General operational information only. Payer, state, contractual and regulatory requirements vary. Confirm current requirements with the applicable payer or agency.
Quick answer
What practice leaders need to know
Revalidation renews and confirms a provider or supplier's Medicare enrollment record. Recredentialing is a recurring review performed by a commercial payer, Medicaid plan or credentialing organization. They may request similar documents, but they are separate processes with different systems, deadlines and consequences.
Two-track renewal board
Do not manage these as one deadline
Medicare revalidation and payer recredentialing can involve similar documents, but the trigger, system, proof and operational risk are different.
Medicare revalidation
- Check the CMS due-date list
- Review the PECOS enrollment record
- Submit with the correct signer
- Resolve contractor requests
- Confirm billing privileges remain active
Payer recredentialing
- Confirm the payer's deadline
- Refresh CAQH and documents
- Complete payer-specific requests
- Track committee or plan review
- Confirm continued participation
Use the official CMS or payer due date. These checkpoints are planning prompts, not extensions or universal processing-time promises.
Source verification
Check the rule beside the guidance.
Most Medicare providers and suppliers generally revalidate every five years, while DMEPOS suppliers generally revalidate every three years. CMS may also request off-cycle revalidation.
Verify with CMS Revalidation GuidanceCMS publishes due dates in advance and warns that a missed deadline may result in a payment hold or deactivation of billing privileges.
Verify with CMS Revalidation ListRevalidation renews an enrollment record
CMS uses revalidation to require an enrolled Medicare provider or supplier to resubmit and recertify enrollment information. CMS states that most providers and suppliers generally revalidate every five years, while DMEPOS suppliers generally revalidate every three years. CMS may also request an off-cycle revalidation.
Recredentialing is a health plan review
Recredentialing is the recurring process a payer or credentialing organization uses to confirm that a participating provider continues to meet its requirements. The cycle, forms and evidence can vary. It commonly involves an updated provider profile, licenses, malpractice coverage, work history, attestations and responses to payer-specific questions.
One process does not complete the other
Finishing a Medicare revalidation does not recredential a provider with commercial plans. Attesting a CAQH profile does not complete a Medicare revalidation. The systems may use overlapping information, but they have different owners, deadlines and consequences.
Missed deadlines can interrupt operations
CMS warns that late Medicare revalidation may lead to a payment hold or deactivation of billing privileges. A commercial payer may take its own action when recredentialing is incomplete. Do not rely only on reminder emails. Maintain a central calendar with payer, program, due date, owner and completion evidence.
Review the whole provider record during renewal
Renewal is an opportunity to confirm locations, affiliations, taxonomy, contact information, licenses and documents across connected systems. Correcting inconsistencies at the same time can prevent the next application or directory update from inheriting an old error.
Build two separate tracking workflows
A Medicare revalidation tracker should include the enrollment record, due date shown by CMS, PECOS action, signatures, supporting documents, Medicare Administrative Contractor requests and final confirmation. A recredentialing tracker should identify the payer, provider, CAQH status, requested documents, roster or portal submission, payer follow-up and completion notice. Keeping them separate prevents a completed CAQH attestation from being mistaken for a completed Medicare action.
Do not wait for the final reminder
Review CMS revalidation information and payer credentialing calendars routinely. Confirm that notices go to monitored contacts rather than a former employee or an unused practice address. Begin document review early enough to correct expired licenses, insurance records, work-history gaps or ownership changes. When a payer requests an update, record the deadline, submission method and proof of completion instead of relying on an email thread.
Confirm the operational outcome
A submitted renewal is not complete until the responsible program or payer confirms the record. After Medicare revalidation, verify that enrollment and billing privileges remain active. After payer recredentialing, confirm continued participation, effective dates and directory information. Escalate any request that could affect claim payment, network status or patient scheduling.
Use the due date that belongs to the program
For Medicare, check the CMS revalidation list and the contractor notice rather than predicting a due date from the last submission. CMS may also request an off-cycle revalidation. For commercial and Medicaid plans, use the payer's own notice or portal because the cycle may differ. Store the source of every due date in the tracker. This gives staff something verifiable to follow and reduces the chance that a generic three-year or five-year reminder is treated as the official deadline.
Prepare a continuity file before staff changes
Renewal work often depends on portal access, historical submissions and documents held by one employee. Keep a controlled file with system owners, authorized contacts, payer portals, provider rosters, recent confirmations and upcoming deadlines. Access should follow the practice's security policy and should never rely on shared passwords. When responsibility changes, complete a formal handoff and confirm that notices now reach a monitored inbox. The process should continue even when the original credentialing contact leaves.
Escalate renewal risk before claims are affected
Create escalation points for an unanswered payer request, a due date approaching without a complete file, an expired supporting document or a notice sent to the wrong address. Leadership should see the affected provider, payer, deadline, estimated revenue exposure and next action. This is more useful than reporting that credentialing is pending. If Medicare billing privileges or payer participation may be interrupted, coordinate credentialing, scheduling and billing so the practice does not keep creating claims without a clear payment path.
Use the CMS window correctly
CMS publishes Medicare revalidation due dates in advance and advises providers to submit when they are within the permitted window or have received a request. Do not send an unsolicited revalidation simply because an internal calendar predicts that one should be due. Check the current CMS list and contractor notice for the exact enrollment record. At the same time, do not wait passively for mail. The practice remains responsible for monitoring its due date and keeping correspondence information current.
Late revalidation can become a revenue event
CMS warns that failing to revalidate on time may result in a payment hold or deactivation of Medicare billing privileges. If deactivation occurs, the practice may need to submit a complete enrollment action to reactivate, and services during the inactive period may not be reimbursed. That risk makes revalidation a revenue-cycle control, not an administrative reminder. High-risk deadlines should be visible to leadership, billing and scheduling with a documented contingency plan.
Commercial recredentialing needs its own evidence file
For each payer, retain the request, required profile or form, supporting documents, submission confirmation, follow-up history and final participation notice. If CAQH is used, confirm that the profile is attested, documents are current and the payer is authorized to access it. Do not mark the payer complete merely because the CAQH profile was refreshed. The completion evidence is the payer's confirmation that the provider remains approved for the applicable network, products and locations.
A multi-payer example shows why one reminder is not enough
Consider a group with one physician participating with Medicare, a state Medicaid program and three commercial plans. The Medicare due date should come from the CMS revalidation list or contractor notice. Each health plan may send its own recredentialing request through a portal, roster, form or provider-data platform. License, malpractice and controlled-substance registrations may renew on still different dates. The practice should therefore create a separate row for every provider and program, record the official source of the due date, assign an owner and retain final confirmation. A generic reminder every three or five years cannot prove that any one enrollment is current.
Map every renewal to the exact participating relationship
A provider may be active with one payer product, location or group affiliation while another relationship is still under review. Identify the individual, organization, tax ID, location, network and product covered by each notice. Compare the final confirmation with that same scope. This prevents a team from marking the entire payer complete because one clinician or product renewed. It also helps billing and scheduling determine which services can continue without assuming that a broad brand-level status applies to every claim.
Keep expiring documents ahead of the renewal request
Licenses, malpractice coverage, certifications and other supporting records may expire on dates unrelated to revalidation or recredentialing. Maintain document alerts early enough to obtain the renewed evidence and update every dependent profile. Check that names, coverage dates, limits and addresses match the provider record before upload. Replacing an expired file in the document repository does not automatically update CAQH, PECOS or payer portals. Assign the downstream updates and retain confirmations so an otherwise timely renewal is not delayed by an outdated attachment.
Respond to adverse-information questions accurately
Renewal applications may ask about sanctions, exclusions, disciplinary actions, malpractice history or other events. Route those questions to the provider and qualified legal or compliance resources when appropriate. Do not leave a required response blank, minimize an event or copy an old answer without confirming that it remains accurate. Keep the supporting explanation and final submitted response in a restricted file. Consistency matters across systems, but the goal is truthful, complete disclosure under each program's instructions—not forcing different questions into one generic answer.
Coordinate payer directories after approval
After recredentialing, verify that the payer's directory reflects the approved name, specialty, locations, phone number and whether the provider is accepting patients, as applicable. Directory maintenance may be a separate process and can have its own reporting deadlines. Submit corrections through the payer's approved route and retain the acknowledgement. An approval notice confirms continued participation, but it does not prove that patients or referring providers can find accurate information. Include unresolved directory errors in the renewal handoff until the payer confirms the update.
Close renewal only after downstream operations are checked
Final confirmation should trigger a short operational review: active participation or enrollment status, effective dates, approved affiliations and locations, directory data, claim acceptance and any payment hold. If the program paused claims during review, identify affected dates and follow the payer's release or correction instructions. Notify scheduling and billing of the verified outcome and preserve the evidence with the provider record. Closing on submission rather than confirmation can leave an invisible gap between the credentialing tracker and the revenue cycle.
Working reference
Revalidation and recredentialing compared
Use separate owners and evidence for each process even when the same provider documents are involved.
| Review point | Medicare revalidation | Payer recredentialing |
|---|---|---|
| Purpose | Reconfirm a Medicare enrollment record | Reassess continued payer participation |
| Common system | PECOS and Medicare Administrative Contractor workflows | CAQH, payer portal, roster or payer form |
| Typical trigger | CMS due date or off-cycle request | Payer-defined recurring cycle or request |
| Completion proof | Medicare confirmation and active enrollment record | Payer confirmation of continued participation |
| Risk if missed | Possible payment hold or deactivation | Possible network, directory or payment disruption |
Free working resource
Provider Renewal Calendar
Keep Medicare revalidation and payer recredentialing on separate, evidence-based timelines.
- Built for a practice operations team
- Editable in Excel or Google Sheets
- Do not enter patient information or PHI
Common questions
Questions practice teams ask
Does CAQH attestation complete Medicare revalidation?
No. Medicare revalidation is completed through the applicable CMS and Medicare Administrative Contractor process.
How often does Medicare require revalidation?
CMS states that most providers and suppliers generally revalidate every five years, while DMEPOS suppliers generally revalidate every three years. CMS may also request an off-cycle revalidation.
Can a payer recredential a provider without using CAQH?
Yes. Payers may use CAQH, their own portal, a roster, a form or a delegated credentialing arrangement.
What information should be reviewed in both processes?
Check licenses, malpractice coverage, locations, contact information, ownership, taxonomy, affiliations and adverse-action disclosures where applicable.
When should the tracker mark the task complete?
Only after the program or payer confirms completion and the practice verifies the operational record, not merely when documents are submitted.
Primary references
Sources and further reading
Requirements can change. Use these primary sources to confirm the current rule that applies to the payer, service and date of care.
Ready to turn this guidance into action?
Tell us what is happening in your practice, and we will help you identify the most useful next step.