Practical guide · Rules and compliance

The HCBS settings rule, explained for providers.

Published 2026-10-28 · Updated 2026-10-29

The HCBS settings rule is the federal Medicaid rule that says what a home or community-based setting must be like for Medicaid to pay for services there. It applies to group homes and other residential settings and to non-residential settings such as day programs. This guide explains the requirements in plain language. Your state's transition plan and licensing rules say how it is applied and checked where you operate.

Your people verify facts, correct AI drafts, sign records and approve consequential actions.

Read the guide ↓

30 days free · Then $20 USD per person supported per month.

$0 setup for system initialization · Month-to-month · No long-term contract

Migration scope and costs are separately agreed.

Key points

The short version.

  • The rule applies to residential and non-residential HCBS settings.
  • Every setting needs community access, choice, rights and autonomy.
  • Group homes also need leases, lockable doors, food and visitor access.
  • Restrictions are individual, documented in the plan with eight conditions.
  • Settings presumed institutional need heightened scrutiny.
  • The state transition period ended March 17, 2023.

01 · Rules and compliance

What the rule is and when it took effect.

CMS published the rule in January 2014, and it took effect on March 17, 2014. For waiver services, the requirements are at 42 CFR 441.301(c)(4)-(5), with matching sections for other HCBS authorities.

States had a transition period to bring existing settings into compliance. CMS ended it on March 17, 2023 and said it would not extend it; some states received time-limited corrective action plans for specific requirements or for settings still under review.

02 · Rules and compliance

Settings that are not home and community-based.

Nursing facilities, institutions for mental diseases, intermediate care facilities for individuals with intellectual disabilities (ICF/IID) and hospitals are not HCBS settings. Medicaid HCBS cannot be delivered in them as home and community-based services.

03 · Rules and compliance

Five qualities every setting must have.

Every HCBS setting, residential or not, must have these qualities.

  • Integrated in the community, with full access to work, community life, control of personal money and community services, to the same degree as people who do not receive Medicaid HCBS.
  • Chosen by the person from options that include settings not specific to disability and, for housing, a private unit; the options are documented in the person's plan.
  • Protecting privacy, dignity and respect, and freedom from coercion and restraint.
  • Supporting the person's own initiative, autonomy and independence in life choices, without regimenting daily activities, the environment or who they spend time with.
  • Supporting the person's choice of services and supports and who provides them.

04 · Rules and compliance

Extra conditions for group homes and other provider-controlled housing.

When the provider owns or controls the home, five more conditions apply.

  • A legally enforceable agreement, such as a lease, giving the same responsibilities and eviction protections tenants have under landlord-tenant law, or comparable protections where that law does not apply.
  • Privacy in the person's bedroom or unit, with an entrance door the person can lock and only appropriate staff holding keys; choice of roommates; and freedom to furnish and decorate within the agreement.
  • Freedom and support to control their own schedule and activities, and access to food at any time.
  • Visitors of their choosing at any time.
  • A home that is physically accessible to the person.

05 · Rules and compliance

Changing a condition for one person.

The provider-controlled conditions can be modified only for an individual and only through their person-centered plan, never as a rule for the whole house. The plan must document a specific assessed need, the positive supports tried first, less intrusive methods that did not work, a condition proportionate to the need, ongoing data collection, time limits for review, the person's informed consent and an assurance of no harm.

A locked pantry because one resident has a health need, applied to everyone in the home, is a common example of a house-wide restriction that does not meet the rule.

06 · Rules and compliance

Heightened scrutiny.

Some settings are presumed to have the qualities of an institution: settings in a building that also houses an inpatient institutional facility, settings on the grounds of or next to a public institution, and settings that have the effect of isolating people from the wider community.

Such a setting can still be HCBS only if the state shows, and CMS agrees through a heightened scrutiny review, that it does not have institutional qualities and does have home and community-based qualities.

07 · Rules and compliance

What reviewers notice in practice.

Reviews of settings tend to find the same patterns. Most come from routines built for staff convenience rather than for each person.

  • House rules that limit food, visitors, phones or bedtimes for everyone.
  • Bedroom doors without locks, or residents without keys.
  • No lease or residency agreement, or one without eviction protections.
  • Outings only as a group, on the staff's schedule.
  • Staff holding people's money without the person's involvement or a plan.
  • Restrictions in practice that are not documented in anyone's plan.

08 · Rules and compliance

A quick self-check for your homes.

Walk through each home and program as if you were a reviewer, and ask each person, not just staff.

  • Does each resident have a signed lease or residency agreement?
  • Can each person lock their bedroom door, and who has keys?
  • Can people eat, have visitors and set their schedule when they choose?
  • Is every restriction documented in that person's plan with all eight conditions?
  • Do people go into the community individually, for things they chose?
  • Do people choose their services and who provides them?

09 · Rules and compliance

How do you show a group home meets the settings rule?

You show it through the person's own experience and the records that back it up: their plan, their lease, their daily notes and what they tell a reviewer. A policy that promises rights is not enough if daily life in the home does not match it.

Reviewers commonly talk with residents, look around the home and read records. Before a review, ask each person in their own way whether they can come and go, eat when they want, have visitors and lock their door. Their answers are the best test of your evidence.

Check that staff answers match. If a resident says he can have friends over any time but the evening staff say visitors must leave by eight, the written policy does not reflect what happens in the home. Train staff to explain each person's rights the same way, and fix the practice, not just the paperwork.

  • A signed lease or residency agreement for each resident.
  • Locks on bedroom doors, keys held by residents, and a list of which staff hold keys.
  • Plans that record the setting options each person considered and chose.
  • Full documentation for any individual modification, including the data reviewed.
  • Daily notes showing individual community activities the person chose.
  • Records showing how each person controls their own money.
  • A home with no posted house-wide restrictions on food, visitors or schedules.

10 · Rules and compliance

What should a residency agreement include?

At minimum, the agreement must be legally enforceable and give the person the same responsibilities and protections from eviction that tenants have under landlord-tenant law. Where that law does not apply, the state must make sure the agreement gives comparable eviction protections and appeal rights.

Beyond that minimum, a clear agreement helps prevent disputes. Write it in plain language, go over it with the person and their guardian if they have one, and give them a copy. Check your state's landlord-tenant law and licensing rules, and have an attorney review your template.

  • The specific room or unit and the shared spaces the person may use.
  • Rent or room and board charges, what they cover and when they are due.
  • The reasons the agreement can be ended, the notice required and how to appeal.
  • The person's right to lock their door, and who else holds a key.
  • How roommates are chosen and how a person asks for a change.
  • The right to furnish and decorate, and any limits in the agreement.
  • How to raise a complaint without fear of losing housing.

11 · Rules and compliance

What does community integration look like day to day?

It looks like each person using the same community places, on their own schedule, that people who do not receive Medicaid services use. The rule calls for full access to the community, including chances to seek work in competitive integrated settings, take part in community life, control personal resources and use community services.

In practice, that means planning staffing around what people want to do, not only around group outings. One resident may go to a weekly class with a staff member, another may take the bus to a job, and a third may prefer a quiet weekend at home. Each choice is valid when it is the person's own.

  • Individual outings chosen by the person, not only group trips in the house van.
  • Using regular businesses and services: the barber, bank, gym, library or place of worship.
  • Support to look for or keep a job in the community.
  • The person's own bank account or a clear plan for managing their money.
  • Time with friends and family on the person's terms.

12 · Rules and compliance

How do house meetings and resident input fit the rule?

House meetings are a good way to hear residents and agree on shared matters, but they cannot be used to limit an individual's rights. A majority vote cannot set visiting hours or lock the kitchen for everyone, because those conditions can only be changed for one person, through that person's plan.

Use meetings for things that are truly shared, such as menu ideas, chores, outings and how to keep common areas comfortable. Make sure each person can take part in their own way, keep short notes of what was decided, and follow up on what people asked for.

13 · Rules and compliance

Which settings conditions can be modified for one person?

Only the conditions about the lease, privacy and locks, roommates and decorating, schedules and food, and visitors can be modified, and only for one person through their plan. The rule's modification list does not include the requirement that the home be physically accessible to the person.

The qualities every setting must have, such as community access and freedom from coercion and restraint, are not on the modification list either. If a person's safety seems to require more, work with their planning team and check your state's rules on restrictive interventions.

For example, if D. has a health condition and has eaten unsafe amounts at night, his planning team might agree to a modification on food access for him alone, after trying less intrusive supports. His housemates keep full access to the kitchen, and the team reviews D.'s data at the time limit set in his plan.

14 · Rules and compliance

Keeping the record of choices and supports.

Much of the rule is shown through records: the options a person considered, their plan, any modification and the data reviewed for it, and daily notes showing community access and choice.

LunahUP keeps the person's plan context and documents within reach of the staff who support them. Your team, your state and CMS decide whether a setting meets the rule.

Questions people ask

Short answers.

Does the HCBS settings rule apply to day programs?

Yes. Non-residential HCBS settings, such as day programs, must meet the qualities required of all settings, including community integration, choice, rights and autonomy.

Can a group home have house rules?

Rules that limit rights for everyone, such as set visiting hours or a locked kitchen, conflict with the rule. A limit for one person must be justified and documented in that person's plan.

Do group home residents need a lease?

In provider-owned or controlled housing, each person needs a legally enforceable agreement with the protections tenants have under landlord-tenant law, or comparable protections where that law does not apply.

What is heightened scrutiny?

A review for settings presumed to be institutional, such as those in or next to an institution or that isolate people. The setting stays HCBS only if CMS agrees it has home and community-based qualities.

Is the settings rule transition period over?

Yes. It ended March 17, 2023. Some states received time-limited corrective action plans for specific requirements; check your state's current status.

Can a group home have a curfew?

Not as a house-wide rule. People in provider-controlled homes have the right to control their own schedule. A limit for one person must come from an assessed need, be documented in their plan with all eight required conditions and be reviewed.

Does the settings rule require a private bedroom?

Not in every case. The person must be offered setting options that include a private unit, and in shared rooms they choose their roommate. Your state's licensing rules may set room standards, so check them too.

Can staff have a key to a resident's bedroom?

Yes, but only appropriate staff. The rule requires an entrance door the person can lock, with only appropriate staff holding keys. Write down which roles hold keys and when they may use them, and tell the person.

Sources

Check the official source.

Requirements change and differ by state. Confirm current rules with your state agencies and payers.

Keep choices and supports on the record

Bring the settings question your reviewer asked last time.

Inspect a fictional person record with plan context, and the notes that show the support provided.

Book a 30-minute compliance demo

Use sample data. No patient or employee records needed for the demo. Booking does not create an account or start billing.