Transparency", pointing directly to the page that hosts the file link. That footer link is the fastest route, and its absence is itself a compliance problem.

The same provision requires a .txt file in the website's root folder listing the hospital location name, the source page URL, a direct link to the machine-readable file, and hospital point-of-contact information. So a second route is to try the site's root-level .txt file directly.

The file name follows a convention CMS specifies: <ein>_<hospital-name>_standardcharges.json or .csv. Searching for "standardcharges" alongside the hospital name will often surface it.

The rule also says what a hospital may not make you do to get it. The information must be free of charge, available without establishing a user account or password, available without submitting personal identifying information, and accessible to automated searches and direct file downloads through a link on a publicly available website. The file and the charge information in it must be digitally searchable. The consumer-friendly shoppable list carries parallel access rules and must be searchable by service description, billing code, and payer. If a hospital is asking you to register or pay to see any of this, that is not what the regulation permits.

One wrinkle if your hospital is part of a larger organization: each location operating under a single hospital license that has a different set of standard charges from the other locations must separately publish the charges applying to that location. The file you want is the one for the location that treated you.

If you cannot find anything, CMS accepts complaints. Its program page says you may submit a complaint if it appears a hospital has not posted information online, and the regulation lists evaluation of public complaints as one of the ways CMS monitors compliance.

Since July 1, 2024, the machine-readable file has had to conform to a CMS template layout, data specifications, and data dictionary, rather than being any machine-readable format the hospital liked. That standardization is recent, and files posted before it looked quite different from one another.

The required data elements are more detailed than a price list. For each item or service the file must carry a general description, whether it is provided in connection with an inpatient admission or an outpatient department visit, any code the hospital uses for accounting or billing, and the type of that code — the regulation names CPT, HCPCS, DRG, NDC, and revenue center codes among the possibilities. Since January 1, 2025, files must also include drug unit and type of measurement for drugs, and any modifiers that change the standard charge, with a description of how they change it.

Payer-specific negotiated charges carry extra fields: the payer and plan names, though plans may be indicated as categories such as "all PPO plans"; the method used to establish the charge; and whether the number should be read as a dollar amount or as a percentage or algorithm.

That last field points at a real limitation. Some negotiated rates are not dollar amounts at all — they are contractual formulas, often expressed as a percentage of some other fee schedule. Where that is the case, the file must describe the percentage or algorithm, and since January 1, 2026 the hospital must calculate and encode the 10th percentile, median, and 90th percentile of the allowed amounts it has historically received for that item, along with the number of remittances used to compute them. Those percentiles are derived from 12 to 15 months of the hospital's own historical payment data. They are a range of what the hospital actually collected, not a price you are quoted.

On accuracy, the rule relies substantially on the hospital's own word. Since January 1, 2026, a hospital must attest in the file that, to the best of its knowledge and belief, it has included all applicable standard charge information and that the encoded information is true, accurate, and complete as of the date in the file, and must encode the name of the CEO, president, or senior official designated to oversee that encoding. Files must be updated at least once annually — so the numbers you are reading may be up to a year old.

Compliance is enforced, but through a process rather than automatically. CMS evaluates whether hospitals have complied and may monitor through complaints, third-party analyses of noncompliance, audits and comprehensive reviews, and required certifications. Where it finds noncompliance it may issue a written warning notice, request a corrective action plan for a material violation, and then impose a civil monetary penalty and publicize it if the hospital fails to submit or comply with that plan. Failing to make the charges public at all, or failing to publish them in the required form and manner, are both named as examples of material violations.

The penalties are real but bounded. Since January 1, 2022, the maximum daily penalty is $300 for a hospital with 30 or fewer beds, the bed count times $10 for hospitals with 31 to 550 beds, and $5,500 a day for hospitals with more than 550 beds — in each case the maximum total per day even if the hospital is violating several requirements at once, adjusted annually for inflation.

We are not going to quote a national compliance rate, because we could not find one CMS publishes as such, and the widely circulated figures come from private studies using their own definitions of compliance. What CMS does publish is enforcement activity. In an April 2023 fact sheet, CMS reported having issued more than 730 warning notices and 269 corrective action plan requests, and having imposed civil monetary penalties on four hospitals. It also described the enforcement cycle at that time as averaging 195 to 220 days from start to finish. Those numbers are a snapshot of enforcement volume as of that fact sheet, not a measure of how many hospitals are compliant, and the current totals are certainly higher by now. CMS maintains a current dataset of enforcement activities and outcomes, and a list of hospitals issued penalties, if you want to check a specific hospital.

The format problem is visible in the regulation itself, without needing an outside study. The template requirement only took effect on July 1, 2024, so anything older follows no common layout. Plans may be reported as categories rather than individually, so "all PPO plans" may be as specific as a payer column gets. Rates that are formulas rather than dollar amounts appear as percentile ranges of historical payments. And for the consumer-friendly shoppable list, the rule expressly gives a hospital discretion to choose a format — or to substitute a price estimator tool entirely, in which case there is no list to download at all. Comparing two hospitals means reconciling all of that.

There is also a gap between a posted rate and your bill. The published numbers are standard charges for items and services. What you owe depends on which items were actually billed, in what quantities, your plan's cost sharing, and whether the coding on the bill was right in the first place. A correct rate applied to the wrong line is still a wrong bill.

This section is our reasoning about our own method, not something the regulation says. The transparency rule tells hospitals what to publish; it does not tell anyone what a fair price is, and nothing below should be read as a legal standard.

When The Bill Check looks at whether a charge is out of line, it compares the billed amount to the Medicare allowed amount for that code and flags lines billed at a large multiple of it. We chose that benchmark over hospital-published prices for practical reasons. Medicare rates are published centrally, on a single schedule, for every code, updated on a known cycle, and they mean the same thing at every hospital in the country — which makes them usable as a fixed yardstick. Hospital transparency files, by contrast, are published one hospital at a time, are only required to be refreshed annually, standardized to a common template only since July 2024, and may express the most relevant rates as formulas or percentile ranges rather than prices.

The comparison also has to hold up when the transparency file is missing or unusable. A guide that told you to look up your hospital's negotiated rate would fail for anyone whose hospital has not posted a usable file. A Medicare-based check works the same way for every bill.

What that benchmark is and is not: Medicare rates are not what a hospital is required to charge you, and they are not what commercial insurers pay. Commercial rates are routinely well above Medicare, so a charge above the Medicare rate is not by itself evidence of anything wrong. What it can do is show scale — a line billed at many times the Medicare allowed amount is worth asking about, and that is how our checker treats it.

Your hospital's published file is still worth pulling if you can get it, and it is better evidence than our benchmark for one specific purpose: showing what that hospital itself says it accepts for the service, including its discounted cash price. If you are negotiating a bill, a number the hospital published about itself is harder to argue with than a national average.