
A facility must satisfy state licensure, federal Medicare certification, local permitting, and often accreditation review before it can legally admit its first patient. Each layer answers a different question: can you operate, can you bill federal programs, and can you prove ongoing quality.
This matters for hospital founders, healthcare executives, compliance teams, investors, and international companies evaluating the US market. Many struggle to map which agency controls which approval, since the rules shift by state, facility type, ownership structure, and services offered.
This guide breaks down the distinction between state licensure, CMS certification, accreditation, local permits, and professional licensing. Requirements change frequently and vary by jurisdiction — always confirm current rules with your state health department, CMS, local authorities, and licensed US healthcare counsel before relying on any of this.
Key Takeaways
- No single nationwide hospital license exists; state or territorial health authorities issue the primary operating license.
- Medicare and Medicaid participation runs through CMS Conditions of Participation, a separate process from state licensure.
- CMS-approved accreditation can support federal certification but doesn't replace every state or local approval.
- Hospital readiness spans governance, credentialing, staffing, patient safety, infection control, records, and emergency preparedness.
How Hospital Licensing Works Across the United States
Four distinct layers of authority govern US hospitals, and none of them substitute for another.
State health departments issue the organizational license to operate as a hospital. California's Department of Public Health, for example, requires general acute care hospitals to submit an initial application through its Centralized Applications Branch before opening.
Texas Health and Human Services licenses general hospitals through its own application and fee review, followed by on-site compliance inspections. Washington's Department of Health separately licenses acute care, chemical dependency, and private psychiatric hospitals, distinguishing initial applications from renewals.
CMS governs a separate decision: whether a hospital can participate in Medicare and Medicaid. CMS certifies hospitals against Conditions of Participation found in 42 CFR Part 482, covering every service and location tied to the provider agreement. A state license is not the same thing as CMS certification.
Organizational License vs. Individual Professional Licenses
The hospital's license covers the facility as a legal entity. It does not cover the people working inside it.
Physicians, nurses, pharmacists, and therapists each hold individual state licenses issued by their own boards. Washington, for instance, routes physician licensing through the Washington Medical Commission and nursing licensing through the Washington State Board of Nursing, entirely separate from the DOH hospital-facility program.
During licensing surveys, regulators check that the hospital verifies and tracks these credentials, not just that it holds its own license.
Certificate of Need Requirements
Many states also require health-planning approval before a hospital project can proceed. Thirty-five states and Washington, D.C. operated Certificate of Need (CON) programs as of January 2025, according to the National Conference of State Legislatures.
Maryland's hospital license application, for example, requires CON approval or an exemption before the hospital license application itself can be submitted. Coverage varies widely. Confirm whether your target state and project type trigger CON review before assuming it applies.
Local and Specialized Approvals
Beyond state and federal layers, local jurisdictions add their own requirements:
| Approval Type | Typical Authority |
|---|---|
| Zoning and land use | City or county planning department |
| Building and fire/life-safety | Local building department, fire marshal |
| Accessibility compliance | Local building code enforcement |
| Environmental permits | State/local environmental agency |
| Medical waste handling | State environmental or health agency |
| Radiological/laboratory approvals | State radiation control program, CLIA office |
Every entry on this map needs verification for the exact agency, application form, fee, and deadline in your target state. These details change often and differ sharply between jurisdictions.
What Hospitals Need Before Opening
Getting from concept to opening day follows a rough sequence, though the exact order shifts by state:
- Classify the facility and services — determine whether you're licensing a general acute care hospital, specialty hospital, or psychiatric facility.
- Establish the legal entity and ownership structure before filing any licensing paperwork.
- Confirm state and local approvals, including Certificate of Need (CON) review where it applies.
- Prepare and submit the application packet with supporting documentation.
- Complete construction and safety reviews tied to your state's building and fire codes.
- Undergo licensing surveys and inspections, correct any deficiencies found, and secure final clearance.

Application Materials Regulators Expect
A typical application packet includes:
- Ownership and governance documents
- Facility plans and service descriptions
- Staffing plans and medical staff bylaws
- Credentialing and privileging policies
- Insurance evidence
- Emergency preparedness and infection-control plans
- Patient-rights materials and records-management procedures
Governance and Operational Readiness
Regulators examine whether the governing body functions in practice, not only on paper. They typically review:
- Board oversight and committee responsibilities
- Medical staff appointment and reappointment processes
- Peer review activity
- Documented accountability for quality outcomes
On the operations side, inspectors assess:
- Nursing, pharmacy, and laboratory services
- Medical records and infection prevention
- Emergency services and equipment maintenance
- Patient transfer, discharge planning, and security
Pre-opening inspections routinely surface deficiencies. Assign an owner and a deadline to each finding, document the corrective evidence, and define an escalation path if deadlines slip.
A licensing matrix that tracks each approval, responsible authority, status, renewal date, and source document keeps multi-state projects from losing track of what is pending where.
Major Standards, Accreditation, and Certification
Federal, accreditation, and voluntary standards operate on different legal footing, and conflating them creates real compliance risk.
CMS Conditions of Participation
Hospitals seeking Medicare and Medicaid participation must meet the Conditions of Participation under 42 CFR Part 482. Core areas include:
- Patient rights and governing body
- Medical staff structure and nursing services
- Quality assessment and infection control
- Medical records, emergency preparedness, and physical environment
CMS surveys are unannounced and assess the full scope of a hospital's provider agreement. Always verify the current regulatory text, since CMS updates these provisions periodically.
Accreditation vs. Licensure
These two terms get used interchangeably, but they're not the same thing:
- Licensure is a government authorization to legally operate.
- Accreditation evaluates compliance against a private accrediting organization's standards.
CMS permits hospitals to demonstrate CoP compliance through a CMS-approved accrediting organization instead of the standard state-agency survey, commonly called deemed status. The Joint Commission and DNV Healthcare (through its NIAHO program) are established examples of CMS-approved hospital accreditors. Accreditation can support federal certification, but it doesn't replace a state license or local permits.

Other Frameworks Hospitals Encounter
Several additional frameworks apply depending on services and participation status:
- EMTALA requires Medicare-participating hospitals with emergency departments to screen and stabilize patients regardless of ability to pay.
- HIPAA Privacy and Security Rules govern protected health information for institutional providers.
- OSHA workplace-safety standards and CDC infection-prevention guidance apply to healthcare delivery settings generally.
- Laboratory-specific standards apply where hospitals operate clinical labs.
Where ISO Fits In
ISO 7101:2023 sets management-system requirements for quality in healthcare organizations, covering people-centered care, risk management, and continual improvement. It's a voluntary framework unless a specific contract or payer requires it. ISO 9001 is a general, sector-agnostic quality-management standard that some hospital accreditation programs reference internally. DNV's NIAHO model, for instance, incorporates ISO 9001 principles.
Neither ISO standard substitutes for a state hospital license or CMS certification. Treat ISO certification as a management tool, not a legal operating requirement, unless your specific payer contract says otherwise.
| Standard Type | Legal Status |
|---|---|
| State hospital license | Legally mandatory to operate |
| CMS Conditions of Participation | Mandatory for Medicare/Medicaid participation |
| Accreditation (Joint Commission, DNV) | Conditionally mandatory via deemed status route |
| ISO 7101 / ISO 9001 | Voluntary unless contractually required |
Ongoing Compliance After the Hospital Opens
Licensure isn't a one-time event. It's a recurring obligation.
Hospitals need a regulatory calendar that tracks:
- License renewals and professional credential expirations
- Accreditation survey windows
- Emergency-preparedness exercises and infection-control reviews
- Medical-waste documentation and equipment testing
The Joint Commission typically surveys accredited hospitals every 30 to 36 months. DNV runs annual survey cycles for NIAHO-accredited facilities.

Changes trigger new reviews. Events that often require advance notice, an amended application, or a fresh licensing review include:
- Ownership changes, mergers, or leases
- Relocations or major renovations
- New clinical service lines
- Shifts in facility classification
Some of these changes also require a new CON filing.
Practical controls that keep compliance enforceable day to day:
- Centralized document ownership with version control
- Audit trails and committee meeting minutes
- Staff attestations and primary-source credential verification
- Evidence that policies are actually implemented, not just written
Non-compliance carries real consequences:
- Corrective-action plans and service restrictions
- Accreditation findings
- Loss of federal program participation
- License suspension or revocation
CMS's regional offices can terminate Medicare participation for CoP failures or refusal of survey access.
Exact penalty amounts vary by case and aren't predictable in advance, so avoid relying on any fixed figure.
A Practical Hospital Licensing Readiness Checklist
Before You Apply
- Identify your state regulator and facility classification
- Gather ownership and governance documents
- Run a CON analysis if your state requires it
- Secure zoning and construction approvals
- Draft staffing plans, medical staff bylaws, and credentialing processes
- Finalize patient-safety, infection-prevention, and emergency-preparedness policies
- Confirm records-management and medical-waste procedures
- Verify insurance coverage is in place
Opening Day and Beyond
- Complete final inspections and life-safety equipment testing
- Verify all staff credentials are current
- Post required patient-rights notices
- Confirm reporting contacts for incidents and complaints
- Set renewal-tracking reminders for every license and credential
- Schedule recurring quality-oversight and policy-review meetings
Document every assumption with a link to the current statute, regulation, CMS guidance, or accrediting-body standard behind it. Fees, forms, and deadlines change, sometimes without much notice.
For foreign investors and multinational operators planning a US hospital project, licensing and accreditation belong with licensed US healthcare counsel and the relevant regulators.
VJM Global supports the surrounding infrastructure: entity-formation coordination, cross-border accounting, tax compliance, financial reporting, and back-office planning. That lets clinical and legal teams focus on regulatory approvals without getting pulled into administrative setup.
Frequently Asked Questions
What are the major healthcare standards in the United States?
Major U.S. healthcare standards include:
- Federal CMS Conditions of Participation and state licensing rules
- Accreditation standards such as Joint Commission and DNV NIAHO
- HIPAA privacy/security, OSHA workplace safety, infection-control guidance, and EMTALA
Which ones apply depends on your state, services, and payer participation.
What is the ISO standard for hospitals?
ISO doesn't issue a single universal operating license for hospitals. ISO 7101:2023 covers healthcare-organization management systems for quality, but it's a voluntary framework and doesn't replace state licensure or CMS requirements.
Who licenses hospitals in the United States?
The state or territorial health authority generally issues the organizational hospital license. Local authorities, CMS, and specialized agencies may layer on additional approvals depending on the facility and its services.
Does Medicare certification replace a state hospital license?
No. Medicare certification is a separate federal participation process handled through CMS and a provider agreement. It doesn't eliminate the need for a state hospital license or local approvals.
Is hospital accreditation mandatory in the United States?
It depends on the state, payer relationships, and certification pathway. Some hospitals pursue accreditation voluntarily; others use a CMS-approved accreditor's survey to demonstrate Conditions of Participation compliance instead of a standard state-agency survey.
Are physician and nursing licenses included in a hospital license?
No, professional licenses are issued separately by each profession's licensing board. The hospital must still verify credentials, privileges, exclusions, and good standing before any provider practices within its walls.


