Any entity subject to this subpart must comply with the assurances that it provided to CMS, unless compliance is waived under § 417.166.