If your hospital facility is recognized as tax-exempt under Internal Revenue Code Section 501(c)(3), Section 501(r)(3) requires you to conduct a Community Health Needs Assessment every three years and adopt an implementation strategy to address the needs you identify. Failure to do so triggers a $50,000 excise tax per noncompliant facility per year under Section 4959, plus the risk of losing 501(c)(3) tax-exempt status entirely.
That sentence is the rule. The operational nuance is where compliance actually lives.
This is a reference for hospital community benefits teams, CHNA consultants, healthcare attorneys, and anyone preparing or reviewing a Community Health Needs Assessment in the 2026-2028 cycle. Citations to the IRS regulations and Treasury guidance are linked throughout. We are not your tax advisor; this article is summary information, not legal advice.
The legal foundation in one paragraph
Section 9007 of the Patient Protection and Affordable Care Act, enacted March 23, 2010, added Sections 501(r) and 4959 to the Internal Revenue Code. Section 501(r)(1) provides that hospital organizations described in Section 501(r)(2) will not be treated as 501(c)(3) tax-exempt organizations unless they meet the requirements specified in 501(r)(3) through 501(r)(6). Section 501(r)(3) is the CHNA requirement specifically. Final implementing regulations were released on December 29, 2014, and apply to tax years beginning after December 29, 2015. The regulations are codified at 26 CFR § 1.501(r)-3.
If you are reading the underlying authority directly, the documents you want are: the IRS overview page for Section 501(r)(3), the implementing regulations at 26 CFR § 1.501(r)-3, and Revenue Procedure 2015-21 for the correction and disclosure procedures. Everything in this article maps back to those three sources.
Who has to do this
The CHNA requirement applies on a facility-by-facility basis to every “hospital facility” operated by a 501(c)(3) “hospital organization.”
A hospital facility, for these purposes, is any facility that is required by a state to be licensed, registered, or similarly recognized as a hospital. A hospital organization is a 501(c)(3) organization that operates one or more such facilities. If your organization operates four hospital facilities, you owe four CHNAs every three years, not one. Each facility is separately subject to the requirement and separately subject to the penalty for failure.
Joint CHNAs are permitted and encouraged. Two facilities in the same defined community can collaborate on a single underlying assessment, and the IRS has explicitly encouraged collaboration with state and local health departments, employers, community-based organizations, and other stakeholders. Each participating hospital facility must still separately adopt a CHNA report and an implementation strategy, but the underlying analysis can be shared.
Government hospital organizations that have voluntarily applied for and received 501(c)(3) recognition are subject to the requirement. Dual-status governmental hospital organizations that have not applied for 501(c)(3) recognition are not, although some apply the framework anyway for state-level community benefit reporting.
Newly acquired hospital facilities get a transition period. A hospital organization that acquires a facility (through merger or acquisition) must meet the CHNA requirements for that facility by the last day of the organization's second taxable year beginning after the acquisition date. New hospital facilities that are licensed for the first time get the same two-year runway.
What a CHNA actually has to contain
The implementing regulations break the CHNA requirement into a specific set of steps.
Define the community it serves
The regulations give facilities flexibility here. Community can be defined by geographic area, target population (children, women, the aged), principal functions (specialty conditions or treatments), or some combination. A facility cannot define its community in a way that excludes medically underserved, low-income, or minority populations who live in the geographic area or otherwise have access to the facility's care.
Assess the health needs of that community
This is the analytical core. The facility must identify and prioritize significant health needs in the community, taking into account input from persons who represent the broad interests of the community, including those with special knowledge of or expertise in public health. The regulations are deliberately not prescriptive about methodology, which is a feature, not a bug: it allows facilities to use the assessment approach most appropriate for their community context.
Solicit and document community input
The CHNA must take into account input from at least three categories of sources: (1) at least one state, local, tribal, or regional public health department with knowledge of the community, (2) members of medically underserved, low-income, and minority populations or organizations representing their interests, and (3) at least one written comment received on the most recently conducted CHNA and implementation strategy.
Document the CHNA in a written report
The report must be adopted by an authorized body of the hospital facility (typically the board) and must include the community served, a description of the methods used to assess needs, the prioritized list of significant health needs identified, the resources potentially available to address those needs, and an evaluation of the impact of actions taken to address needs identified in the prior CHNA.
Make the report widely available to the public
The regulations require the CHNA report to be posted conspicuously on the hospital facility's website until the facility has made available the two subsequent CHNA reports, and require a paper copy to be available for public inspection at the facility without charge.
The implementation strategy is a separate document. It must be adopted by the authorized body of the hospital facility on or before the 15th day of the fifth month after the end of the taxable year in which the CHNA was conducted. The implementation strategy must describe how the hospital facility plans to address each significant health need identified in the CHNA, or explain why it does not intend to address a particular need.
The three-year cycle, measured exactly
The “every three years” requirement is more precise than it sounds. The regulations specify that a hospital organization meets the Section 501(r)(3) requirement for a hospital facility in a given taxable year if the facility conducted a CHNA in that taxable year or in either of the two immediately preceding taxable years, and if the authorized body adopted an implementation strategy by the 15th day of the fifth month after the end of the taxable year in which the CHNA was conducted.
Translated: the relevant window is the current taxable year plus the prior two taxable years. If you operate on a calendar year and you conducted your CHNA in 2024, your facility is compliant for 2024, 2025, and 2026. Your next CHNA has to be conducted by the end of 2027 to keep the facility compliant for 2027 and beyond. If you wait until early 2028, you have a compliance gap in 2027.
The implementation strategy deadline runs from the year the CHNA was conducted, not from the year of adoption. A calendar-year facility that conducts its CHNA in 2024 must adopt its implementation strategy by May 15, 2025.
CHNAs and implementation strategies are documents, not processes. The IRS treats the CHNA as conducted in the taxable year in which the written report is made widely available to the public, not the year in which the underlying analysis was performed. This matters for scheduling: a CHNA you “finished” in November 2024 but did not post to the website until February 2025 is treated as a 2025 CHNA for compliance purposes.
The penalty if you miss
Section 4959 imposes a $50,000 excise tax on a hospital organization for any taxable year in which it fails to meet the CHNA requirements with respect to a hospital facility. The excise tax applies on a facility-by-facility basis. A hospital organization that operates three facilities and misses the CHNA requirement for two of them owes $100,000 in excise tax, not $50,000.
The tax applies even if the failure is later corrected and disclosed under Revenue Procedure 2015-21. Correction and disclosure can excuse a finding of “willful or egregious” failure (which carries separate consequences), but it does not waive the $50,000 excise tax itself. The excise tax is reported on Form 4720, filed by the 15th day of the fifth month after the end of the hospital organization's taxable year in which the failure occurred.
The $50,000 figure has not been indexed to inflation since 2010. In 2026 dollars, $50,000 retains the purchasing power of roughly $35,000 in 2010, so the penalty's real economic weight has eroded by about 30%. For a large nonprofit health system operating dozens of facilities, the absolute exposure can still be significant.
The more serious consequence is the discretionary revocation of 501(c)(3) tax-exempt status. The IRS, in reviewing a failure under Section 501(r), considers all the facts and circumstances. Revocation is the only available remedy for a hospital organization that operates only one hospital facility and fails to meet the requirements for that facility. For multi-facility organizations, revocation may be applied to the organization as a whole. The financial exposure from revocation, including state and federal income tax liability, loss of access to tax-exempt bond financing, loss of property tax exemptions in most states, and reputational damage with donors and community partners, is typically orders of magnitude larger than the $50,000 excise tax. The penalty hospitals plan around is not the excise tax. It is the existential risk to the exempt status itself.
A small number of hospitals have actually been examined and faced enforcement action since the regulations took effect in 2015. The number of facilities that have been hit with the Section 4959 excise tax specifically is small relative to the universe of 501(c)(3) hospitals. The IRS treats the requirement as compliance-driven rather than revenue-driven, and most failures are resolved through correction and disclosure rather than penalty.
What “significant health needs” means in practice
The phrase “significant health needs” is the operative language for what a CHNA has to identify and prioritize. The regulations do not define the phrase in a numerical or methodological way. The Treasury guidance accompanying the final regulations notes that significant health needs may include:
- Requisites for improving health, such as access to care, the quality of care, and the availability of resources for healthy living
- Specific health needs of vulnerable populations
- The need to address financial barriers, language barriers, and disability-related barriers to care
- Behavioral, environmental, and social factors that influence health
This list is illustrative, not exhaustive. Hospitals have wide discretion to identify health needs based on what their analytical methodology surfaces and what their community input identifies. The deliberate openness of “significant health needs” gives facilities the room to define priorities appropriate to their community, and it puts the methodology burden on the facility to defend.
In practice, based on review of published CHNAs across major nonprofit health systems, the typical 501(c)(3) hospital CHNA identifies between 3 and 10 priority health needs. The IRS does not require any particular number, and there is no minimum. The implementation strategy is what gets scrutinized in audit, and that scrutiny focuses on whether the facility actually plans to address each prioritized need or has documented a defensible reason for not doing so.
The Form 990 Schedule H reporting layer
Section 6033(b)(15) of the Code, also added by the ACA, requires hospital organizations to report annually on Form 990 Schedule H a description of how the organization is addressing the needs identified in each CHNA and a description of any such needs that are not being addressed, together with the reasons why they are not being addressed.
Schedule H Part V Section B is the section of the Form 990 where this reporting actually happens. The schedule walks through a checklist of CHNA requirements for each hospital facility, and the answers to those checklist questions are the primary basis on which the IRS evaluates compliance. If your Schedule H says you conducted a CHNA in 2024 but your CHNA report is not actually posted on your website, you have created a discrepancy that may trigger examination.
For multi-facility hospital organizations, Schedule H is the single most-reviewed document for Section 501(r) compliance. The schedule asks specifically about: whether the facility conducted a CHNA, when the report was made widely available, whether the report includes the required elements, what input was solicited and considered, who else collaborated on the assessment, and how the facility is addressing the identified needs.
Where hospitals most often trip up
A few specific failure modes account for a disproportionate share of Section 501(r)(3) compliance issues.
Missing the implementation strategy deadline
Many facilities focus on the CHNA report itself and treat the implementation strategy as an afterthought. The CHNA can be adopted on December 31, 2024, but if the implementation strategy is not adopted by May 15, 2025, the facility has not met the requirement for 2024. The implementation strategy deadline is independent and frequently missed.
Insufficient documentation of community input
The regulations require input from specific categories of sources, and the CHNA report has to describe that input and how it was taken into account. “We held a community meeting” is not sufficient documentation. The report needs to identify who participated, what they said, and how the prioritization of significant health needs reflects what was learned.
Failing to address (or document non-addressing of) a prior CHNA's identified needs
Each new CHNA cycle must include an evaluation of the impact of actions taken to address the needs identified in the prior CHNA. A facility that does not document this evaluation, even if it actually did good implementation work, has not met the requirement.
Not making the report widely available
The regulations are specific: the CHNA report has to be conspicuously posted on the facility's website, and the previous two CHNA reports also have to remain available until they are superseded. Burying the report in a buried subdirectory or removing the prior report when a new one is posted both create compliance issues.
Defining the community in a way that excludes vulnerable populations
A facility cannot draw its community boundary in a way that excludes medically underserved, low-income, or minority populations who live in the geographic area or otherwise have access to the facility's care. A facility's community has to actually reflect who it serves, including patients who arrive through emergency departments regardless of insurance status.
Treating the CHNA as a marketing document
The CHNA is a regulatory deliverable that is also a public-facing document. Facilities that approach it primarily as a marketing or branding exercise often produce reports that are weak on methodology, light on community input documentation, and vulnerable on audit. The strongest CHNAs are written first to satisfy the regulation and second to communicate to the public.
State-level community benefit requirements
Section 501(r)(3) is federal. A number of states layer their own community benefit reporting requirements on top of the federal CHNA requirement, and the state requirements are not the same.
Texas, for example, requires nonprofit hospitals to meet one of three community benefit standards: providing charity care equal to the hospital's tax exemption, dedicating at least 5% of net patient revenues to charity care and community benefits, or dedicating 100% of the hospital's tax-exempt benefit to community benefits with at least 4% of net patient revenues going to charity care. We covered the Texas analytical landscape in detail in our analysis of Texas CHNA data across four regional patterns. California, Illinois, Massachusetts, New York, Pennsylvania, and several other states have their own community benefit reporting frameworks with varying levels of specificity.
A CHNA written to satisfy Section 501(r)(3) at the federal level does not automatically satisfy state-level requirements. Hospitals operating in states with their own community benefit frameworks need to coordinate their CHNA process with their state-level reporting, and the methodologies should be aligned so the same underlying analysis can support both. This is one of the operational reasons CHNA preparation often takes 9 to 12 months from initial scoping to board adoption.
What this means for the 2026-2028 cycle
If your facility conducted a CHNA in 2023 and adopted an implementation strategy by mid-2024, you are likely entering the analytical phase of your next CHNA now or in the next several months. Conducting the underlying analysis in 2026 lets you adopt the CHNA report in 2026 and the implementation strategy by May 2027, comfortably within the three-year window.
If your facility conducted a CHNA in 2024 and adopted an implementation strategy by mid-2025, you have until late 2027 to conduct your next CHNA. Scoping the work in early 2027 is a reasonable timeline; scoping it in 2026 gives you more flexibility on community input collection, which is often the rate-limiting step.
The 2026-2028 cycle is unfolding against an unusual federal data environment. Several datasets that CHNAs have historically relied on, including PRAMS, EJScreen, and the HRSA UDS sexual orientation and gender identity variables, are operating in different configurations than they were in the 2022-2024 cycle. We covered this in detail in our practitioner playbook on building CHNAs that do not break when datasets do. The methodology section of your 2026 CHNA should plan for these disruptions, document data source vintages explicitly, and build constructs that do not depend on any single federal source. To see what county-level signal patterns look like in practice across the data sources that remain stable, two illustrative examples: Sharkey County, MS (provider gap + SDOH stress dominant pattern) and McDowell County, WV (disease burden dominant pattern, intact provider access).
How Banana Analytics fits the 501(r)(3) workflow
The three failure modes most likely to surface in a Schedule H review are methodology defensibility, community input documentation, and data source attribution. The Banana Analytics platform was designed around those three problems. Walked through the regulation step by step:
- Define the community. The custom service-area builder lets you scope by county selection, attribution file (with patient counts), drive-time isochrone, or state boundary. The cohort is tract-resolved underneath so methodology stays defensible at the smallest meaningful geography.
- Assess the health needs. Compound signal scoring across all 3,222 US counties and 74,000 census tracts fuses CDC PLACES, CDC WONDER, HRSA, NPPES, Census ACS, EPA AQS, FEMA NRI, First Street Foundation, HHS emPOWER, CMS Geographic Variation, and many other federal and commercial sources into Environmental Risk, Disease Burden, Provider Gap, and SDOH Stress pillars. The full methodology is published at banana-analytics.com/methodology.
- Solicit and document community input. The CHNA Canvas workspace (Consultant Studio tier) holds your quantitative findings, qualitative input from community listening sessions, and stakeholder commentary in one versioned document. Each block carries its source so the final CHNA can cite back to the raw input.
- Write the report. AI-drafted CHNA narrative sections cite the underlying data lineage by source and vintage. The drafts are editable in-browser; every numeric claim runs through a verifier that flags anything not supported by the payload, so what you ship has methodology-grade citations underneath it.
- Make widely available. Export to PDF and Markdown (Word .docx coming Q3 2026). Post the PDF to your facility's website. Versioned snapshots in the Canvas give you an audit trail of every revision the report went through during preparation.
The Professional tier ($99/month) covers compound signals, multi-county comparison, tract-level drill-down, and PDF report generation, all with citation-grade methodology attribution. The Consultant Studio tier ($299/month) was built specifically for CHNA consultants and health-strategy shops who produce the deliverables: it includes the CHNA Canvas authoring workspace with versioned snapshots, AI-drafted CHNA narrative sections that cite the underlying data lineage, and the custom service-area builder. Both Pro tiers include a 14-day free trial.
For organizations that find the licensing cost out of reach for the work they are trying to do, we do conversational licensing. If you are doing good CHNA work and a license is out of reach, reach out and we will work something out.
A short reference list of authoritative sources
For any specific compliance question, the underlying authority is the right place to look first. The most useful starting points:
- IRS overview of Section 501(r)(3)
- 26 CFR § 1.501(r)-3, the implementing regulation
- Revenue Procedure 2015-21, correction and disclosure procedures
- IRS overview of the Section 4959 excise tax
- Form 990 Schedule H and instructions
The IRS pages are updated periodically. The current versions, as of May 2026, reflect the final regulations published December 29, 2014, and the subsequent Revenue Procedure 2015-21. There has not been a substantive update to the Section 501(r)(3) regulations since 2015, although the IRS occasionally publishes informal guidance through its Tax Exempt and Government Entities division.