Why Provider Revalidation Should Not Be Left Until the Notice Deadline

Provider revalidation is easy to overlook because it is not an annual task. For most Medicare providers and suppliers, revalidation generally occurs every five years, while DMEPOS suppliers generally revalidate every three years. CMS can also require an off-cycle revalidation when necessary.

Because the deadline may be years away, practices can treat revalidation as something to address when the notice arrives.

That approach creates unnecessary operational risk.

The notice is a deadline warning—not the ideal starting point for preparation.

A better approach is to monitor the provider's revalidation status, maintain enrollment information continuously, and begin reviewing the record well before the submission window.

1. What Is Provider Revalidation?  

Medicare revalidation is the process of resubmitting and recertifying enrollment information to confirm that it remains accurate.

Depending on the provider or organization, the information may include:

• Legal business information

• Practice locations

• NPI information

• Ownership information

• Provider affiliations

• Licenses

• Certifications

• Reassignment information

• EFT information

• Other Medicare enrollment details

CMS uses revalidation as part of its provider enrollment and program-integrity processes.

The process is therefore more than updating a form. It is an opportunity to confirm that the enrollment record still accurately represents how the practice operates.

2. The Notice Should Not Be Your First Reminder  

CMS states that Medicare Administrative Contractors (MACs) generally send revalidation notices approximately 90–120 days before the due date. CMS also publishes upcoming revalidation due dates in its Medicare Revalidation List, with due dates generally available several months in advance.

This creates two separate responsibilities:

CMS provides notification.

The provider remains responsible for tracking the due date.

CMS explicitly states that providers should keep track of their own revalidation deadlines and should submit when the due date is approaching even if they did not receive a notice.

That makes independent monitoring an important part of enrollment management.

3. Why Waiting Creates a Problem  

A revalidation application may look straightforward when the information has remained unchanged.

In practice, provider records often change between revalidation cycles.

During several years, a practice may have experienced:

• A new practice location

• A change in ownership

• A new tax identification arrangement

• A provider joining or leaving a group

• A change in reassignment

• A new license

• Updated contact information

• Changes in EFT information

If these changes have not been properly reflected in the Medicare enrollment record, the revalidation process can become more complicated.

CMS requires certain enrollment changes to be reported separately from revalidation. For example, CMS instructs providers to report changes in ownership, adverse legal actions, and practice locations within 30 days, while other changes generally have a 90-day reporting timeframe.

Revalidation should not be used as a substitute for timely change reporting.

4. A Revalidation Notice Does Not Mean "Start From Scratch"  

One useful feature of PECOS is that providers can review their existing enrollment information and update the information that has changed.

CMS states that PECOS allows providers to:

• Review information currently on file

• Upload supporting documents

• Electronically sign the application

• Submit the revalidation electronically

CMS also notes that when using PECOS, providers generally only need to update information that has changed rather than re-entering every unchanged item.

That makes early preparation particularly useful.

Instead of spending the notice period discovering what has changed, the practice can maintain accurate records throughout the enrollment cycle.

5. The Hidden Risk: Information Mismatches  

One of the most important areas to review is consistency.

Provider information may exist in several places:

• PECOS

• NPPES

• CAQH

• State licensing records

• Practice management systems

• EHR systems

• Payer enrollment records

These systems do not necessarily update automatically when information changes elsewhere.

A practice may therefore have correct information internally while an older version remains in a payer or Medicare enrollment record.

That discrepancy can create additional review or administrative work.

6. Practice Locations Deserve Particular Attention  

Practice location changes are especially important because Medicare requires certain enrollment changes to be reported within defined timeframes.

CMS states that changes involving practice location must generally be reported within 30 days.

Before revalidation, organizations should confirm:

• Current practice locations

• Corresponding addresses

• Whether locations are operational

• Provider association with each location

• Whether billing information reflects the correct enrollment structure

A revalidation review can expose location information that has become outdated.

7. Provider and Group Relationships Should Be Reviewed  

For individual providers working within group practices, enrollment information can involve reassignment relationships and organizational affiliations.

CMS's revalidation data tools include reassignment information and clinic/group-practice listings.

Before submitting a revalidation, practices should therefore confirm that:

• The provider is associated with the correct organization

• Reassignments are accurate

• Practice locations are current

• Organizational information is consistent

This is particularly relevant when providers have changed practices or work across multiple organizations.

8. What Happens If Revalidation Is Not Completed?  

This is where waiting until the deadline can become financially significant.

CMS states that failure to revalidate on time can result in:

• A hold on Medicare reimbursement

• Deactivation of Medicare billing privileges

If billing privileges are deactivated, the provider must submit a complete Medicare enrollment application to reactivate them. CMS also states that Medicare will not reimburse services furnished during the period of deactivation.

CMS's 2026 Provider Enrollment Compliance Conference materials likewise identify failure to provide complete and accurate information and supporting documentation following a revalidation request as a potential basis for deactivation.

This is why the financial risk is not simply administrative.

A revalidation problem can affect the practice's ability to receive Medicare reimbursement.

9. Do Not Confuse a Revalidation Due Date With a Notice Date  

This distinction is important.

The notice date tells the provider that action is approaching.

The revalidation due date is the actual deadline established for the enrollment record.

CMS maintains a Medicare Revalidation List so providers can identify upcoming due dates. The list is updated periodically, and CMS currently publishes due dates several months in advance.

Practices should therefore maintain their own enrollment calendar rather than relying entirely on incoming notices.

10. Why Early Preparation Is More Efficient  

Starting early does not necessarily mean submitting the revalidation months ahead of schedule.

In fact, CMS advises providers not to submit unsolicited revalidations when the due date is more than seven months away, unless CMS has requested the revalidation.

The better strategy is:

Monitor early → Review early → Correct early → Submit within the appropriate window

This avoids both extremes:

Too late: scrambling after receiving the notice.

Too early: submitting when CMS is not yet accepting the revalidation.

11. A Practical Revalidation Readiness Checklist  

Provider Information  

Confirm:

• Legal name

• NPI

• Tax information

• Contact information

Practice Information  

Confirm:

• Practice locations

• Mailing address

• Billing address

• Group affiliation

Credentials  

Confirm:

• State license

• DEA registration, when applicable

• Board certification

• Other applicable credentials

Financial Information  

Confirm:

• EFT information

• Banking information

• Billing relationships

Organizational Information  

Confirm:

• Ownership

• Managing information

• Reassignment relationships

• Organizational affiliations

Supporting Documentation  

Confirm that required documents are:

• Current

• Legible

• Consistent

• Available for submission

  
  

12. Use the Medicare Revalidation List as a Monitoring Tool  

CMS's Revalidation List provides a practical way to identify upcoming deadlines.

As of September 2026, CMS's current data tools show that upcoming revalidation due dates are being added several months in advance, including February 2027 dates.

This means practices do not have to wait for a physical letter or email to begin monitoring their enrollment calendar.

The practical workflow is:

Check CMS Revalidation List → Record due date → Review enrollment record → Identify discrepancies → Prepare documentation → Submit through PECOS when appropriate

13. Build Revalidation Into the Credentialing Calendar  

R

evalidation should not exist as a separate reminder buried in an email inbox.

A centralized credentialing calendar can track:

Item	Recommended Tracking
Medicare revalidation	Due date + submission status
State license	Expiration date
DEA registration	Expiration date, when applicable
Malpractice coverage	Expiration date
CAQH	Attestation/update status
Payer credentialing	Recredentialing date
Practice location	Change reporting status
Provider affiliation	Current status

This gives leadership a single view of enrollment-related obligations.

14. Separate Revalidation From Routine Enrollment Maintenance  

One of the biggest process improvements is recognizing that revalidation should not be the only time enrollment information is reviewed.

If a provider moves locations in February, the practice should not wait for revalidation years later to update the Medicare record.

If ownership changes, that information should be reported according to CMS requirements.

If provider information changes, the applicable enrollment record should be updated within the required timeframe.

CMS explicitly requires ongoing maintenance of enrollment information rather than relying exclusively on periodic revalidation.

15. What Healthcare Leaders Should Monitor  

Leadership can monitor a small set of enrollment KPIs:

Upcoming Revalidations  

How many providers have due dates within the next six months?

Documentation Readiness  

How many required records are complete and current?

Submission Status  

How many applications have been submitted?

Pending Development  

How many applications require additional information?

Enrollment Disruptions  

Have any billing privileges been placed on hold or deactivated?

Provider Data Changes  

How many enrollment records require updates because of organizational or provider changes?

These metrics make enrollment risk visible before it becomes a reimbursement problem.

16. What an Effective Internal Timeline Looks Like  

6–7 Months Before Due Date  

• Check CMS revalidation status

• Record the due date

• Begin monitoring the enrollment record

CMS publishes upcoming due dates several months in advance.

3–4 Months Before Due Date

  

• Review provider information

• Identify outdated documentation

• Confirm practice locations

• Check organizational relationships

90–120 Days Before Due Date 

 

• Expect the MAC notification

• Finalize required documentation

• Resolve discrepancies

CMS generally sends revalidation notices within this timeframe.

Before the Due Date  

• Submit the revalidation

• Confirm submission

• Track any development requests

• Maintain documentation of the submission

After Submission 

 

• Monitor the application

• Respond to payer/MAC requests

• Confirm the enrollment record remains active

  
  

17. The Bigger Revenue-Cycle Connection  

Credentialing and revenue cycle management are often managed separately.

They should not be.

Enrollment status can affect whether claims are processed and paid.

A practice can have:

Provider → Patient → Encounter → Claim → Payer

But if the provider's enrollment information is not current, the financial process can be disrupted.

That makes provider enrollment maintenance a revenue-protection function, not merely an administrative requirement.

Conclusion  

Provider revalidation should not be treated as a deadline-driven paperwork exercise.

CMS gives providers advance visibility through its revalidation tools and generally sends notices approximately 90–120 days before the due date. But CMS also makes clear that providers remain responsible for tracking their deadlines.

The most effective approach is therefore not to submit as early as possible.

It is to prepare before the notice, verify the record before the deadline, and submit within the appropriate CMS window.

This approach gives practices time to identify outdated locations, provider affiliations, ownership information, credentials, and other enrollment discrepancies without turning the final weeks into an administrative emergency.

The financial reason is equally important: CMS states that failure to revalidate on time can lead to a hold on Medicare reimbursement or deactivation of billing privileges, and Medicare will not reimburse services furnished during a period of deactivation.

The notice should be the point of confirmation—not the point at which preparation begins.