CLIA Quality Control Requirements Explained

Under the Clinical Laboratory Improvement Amendments (CLIA, 42 CFR Part 493), any laboratory running a non-waived test on human specimens has to run quality control on that test system, and CMS surveyors check the QC records, not just the QC policy, during inspection. For a lab or procurement team building out a test menu, the practical question is usually narrower than “what does CLIA say about QC”: it’s which QC pathway a given test system will run under, how much control material that actually means buying and running, and whether third-party QC material is worth sourcing on top of what the manufacturer ships. This guide covers the default CLIA QC requirement, the two alternatives to it, external QC via proficiency testing, and what all of that means for procuring QC materials.

This page is a practical overview. For the deep-dive on building a compliant individualized plan, see What Is IQCP (Individualized Quality Control Plan)?; for personnel and procedural requirements specific to the high-complexity tier, see CLIA High-Complexity Testing Requirements; if the threshold question of whether a lab is subject to CLIA at all hasn’t been settled, start with CLIA Certification.

The default CLIA QC requirement

For non-waived (moderate- and high-complexity) test systems, the CLIA default QC standard under 42 CFR 493.1256 requires running control material capable of monitoring the entire testing process, at a minimum of two levels (e.g., a normal and an abnormal concentration) each day of testing, unless the test system’s own FDA-cleared package insert specifies a different minimum frequency (some automated and molecular platforms are cleared with different default QC frequencies built in). This default schedule applies whether or not the lab has done anything else to justify a different approach — it’s the baseline every non-waived test system has to meet unless the lab has documented one of the two alternatives below.

Waived tests, by contrast, aren’t subject to this daily-control-material requirement under CLIA itself, though manufacturers’ package inserts typically still specify QC procedures, and many state licensure regimes or accreditors layer their own QC expectations on top. See CLIA-Waived Point-of-Care Testing for how waived status interacts with QC.

The three CLIA QC pathways

A laboratory running a non-waived test system has three options for meeting the QC obligation, and which one it uses determines both the ongoing testing workload and what has to be documented and defensible at inspection:

CLIA default QC — run the two-levels-per-day (or manufacturer-specified) schedule described above, with no additional documentation burden beyond routine QC records and review.
Equivalent Quality Control (EQC) — a CMS-defined option, historically used mainly for unmodified, moderate-complexity test systems cleared for a reduced external-QC schedule once an initial verification period demonstrates stability. CMS has phased down reliance on EQC over time in favor of IQCP/risk-based approaches, so a lab should confirm current CMS guidance and its accreditor’s position (CAP, TJC, COLA, etc.) before building a QC plan around EQC rather than IQCP.
Individualized Quality Control Plan (IQCP) — a documented risk assessment, quality control plan, and ongoing quality assessment process, built on CLSI EP23-A2, that lets a lab justify a customized QC frequency for a specific test system at a specific site. IQCP is the option CMS has actively promoted as the risk-based alternative to the default schedule, and it’s the one most procurement decisions around point-of-care and near-patient testing platforms now get built around. Full mechanics, the three required components, and worked considerations for device selection are covered in What Is IQCP?

None of the three pathways is optional to document — even running the plain default schedule has to be reflected in a written QC policy an inspector can review against the actual bench records.

External QC: proficiency testing

Internal (or “day-to-day”) QC control material only checks that a test system is performing consistently against itself. CLIA separately requires enrollment in an approved proficiency testing (PT) program for regulated analytes — external, blinded samples sent by a PT provider and compared against peer-group and reference results — as the external check that internal QC alone can’t provide. PT enrollment, sample handling, and the consequences of unsuccessful PT performance are covered in detail in Proficiency Testing & External Quality Assessment (EQA). For non-regulated analytes without a CMS-approved PT program, CLIA still requires the lab to verify test performance at least twice a year through some other means (e.g., split-sample testing, alternative performance assessment).

Procuring QC materials: what to actually buy

The QC pathway a lab settles on directly determines its QC-material procurement volume and cadence, which is where this stops being a purely regulatory question and becomes a supply-chain one:

Manufacturer (first-party) control material — QC material sold or bundled by the instrument/reagent manufacturer, formulated and validated specifically against that test system. This is the default sourcing choice for most labs and is what most package inserts assume when they specify QC frequency.
Third-party quality control material — control material from an independent QC manufacturer, run in addition to (not usually instead of) manufacturer-supplied controls. Because it isn’t formulated or calibrated by the same company that makes the reagents or instrument, third-party QC is more likely to surface a systematic bias or a reagent-lot-specific problem that manufacturer-matched controls, by design, can be less sensitive to. Labs pursuing rigorous risk assessments under IQCP, or accreditation programs like CAP that reward independent verification, commonly add a third-party control material to their procurement list for exactly this reason — it’s a supplemental purchase, budgeted and tracked separately from routine reagent QC.
Control material lot changes — every new lot of control material (first- or third-party) has to be verified against the outgoing lot before it’s put into routine use, parallel to the reagent-side requirement covered in Reagent Lot-to-Lot Verification. Procurement planning should build in overlap time between old and new control-material lots so verification doesn’t create a testing gap.

Practically, a procurement or lab-operations team sizing a QC-material order needs three inputs from the QC plan already on file: which pathway (default, EQC, or IQCP) governs each test system, how many control levels and what frequency that pathway actually requires, and whether an accreditor or internal risk assessment calls for supplemental third-party material on top of the manufacturer’s own controls. Ordering against the regulatory minimum without checking the accreditor’s stricter expectations (CAP checklists, in particular, sometimes exceed the CLIA floor) is a common gap found at inspection.

Frequently asked questions

Is CLIA quality control the same as proficiency testing?

No. QC control material is run internally, by the lab, to verify a test system is performing consistently day to day. Proficiency testing is an external check — blinded samples from an outside provider, compared against a peer or reference group — required separately under CLIA for regulated analytes. A lab needs both; neither substitutes for the other.

What is an individualized quality control plan?

An IQCP is a documented, CMS-recognized alternative to the CLIA default QC schedule, built from a risk assessment, a QC plan, and ongoing quality assessment, that lets a lab justify a customized (often reduced) control-material frequency for a specific test system. See What Is IQCP? for the full breakdown of its three required components.

Do I need third-party quality control material if I already run the manufacturer’s controls?

CLIA itself doesn’t mandate third-party QC as a separate line item — the regulatory floor is the default schedule (or an approved alternative). But because manufacturer-matched controls are formulated by the same company that makes the reagents, they can be less likely to flag a systematic problem specific to that reagent lot. Many accreditors and risk-based IQCP assessments treat independent, third-party control material as a meaningful supplement, particularly for high-volume or clinically critical assays.

Does CLIA require quality control for waived tests?

CLIA’s own daily control-material requirement (42 CFR 493.1256) applies to non-waived testing. Waived tests are exempt from that specific CLIA QC schedule, but manufacturer package inserts typically specify their own QC procedures, and many states and accreditors impose additional requirements on waived testing sites. See CLIA-Waived Point-of-Care Testing.

CLIA Quality Control Requirements: Default QC, IQCP, and Buying QC Materials

Ask about CLIA Quality Control Requirements: Default QC, IQCP, and Buying QC Materials