Credentialing is the gateway to revenue for every healthcare provider. A provider who is not credentialed with a payer cannot have their services covered by that payer's members, which means patients will either pay out of pocket or seek care elsewhere. For a new practice, the credentialing timeline is one of the most significant factors affecting the time to first revenue — and it is one of the most commonly underestimated.

The consequences of credentialing failures extend beyond delayed revenue. A provider who is granted clinical privileges at a hospital based on inaccurate or unverified credentials creates significant liability for the hospital. A payer that enrolls a provider without adequate credentialing may face regulatory scrutiny and liability for claims paid to an unqualified provider. For the provider, misrepresentation on a credentialing application — even inadvertent omissions — can result in loss of privileges, termination from payer networks, and state medical board discipline.

Credentialing also has ongoing compliance implications. Most payers and hospitals require re-credentialing every two to three years, and providers must maintain current licenses, board certifications, and malpractice insurance throughout their credentialing period. Lapses in any of these credentials can trigger immediate suspension of privileges or network participation, with direct revenue impact.

Formal credentialing processes in U.S. hospitals date to the early 20th century, when the American College of Surgeons began requiring hospitals to maintain organized medical staffs with defined standards for physician qualifications. The Joint Commission on Accreditation of Hospitals (now The Joint Commission) formalized credentialing requirements as part of its hospital accreditation standards in the 1950s and 1960s. Payer credentialing emerged as a distinct process with the growth of managed care in the 1980s and 1990s, as health plans sought to verify provider qualifications before enrolling them in their networks. The National Practitioner Data Bank (NPDB), established by the Health Care Quality Improvement Act of 1986 and operational since 1990, created a national repository of adverse credentialing actions, malpractice payments, and licensure actions that credentialing organizations must query as part of the credentialing process.

Federal credentialing requirements apply primarily in the context of Medicare and Medicaid participation. The Conditions of Participation (CoPs) for hospitals (42 CFR Part 482) require hospitals to have a medical staff credentialing process that meets specific standards, including primary source verification and peer review. The Health Care Quality Improvement Act of 1986 (42 U.S.C. § 11101 et seq.) established the National Practitioner Data Bank (NPDB) and created immunity protections for credentialing organizations that conduct peer review in good faith.

The NPDB is governed by 45 CFR Part 60 and requires hospitals to query the NPDB when credentialing or re-credentialing a physician or dentist, and every two years for all medical staff members. Health plans that credential providers for network participation are not required to query the NPDB but are permitted to do so.

NCQA credentialing standards, while not federal regulations, are incorporated by reference into many payer contracts and state Medicaid managed care contracts, giving them quasi-regulatory force in many markets.

State laws governing credentialing vary significantly. Some states have enacted laws requiring health plans to complete credentialing within specified timeframes (e.g., 60 or 90 days from receipt of a complete application) and to pay claims retroactively to the date of application if credentialing is not completed within the required timeframe. California, New York, and Texas are among the states with specific credentialing timeline requirements.

State medical practice acts govern the scope of practice for different provider types, which affects what credentials are required for credentialing. States also have different requirements for the types of providers that must be credentialed — some states require credentialing for nurse practitioners and physician assistants in addition to physicians, while others have more limited requirements.

State licensing board records are a primary source for credentialing verification. Credentialing organizations must verify state licenses directly with the issuing board, and any encumbrances, restrictions, or disciplinary actions on a license must be disclosed and evaluated as part of the credentialing process.