CLIA certification is the credential a laboratory holds under the Clinical Laboratory Improvement Amendments of 1988 (CLIA), the federal framework codified at 42 CFR Part 493 that governs virtually all laboratory testing performed on human specimens in the United States. The program is administered by the Centers for Medicare & Medicaid Services (CMS), which issues certificates and runs the survey/inspection process; the FDA assigns each individual test its complexity category (waived, moderate, or high); and the CDC provides scientific and technical support, including the Clinical Laboratory Improvement Advisory Committee (CLIAC). CLIA is one piece of the broader laboratory compliance and quality landscape a research organization has to navigate alongside GxP, data-integrity, and biosafety obligations.
For research organizations, the highest-value question this page can answer is not “which certificate do I need” but a step earlier: is this laboratory even subject to CLIA in the first place? Research labs routinely misjudge this, in both directions — assuming CLIA applies to all human-specimen work when it doesn’t, or assuming a research exemption covers activity that has quietly become clinical.
What CLIA actually covers
CLIA applies to any facility that examines “materials derived from the human body for the purpose of providing information for the diagnosis, prevention, or treatment of any disease or impairment of, or the assessment of the health of, human beings.” In practice: if a lab tests human blood, tissue, urine, or other specimens and reports a result that is used to inform a specific person’s diagnosis, treatment, or health assessment, that testing is subject to CLIA — regardless of whether the facility calls itself a hospital lab, a physician office, a reference lab, or a university core facility.
The research-lab exemption — and where it stops applying
42 CFR 493.3 exempts research laboratories that test human specimens but do not report patient-specific results for the diagnosis, prevention, or treatment of any disease or impairment of, or the assessment of the health of individual patients. This is the exact language that determines scope, and the operative condition is narrow: it is not about who owns the lab or what the specimens are, it is about whether an individual, patient-specific result leaves the lab for a clinical purpose.
This is where research organizations most often get the scope call wrong. Common situations that push a “research-only” activity into CLIA’s scope:
- Returning incidental or actionable findings. A genomics or biobanking study that discovers a clinically significant variant and reports it back to the participant or their physician has, for that act, performed CLIA-regulated testing — even if the original protocol was IRB-approved research.
- Assay validation that becomes a clinical service. A lab-developed test built and validated in a research setting is not in CLIA’s scope while it stays research-only; the moment it starts generating results used for an individual’s clinical care, the testing (not just the assay) is CLIA-regulated.
- Core facilities serving both research and clinical users. A university core lab that runs both grant-funded research samples and specimens tied to a clinical trial’s individual dosing or eligibility decisions may need to operate part of its testing under a CLIA certificate while the purely research side remains exempt. The dividing line is the use of the result, not the building or the equipment.
- Clinical trial labs. Central and local labs generating results used to determine trial-participant eligibility, dosing, or safety monitoring are functioning clinically for that testing and are generally expected to hold CLIA certification (or equivalent, e.g., accreditation), independent of the trial’s research status.
Get the scope call right before worrying about which certificate to apply for — a lab correctly outside CLIA’s scope needs no certificate at all, and a lab incorrectly assuming exemption is operating unlicensed clinical testing.
The five CLIA certificate types
Once a lab determines it is in scope, CMS issues one of five certificate types, matched to what the lab is actually testing:
| Certificate | Who it’s for |
|---|---|
| Certificate of Waiver | Labs performing only tests the FDA has categorized as “waived” — simple, low-risk methodologies with a negligible likelihood of erroneous results (e.g., many CLIA-waived point-of-care glucose meters, urine pregnancy tests, rapid strep tests). |
| Certificate for Provider-Performed Microscopy (PPM) procedures | A physician, midlevel practitioner, or dentist personally performing a defined, narrow list of moderate-complexity microscopy procedures (e.g., wet mounts, KOH preps) during a patient visit, plus any waived tests. |
| Certificate of Registration | Issued while a laboratory prepares for its initial compliance inspection; it authorizes moderate- or high-complexity testing on an interim basis until the survey is complete. |
| Certificate of Compliance | Issued to a laboratory performing moderate- or high-complexity testing after it has been directly surveyed by a state agency on behalf of CMS and found compliant with the applicable CLIA quality standards. |
| Certificate of Accreditation | Issued to a laboratory performing moderate- or high-complexity testing that has instead been accredited by a CMS-approved private accreditation organization (e.g., CAP, The Joint Commission, COLA) whose standards CMS has deemed to meet or exceed CLIA’s own requirements. |
Compliance and Accreditation certificates cover the same underlying testing scope — the difference is who inspects the lab: a state surveyor acting for CMS, or an approved private accrediting body. Most higher-volume clinical and translational-research labs performing moderate/high-complexity testing choose accreditation (commonly CAP, under standards built on ISO 15189) specifically to consolidate CLIA compliance and laboratory accreditation into a single inspection cycle.
Test complexity: the variable that drives everything else
CLIA certificate type follows directly from test complexity, which the FDA assigns per test system, not per laboratory. Every test a lab runs falls into one of three categories, and a single lab can (and often does) run tests across more than one category:
- Waived — simple methodologies cleared by the FDA as having a low risk of an incorrect result if performed as directed. Waived status carries the lightest CLIA burden: no routine on-site inspection, but the lab still must follow manufacturer instructions and hold a Certificate of Waiver.
- Moderate complexity (including the PPM subcategory) — most automated clinical chemistry, hematology, and immunoassay platforms fall here. Requires defined personnel qualifications, a documented quality control and quality assessment program, proficiency testing enrollment for regulated analytes, and routine survey.
- High complexity — manual methods, many molecular and cytogenetic assays, and tests requiring significant interpretation. Carries the strictest personnel-qualification tiers (director, technical supervisor, testing personnel each have defined minimum credentials under 42 CFR 493 Subpart M), the most demanding quality-system documentation, and routine biennial inspection.
Complexity, not test volume or lab size, is what sets personnel credentialing, quality-control frequency, and proficiency-testing obligations. The FDA maintains a searchable database of every categorized test system; that lookup — not a guess based on how the test “feels” — is the correct way to confirm a specific assay’s category before assuming which certificate applies.
How a lab actually gets certified
- Determine scope. Confirm the lab is testing human specimens for diagnosis, treatment, or health assessment of identifiable individuals, not exempt research use (see above).
- Identify complexity per test. Check the FDA’s test categorization database for each test system the lab intends to run.
- File CMS-116. Submit the CLIA application (Form CMS-116) to the state agency for the state where testing is performed, along with the applicable certificate fee, which is set on a biennial basis and scaled to certificate type and testing volume.
- Survey (if Compliance) or accreditation inspection (if Accreditation). Moderate/high-complexity labs not pursuing private accreditation are surveyed on-site by the state agency; those pursuing accreditation are inspected instead by their chosen CMS-approved accrediting organization.
- Maintain the certificate. Certificates are generally valid for two years and renewed on that cycle, contingent on continued compliance, successful proficiency testing performance, and passing routine or complaint-driven surveys.
CLIA vs. ISO/IEC 17025 — a distinction research labs frequently blur
CLIA and ISO/IEC 17025 are sometimes conflated because both involve laboratory “accreditation,” but they answer different questions. CLIA is a U.S. federal regulatory requirement specific to testing performed on human specimens for clinical purposes — it is not optional for in-scope labs. ISO/IEC 17025 is a voluntary international standard for the general competence of testing and calibration laboratories, used widely across environmental, materials, forensic, and industrial testing, and is not itself a clinical-testing framework (clinical labs pursuing accreditation instead typically use CAP or Joint Commission standards built on ISO 15189, a related but distinct standard for medical laboratories). A research lab that also runs a CLIA-certified clinical testing function should treat these as two separate compliance obligations, not substitutes for one another.
A CLIA-certified lab that also handles electronic records and e-signatures for its testing workflow (e.g., a LIS or LIMS generating reportable results) may separately need to consider 21 CFR Part 11 data-integrity requirements — a distinct FDA framework, not a CLIA requirement itself, but one that frequently applies to the same testing environment.
Frequently asked questions
What is CLIA certification?
It is the certificate a U.S. laboratory must hold under 42 CFR Part 493 to legally perform testing on human specimens for diagnosis, treatment, or health assessment. CMS administers the program; the certificate type depends on the complexity of the tests performed.
Does my research lab need CLIA certification?
Only if it reports patient-specific results used for an individual’s diagnosis, treatment, or health assessment. A lab that tests human specimens purely for research purposes, without returning individual clinical results, is exempt under 42 CFR 493.3. The moment any result is returned for a clinical purpose — including an incidental finding or a clinical-trial eligibility result — that specific testing activity comes into CLIA’s scope.
What are the five types of CLIA certificates?
Certificate of Waiver, Certificate for Provider-Performed Microscopy (PPM) procedures, Certificate of Registration, Certificate of Compliance, and Certificate of Accreditation. Which one applies depends on test complexity and, for moderate/high-complexity labs, whether the lab is inspected directly by a state agency (Compliance) or by an approved private accrediting body (Accreditation).
What is a moderate-complexity test under CLIA?
A test the FDA has categorized as neither waived nor high complexity — most automated clinical chemistry, hematology, and immunoassay testing falls here. Moderate-complexity testing requires defined personnel qualifications, an active quality control/quality assessment program, and proficiency testing enrollment for regulated analytes.
Is CLIA certification required for “research use only” (RUO) testing?
Not for the research use itself. RUO-labeled products are not FDA-cleared for clinical diagnostic use, and testing performed strictly for research, with no patient-specific clinical result reported, stays within the 493.3 research exemption. Using an RUO product to generate a result that is then reported for an individual’s clinical care is a separate, higher-risk problem — it raises both CLIA-scope and FDA labeling-compliance issues at once.
How long does it take to get CLIA certified?
Timelines vary by state agency workload and certificate type. A Certificate of Waiver is typically the fastest to obtain since it requires no on-site survey. Compliance and Accreditation certificates for moderate/high-complexity testing take longer because they require either a state survey or a private accreditation inspection before the certificate is issued.
