MedMatrix Rx Weekly 340B Review — September 11, 2026

null

Weekly 340B Review
Vol. 1 · No. 11

Who checks who is in the program

A Michigan teaching hospital lost six months of DSH pricing, three of them over a five-day attestation deadline, and asked a D.C. court to rule that HRSA cannot gate the program at all. The same week HRSA posted stricter registration forms for October 1, the day CMS opens its own 340B claims repository. Eligibility review is moving, and the question is who ends up holding it.

Oct 1
New OPAIS forms take effect; CMS 340B repository opens
6 mo
DSH orphan-drug pricing Beaumont says it lost
5 days
HRSA document deadline; one missed attestation cost a quarter
Sep 14
PFS comments close on a mandatory CMS repository

The week at a glance
  1. Beaumont sued HRSA in D.D.C. over a rejected DSH reinstatement, arguing the agency has no authority to condition a hospital’s 340B pricing on registration.
  2. HRSA posted the October 1 OPAIS changes: new address questions, CMS cost-report terminology, and trial-balance instructions, on forms that also require ownership proof for entity-owned pharmacies.
  3. CMS opens its Part D 340B claims repository October 1, voluntary now and proposed mandatory for Medicare providers from January 1, 2027; comments close September 14.
  4. Johnson & Johnson will require in-house pharmacy claims data from September 15 and extend its one-pharmacy contract pharmacy limit to grantees on November 3.
  5. CRS wrote down the circuit split on state contract pharmacy laws as Illinois’s five manufacturer suits await one judge and Colorado’s law survived two dismissal rulings.

Viewpoint

A hospital asked a court to remove HRSA’s registration gate. Hope it wins narrowly.

Beaumont lost six months of DSH pricing, three of them over a five-day attestation deadline, and its complaint argues HRSA had no authority to run the gate at all. The first claim deserves to win. The second would hand eligibility review to the two parties covered entities trust least.

On April 17, HRSA’s registration system sent Corewell Health William Beaumont University Hospital a notice asking for its government contract and its IRS Form 990, with five days to respond. The hospital’s primary contact uploaded both on April 20. HRSA rejected the application anyway, because the Authorizing Official had not attested to the upload before April 22. Result: a 1,131-bed teaching hospital with a 12.39 percent disproportionate share adjustment, well above the 11.75 percent the statute requires, cannot buy orphan drugs at 340B prices as a DSH from April 1 until October 1. The hospital sued on September 3 in the U.S. District Court for the District of Columbia, No. 1:26-cv-03111.

Read the complaint twice, because it makes two different arguments. The first is narrow: rejecting a documented DSH over a missing attestation, when the same documents sat in the file from an application HRSA approved three months earlier, is arbitrary and capricious. The second is broad: outside the Ryan White and STD/TB grantees Congress named in 42 U.S.C. § 256b(a)(7), the statute contains no registration precondition at all, so HRSA cannot withhold pricing from any hospital that meets the definition, whatever the forms say.

The narrow claim should win, and every hospital executive should want it to. The broad claim already has a foothold. In Albany Med Health System v. HRSA, decided March 3, Judge Amit Mehta vacated the agency’s child-site registration notice and wrote that Congress “clearly understood how to impose agency certification as a precondition to 340B program participation” and chose not to for hospitals. HRSA has appealed to the D.C. Circuit (No. 26-5147) without seeking a stay, so the vacatur stands while the appeal runs. Beaumont wants that logic extended from child sites to the parent hospital’s own eligibility category. A court reading the text the way the D.C. Circuit has read it since 2024 has room to agree.

Here is why a DSH chief executive should be careful about cheering. The registration gate is an administrative burden. It is also the only public proof the sector has that someone verified who is in the program. When 340B hospitals answer Senate HELP Chairman Cassidy’s discussion draft, or the administration’s budget proposal to move the program to CMS, the first sentence of the defense is that HRSA checks eligibility every quarter and recertifies every entity every year. Remove the gate and that sentence goes away.

Take the gate down and eligibility does not go unverified. Someone else verifies it, on terms you did not negotiate.

Look at who is waiting to do the checking. Manufacturers already condition pricing on claims data, and Johnson & Johnson notified covered entities September 4 that it will require claims data from in-house pharmacies starting September 15 and extend its contract pharmacy limits to grantees on November 3. CMS opens a Part D 340B claims repository on October 1, voluntary for now, and has proposed to make quarterly submission mandatory for Medicare providers from January 1, 2027. Each of those actors would happily decide who counts as a covered entity if HRSA cannot. A hospital that wins the argument that HRSA lacks authority to gate the program will find the gate rebuilt by the parties with the least reason to keep it open.

The case for Beaumont’s broad reading is real, so state it plainly. The text says what it says. The D.C. Circuit has said, in its 2024 Novartis decision, that the Secretary lacks rulemaking authority over the program, and an agency that lacks rulemaking power should not be able to reach the same result through a user guide and a quarterly calendar. HRSA’s own conduct in this case, insisting on a fresh attestation for documents already approved, shows what happens when a gatekeeper answers to no standard. Those are good arguments, and a judge who finds them decisive will have the text on his side.

But the remedy the sector needs is a better gate, and the timing makes the point. On September 8, HRSA posted the OPAIS changes that take effect October 1: new shipping-address questions to sort each location into covered entity, child site, or contract pharmacy, new eligibility questions on every street-address change, and clarified trial-balance instructions for hospitals, under forms OMB approved this summer that also require ownership proof for entity-owned pharmacies. That is more gate, arriving the same day Beaumont’s DSH status returns. The agency is adding requirements while a plaintiff argues it has no power to impose any. Neither side is describing the system a safety-net hospital needs.

Three moves follow.

Ask for effective-on-approval registration and a cure period. Beaumont’s harm came from two rules HRSA wrote for itself: pricing starts the quarter after approval, and a five-day document request has no cure. Neither appears in the statute. Hospital associations should ask HRSA, in writing and now, to make approved changes effective on the approval date and to give an entity ten business days to fix a documentation defect before rejection. That fix costs the agency nothing and removes most of the injury without a ruling on authority.

Fix the dual-eligibility problem inside your own walls. Beaumont switched from DSH to RRC in January on a preliminary projection that its DSH percentage might fall below 11.75 percent. The projection was wrong. If your hospital sits near the line, have finance run the disproportionate share calculation before the January window opens, and do not change category on a guess. Brief the Authorizing Official on what an attestation deadline means. That person’s calendar is now a 340B compliance control.

Support the narrow count, not the broad one. If 340B Health, America’s Essential Hospitals, or AHA file in this case, the useful brief argues that HRSA acted arbitrarily on this record and asks the court to order retroactive reinstatement. A brief that argues HRSA has no power to condition pricing on registration wins a case and loses the program’s best answer to its critics.

Beaumont’s patients in Oakland County did not lose anything on paper this spring. The hospital kept treating them, at higher drug cost, because an attestation missed a deadline nobody in Congress wrote, on documents the agency already held. That is a real injury and the court should fix it. The harder work is keeping a verifier the safety net accepts, because the alternative is a verifier chosen by the people who would rather the program shrink.

Conflict of interest disclosure: MedMatrix Rx works with safety-net providers to assist with program expansion to meet the needs of the patients and communities that they serve.

Douglas McCormack, Founder of Acumen Partners and Chair of MedMatrix Rx, is a health policy attorney, startup CEO, and investor in early-stage health care ventures.

The top five issues of the week
01

Beaumont v. Kennedy puts the registration gate itself on trial

What happenedCorewell Health William Beaumont University Hospital filed Corewell Health William Beaumont University Hospital v. Kennedy, No. 1:26-cv-03111, in the U.S. District Court for the District of Columbia on September 3, with a sealed preliminary injunction motion. The Royal Oak, Michigan hospital switched from DSH to rural referral center in the January window on a projection that its disproportionate share adjustment might fall below 11.75 percent; the final FY2025 cost report showed 12.39 percent. HRSA rejected its April application to return to DSH status because the Authorizing Official did not attest to documents uploaded April 20, two days before a five-day deadline, declined reconsideration June 11, and set October 1 as the earliest effective date. The single APA count argues HRSA acted arbitrarily and, citing Albany Med Health System v. HRSA, No. 1:23-cv-03252 (D.D.C. Mar. 3, 2026), on appeal to the D.C. Circuit (No. 26-5147) without a stay, that the statute gives HRSA no authority to condition a hospital’s pricing on registration. It seeks DSH reinstatement retroactive to April 1.

Why it mattersAlbany Med vacated HRSA’s child-site registration notice; Beaumont asks a second D.D.C. judge to extend that reading to a parent hospital’s eligibility category. A win on that theory ends injuries like Beaumont’s for every hospital covered entity. It also removes the sector’s cleanest answer to critics who say nobody checks who is in the program, while Congress and the administration weigh who should run it.

Implications for covered entities
  • If your DSH adjustment sits within two points of 11.75 percent, project it before the January window; do not change category on a preliminary number.
  • Treat every OPAIS notification as a deadline with an owner. Beaumont’s documents arrived on time; the attestation did not.
  • Watch the government’s response and any injunction ruling; a decision on authority reaches every hospital’s registration.
02

HRSA’s October 1 OPAIS changes arrive as recertification closes

What happenedHRSA posted a program update September 8 describing OPAIS form changes effective October 1, 2026, under the information collection HRSA noticed in the Federal Register January 8 (OMB No. 0915-0327). The update lists new shipping-address information to sort each location into shipping address, covered entity, child site, or contract pharmacy; new questions on street-address changes; Notice of Award documentation for STD and TB entities; CMS cost-report terminology, replacing “Medicare Provider Number” with “CMS Certification Number”; and clarified hospital instructions on Worksheet S and trial-balance documentation. HRSA says the changes “do not change the underlying statutory eligibility requirements for participation in the 340B Program.” RWC-340B‘s July 29 review of the approved forms adds the parts hospitals will feel: entity-owned pharmacies must prove ownership with a pharmacy license or the Medicare cost report, non-owned pharmacies must register as contract pharmacies, and child-site trial balances must show distinct cost and revenue per site. Recertification closed September 9; HRSA removes entities that missed it.

Why it mattersThe forms move OPAIS toward a cost-report reconciliation, the standard a CMS-run program would apply, and HRSA is adopting CMS vocabulary as it does it. The changes land seven months after Albany Med vacated the prior child-site notice and while Beaumont argues HRSA cannot impose registration conditions at all. HRSA is building a stricter gate whose legal footing is under challenge.

Implications for covered entities
  • Before October 1, classify every OPAIS shipping address: parent, child site, entity-owned pharmacy with ownership proof, or contract pharmacy.
  • Confirm each registered child site carries distinct cost and revenue values on the trial balance; shared lines will draw questions.
  • Keep the OPAIS recertification confirmation; reinstatement after a missed window runs through the quarterly calendar Beaumont is litigating.
03

CMS opens its own 340B claims file October 1, and wants it mandatory in 2027

What happenedCMS opens the Medicare Part D Claims Data 340B Repository for voluntary submissions October 1, 2026, under a fact sheet and FAQ dated August 26 that America’s Essential Hospitals circulated September 8. Covered entities or their TPAs submit seven fields per Part D claim: 340B ID, claim record indicator, date of service, prescription reference number, fill number, NDC-11, and dispensing pharmacy NPI. Submissions run quarterly; the first deadline is December 31, 2026 for 2026 claims through September 30, and October to December claims are due March 31, 2027. CMS says the data “will not be shared outside of CMS,” including with manufacturers and Part D plans, and will not enter rebate calculations “unless and until we propose and finalize a policy to do so.” The CY2027 Physician Fee Schedule proposed rule would require Medicare providers and suppliers that are covered entities to submit for claims dated on or after January 1, 2027. Comments close September 14.

Why it mattersThis is the first federal claims-level 340B dataset, and CMS holds it. The statute requires CMS to remove 340B units from Part D inflation rebates, so the agency has a lawful reason to know which Medicare prescriptions carried a 340B discount. Once the mandate takes effect, a DSH hospital’s Part D 340B footprint sits in a CMS database next to its cost report. That helps if it displaces manufacturer data demands; it is a new exposure if CMS later proposes other uses, which the FAQ leaves open.

Implications for covered entities
  • File a PFS comment by September 14: ask CMS to codify the no-sharing commitment, define penalties for late submissions, and set a testing period before enforcement.
  • Decide with your TPA whether to submit voluntarily; the December 31 deadline for 2026 claims finds mapping problems while the data carries no consequence.
  • Confirm your systems produce the seven fields for every dispensing pharmacy; the NPI field ties the repository to your contract pharmacy network.
04

Manufacturer data demands reach in-house pharmacies and grantees

What happenedJohnson & Johnson sent covered entities two notices on September 4, and 340B Report reported them September 9. The contract pharmacy notice limits every covered entity type to a single contract pharmacy within 40 miles of the parent site, plus one specialty pharmacy for PAH drugs, effective September 15 for hospitals and November 3 for grantees, with a grantee designation deadline of October 20. The companion claims-data policy requires 340B claims regardless of dispensing location, which brings in-house pharmacies into the submission requirement, with a 45-day window after dispensing and a two-notice, five-business-day suspension process (Becker’s, Sept. 11). Grantees were a class J&J’s own 2022 policy exempted; ADAPs remain exempt. The move follows the pattern AHA described in an April 27 letter asking HRSA to act against data conditions, citing an Eli Lilly warning that hospitals would lose pricing unless they complied “without further delay.” States have moved the other way: Colorado and West Virginia bar manufacturers from requiring claims data as a condition of the 340B price, and Illinois’s H.B. 2371 bars data demands not required by state or federal law, at up to $1,000 per violation.

Why it mattersMost manufacturer contract pharmacy policies since 2020 exempted federal grantees; a policy that reaches both classes gives health centers and hospitals a shared injury. In-house pharmacy demands strip the stated rationale, contract pharmacy diversion risk, out of the demand. And in the week hospital groups circulated CMS’s August 26 assurance that repository data “will not be shared” with manufacturers, a manufacturer moved to collect claims data directly. Covered entities will run two parallel claims feeds for the same prescriptions.

Implications for covered entities
  • Hospitals have until September 15 to route J&J claims, in-house included, through the data submission process; price the exposure by dispensing site now.
  • Check whether your state bars claims-data conditions and whether a court has enjoined the law; an injunction still blocks West Virginia’s during the en banc rehearing.
  • Brief grantee partners; a policy that restricts grantee contract pharmacies reaches FQHCs your specialty pharmacy serves.
05

CRS maps the state-law split as Illinois’s five suits await one judge

What happenedThe Congressional Research Service published State Actions to Lower Drug Prices: Selected Legal Issues August 31; 340B Report covered it September 9. CRS writes that “at least three federal appeals courts have held that the state 340B laws are not preempted by the 340B statute,” citing the Eighth Circuit in PhRMA v. McClain (Arkansas) and Novartis Pharmaceuticals Corp. v. Hanaway (Missouri) and the Fifth Circuit in AbbVie Inc. v. Fitch (Mississippi) and AbbVie Inc. v. Murrill (Louisiana), while the Fourth Circuit panel in PhRMA v. McCuskey held West Virginia’s law likely preempted, affirming a preliminary injunction. The Fourth Circuit granted rehearing en banc, which set the panel opinion aside, and CRS says the court “is working to schedule the hearing in fall 2026.” In Illinois, five suits against H.B. 2371, signed August 7, sit before Judge Edmond E. Chang in the Northern District of Illinois: AbbVie Inc. v. Raoul, No. 1:26-cv-09523; Novartis Pharmaceuticals Corp. v. Raoul, No. 1:26-cv-09522; Bristol Myers Squibb Co. v. Raoul, No. 1:26-cv-09590; AstraZeneca Pharmaceuticals LP v. Raoul, No. 1:26-cv-09805; and PhRMA v. Raoul, No. 1:26-cv-09859. The state filed a combined opposition to the preliminary injunction motions the week of September 1 (McDermott). Colorado judges dismissed AstraZeneca’s and PhRMA’s challenges to that state’s law on August 31 and September 1 (340B Report).

Why it mattersA congressional research arm has written the circuit split down for Hill staff, which raises the odds the Cassidy draft addresses preemption in text. District courts, the Fifth Circuit, and the Eighth Circuit keep upholding shield laws, and the one contrary panel opinion no longer stands. Illinois is the live test of whether a law signed in August protects contract pharmacy arrangements this year.

Implications for covered entities
  • Plan for both outcomes of the Illinois injunction ruling before restructuring around H.B. 2371.
  • Send the CRS report to your government relations team; it is what Hill staff will read.
  • Track the Fourth Circuit en banc argument date; a ruling joining the other circuits leaves only the Supreme Court.

Also on the radar
  • Beaumont v. Kennedy. The government’s response and any injunction ruling (complaint, Sept. 3).
  • AbbVie v. Kennedy. Briefing closed with the September 8 intervenor reply; AbbVie moved to strike September 10 (Georgetown tracker).
  • Rebate pilot approvals by September 24 for the January 1, 2027 pilot (Holland & Knight; Federal Register).
  • HRSA-to-CMS transfer. The September 4 report rests on one unnamed source; no agency comment by September 11 (340B Report).

Sources cited this week

MedMatrix Rx Weekly 340B Review. For informational purposes only; this review is not legal, financial, or clinical advice. Regulatory and litigation statuses described are as of September 11, 2026 and change quickly; confirm against primary sources before acting. The opinion essay reflects the author’s views and carries a conflict-of-interest disclosure; obtain legal review before any external publication or distribution. © 2026 MedMatrix Rx.

Post information

Schedule Your 340B Assessment

Connecting healthcare organizations to their full potential through compliant 340B optimization.