Situational: CMS Star Ratings and Disaster Recovery
CMS Star Ratings Disaster Recovery: What Happens When Emergency Events Hit Quality Measures
CMS Star Ratings are annual performance scores that directly affect Medicare Advantage and Part D plan revenue, member enrollment, and regulatory standing. A disaster event that disrupts pharmacy access, care delivery, customer service, or member outreach can pull quality measures down across multiple domains simultaneously. This case study walks through how a regional disaster affects a health plan’s Star Rating performance, what CMS’s Extreme and Uncontrollable Circumstances Policy does and does not cover, where plans consistently fail to protect their scores, and what a proactive disaster recovery programme looks like in practice.
5%
Quality Bonus Payment Reduction From Dropping One Star in a Medicare Advantage Plan
A one-star drop in CMS Star Ratings removes a Medicare Advantage plan’s Quality Bonus Payment eligibility, which represents approximately 5% of the plan’s benchmark payment rate. For a mid-sized plan, this translates to millions of dollars in reduced revenue annually, not counting the downstream member retention impact from lower star visibility on Medicare Plan Finder. Source: CMS: Star Ratings Overview
40+
Individual Quality Measures That Can Be Impacted When a Single Disaster Disrupts Plan Operations
CMS Star Ratings are calculated from more than 40 individual measures spanning chronic condition management, medication adherence, member satisfaction (CAHPS), customer service, and preventive care. A disaster that disrupts pharmacy access, call centre operations, or care delivery simultaneously degrades performance across multiple measure domains before a plan has time to respond. Source: CMS: Star Ratings Technical Notes
Not Automatic
CMS Measure Exclusions Under the Extreme and Uncontrollable Circumstances Policy Require Documentation
CMS’s Extreme and Uncontrollable Circumstances Policy can suppress affected quality measures and carry prior-year ratings forward for plans in FEMA-declared disaster zones. But this protection is not automatic. Plans must demonstrate that their performance was directly impacted, submit documentation within CMS’s review windows, and meet specific criteria for each affected measure. Plans that fail to document in real time lose this protection. Source: CMS: Extreme and Uncontrollable Circumstances Policy
The Scenario: How a Hurricane Triggers CMS Star Ratings Disaster Recovery’s Service Area
This CMS star ratings disaster recovery case study follows a regional Medicare Advantage plan serving approximately 85,000 members across three coastal counties operates with a current 4-star rating. The plan has worked for two years to reach that rating and is within reach of 4.5 stars in the next measurement cycle. In late summer, a Category 3 hurricane makes landfall across its primary service area. FEMA declares the affected counties a federal disaster zone within 48 hours.
Over the next four weeks, the plan faces simultaneous disruptions across every operational domain that feeds into its Star Rating: pharmacy closures interrupt medication adherence for high-risk members, clinic closures cause missed chronic condition follow-ups, call centre volume spikes while customer service capacity drops, member outreach mailings pile up at closed addresses, and the plan’s internal data tracking system experiences a three-day outage during the acute response period. By the time the immediate emergency passes, the plan has a significant quality measure deficit building across at least a dozen individual measures.
What happens next determines whether the plan loses its 4-star rating, successfully uses CMS’s Extreme and Uncontrollable Circumstances Policy to protect it, or absorbs a preventable rating drop because its disaster response programme was not designed to capture the documentation that CMS requires.
Timeline: How a Disaster Degrades Star Rating Performance
Days 1-3
Acute emergency phase: operations go offline. Approximately 60% of retail pharmacies in the plan’s service area close or operate at reduced capacity. Major clinic networks cancel appointments for at least two weeks. The plan’s primary call centre, located in the affected region, loses power and connectivity. Call volume to the backup centre triples. Member outreach mailings are interrupted. The plan’s IT team initiates disaster recovery protocols but the quality data tracking system is offline for 72 hours, creating a documentation gap that will matter in the CMS review process months later.
Days 4-14
Recovery phase: operational gaps accumulate. The plan activates early refill overrides and waives prior authorisations for affected members, but member communication about these options is delayed by five days because the pre-approved disaster outreach scripts are stored in a system the team cannot access. High-risk members with chronic conditions miss follow-up appointments that feed into CMS’s chronic condition management measures. CAHPS-eligible interactions during this period include frustrated calls to an understaffed backup centre, creating a member satisfaction deficit that will appear in the following year’s survey results.
Days 15-30
Stabilisation phase: the documentation problem becomes visible. The plan prepares its submission for CMS’s Extreme and Uncontrollable Circumstances review. Quality staff begin pulling together documentation of service disruptions, but discover that the 72-hour data tracking outage created gaps in the record of which members were affected and when. The plan does not have a systematic log of disaster-related complaints or service failures, which CMS requires as evidence. The compliance team identifies seven measures where they can demonstrate impact and five where the documentation is insufficient to support an exclusion request.
Month 2
CMS submission: partial protection secured, partial loss confirmed. The plan submits its Extreme and Uncontrollable Circumstances documentation. CMS grants measure exclusions for seven of the twelve affected measures. For five measures where the documentation is insufficient, the degraded performance remains in the rating calculation. The plan’s quality team estimates that the undocumented measures will cost between 0.3 and 0.5 stars in the next rating cycle, potentially dropping the plan from 4 stars to 3.5 stars and eliminating Quality Bonus Payment eligibility.
Month 6
Rating drop confirmed and remediation programme launched. The plan’s next Star Rating drops to 3.5 stars. CMS Plan Finder downranks the plan relative to competing plans in the service area. The plan projects a reduction in new enrolment for the upcoming plan year and begins a remediation programme targeting all affected measure domains. The plan also commissions a full disaster recovery programme redesign with mandatory real-time quality documentation protocols. The projected cost of the programme redesign is approximately 8% of the Quality Bonus Payment revenue the rating drop will cost over the next two years.
What Went Wrong: Four Root Causes Behind the Preventable Rating Drop
Root Cause 1: The disaster recovery plan did not include real-time quality documentation protocols
The plan had a general disaster recovery plan covering operational continuity: call centre backup, pharmacy override procedures, and member communication protocols. What it did not have was a quality-specific disaster documentation protocol: a procedure for capturing, in real time, which members were affected by specific service disruptions, which quality measures were impacted, and what remediation steps were taken and when. CMS’s Extreme and Uncontrollable Circumstances review requires exactly this type of granular, contemporaneous documentation. Reconstructing it weeks after the fact produced gaps that could not be resolved. The plan’s operational recovery was adequate. Its quality documentation recovery was not designed.
Root Cause 2: Disaster outreach scripts were stored in a system that became inaccessible during the emergency
The plan had pre-approved member communication scripts for disaster scenarios, which is good practice. Those scripts were stored in a system hosted in the affected region that went offline during the emergency, which is a single-point-of-failure failure in the disaster communications plan. The five-day delay in communicating early refill overrides and care access options to members directly degraded member satisfaction during a period when CMS-eligible interactions were occurring at high volume. CAHPS-eligible contacts during a crisis carry the same weight as any other contact in the survey. A delayed, confusing, or unsatisfactory interaction during a disaster counts against the plan’s member experience measures.
Root Cause 3: The plan had no systematic process for logging disaster-related complaints and service gaps
CMS’s measure exclusion process requires evidence that specific members in specific locations experienced specific service failures during the declared disaster period. This evidence should come from flagged call records, claims with disaster-related service gap codes, and a complaints log tracking disaster-related member contacts. The plan tracked general call volume spikes but had no systematic tagging of disaster-related complaints in its CRM, no claims flagging process for disaster-affected service gaps, and no standardised log format for documenting service failure events. When the quality team needed this evidence for the CMS submission, it did not exist in a form that could be efficiently extracted and presented.
Root Cause 4: Catch-up care planning was not initiated until the emergency had fully passed
The measures most heavily weighted in CMS Star Ratings: medication adherence, chronic condition management, and preventive care completion, which accumulate over the full plan year. A one-month disruption in medication refills or care follow-ups can be partially recovered if the plan initiates targeted outreach immediately after the acute emergency, identifies which high-risk members missed critical interactions, and closes those care gaps before the measurement year ends. This plan did not initiate structured catch-up care outreach until Month 6, four months after the disaster. By that point, the measurement year was effectively over for several annual measures, and the deficits were locked into the rating calculation.
Regulatory Context: What CMS’s Extreme and Uncontrollable Circumstances Policy Actually Covers
What the policy can do for affected plans
For plans operating in FEMA-declared disaster zones, CMS may: suppress specific quality measure data for the affected period; carry forward the prior year’s Star Rating for the plan or for individual measure domains; exclude affected beneficiaries from denominator calculations for specific measures; and apply administrative flexibilities that allow claims and data submission deadline extensions. These protections can preserve a plan’s Star Rating through a disaster year if the plan meets the documentation requirements. Source: CMS: Star Ratings Methodology
What the policy cannot do
CMS’s policy cannot retroactively create documentation that the plan did not produce during the emergency. If the plan cannot demonstrate which members were affected, when service gaps occurred, and what efforts were made to address them, CMS cannot grant exclusions for those measures regardless of the severity of the disaster. The policy also does not prevent CAHPS survey results from reflecting member experiences during the disaster period. Member satisfaction data collected from the disaster period is included in the survey regardless of whether operational disruptions were FEMA-declared events.
The critical distinction: operational recovery and quality documentation recovery are not the same programme
Most health plan disaster recovery plans are operational documents: how to restore call centre function, how to route members to alternate providers, how to manage claims during disruption. They are not quality management documents: they do not specify who is responsible for logging quality measure impacts in real time, what data must be captured to support a CMS exclusion request, or what the trigger is for initiating catch-up care outreach. The plans that successfully use CMS’s Extreme and Uncontrollable Circumstances Policy are those that treat quality documentation as a first-day disaster response activity, not a Month 2 retrospective exercise.
Corrective Actions: What Should Have Been in Place Before the Disaster
Build a quality-specific disaster documentation protocol into the disaster recovery plan
On Day 1 of any declared disaster, the quality management team should activate a standardised documentation protocol: flagging all disaster-affected claims with a specific code, tagging all disaster-related complaints in the CRM with a disaster event identifier, and logging service gaps by measure domain as they occur. This protocol should be pre-built, tested, and assigned to named individuals before any emergency occurs. The documentation created during the acute phase is the primary evidence package for the CMS Extreme and Uncontrollable Circumstances submission. If it is not created in real time, it cannot be fully reconstructed.
Store disaster outreach scripts and member communication assets in an off-site, redundant system
Pre-approved disaster communication scripts, early refill authorisation notices, benefit flexibility announcements, and care access guidance must be accessible from systems that do not depend on infrastructure in the affected area. Cloud-based storage with geographic redundancy, printed and laminated quick-reference cards at backup call centre sites, and email-deployed member communication templates that can be triggered from any authorised location are all components of an accessible communications kit. Five days of delayed member communication during a high-call-volume disaster period is five days of CAHPS-eligible interactions that will not reflect the plan’s intended service standard.
Initiate catch-up care outreach within two weeks of the disaster, not after full operational recovery
A targeted outreach programme for high-risk members who missed critical interactions during the disaster period should begin while recovery operations are still underway, not after. The plan’s care management team should pull a list of members with open chronic condition care gaps, missed medication adherence milestones, and overdue preventive care appointments within the first two weeks after the acute phase. Outreach prioritised by measure weight and risk score closes the most consequential gaps first. Telehealth should be offered immediately as an alternative to in-person appointments that remain unavailable due to facility closures.
Conduct an annual disaster tabletop exercise that includes a quality measure impact simulation
Annual disaster tabletop exercises are standard operational practice. Most focus on call centre routing, provider network backup, and member communication. Adding a quality measure impact simulation to the tabletop exercise forces the quality team to answer: which measures are most vulnerable to a 30-day operational disruption, what documentation would CMS require to grant exclusions for each, and who on the team is responsible for producing that documentation in real time? Rehearsing the CMS submission process before an emergency occurs dramatically improves the quality and completeness of the submission when it is needed.
Lessons Learned: What Every Health Plan Quality Team Should Take Away
The CMS exclusion request is won or lost in the first 72 hours of a disaster
The documentation that supports a successful CMS measure exclusion request is contemporaneous documentation created during the disaster, not a reconstruction assembled weeks later. Plans that document in real time which members were affected, which services were disrupted, and what they did to address each gap have a strong evidentiary record. Plans that begin documentation after operations stabilise are working from memory and incomplete data. The decision to invest in real-time quality documentation is made in the disaster recovery plan design, not during the emergency itself.
Member satisfaction during a disaster counts as much as member satisfaction during normal operations
CAHPS survey responses from members who contacted the plan during the disaster period are treated identically to responses from members who contacted the plan on any other day. CMS does not weight disaster-period interactions differently. This means that the quality of member service during a crisis has direct and equal impact on the plan’s member experience scores. Plans that invest in backup call centre capacity, pre-scripted empathetic communication, and fast benefit flexibility announcements protect their CAHPS performance as much as their operational continuity.
Catch-up care is a quality measure investment, not just a member service activity
Closing care gaps left by a disaster through structured catch-up care outreach is one of the most direct quality measure recovery actions available to a plan. Each member who completes a missed medication adherence milestone, chronic condition follow-up, or preventive care appointment during the catch-up period contributes to the plan’s quality measure numerators. Plans that quantify catch-up care outreach in terms of expected measure impact and invest resources accordingly will recover measurably more of their Star Rating performance than those that treat catch-up care as a general member welfare activity without quality metric tracking.
A rating drop has compounding effects: revenue, enrolment, and reputation all decline together
A Star Rating drop caused by disaster-related measure degradation does not just reduce Quality Bonus Payment revenue in the year it is published. It lowers the plan’s CMS Plan Finder ranking during the Medicare Annual Enrollment Period, reducing new member acquisition at exactly the moment when competing plans may be recruiting from the same disaster-affected population. The plan’s reputation for quality among providers and members also reflects the lower rating. These compounding effects mean that the true cost of a preventable rating drop significantly exceeds the direct revenue calculation.
Disaster Recovery Checklist: Protecting CMS Star Ratings
Source: CMS: Star Ratings and Extreme and Uncontrollable Circumstances Policy
Key Takeaways
CMS protection requires documentation you must create during the disaster, not after
The Extreme and Uncontrollable Circumstances Policy is real protection for affected plans, but it is conditional on contemporaneous evidence of impact. Plans that invest in real-time quality documentation protocols before a disaster occurs are the plans that successfully use this protection. Those that attempt to reconstruct documentation after the fact frequently find that five of twelve affected measures cannot be supported and absorb the preventable rating loss.
Disaster recovery and quality management must be integrated, not parallel
Most health plan disaster recovery plans are operational, not quality management documents. The plan in this case study had both, but they operated independently. The quality team was not embedded in the disaster response from Day 1. Integrating quality documentation responsibilities into the disaster response incident command structure ensures that the CMS evidence package is built as a natural output of the disaster response, not as a retrospective exercise by an overwhelmed quality team.
The cost of a preventable Star Rating drop from disaster is almost always higher than the cost of the programme that would have prevented it
This plan spent approximately 8% of its two-year Quality Bonus Payment revenue loss on the disaster recovery programme redesign that followed the rating drop. Had that investment been made before the disaster, the documentation protocols would have cost a fraction of that figure and would have supported a complete CMS exclusion request that protected the rating. The pattern repeats across disaster events in Medicare Advantage: plans that invest in quality-integrated disaster preparedness absorb significantly lower financial and competitive consequences than those that treat disaster recovery and quality management as separate programmes.
Frequently Asked Questions
What is the CMS Extreme and Uncontrollable Circumstances Policy and when does it apply?
CMS’s Extreme and Uncontrollable Circumstances Policy applies to Medicare Advantage and Part D plans operating in geographic areas covered by a federal disaster declaration (typically a FEMA major disaster declaration). When triggered, CMS may suppress specific quality measure data for the affected period, carry forward the prior year’s rating, and extend data submission deadlines. The policy does not apply automatically: plans must demonstrate that their performance was directly affected by the disaster through documentation submitted within CMS’s review timelines. Plans outside the FEMA-declared zone but with demonstrable member impact may submit documentation requesting administrative consideration, though relief is less certain. Source: CMS: Star Ratings Policy
Which CMS Star Rating measures are most vulnerable to a disaster event?
The measures most directly exposed to disaster-related disruption fall into four categories: medication adherence measures (which require pharmacy access and prescription fill continuity), chronic condition management measures (which require ongoing provider contact and follow-up), member satisfaction measures captured through CAHPS surveys (which reflect member experience during all plan contacts including disaster-period calls), and customer service measures (which are based on call centre performance during the period when disaster-related call volume is highest). Preventive care measures such as flu vaccination and cancer screening completion are also vulnerable when clinical facilities close for extended periods.
How do CAHPS survey results collected during a disaster period affect a plan’s Star Rating?
CAHPS (Consumer Assessment of Healthcare Providers and Systems) survey responses from members who contacted the plan during a disaster period are included in the plan’s annual survey results with equal weight to responses from any other period. CMS does not currently have a mechanism to exclude disaster-period CAHPS responses from the survey sample. This means that member satisfaction with call centre wait times, care access, and communication during the disaster is permanently embedded in the plan’s CAHPS scores. Plans that maintain high-quality member service during a crisis, through adequate backup call centre capacity and clear communication, protect their CAHPS scores as directly as they protect their operational continuity.
What documentation does CMS require for a measure exclusion under the disaster policy?
CMS typically requires evidence that: (1) the plan operates in the FEMA-declared disaster zone; (2) the specific quality measure in question was directly impacted by the declared disaster; and (3) the plan’s performance on that measure during the disaster period is not representative of its typical performance. Supporting documentation generally includes claims data with disaster-related service gap flags, call centre logs showing disruption volume and service gaps, complaints records tagged to the disaster period, and a narrative explanation linking the disaster to each measure’s performance decline. Plans that have not systematically tagged disaster-related data in their operational systems during the event will be unable to produce this evidence retrospectively.
What is the financial impact of dropping one star in a Medicare Advantage plan?
A Medicare Advantage plan with 4 or more stars receives a Quality Bonus Payment from CMS, which represents a percentage increase to the plan’s benchmark payment rate. Dropping below 4 stars eliminates this bonus entirely. For a mid-sized plan with 85,000 members, the Quality Bonus Payment may represent tens of millions of dollars annually. In addition to the direct revenue impact, a rating drop reduces the plan’s visibility on CMS Plan Finder during the Annual Enrollment Period, affecting new member acquisition, and may trigger increased regulatory scrutiny. The compounding effect of reduced revenue, lower enrolment, and reputational impact typically exceeds the direct QBP calculation by a significant margin. Source: CMS: Quality Bonus Payments
How quickly should a health plan initiate catch-up care outreach after a disaster?
Catch-up care outreach should begin within 14 days of the end of the acute emergency phase, not after full operational recovery. The measurement year for most CMS Star Rating measures runs on a calendar year basis. A disaster that occurs in August leaves approximately four months for catch-up activities before the measurement year closes. A plan that waits until full operational restoration before initiating outreach loses these months. Priority should be given to members with the highest chronic condition risk and to the measures most heavily weighted in the plan’s overall Star Rating calculation. Telehealth should be offered immediately for follow-ups that cannot yet occur in person.
Can a plan outside a FEMA-declared disaster zone still request CMS measure relief?
Plans outside the FEMA-declared zone that can demonstrate their members or operations were materially affected by the disaster event may submit documentation to CMS requesting administrative consideration for measure exclusions. CMS evaluates these requests on a case-by-case basis, and relief is less certain than for plans within declared zones. The same documentation requirements apply: contemporaneous evidence of member impact, service disruption records, and a clear link between the disaster and each measure’s performance decline. Plans in adjacent counties or with significant populations of displaced members from declared zones have the strongest basis for requesting partial relief.
Sources
Government and Regulatory Sources
- CMS: Medicare Part C and D Star Ratings: primary source for Star Ratings methodology, measure domains, Quality Bonus Payment thresholds, Extreme and Uncontrollable Circumstances Policy framework, and annual technical notes for the rating system.
- CMS: 2024 Star Ratings Technical Notes: detailed methodology for individual measure calculation, CAHPS survey administration and weighting, and the criteria for applying Extreme and Uncontrollable Circumstances adjustments to plan ratings.
- FEMA: Disaster Declarations: the federal disaster declaration database; declarations at this site define the geographic zones eligible for CMS Extreme and Uncontrollable Circumstances Policy application.
Research and Industry Sources
- CMS: 2024 Star Ratings Data Tables: plan-level Star Rating data used to model the financial and competitive impact of rating changes on Quality Bonus Payment eligibility and CMS Plan Finder rankings.
Related VelSafe Articles
Situational
Healthcare Situational Case Studies
Explore the full library of healthcare situational case studies covering regulatory failures, incident analysis, and compliance lessons across Medicare, Medicaid, and managed care settings.
Guides
HCIR Credentialing and National Patient Safety Goals Guide
The compliance requirements for healthcare industry representatives entering clinical facilities, demonstrating the same documentation and regulatory response standards that govern Medicare Advantage quality management obligations.
Worker Safety
Office Ergonomics Awareness: Healthcare Worker Safety Guide
The workstation and ergonomics compliance framework for healthcare administrative workers, covering the same documentation and proactive programme standards that apply to disaster recovery quality management.
Medicare Advantage Quality Management and Compliance
More Healthcare Compliance Case Studies for Quality and Operations Teams
VelSafe’s Situational library delivers real-scenario case studies, root cause analysis, and regulatory failure breakdowns for healthcare quality professionals, compliance managers, and operations leaders in Medicare Advantage and managed care settings.
Browse All Case Studies
