Provider Credentialing: Complete Operational Guide
Last reviewed · By Chad Griffith
Provider credentialing is the verification process by which healthcare facilities confirm a practitioner's qualifications, training, licensure, and competence before granting privileges to provide patient care. Credentialing is governed by multiple regulatory frameworks: CMS Conditions of Participation (42 CFR 482.22 for hospitals, 42 CFR 484 for HHAs, 42 CFR 418 for hospices), Joint Commission Medical Staff (MS) standards, state medical board rules, and payer credentialing requirements (CMS, Medicare Advantage, commercial insurers). Each framework has its own document set, timing requirements, and verification standards. Initial credentialing typically takes 60-120 days; re-credentialing occurs on 24-36 month cycles. Delegated credentialing arrangements (where a payer accepts the facility's credentialing decisions) require additional NCQA or URAC standards compliance.
Required Credentialing Documents
The credentialing application packet typically includes: Identity — government photo ID, social security card, birth certificate. Education — diploma from medical school (or equivalent for other professions), residency completion certificate, fellowship certificate if applicable. Postgraduate training — ACGME-accredited program completion documentation. Licensure — state medical license (current and complete history of all states), DEA registration (each state where prescribing), state controlled substance registration where required, board certifications with current expiration dates. Professional history — work history covering the last 10 years with no gaps, hospital affiliations and privileges, all malpractice insurance coverage history including expired policies. Certifications — BLS, ACLS, PALS, ATLS as applicable to scope. References — typically 3-5 professional references from current and prior practice settings.
The application must include attestations: scope of practice the practitioner is requesting, criminal history (any convictions other than minor traffic), pending disciplinary actions, prior denials or restrictions of privileges, malpractice claims history (paid and unpaid), and current health status (covering ability to perform privileges with or without accommodation). Attestation falsification is grounds for immediate credentialing denial and may trigger state medical board reporting.
Primary Source Verification (PSV)
Primary Source Verification means the credentialing entity confirms each application element directly with the original source — not from copies the practitioner provides. Required PSV elements per CMS and Joint Commission: medical school graduation (verify with school registrar or via ECFMG for international graduates); residency training (verify with program director); state license (verify with state medical board); DEA registration (verify with DEA registration database); board certification (verify with ABMS or equivalent specialty board); malpractice claims history (NPDB query, OPPS data); state regulatory actions (state medical board verification, OIG exclusion list).
PSV documentation must be dated and time-stamped showing when verification occurred. Some elements require time-bound verification — for example, NPDB queries are time-stamped at the moment of query and the query record itself becomes part of the credentialing file. Verification more than 90-180 days old at the time of credentialing decision is typically considered stale and requires refresh.
NPDB Queries
The National Practitioner Data Bank (NPDB) maintained by HRSA contains records of medical malpractice payments, adverse actions on licenses, clinical privileges, and professional society memberships. Per 45 CFR Part 60, healthcare entities must query the NPDB at credentialing and re-credentialing for: physicians, dentists, and other licensed health care practitioners. Query types include One-Time Query (single practitioner) and Continuous Query (ongoing monitoring with daily updates).
Continuous Query is the modern approach for high-volume credentialing — it provides automatic alerts when reportable events occur, eliminating the need for periodic manual queries. The NPDB itself charges per-query fees for one-time queries; Continuous Query operates on annual subscription pricing. Reportable events include malpractice payments, license disciplinary actions, clinical privilege actions, professional society membership actions, healthcare-related criminal convictions, and certain health plan adverse actions.
Joint Commission MS Standards
Joint Commission Medical Staff standards (MS chapter) cover credentialing and privileging for accredited hospitals. Standards include: MS.06.01.03 (criteria for medical staff membership), MS.06.01.05 (criteria for granting clinical privileges), MS.07.01.01 (delegated credentialing), MS.07.01.03 (credentialing process), MS.10.01.01 (focused professional practice evaluation — FPPE), MS.11.01.01 (ongoing professional practice evaluation — OPPE), and MS.12.01.01 (medical staff bylaws).
FPPE (focused) and OPPE (ongoing) are the Joint Commission's expectations for performance evaluation: FPPE applies to new privileges (initial 6-12 months) requiring focused review of competency; OPPE is continuous performance monitoring across all privileges using indicators like volume, complications, mortality-morbidity outcomes. OPPE indicators must be specific to the privileges granted — generic indicators applied uniformly across all privileges are routinely cited as inadequate.
Re-Credentialing Cycles
Re-credentialing occurs on 24- or 36-month cycles depending on accreditation framework: Joint Commission requires reappointment to medical staff at intervals not to exceed 24 months for hospitals; NCQA standards for delegated credentialing arrangements typically require re-credentialing every 36 months; CMS requires periodic reappointment but does not mandate a specific interval beyond 'as required by medical staff bylaws.'
Re-credentialing reverifies the elements that change over time: license renewal, DEA renewal, board certification renewal, malpractice insurance, recent malpractice claims, state regulatory actions, OIG exclusion list, NPDB Continuous Query results, and OPPE performance data. Significant findings during re-credentialing (lapsed license, malpractice claim, performance issue) can trigger summary suspension of privileges pending review — typically with hearing rights under medical staff bylaws.
Delegated Credentialing
Delegated credentialing arrangements occur when a payer (typically a managed care organization or Medicare Advantage plan) delegates credentialing decisions to the healthcare facility. Under delegated arrangements, the payer accepts the facility's credentialing decisions without independently re-credentialing each practitioner — saving the facility administrative burden and accelerating practitioner billing readiness for the payer's members.
Delegated credentialing requires NCQA Health Plan Accreditation or URAC Health Plan Accreditation standards compliance. Required elements: written delegation agreement specifying responsibilities, credentialing standards meeting NCQA/URAC requirements, oversight reporting from facility to payer (typically quarterly), payer audit rights including periodic file audits, and termination procedures. Delegated arrangements can collapse rapidly if audits identify systemic credentialing deficiencies — leading to repayment of claims for affected practitioners during the audit period.
Frequently Asked Questions
How long does initial credentialing take?
Typically 60-120 days for hospital privileges and payer enrollment. The timeline depends on completeness of the practitioner's application, responsiveness of primary sources during verification (medical schools, residency programs, state boards), and any concerns identified during NPDB queries or attestation review. Practitioners often experience credentialing delays as the most frustrating aspect of starting at a new facility — and the facility often experiences claim delays for 60-120 days during this period.
What is the difference between credentialing and privileging?
Credentialing is the verification of qualifications (education, training, licensure, history). Privileging is the authorization to perform specific clinical activities at the facility based on those qualifications. A practitioner may be credentialed but only granted limited privileges based on training, experience, and demonstrated competence. Privileging is documented in delineation of clinical privileges (DOCP) forms specific to each specialty and facility.
Authoritative sources