Getting credentialed is only the beginning. Every payer network, hospital, and government program a provider joins will ask them to prove their credentials again on a fixed schedule. Recredentialing in healthcare is that ongoing cycle of re-verification, and missing a single deadline can remove a provider from a network or stop their payments.
The challenge is that there isn’t one cycle to track. There are several, each with its own clock. This guide explains every recredentialing cycle, gives a practical checklist, and shows exactly what happens when a deadline is missed.
What Is Recredentialing in Healthcare?
Recredentialing is the periodic re-verification of a provider’s qualifications after initial credentialing. It confirms that licenses, certifications, malpractice coverage, work history, and sanction status are still current. Payers, hospitals, and government programs each run their own recredentialing process.
For a broader look at why credentialing and recredentialing matter to revenue, see our article on why credentialing and re-credentialing are critical. This guide focuses on the cycles, the checklist, and the consequences.
The Recredentialing Cycle: Every Clock You Need to Track
| Process | Who Requires It | Frequency |
|---|---|---|
| Payer recredentialing | Commercial health plans following NCQA standards | At least every 36 months |
| CAQH re-attestation | Payers that rely on CAQH profiles | At least every 120 days (180 days in Illinois) |
| Medicare revalidation | CMS | Every 5 years (DMEPOS suppliers every 3 years) |
| Medicaid revalidation | Each state Medicaid program | Varies by state |
| Hospital reappointment | Hospital medical staff | Commonly every 24 months |
| License, DEA, and board renewals | State boards, DEA, and certifying boards | Varies by credential |
Each cycle is set by a different authority. Under NCQA standards, health plans must recredential practitioners at least every 36 months from the last credentialing decision. Separately, CAQH profiles must be re-attested at least every 120 days. For hospitals, Joint Commission accreditation standards call for medical staff reappointment every 24 months. You can review NCQA’s requirements in its credentialing FAQs.
Why the Clocks Never Line Up
These cycles start on different dates for every provider and every payer. In a group practice, they overlap constantly. For example, a practice with 20 clinicians on 120-day CAQH cycles faces a re-attestation deadline roughly every six days, before counting any payer, Medicare, or hospital dates. That is why recredentialing needs a central tracking system, not individual reminders.
Recredentialing Checklist
Use this checklist for each provider and each cycle.
90 to 120 days before the deadline:
✓ Confirm the due date — Check each payer, CAQH, Medicare, Medicaid, and hospital deadline.
✓ Update the CAQH profile — Review and re-attest so payers see current information.
✓ Collect renewed documents — Gather current licenses, DEA registration, board certification, and malpractice certificates.
✓ Explain any gaps — Document work history gaps, new affiliations, or changes in practice locations.
During the cycle:
✓ Respond to requests quickly — Answer payer and hospital questions before their deadlines.
✓ Verify directory information — Many payers use CAQH data to update provider directories, so confirm addresses, hours, and hospital affiliations.
✓ Screen for exclusions — Check providers against federal exclusion lists, as covered in our guide to OIG compliance in RCM.
After approval:
✓ Record the outcome — Save approval letters and confirmation emails.
✓ Set the next cycle — Enter the next due date immediately, with reminders assigned to more than one person.
Medicare Revalidation: The Government’s Recredentialing Cycle
Medicare calls its version of recredentialing “revalidation.” Most providers and suppliers revalidate every five years, while DMEPOS suppliers revalidate every three years.
Due dates appear in the Medicare Revalidation Lookup Tool, which CMS updates with due dates seven months in advance. Contractors send reminders, but CMS does not grant extensions, and providers remain responsible for tracking their own due dates. Submit through PECOS once your due date appears. Institutional providers and DMEPOS suppliers also pay the 2026 application fee of $750. See the CMS revalidation page for current guidance.
What Happens If You Miss a Recredentialing Deadline
The consequences depend on which cycle is missed:
| Missed Deadline | What Happens |
|---|---|
| CAQH re-attestation | The profile lapses, and payers may be unable to recredential the provider |
| Payer recredentialing | The provider can be terminated from the network and lose in-network status |
| Medicare revalidation | Payments can be held, or billing privileges deactivated |
| Hospital reappointment | The provider can lose privileges and be unable to see patients at that facility |
These outcomes are real. Health plans commonly warn that if a provider does not re-attest their CAQH profile on schedule, the plan may be unable to recredential them, which can lead to contract termination. For Medicare, a late revalidation can trigger a payment hold or deactivation of billing privileges, and a deactivated provider must re-enroll before billing again. At the hospital level, practitioners whose reappointment expires can no longer see patients at that facility.
The financial impact compounds quickly. Claims for a provider who has fallen out of a network may be denied or paid at out-of-network rates. Services provided while Medicare billing privileges are deactivated are generally not payable. Restoring participation often takes weeks, and that revenue is rarely recovered. For realistic timelines on getting back in, see our guide to provider credentialing timelines.
How Group Practices Stay Ahead
Use one central calendar — Track every provider’s payer, CAQH, Medicare, Medicaid, hospital, and license dates in one place.
Start early — Begin each cycle 90 to 120 days before the deadline.
Assign shared ownership — Give every deadline more than one responsible person.
Keep contact details current — Update CAQH and PECOS whenever credentialing contacts change, so notices reach the right person.
Monitor between cycles — Watch for license expirations and sanctions continuously, not only at recredentialing time.
Medicare and commercial requirements also differ in important ways. Our guide to payer-specific credentialing explains those differences.
Conclusion
Recredentialing in healthcare is a set of overlapping cycles: payer recredentialing at least every 36 months, CAQH re-attestation every 120 days, Medicare revalidation every five years, hospital reappointment commonly every 24 months, plus license and certification renewals. Missing any one can lead to network termination, payment holds, deactivation, or lost hospital privileges. Practices that track every clock centrally and start each cycle early keep providers credentialed and revenue flowing.
MBW RCM’s provider credentialing and enrollment services manage recredentialing, CAQH re-attestation, and Medicare and Medicaid revalidation for every provider in your group.
FAQs on Recredentialing in Healthcare
How often does recredentialing happen?
What is the difference between recredentialing and revalidation?
What happens if a CAQH profile is not re-attested?
Can a provider be removed from a network for missing recredentialing?
When should recredentialing start?
Keep Every Provider Credentialed
One missed recredentialing deadline can take a provider out of network or stop Medicare payments. MBW RCM can track every cycle for your group, prepare submissions, and keep CAQH and enrollment records current. Submit the form below to learn more.
