Compliance

    New York State Outpatient Surgery Regulations: Compliance Requirements for ASCs

    New York State imposes one of the most detailed regulatory frameworks for ambulatory surgery centers in the United States. The primary regulatory authority is the New York State Department of Health (NYSDOH), which licenses and surveys ASCs under 10 NYCRR Part 755. These regulations govern facility licensing, patient rights, discharge criteria, infection control, staffing, and quality assurance requirements. Providers operating ASCs in New York must satisfy both the NYSDOH framework and the federal CMS ASC Conditions for Coverage, and where the two conflict or differ, the more stringent standard applies.

    NYSDOH Licensing Framework Under 10 NYCRR Part 755

    • Ambulatory surgery centers in New York State are licensed by the NYSDOH as Diagnostic and Treatment Centers (D&TCs) under Article 28 of the New York Public Health Law. The implementing regulations at 10 NYCRR Part 755 specify the operational requirements for ASCs, including physical plant standards, staffing requirements, scope of services, patient rights, infection control, quality assurance, and discharge planning. New York is one of a minority of states that maintain an independent state ASC licensing framework with regulatory specificity comparable to or exceeding the federal CMS conditions.
    • CON (Certificate of Need) review is required for new ASC establishment, for the addition of operating rooms, for changes in bed capacity, and for certain changes in ownership or control under Public Health Law Section 2801-a and 10 NYCRR Part 600. CON review evaluates need, financial feasibility, and character and competence of the applicant. The CON process in New York can take 12 to 24 months from application to approval, and providers planning new ASC development or significant expansion must account for this timeline in project planning. CON requirements apply regardless of whether the facility will seek Medicare certification through CMS.
    • Physical plant standards under 10 NYCRR Part 755.5 specify minimum room size, ventilation, lighting, and utility requirements for operating rooms, recovery rooms, and support spaces. NYSDOH physical plant standards are enforced at the time of initial licensure and are subject to review during periodic inspections. Providers planning renovation of existing ASC facilities must verify whether the planned changes require NYSDOH approval before construction begins. Unapproved construction changes that alter physical plant configurations subject to regulation can result in survey deficiencies and required remediation.
    • NYSDOH annual surveys assess compliance with all applicable provisions of 10 NYCRR Part 755. Survey deficiencies are classified by scope and severity and may result in conditions of approval, directed plans of correction, or, in severe cases, revocation of operating certificate. Providers with multiple survey deficiencies in a single area of regulation may be required to submit a corrective action plan to NYSDOH and to demonstrate sustained compliance over a defined monitoring period. NYSDOH survey reports are publicly available through the NYSDOH Health Facility Profile search tool.

    Patient Rights and Discharge Documentation Requirements

    • 10 NYCRR Part 755.6 specifies patient rights requirements for New York ASCs that parallel but in some respects exceed the federal CMS patient rights framework. The regulation requires that ASCs provide patients with a written statement of patient rights at the time of registration and that the statement be available in English and in the languages spoken by a significant portion of the patient population served by the facility. For facilities in New York City and other linguistically diverse regions, compliance with the language access requirement typically requires translation of the patient rights statement into Spanish, Mandarin, Cantonese, and other prevalent community languages.
    • Discharge planning requirements under 10 NYCRR Part 755.9 require that each patient receive written discharge instructions before leaving the facility. The instructions must address: post-operative care requirements, medications, diet and activity restrictions, follow-up appointment information, and the circumstances under which the patient should contact the facility or seek emergency care. The regulation requires that a responsible person be present with the patient at discharge if the patient received sedation or general anesthesia, and that the instructions be reviewed with both the patient and the responsible person. The medical record must document that written instructions were provided and reviewed.
    • Language access obligations for New York ASCs extend beyond the patient rights statement. Under the New York State Department of Health guidance implementing Executive Law Section 296 and consistent with Title VI of the Civil Rights Act, facilities receiving state or federal funding must provide meaningful access to services for patients with limited English proficiency (LEP). For discharge instructions, this means that a patient who speaks a language other than English must receive discharge instructions in a language they understand, either through written translation or through a qualified medical interpreter. Using a patient's family member as an interpreter for discharge instructions does not satisfy this requirement when the family member is not qualified to interpret medical content.
    • Informed consent documentation requirements for New York ASCs are governed by both 10 NYCRR Part 755.8 and by Public Health Law Section 2805-d, the New York informed consent statute. Under the New York statute, the standard for informed consent is the reasonable patient standard: a practitioner must disclose all material information that a reasonable patient would want to know before consenting to a procedure. New York courts have applied this standard to produce a broad disclosure obligation, and cases where patients allege that they were not informed of a specific complication are litigated under the reasonable patient standard rather than the professional medical standard used in many other states.

    Infection Control and Quality Assurance Requirements

    • New York ASCs are subject to NYSDOH infection control requirements under 10 NYCRR Part 755.7, which require facilities to maintain a documented infection control program including surveillance, staff training, and reporting of healthcare-associated infections (HAIs). New York is one of the states that mandates reporting of specified HAIs to the NYSDOH through the New York Patient Occurrence Reporting and Tracking System (NYPORTS). ASCs must report unexpected deaths, sentinel events, and specified HAI categories through NYPORTS within designated timeframes. Failure to report a reportable event through NYPORTS is itself a regulatory violation independent of the underlying event.
    • Sterilization and high-level disinfection (HLD) requirements for reusable surgical instruments are specified in NYSDOH guidance and in the infection control standards referenced in 10 NYCRR Part 755.7. NYSDOH has issued guidance following national outbreaks associated with improper reprocessing of endoscopes and surgical instruments, and the guidance aligns with the AAMI ST79 standard for steam sterilization and the AAMI TIR34 standard for water quality in reprocessing. New York ASC surveys include review of sterilization logs, biological indicator testing records, and staff training documentation for instrument reprocessing personnel.
    • Quality assurance and performance improvement (QAPI) requirements under 10 NYCRR Part 755.10 require New York ASCs to maintain a documented QAPI program that measures performance, identifies opportunities for improvement, and implements and evaluates corrective actions. The QAPI program must be overseen by the medical staff and governing body and must include review of adverse events, near-misses, patient complaints, and infection control data. NYSDOH surveyors review QAPI committee meeting minutes, adverse event logs, and corrective action documentation during surveys. Facilities whose QAPI programs do not document completed corrective action cycles (problem identification, action plan, implementation, measurement of effect) are frequently cited.
    • Medication management requirements for New York ASCs include documentation standards for controlled substance storage, dispensing, administration, and waste. ASCs in New York must maintain a controlled substance log that records receipt, dispensing by patient, and waste with a witness signature. NYSDOH surveys include review of controlled substance logs for completeness and reconciliation of log quantities against physical inventory. Discrepancies between log quantities and physical inventory that are not documented with an explanation are treated as potential diversion events and may trigger referral to the New York State Board of Pharmacy or law enforcement.

    New York-Specific Requirements Beyond the Federal CMS Framework

    • New York's informed consent law at Public Health Law Section 2805-d creates a private right of action for patients who can demonstrate that a procedure was performed without adequate informed consent and that the undisclosed risk materialized. The New York statute specifies that a practitioner who obtains informed consent by misrepresentation or material omission is liable for damages. This statutory framework is more patient-protective than the common law informed consent frameworks of many other states and creates a specific documentation obligation: the practitioner must be able to demonstrate that each material risk was specifically disclosed, not merely that a standard consent form was signed.
    • New York State's SHIELD Act (Stop Hacks and Improve Electronic Data Security Act), effective March 2020, imposes data security requirements on businesses that own or license computerized data including private information of New York residents. For ASCs that maintain patient health records electronically, the SHIELD Act requires implementation of reasonable administrative, technical, and physical safeguards to protect private information. While the SHIELD Act's definition of private information overlaps with HIPAA's definition of PHI, the SHIELD Act applies to any business that holds New York residents' data, not only HIPAA-covered entities, and its breach notification requirements have timelines and notification recipient lists that differ from the HIPAA breach notification rule.
    • Credentialing and privileging requirements for New York ASCs under 10 NYCRR Part 755.4 require that the facility maintain a credentialing process that verifies each practitioner's license, training, experience, and competence for the specific procedures they perform at the facility. New York requires that primary source verification of licensure be performed directly with the applicable licensing board, not through secondary sources. Credentialing files must be reviewed and renewed at least every two years. NYSDOH surveys include review of credentialing files for completeness and currency, and facilities with expired or incomplete credentialing files receive deficiency citations regardless of the practitioner's actual clinical competence.
    • Workers' compensation reporting obligations for New York ASCs include requirements to report workplace injuries to the New York State Workers' Compensation Board and to maintain documentation of the incident, the treatment provided, and the outcome. For needlestick injuries and occupational exposures involving bloodborne pathogens, NYSDOH requires that facilities follow the New York State Needlestick Prevention Act protocols, including post-exposure prophylaxis (PEP) evaluation within two hours of exposure for HIV risk, baseline testing, and follow-up testing documentation. Facilities that do not have a documented exposure response protocol consistent with the Needlestick Prevention Act are subject to NYSDOH survey deficiency for failure to maintain an adequate infection control program.
    Related
    Frequently asked

    Questions patients ask.

    How do New York ASC regulations differ from the federal CMS ASC Conditions for Coverage?

    New York ASCs must comply with both 10 NYCRR Part 755 (NYSDOH) and the federal CMS ASC Conditions for Coverage at 42 CFR Part 416. Where the two frameworks differ, the more stringent requirement applies. Key differences include: New York requires Certificate of Need (CON) approval for new ASC development and major expansions, which has no direct federal analog; New York's informed consent statute at Public Health Law Section 2805-d uses a reasonable patient standard and creates a private right of action, whereas the federal framework does not mandate a specific consent standard; New York mandates NYPORTS reporting for specified events with its own timelines and categories; and New York's language access obligations are enforceable through both state human rights law and federal Title VI.

    What events must a New York ASC report through NYPORTS, and within what timeframe?

    NYSDOH requires ASCs to report through NYPORTS: unexpected deaths occurring in the facility or within 30 days of care provided, sentinel events as defined by NYSDOH (including wrong-site surgery, retained foreign bodies, and patient falls with serious injury), specified healthcare-associated infections including surgical site infections requiring inpatient readmission, and serious adverse events as defined in NYSDOH guidance. The reporting timeframe for immediate events (unexpected death, wrong-site surgery) is within 24 hours of occurrence. Less urgent events have a 30-day reporting window. NYSDOH reviews NYPORTS reports and may initiate an investigation or request a corrective action plan in response to reported events.

    What are the New York ASC credentialing requirements and how often must credentialing be renewed?

    Under 10 NYCRR Part 755.4, New York ASCs must credential and privilege each practitioner who provides professional services at the facility. Credentialing must include primary source verification of licensure (confirmed directly with the New York State Office of the Professions or applicable board), verification of training and education, review of malpractice history, and verification of current malpractice insurance coverage. Privileges must be specific to the procedures the practitioner is authorized to perform at that facility. Credentialing files must be reviewed and renewed at minimum every two years. The facility must maintain a policy defining the credentialing process, and the governing body must formally approve credentialing and privileging decisions.

    Does New York's SHIELD Act create obligations for ASCs beyond HIPAA compliance?

    Yes. The New York SHIELD Act, effective March 2020, applies to any business that owns or licenses computerized data containing private information of New York residents, including ASCs that maintain electronic patient records. The SHIELD Act defines private information to include combinations of name with Social Security number, financial account information, or biometric information, which overlaps with but is not identical to the HIPAA definition of PHI. SHIELD Act breach notification requirements differ from HIPAA: the notification must go to the New York Attorney General and, in some cases, to credit reporting agencies, in addition to affected individuals. SHIELD Act notification must occur in the most expedient time possible without unreasonable delay, a standard with different enforcement characteristics than HIPAA's 60-day maximum notification window.

    For practices

    Bring this to your own practice.

    QR Rx turns every procedure into a branded recovery plan that keeps patients engaged and brings them back. Start free in minutes, or see it live in a 20-minute demo.

    Start free trial

    This blog provides general information about healthcare compliance and aftercare best practices. It does not constitute legal, medical, or regulatory advice. Consult qualified professionals for guidance specific to your practice.