Compliance Deep Dive
The Foundation of Medicare Billing
Medicare enrollment is the foundation of your ability to bill the largest payer in healthcare. The Provider Enrollment, Chain and Ownership System (PECOS) is the CMS platform that manages Medicare provider and supplier enrollment, allowing healthcare professionals to enroll, update details, and revalidate their participation electronically.
Failing to revalidate on time could result in a hold on your Medicare reimbursement or deactivation of your Medicare billing privileges. Understanding the enrollment and revalidation process is essential for maintaining continuous Medicare billing authority.
Understanding PECOS
What PECOS Does
PECOS allows you to:
- Submit initial Medicare enrollment applications
- Update enrollment information
- Revalidate (renew) your enrollment
- Track application status
- Manage multiple enrollments
Why PECOS Matters
PECOS is the most efficient way to submit your revalidation. It allows you to submit paperlessly and is tailored to ensure that you only submit information relevant to your application.
Types of Enrollment
Physicians typically have:
- Type 1 NPI enrollment (individual): Your personal Medicare enrollment
- Type 2 NPI enrollment (organization): Your practice or group enrollment
Both must be maintained and revalidated.
Revalidation Requirements
The Five-Year Cycle
You're required to revalidate—or renew—your enrollment record periodically to maintain Medicare billing privileges. In general, providers and suppliers revalidate every five years, but DMEPOS suppliers revalidate every three years.
CMS also reserves the right to request off-cycle revalidations.
How Revalidation Differs from Initial Enrollment
| Aspect | Initial Enrollment | Revalidation |
|---|---|---|
| Purpose | Establish billing privileges | Maintain existing privileges |
| Timeline | 60-120 days processing | Varies by MAC |
| Complexity | Full application | Verification of existing information |
| Deadline pressure | Before first claim | Before due date to avoid deactivation |
Revalidation Timeline
When You'll Be Notified
You can search the Medicare Revalidation List to find a due date for an individual or organizational provider. CMS posts revalidation due dates seven months in advance.
Your enrollment contractor will send a revalidation notice via email or U.S. postal mail about three to four months prior to your due date. Medicare Administrative Contractors (MACs) send revalidation notices to providers, group practices, and non-DMEPOS suppliers.
Critical Deadlines
- 7 months before due date: CMS posts your due date
- 3-4 months before: MAC sends revalidation notice
- Due date: Application should be submitted
- 60-75 days after due date: Deactivation if no application submitted
The Revalidation Process
Step 1: Receive Notification
Ensure CMS has current contact information to receive notifications. Missed notices don't excuse late revalidation.
Step 2: Gather Information
Verify and update as needed:
- Practice location addresses
- State medical license information
- DEA registration
- Specialty designations
- Group affiliations
- Ownership/control information
Step 3: Submit via PECOS
Physicians and Non-Physician Practitioners use the Medicare Enrollment Application (CMS-855I) to start the Medicare enrollment or revalidation process, or to change enrollment information.
PECOS is preferred because:
- Paperless submission
- Tailored to your situation
- Faster processing
- Status tracking
Step 4: Pay Application Fee (If Required)
Institutional providers submitting applications for initial enrollment, revalidation, change of information adding practice location, or change of ownership are required to pay the Provider Enrollment Medicare Application Fee.
Individual physicians typically don't pay a fee, but verify for your situation.
Step 5: Track and Respond
Monitor application status and respond promptly to any requests for additional information from the MAC.
Special Situations
Sole Owners (Type 1 and Type 2 NPIs)
If you are a sole owner—meaning you have type 1 and a type 2 NPI—you must revalidate BOTH enrollments at the same time, even if one of the enrollments has not been asked to revalidate. In PECOS it will show as an 855I for the individual and an 855B for the group enrollment.
Group Practice Changes
If you change practices:
- Update your enrollment to reflect new group affiliation
- Don't wait for revalidation to make changes
- Changes should be submitted within 90 days of the change
Address Changes
Practice location changes must be reported:
- Adding a location: Submit within 90 days
- Closing a location: Report promptly
- Correct addresses are essential for claims payment
Consequences of Non-Compliance
Deactivation
If no application has been submitted, enrollment is deactivated 60-75 days after the due date. Deactivation means:
- Claims will be denied
- No Medicare payments
- Must reapply to restore billing privileges
Payment Holds
Even before deactivation, late revalidation can trigger:
- Payment holds on pending claims
- Delays in processing
- Cash flow disruption
Retroactive Coverage
If deactivated and then reactivated:
- You cannot bill for services during the deactivation period
- Revenue from that period is lost
- Patient care may have been affected
Information to Keep Current
What CMS Verifies
During revalidation, CMS verifies:
- State medical license status
- DEA registration (if applicable)
- Board certification
- Practice location accuracy
- Ownership information
- Sanctions or exclusions
Maintaining Accurate Records
Between revalidations:
- Update PECOS when information changes
- Report changes within 90 days
- Keep contact information current
- Maintain consistent information across all applications
Common Revalidation Problems
Missed Notifications
Problems arise when:
- Email address is outdated
- Physical address is wrong
- Notification goes to former practice manager
- Spam filters catch CMS emails
Solution: Proactively check your revalidation date on the Medicare Revalidation List.
Incomplete Applications
Applications are delayed by:
- Missing information
- Outdated license or DEA data
- Inconsistent information across records
- Failure to respond to MAC requests
Solution: Verify all credentials are current before submitting.
Forgotten Group Enrollments
Physicians sometimes:
- Forget about Type 2 enrollments
- Don't realize sole owner requirements
- Miss deadlines for affiliated group enrollments
Solution: Inventory all your Medicare enrollments.
Best Practices
Proactive Monitoring
- Check the Medicare Revalidation List quarterly
- Don't rely solely on notifications
- Set calendar reminders 6 months before due date
- Verify contact information is current in PECOS
Pre-Revalidation Preparation
Before your revalidation period:
- ☐ Verify state license is current
- ☐ Confirm DEA registration is current
- ☐ Review practice locations in PECOS
- ☐ Confirm group affiliations are accurate
- ☐ Update any changed information
During Revalidation
- Submit promptly upon receiving notice
- Use PECOS rather than paper
- Respond quickly to any MAC inquiries
- Track application status
- Don't assume approval—verify completion
Integration with Other Credentials
State License Connection
Your state license must be current for Medicare enrollment to remain valid. If your license lapses:
- Medicare enrollment is affected
- Billing authority is compromised
- Revalidation will fail
CAQH and Medicare
While Medicare uses PECOS (not CAQH), keep information consistent:
- Address information should match
- License and DEA data should align
- Discrepancies create problems
Conclusion
Medicare enrollment through PECOS and periodic revalidation are essential for maintaining billing privileges with the nation's largest payer. The five-year revalidation cycle requires proactive monitoring—don't rely solely on notifications that may not reach you.
The consequences of missed revalidation are severe: deactivation, denied claims, and lost revenue for the deactivation period. Unlike some deadlines with grace periods, Medicare deactivation is unforgiving.
Best practice is proactive: check the Medicare Revalidation List regularly, set reminders well before due dates, and submit revalidation promptly through PECOS. Keep all information current between revalidations, especially after any changes to your practice, license, or DEA registration.
Key Takeaways
- Five-year revalidation cycle: For most providers
- Notification 3-4 months prior: But don't rely solely on notices
- Deactivation at 60-75 days: After missed due date
- Use PECOS: Faster, paperless, trackable
- Sole owners revalidate both: Type 1 and Type 2 together
- Check Revalidation List proactively: Don't wait for notification
References
[1]: CMS - Revalidations (Renewing Your Enrollment) https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/revalidations
[2]: PECOS Official Portal https://pecos.cms.hhs.gov/
[3]: 247 Medical Billing Services - PECOS Enrollment Made Simple 2025 https://www.247medicalbillingservices.com/blog/pecos-enrollment-made-simple-a-step-by-step-guide-for-healthcare-providers-in-2025
[4]: CMS - Provider Enrollment and Certification https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/chain-ownership-system-pecos