Enrollment
Medicare enrollment effective date, retrospective billing and revalidation for practices
The Medicare enrollment effective date for a physician, practitioner or group is the later of the date the contractor received an application that was later approved and the date services began at a new location. Retrospective billing reaches back 30 days when circumstances prevented enrolling earlier, and 90 days only after a Presidentially declared disaster. Report ownership, adverse legal action and location changes within 30 days, other changes within 90, and revalidate on a 5-year cycle. This is general information, not legal advice. Review your payer contracts and the rules where you practice with your compliance advisor.
Published by OffshoreMeds. Facts last checked October 17, 2026. How we check our numbers.
The effective date
How the effective date and the retrospective window work
| Rule | What it says | Source |
|---|---|---|
| Rule: Effective date | What it says: The later of two dates: the date of filing of an application that was later approved, or the date services began at a new practice location. | Source: 42 CFR 424.520(d) |
| Rule: Date of filing | What it says: The date the Medicare contractor received the application, on paper or in PECOS. | Source: Program Integrity Manual, chapter 10, section 10.6.2 |
| Rule: Retrospective billing | What it says: Up to 30 days before the effective date if circumstances precluded enrolling in advance, when all program requirements, including state licensure, were met at the enrolled location. Up to 90 days only if a Presidentially declared Stafford Act disaster precluded it. | Source: 42 CFR 424.521(a) |
| Rule: The enrollment date itself | What it says: It cannot be made retroactive; only the billing effective date and the retrospective window move back. | Source: Program Integrity Manual, section 10.6.2 |
CMS gives a worked example in the same manual section. It is reproduced here as CMS states it, not as a promise about any claim.
| Step | Date in the example |
|---|---|
| Step: Physician starts seeing patients | Date in the example: March 1 |
| Step: Application submitted (the filing date) | Date in the example: May 1 |
| Step: Application approved | Date in the example: June 1 |
| Step: Effective date (the later of filing and start) | Date in the example: May 1 |
| Step: Retrospective billing date, if 42 CFR 424.521 is met | Date in the example: April 1 |
| Step: Services CMS says will not be paid | Date in the example: Those before April 1 |

Changes
Reporting changes, and what late reports can cost
- Physicians, non-physician practitioners and their groups report a change of ownership, any adverse legal action and a change, addition or deletion of a practice location within 30 days. All other changes are due within 90 days (42 CFR 424.516(d)). The Program Integrity Manual adds that all practice location changes are due within 30 days for any provider type.
- Late reporting is a stated ground for revocation. Since January 1, 2026 a revocation for failing to report an ownership change, an adverse legal action or a practice location change is dated the day after the report was due (42 CFR 424.535).
- The December 2025 amendment to 424.516 that moved adverse legal action to 30 days changed only the paragraph for other provider and supplier types. Physicians and groups already had 30 days.
- Proposed, not final: a July 6, 2026 proposed rule would date all revocations for failure to report back to the day after the due date (91 FR 41216). No final rule was found on October 17, 2026.
- Updating the NPPES record does not update the Medicare enrollment in PECOS, and the two must match (CMS PECOS fact sheet). Covered providers send NPPES changes within 30 days (45 CFR 162.410(a)(4)).
Revalidation
Revalidation, deactivation and the dates staff track
- Providers and suppliers other than DMEPOS resubmit and recertify their enrollment information on a 5-year cycle; DMEPOS suppliers on a 3-year cycle. The application is due within 60 days of CMS’s notification (42 CFR 424.515).
- CMS posts revalidation due dates 7 months ahead and says the provider is responsible for tracking its own due date; failing to revalidate on time could mean a hold on reimbursement or deactivation (CMS revalidation page).
- A second deadline appears in the deactivation rule: not answering a revalidation or enrollment information request within 90 days is a ground for deactivation, as is submitting no Medicare claims for 6 consecutive calendar months or failing to report a change in time. No payment is made for services furnished while deactivated (42 CFR 424.540). Do not treat either number as the only deadline.
| Path | No development, site visit or fingerprinting | With one of those |
|---|---|---|
| Path: Online in PECOS | No development, site visit or fingerprinting: 95% within 15 days; all within 50 | With one of those: 95% within 50 days; all within 85 |
| Path: Paper | No development, site visit or fingerprinting: 95% within 30 days; all within 65 | With one of those: 95% within 65 days; all within 100 |
The same manual section sets the revalidation share at 80% with the same day counts (Program Integrity Manual, section 10.5). The clock stops for referrals, fingerprints and site visits.
CAQH
Credentialing is a separate clock
- CAQH profiles are re-attested on a 120-day cycle (180 days for Illinois providers), and the profile status becomes Expired when attestation is not completed in time (CAQH resources). What an expired profile means for network status depends on the payer; CAQH’s text says only that the status changes.
- CAQH’s terms let a provider authorize practice administrators to enter information, make the provider responsible for verifying it, and bar anyone from using another person’s account (CAQH terms of service).
- CAQH has rebranded as DataSpring, and its provider product, formerly ProView, now appears on its pages as the Provider Data Portal. It is separate from Medicare enrollment in PECOS; the CAQH text read does not link the two.
Limits
What was not read or could not be confirmed
- Whether CAQH or PECOS allows or bars access by staff outside the United States: no text was found in the CAQH terms read, and PECOS access rules were not researched. Whether an outside vendor can act as a CAQH delegate is also unstated; CAQH names practice administrators and office staff.
- The posted Form CMS-855I still printed a 05/26 expiry when read, and OMB shows a revision concluded on October 8, 2026 (OMB record). Check the CMS forms page for the current edition before filing.
- Pages and decisions that describe a 90-day window for other circumstances may reflect an earlier version of the rule. The eCFR text read on October 17, 2026 limits it to a Presidentially declared Stafford Act disaster, and its source note ends at 86 FR 62419 (November 9, 2021).
- How the 30-day clock is counted is not defined beyond “within 30 days” in the sources read. State Medicaid enrollment rules were not surveyed.
How enrollment fits with outsourced work is covered in ending a medical billing contract, and the filing limit for the claims themselves is in timely filing limits for medical claims. This is general information, not legal advice. Review your payer contracts and the rules where you practice with your compliance advisor.
The terms behind each seat
One flat monthly fee per seat, never a percentage of collections. A Business Associate Agreement is signed before anyone touches protected health information. Clinical decisions stay with your US-licensed providers. See all OffshoreMeds services.
Related guides
- Timely filing limits for medical claims
The federal caps, examples from Cigna, Aetna, Texas Medicaid and Illinois Medicaid, and how to find and track the limit that applies.
- Ending a vendor contract
Return or destruction of data, ending access, the Medicare notice when a billing agent changes and who keeps control of payment.
- Vendor questions before you sign
Questions on contract, access, location, payer rules, pay and exit, each tied to the rule or source behind it.
Get Started
Book a free 30-minute call.
Pick a time below. Have these ready: the roles you need, your specialty and your EHR. We’ll come back with a fixed seat quote, candidate profiles to interview and a go-live plan.
Calendar not showing? Open the booking page in a new tab.
Please keep patient information out of the booking notes. A Business Associate Agreement is signed before anyone touches protected health information. See how this site handles your details in the privacy policy.