CMS Open Payments Guide: Sunshine Act Reporting, Deadlines, and KOL Search

2026-10-10 · Caduvo Team

Learn how medical device manufacturers report under CMS Open Payments, understand reporting categories and rules, and search the database for KOL mapping.

Every year, medical device manufacturers transfer hundreds of millions of dollars to physicians and hospitals in the form of consulting fees, clinical trial grants, travel, meals, and patent royalties. Under Section 1128G of the Social Security Act—originally enacted under the Physician Payments Sunshine Act—those transactions are compiled into an open federal registry. For Program Year 2025 alone, CMS published 17.07 million records totaling $14.67 billion in payments from 1,833 companies. For device makers, sunshine act reporting is both a strict regulatory compliance mandate and an underused source of commercial and medical affairs intelligence.

Whether your team is preparing its first submission or auditing competitor spending, understanding how CMS categorizes transactions, sets submission windows, and verifies device identifiers determines whether your records clear CMS validation or trigger federal scrutiny.

Who Reports and Who Qualifies as a Covered Recipient

Under federal reporting regulations, applicable manufacturers of covered drugs, devices, biologicals, and medical supplies must report payments or other transfers of value they make to covered recipients. A medical device is considered a covered product if it is of the type that by law requires premarket approval by or premarket notification under what is a 510(k) to the FDA, per the definition in 42 CFR § 403.902, and is eligible for payment under Medicare, Medicaid, or CHIP.

Per CMS guidance in Open Payments FAQ #8258, capital equipment such as MRI machines, CT systems, x-rays, and ultrasound machines are covered products if the service performed using the device is reimbursable under Medicare, Medicaid, or CHIP, even if the device itself is not billed directly. When an applicable manufacturer produces at least one covered product, it must report all payments or other transfers of value—even those associated with a device still in its development phase that does not have premarket approval or premarket notification—unless the entity meets a specific reporting limitation under 42 CFR § 403.904(b), such as having gross revenues from covered products represent less than 10 percent of total revenue.

Covered recipients include:

Physicians: Doctors of medicine, osteopathy, dental surgery, dental medicine, podiatric medicine, optometry, and licensed chiropractic medicine. Medical residents are explicitly excluded from this definition.
Non-Physician Practitioners: Physician assistants and advanced practice nurses.
Teaching Hospitals: Institutions that receive payments for Medicare direct graduate medical education (GME), indirect medical education (IME), or psychiatric hospital IME. CMS publishes an updated master list of eligible teaching hospitals each year.

For device manufacturers, tracking non-physician practitioners is mandatory. In the data release reflecting Program Year 2025, CMS logged payments to 362,261 non-physician practitioners alongside 667,898 physicians and 1,327 teaching hospitals.

Reportable Payment Categories and Device Tracking Rules

CMS organizes open payments submissions into three separate streams: General Payments, Research Payments, and Ownership or Investment Interests. In Program Year 2025, research payments accounted for $9.50 billion (65%), general payments accounted for $3.92 billion (27%), and ownership or investment interests totaled $1.25 billion (8%).

CMS Open Payments Categories
├── General Payments ($3.92B in PY2025)
│   ├── Consulting fees & honoraria
│   ├── Travel, lodging & meals
│   ├── Royalties & licensing agreements
│   └── Education & faculty speaking fees
├── Research Payments ($9.50B in PY2025)
│   ├── Direct clinical trial site funding
│   └── Investigator-initiated studies
└── Ownership / Investment Interests ($1.25B in PY2025)
    ├── Stock & stock options
    └── Partnership shares (physicians & immediate family)

General Payments

This bucket covers all payments or transfers of value that are not in connection with a research agreement or research protocol. Common line items include:

Consulting fees for product design, human factors testing, or clinical advisory panels
Honoraria and speaker fees at educational symposia
Travel, lodging, and meals provided during advisory boards or sales training sessions
Royalty payments or licensing fees paid to physician-inventors
Charitable contributions, education, entertainment, or gifts

Research Payments

Research payments cover transfers of value made in connection with a formal research agreement or research protocol. This includes payments made to teaching hospitals conducting clinical trials, as well as indirect payments made through third parties. If a payment record is related to research and development, reporting entities can formally request a publication delay. This delay request may be renewed annually for up to four calendar years after the date of payment, preventing premature public disclosure of proprietary work.

Ownership and Investment Interests

Device startups often issue equity or stock options to founding medical directors or scientific advisors. Reporting entities must submit information about ownership or investment interests held by physicians or their immediate family members. Per CMS guidelines, this category is not applicable to non-physician practitioner covered recipients or teaching hospital covered recipients.

Device Identifiers and GUDID Integration

Reporting device-related transfers of value requires granular product tracking. Per Open Payments FAQ #2007, when a transaction relates to multiple medical devices or medical supplies, the reporting entity can report up to five products per transaction. Each product is reported with a combination of the marketed brand name and one representative device identifier. CMS validates these reported brand names and device identifiers against the information in the Global Unique Device Identification Database (GUDID).

The Annual Sunshine Act Reporting Cycle and Dispute Window

CMS open payments operates on a continuous annual calendar divided into four operating phases. Missing a window or reporting inaccurate figures violates statutory reporting requirements.

Data Collection (January 1 – December 31): The reporting entity logs every dollar, meal, and travel expense across enterprise accounts. Accounts payable, expense platforms, and clinical study ledgers must track National Provider Identifiers (NPIs), state license numbers, recipient types, and associated marketed device brand names.
Data Submission (February 1 – March 31): Applicable manufacturers submit finalized datasets for the previous calendar year into the web-based Open Payments System (OPS). Reporting officials must complete system registration and user vetting as outlined in the Open Payments System User Guide for Reporting Entities before uploading files.
Review, Dispute, and Correction (April 1 – May 30): Pre-publication review and dispute occurs annually from April 1 through May 15. This gives covered recipients 45 days to review data attributed to them before publication. If a recipient initiates a dispute, reporting entities work directly with them to resolve it before May 30.
Public Data Release (On or before June 30): CMS publishes the complete dataset on its public portal. Data is refreshed once more each following January to reflect updates and resolved disputes.

Searching the Open Payments Database for KOL Mapping and Competitive Intelligence

While the program was created for public transparency, commercial and medical affairs teams regularly query the open payments database for strategic planning. The tool indexes seven years of rolling data (January 2019 through December 2025 per the Open Payments Search Tool), capturing transactions across registered clinicians and teaching hospitals.

1. Identifying Unencumbered Key Opinion Leaders (KOLs)

When staffing an advisory board or recruiting clinical trial sites, knowing an investigator's current industry ties is essential. By querying a candidate's name in the search tool, you can see:

Which competing manufacturers have paid them over the last seven years.
Whether payments were designated for general consulting, speaking, or formal research.
The specific device brand names associated with those payments.

According to CMS summary data, the highest payment volumes concentrate heavily within interventional specialties: Orthopaedic Surgery, Internal Medicine, Neurology, Dermatology, and Neurological Surgery. If an orthopaedic surgeon is drawing substantial consulting and royalty payments from a direct market competitor, signing them as an exclusive advisor for your implant trial may face contractual conflicts or institutional review board pushback. Conversely, the database reveals high-volume proceduralists who accept minimal or zero industry payments, representing potential candidates for independent evaluation.

2. Reverse-Engineering Competitor Clinical Budgets

By running entity-level queries on competing device manufacturers, market access teams can quantify competitor investments across specific therapeutic indications. You can evaluate:

The balance between a competitor's research spending versus commercial outlays (meals, travel, honoraria).
Which academic medical centers receive their primary research funding.
How much a competitor pays per clinician for proctoring, clinical training, or advisory board participation.

When positioning your technology alongside broader medical device market access initiatives, this expenditure data reveals which hospital networks are heavily invested in existing commercial ecosystems.

Processing millions of raw records via manual CSV downloads or basic web queries is labor-intensive. To accelerate competitive intelligence, platforms like Caduvo aggregate more than 15 million general payment records for KOL and competitor analysis.

Actionable Sunshine Act Checklist for Device Makers

Standardize NPI capture early: Mandate NPI and state medical license collection on all vendor setup forms, consulting agreements, and travel expense reimbursements.
Cross-reference against the GUDID: Ensure every device brand name you report has a verified primary Device Identifier in the FDA GUDID before submission.
Separate research from general disbursements: Never report clinical study grant payments under general consulting lines. Use the dedicated research reporting schema to preserve the option for delayed publication.
Notify recipients in advance: Send an itemized year-end statement to your contracted clinicians in February detailing the amounts you intend to submit. Resolving discrepancies privately avoids active dispute flags during the April 1 – May 15 dispute window.
Audit competitor footprints in the database: Query competing device makers and prospective clinical advisors in the federal portal to evaluate commercial ties and benchmark advisory compensation.

Sources

General information, not regulatory, legal or reimbursement advice. Company and product names belong to their owners; a mention does not imply affiliation or endorsement. Report an error. Data and corrections policy.