When harm or suspicious events happen in a nursing home, federal rules require fast reporting, a real investigation, and written findings within a set window. Families do not have to accept “we handled it internally.” The timelines and recipients are in black and white.
There are two separate but related duties.
1) Facility-reported incidents. The nursing home must report alleged violations that involve abuse, neglect, exploitation, mistreatment, injuries of unknown source, or misappropriation of resident property. The report goes to the administrator and to State officials, which include the State Survey Agency and, where state law gives jurisdiction, Adult Protective Services. The timing is immediate, no later than 2 hours when abuse is involved or there is serious bodily injury, and no later than 24 hours for all other alleged violations. The facility must also thoroughly investigate, protect residents during the investigation, and report the results within 5 working days.
2) Crime-reporting by covered individuals. Owners, managers, employees, agents, and contractors in federally funded long-term care facilities are covered individuals under the Elder Justice Act. They must report a reasonable suspicion of a crime against a resident to law enforcement and the State Survey Agency. Timing is immediately, no later than 2 hours if the events caused serious bodily injury, and no later than 24 hours if not. Facilities must notify staff annually of this duty and must prohibit retaliation.
Federal text is broad by design. The “alleged violations” that require facility reporting include any claim or indication of abuse, neglect, exploitation, mistreatment, injury of unknown source, and misappropriation. For crime-reporting, a “reasonable suspicion of a crime” is measured by local law and the facts at hand. When in doubt about the category, the safer reading is to report under both tracks. The eCFR lists each category and ties them to the exact time windows and recipients.
Reporting the results matters as much as reporting the allegation. Federal rules require the facility to send the written results of its investigation to the administrator and to State officials, within 5 working days of the incident, and to take corrective action if the allegation is verified. If five working days pass without a written outcome, ask the leadership to produce the submission and the corrections. The timeline is explicit.
CMS Appendix PP is the playbook surveyors use during investigations. It aligns with the regulation and explains what facilities must do after an allegation is made, how residents must be protected during the inquiry, and what documentation proves timely reporting and a complete investigation. Tags commonly applied include F609 for reporting alleged violations and F610 for investigation results and protection from further harm.
The State Survey Agency is the federal enforcement channel in every state. CMS maintains a current directory with phone and online complaint portals. Families can also file directly. If law enforcement should have been notified under the crime-reporting rule, insist the facility document that step with date, time, and the agency contacted.
Ask three specific questions in writing and keep copies.
If answers are vague, contact the State Survey Agency directly and attach your timeline. CMS provides a printable complaint form families can use, and online portals are listed by state.
Facilities sometimes mix up the two tracks and report to the State but skip law enforcement, or they report the allegation but never send the five-day results. Others misapply the 2-hour window by waiting until the next business day. The federal clocks run from the moment of allegation or suspicion, not from the next shift. Appendix PP and CMS crime-reporting memos were written to remove any doubt on these points.
If you file with the State Survey Agency, provide the resident’s name, location, relevant dates and times, a short description of the event, who was notified at the facility, any photos or logs you have, and why you believe the federal timelines were missed. The state will triage and can conduct an unannounced survey. CMS’s complaint materials explain what helps investigators move quickly.
Contact Bedsore.Law for a FREE consultation. We check facility submissions against the regulation, obtain the EHR audit trail and incident files, and act when reporting and protection fell short.
Links verified on 2025-11-23 America/Los_Angeles.