Revalidation and recredentialing

Credentialing and enrollment are not permanent. Once a provider is approved, both government programs and commercial payers require the underlying information to be re-checked on a recurring schedule to confirm the provider still meets participation requirements. Licenses expire, board certifications lapse, practice locations move, ownership changes, and sanctions or exclusions can appear after the initial review. Revalidation and recredentialing exist to catch those changes and keep the record trustworthy.

The two terms are often used loosely, but they point to different systems. Revalidation is the language of provider enrollment with government payers, where an existing enrollment record is periodically re-confirmed. Recredentialing is the language of credentialing with commercial health plans, where a plan re-verifies a provider it previously admitted to its network. This educational reference keeps the distinction clear, because the forms, cycles, and consequences differ.

Revalidation

A government payer's periodic re-verification of an existing enrollment record, such as Medicare revalidation processed through PECOS or a state Medicaid program's periodic revalidation.

Recredentialing

A commercial health plan's periodic re-verification of a provider it has already credentialed, confirming that credentials remain current before continued network participation.

Primary source verification

The underlying method both processes rely on: confirming a credential directly with the issuing source rather than trusting a copy supplied by the provider.

For Medicare, revalidation is handled through PECOS using the CMS-855 application family, the same forms used at initial Medicare enrollment. CMS establishes a revalidation cycle and notifies enrolled providers and suppliers when their record is due. The cycle length is set by CMS and can vary by provider or supplier type, and it changes over time, so the current CMS schedule and due-date lookup should be treated as the authority rather than any fixed number quoted elsewhere.

State Medicaid programs run their own revalidation on their own systems. Federal rules require state Medicaid agencies to periodically revalidate enrolled providers and to screen them under a risk-based framework, but the timing, portals, and documentation differ by state. A provider enrolled in Medicaid in more than one state may face separate revalidation dates in each. Because a lapse in government enrollment directly affects how claims are processed, revalidation is a core part of ongoing enrollment maintenance.

Commercial payers re-verify their participating providers on a recurring cycle. Many plans align recredentialing with recognized accreditation standards, such as those published by the National Committee for Quality Assurance, which call for recredentialing at defined intervals. The exact cycle length and requirements are set by each plan and its accreditation framework and can change, so a specific interval should be confirmed with the individual payer rather than assumed to be universal.

Recredentialing leans heavily on a current, complete CAQH profile. Plans that use the CAQH profile pull the provider's data when a recredentialing cycle comes due, which is why maintaining CAQH and re-attestation on schedule matters — a stale or unattested profile can stall the review. The plan then repeats primary source verification of licensure, education, board status, and sanctions before a credentialing committee decides on continued participation.

Recredentialing is separate from the contract itself. The commercial payer contract governs rates and terms, while recredentialing governs whether the provider remains eligible to be in the network at all. A provider can hold an active contract yet still be dropped from participation if recredentialing is not completed.

The processes rhyme, but the details differ. The table below contrasts them across the dimensions that matter most in day-to-day operations.

Although the systems differ, revalidation and recredentialing follow a similar arc. The steps below describe the common pattern; the specific documents and reviewers vary by payer.

1. 01

   Track the due date

   Programs and plans issue notices, but responsibility for knowing when a record is due sits with the practice. Building due dates into a broader credentialing timeline and planning process prevents surprises.
2. 02

   Refresh the underlying record

   Update and re-attest the CAQH profile for commercial plans, or confirm and update the enrollment record in PECOS or the state Medicaid system for government revalidation, so the data the reviewer pulls is current.
3. 03

   Re-verify at the source

   The payer or program repeats primary source verification of licensure, certification, and sanctions history, rather than relying on documents the provider submitted years earlier.
4. 04

   Review and decision

   CMS processes the submitted CMS-855 for revalidation; a health plan routes a recredentialing file to its credentialing committee for a continuation decision.
5. 05

   Maintain continuity

   When completed on time, participation continues without interruption. A missed deadline can create a gap, which is why the effective date of any reactivation or reinstatement matters for how claims in the interim are handled.

The financial stakes of revalidation and recredentialing come from timing, not complexity. The tasks themselves are routine, but a lapse can quietly change a provider's participation status and, with it, how a payer adjudicates claims. Because government deactivation and commercial network removal are handled separately, a single provider can be current with one payer and out of compliance with another at the same time.

• Missing a Medicare revalidation can lead CMS to deactivate the billing privilege until the record is reinstated.
• Missing a commercial recredentialing cycle can move a provider out of network, changing how claims are processed.
• Each program and payer tracks its own dates, so multi-payer providers manage multiple, unrelated deadlines.
• An out-of-date CAQH profile or an unattested record can stall a review even when nothing about the provider has changed.