Definition
Recredentialing is the periodic process by which healthcare organizations and payers re-verify a provider's qualifications and continued eligibility to maintain clinical privileges or network participation, typically required every two to three years.
Comprehensive Definition
Recredentialing is the cyclical renewal of the initial credentialing process. Just as initial credentialing establishes a provider's qualifications at the time of hire or network enrollment, recredentialing ensures that those qualifications remain current and that no adverse events — malpractice judgments, license restrictions, disciplinary actions, or loss of board certification — have occurred since the last credentialing cycle. Recredentialing is required by hospitals, health plans, and other healthcare organizations as a condition of continued clinical privileges and network participation.
The recredentialing cycle varies by organization and payer. Most hospitals and health systems require recredentialing every two years, in alignment with The Joint Commission and NCQA standards. Most commercial health plans require recredentialing every two to three years. Medicare revalidation — the federal equivalent of recredentialing for Medicare enrollment — is required every five years for most providers. These cycles are not synchronized, meaning a provider in a busy practice may be in some stage of recredentialing with one or more organizations at any given time.
The recredentialing process is similar to initial credentialing but typically less burdensome because much of the provider's background information is already on file. The process involves updating the provider's application with any changes since the last credentialing cycle, re-verifying primary sources (state licenses, board certifications, malpractice insurance, DEA registration), querying the National Practitioner Data Bank (NPDB), and reviewing any adverse events or complaints that have been reported since the last credentialing cycle. For hospital credentialing, the recredentialing process also involves a review of the provider's clinical performance data — peer review findings, quality metrics, and patient safety events.
CAQH ProView plays an important role in recredentialing by providing a continuously updated data repository that credentialing organizations can access during the recredentialing cycle. Providers who maintain current CAQH profiles — re-attesting every 120 days and updating information promptly — significantly reduce the administrative burden of recredentialing, because much of the required data is already verified and available in CAQH.
Consequences of lapsed recredentialing can be severe. A provider whose hospital privileges lapse due to failure to complete recredentialing loses the ability to admit patients, perform procedures, and bill for hospital-based services. A provider whose payer network participation lapses due to failed recredentialing is effectively removed from the payer's network, meaning their patients will be treated as out-of-network and may face higher cost-sharing. Claim denials for services rendered after the lapse date can result in significant revenue loss and patient billing disputes.
Why It Matters
Recredentialing is a recurring compliance obligation that directly affects a provider's ability to practice and bill. Unlike initial credentialing, which is a one-time event that operators typically plan for carefully, recredentialing is an ongoing cycle that can easily fall through the cracks — particularly in busy practices without dedicated credentialing staff. A provider who misses a recredentialing deadline may not discover the lapse until claims start denying or a hospital notifies them that their privileges have been suspended.
The financial impact of a recredentialing lapse can be substantial. If a provider's network participation with a major commercial payer lapses, all claims submitted after the lapse date will be denied or paid at out-of-network rates. Depending on the payer's policies, the provider may not be able to retroactively restore network participation for the lapsed period, meaning that revenue from that period is permanently lost. For a high-volume practice, even a two-week lapse in network participation can represent tens of thousands of dollars in lost or reduced revenue.
Recredentialing also serves an important patient safety function. The periodic re-verification of credentials ensures that providers who have had adverse events — malpractice judgments, license restrictions, substance abuse issues, or disciplinary actions — are identified and evaluated before their credentials are renewed. This is why credentialing organizations query the NPDB and review adverse event history as part of every recredentialing cycle.
Historical Background
Recredentialing as a formal requirement developed alongside the credentialing standards established by The Joint Commission (formerly JCAHO) and NCQA in the 1980s and 1990s. The Joint Commission's medical staff standards have required periodic reappointment (the hospital equivalent of recredentialing) since the 1980s, with a two-year cycle becoming the standard. NCQA's credentialing standards, which govern health plan credentialing, established the two-to-three-year recredentialing cycle for commercial payers. The Health Care Quality Improvement Act of 1986 and the establishment of the NPDB in 1990 added a federal dimension to recredentialing by requiring hospitals to query the NPDB at least every two years for all medical staff members.
Federal Regulations
Federal recredentialing requirements apply primarily in the hospital context through the CMS Conditions of Participation (42 CFR Part 482). The CoPs require hospitals to have a medical staff reappointment process that includes periodic re-verification of credentials and NPDB queries at least every two years (45 CFR Part 60, which governs the NPDB, requires hospitals to query the NPDB at the time of reappointment).
Medicare revalidation — the federal equivalent of recredentialing for Medicare enrollment — is governed by 42 CFR § 424.515. Most providers must revalidate every five years; durable medical equipment suppliers must revalidate every three years. CMS sends revalidation notices approximately six months before the due date.
NCQA credentialing standards, which require recredentialing every three years for health plan credentialing, are incorporated by reference into many payer contracts and state Medicaid managed care contracts.
State Considerations
State laws governing recredentialing vary. Some states have enacted laws requiring health plans to complete recredentialing within specified timeframes and to maintain network participation during the recredentialing process (i.e., not terminating a provider from the network while recredentialing is pending). California, New York, and several other states have specific protections for providers during the recredentialing process.
State medical board requirements may also affect recredentialing. Some states require physicians to report adverse credentialing actions (e.g., loss of hospital privileges) to the state medical board, which may then initiate its own investigation. Providers who have had adverse credentialing actions must disclose them on recredentialing applications, and failure to disclose is treated as misrepresentation.
Common Mistakes
- Not tracking recredentialing due dates across all hospitals and payers, resulting in lapsed credentials and suspended privileges.
- Failing to update CAQH ProView before the recredentialing cycle begins, causing delays when payers pull outdated data.
- Not disclosing adverse events (malpractice claims, license restrictions, disciplinary actions) on recredentialing applications.
- Assuming that recredentialing with one payer automatically renews credentials with all payers — each organization has its own cycle.
- Failing to maintain current malpractice insurance that meets the minimum limits required for recredentialing.
- Not monitoring for recredentialing notices from payers and hospitals, particularly if the practice address has changed.
Operator Insight
Recredentialing is where I see the most preventable revenue losses in established practices. The initial credentialing gets done carefully because it is a new and visible process. But recredentialing, which happens two or three years later, often falls through the cracks — especially in practices that have grown, changed staff, or restructured since the initial credentialing. A provider whose payer credentials lapse is effectively out of network for that payer, and the revenue impact is immediate. The solution is a credentialing calendar — a simple tracking system that shows, for every provider in your practice, the recredentialing due date for every hospital and payer they are credentialed with. This calendar should be reviewed monthly, and recredentialing applications should be submitted at least 90 days before the due date. Most credentialing organizations will not accept applications submitted less than 60 days before the due date, and processing can take 30 to 60 days, so a 90-day lead time is the minimum. I also recommend designating a credentialing owner in your practice — someone who is responsible for the credentialing calendar, who monitors for recredentialing notices, and who manages the recredentialing process for all providers. In a small practice, this might be the office manager. In a larger practice, it should be a dedicated credentialing coordinator. The cost of this function is trivial compared to the revenue impact of a credentialing lapse.
— AJ Pakpour, Healthcare Practice Startup & Strategy Expert
In Practice
A three-physician internal medicine practice has been operating for three years. The practice administrator pulls the credentialing calendar and identifies that two of the three physicians are due for recredentialing with their largest commercial payer within the next 90 days. The administrator submits recredentialing applications for both physicians, attaches updated malpractice insurance certificates and license renewals, and confirms that both physicians' CAQH ProView profiles are current. The payer completes recredentialing within 60 days, and both physicians' network participation is renewed without interruption. A hospitalist group discovers that one of its physicians has had her hospital privileges lapse because the group's credentialing coordinator left the practice and no one tracked the recredentialing deadline. The hospital notifies the physician that her privileges are suspended pending completion of the reappointment process. The physician cannot admit patients or bill for hospital services during the suspension period — a gap that takes six weeks to resolve and results in significant revenue loss and patient care disruption. The group subsequently implements a credentialing management software to prevent recurrence.
Frequently Asked Questions
References
Further Reading
Turn Knowledge Into Action
Apply what you just learned. Book a strategy session with AJ Pakpour — healthcare practice startup and strategy expert.
Book a Strategy Session