Medicare revalidation is the periodic re-verification of your enrollment record that CMS requires to confirm your information is still accurate. You revalidate on a recurring cycle — generally every five years for most providers, every three for DMEPOS suppliers — by confirming or updating your record through PECOS before the due date your Medicare Administrative Contractor assigns. Miss the deadline and your billing privileges can be deactivated, interrupting payment until you reinstate.
That last sentence is the whole reason revalidation matters. It is not a new application and it does not change your effective date, but treating it as low-priority paperwork is how active, paid-up providers end up deactivated. This guide explains the revalidation cycle, how to find your due date, what CMS actually reviews, and the concrete steps that keep you enrolled and getting paid.
What Medicare Revalidation Is and Why It Exists
When you first enrolled, CMS verified your identity, licensure, location, ownership, and reassignments. Records go stale: providers move, groups reorganize, licenses renew, owners change. Revalidation is CMS re-running that verification on a schedule so the Medicare provider file reflects reality and program-integrity standards stay intact.
Revalidation is not optional and it is not triggered by anything you did wrong. Every enrolled individual provider, group, supplier, and institutional provider gets a revalidation due date. The goal is simply to reconfirm the same categories of information you submitted at enrollment — and to surface anything that has changed since.
If you want a refresher on how the federal enrollment record fits into your broader payer mix, our Medicare enrollment overview walks through how the pieces connect.
The Revalidation Cycle and Finding Your Due Date
CMS sets revalidation on a recurring cycle. For most providers and suppliers the interval is every five years; for DMEPOS suppliers it is every three. Your Medicare Administrative Contractor (MAC) assigns you a specific revalidation due date, and that date is the number that should drive your planning.
A few things to understand about the timing:
- You get a due date, not just an interval. CMS publishes upcoming due dates, and your MAC typically sends a notice ahead of yours. Do not wait for the letter — addresses go stale and notices get lost.
- There is a submission window. You can generally submit within a defined period before your due date. Submitting early, inside that window, is the safest play.
- Unsolicited early filings are usually returned. If you try to revalidate far ahead of your window without being asked, the MAC will often reject it. Confirm you are inside the window first.
- Group and individual dates can differ. A physician and the group they reassign to may have separate due dates. Track each enrollment, not just one.
The practical takeaway: know your due date well in advance and calendar a start date weeks ahead of it. Revalidation that begins the week it is due leaves no room for development requests.
Deactivation Risk: What Happens If You Miss It
This is the part that costs money. If you do not respond by your due date, your MAC can deactivate your Medicare billing privileges. Deactivation does not erase your enrollment, but it stops you from billing until you reactivate — and claims for services during a deactivated period are generally not payable.
Reactivation after a missed revalidation usually means submitting a full revalidation application and waiting for the MAC to process it. A point worth understanding clearly: reactivation can re-establish your privileges, but it does not automatically restore billing for the gap. The cleanest outcome is to never lapse in the first place.
Common reasons providers miss a deadline, all of them avoidable:
- The notice went to an old correspondence address that was never updated in PECOS.
- No one owned the due date — it sat between the provider, the practice manager, and billing.
- The submission triggered a development request and the response deadline was missed.
- A group assumed the individual revalidated, or the individual assumed the group did.
Because the downstream cost of a lapse is interrupted cash flow, revalidation belongs in the same ongoing-compliance routine as your other re-verification work. Our re-credentialing service is built to track these recurring deadlines so a due date never quietly slips past.
What CMS Reviews During Revalidation
Revalidation re-verifies the same information you provided at enrollment. Have it accurate and consistent before you submit, because the categories below are where development requests originate:
- Identifying information — legal name, NPI, and Social Security or tax identification details that must match your other records.
- Practice locations and correspondence address — every active location, current and consistent across the record.
- Licensure and certifications — active, unexpired, and matching the name on your enrollment.
- Ownership and managing control — for organizations, anyone with an ownership or managing-control interest, kept current as the entity changes.
- Reassignments of benefits — the links between individuals and the groups that bill for them.
- Final adverse legal actions — any reportable history, disclosed accurately.
The single biggest source of avoidable delay is inconsistency: a name that does not match your NPI, a location that contradicts another field, or a reassignment that points at a stale record. Reconcile these before you file. If you keep your CAQH profile current as part of routine maintenance, much of this data is already clean and easy to confirm.
How to Stay Active: A Practical Revalidation Routine
Staying enrolled is mostly about process, not heroics. The providers who never lapse treat revalidation as a calendared, owned task. Here is the routine that works:
- Know your due date. Look it up rather than waiting for a letter, and record it for every enrollment you hold.
- Assign an owner. One named person — or your credentialing partner — is accountable for each due date. Shared responsibility is how deadlines get missed.
- Start inside the submission window, early. Begin weeks before the due date so there is time to handle a development request without lapsing.
- Reconcile your data first. Confirm NPI, locations, licenses, ownership, and reassignments are accurate and internally consistent before you open the application.
- Keep your correspondence address current. A stale address is the most common reason notices are missed entirely.
- Respond to development requests fast. If the MAC asks for more, the clock is short. Treat any development letter as urgent.
- Confirm completion. Track the submission through to acknowledgment so you know the revalidation actually posted.
For a group with multiple providers and several due dates, this coordination is exactly where things go wrong without a system. A shared calendar of revalidation dates, tied to ownership, prevents the most expensive mistakes.
Frequently Asked Questions
How often do I have to revalidate with Medicare?
Most providers and suppliers revalidate every five years; DMEPOS suppliers revalidate every three. CMS assigns you a specific due date through your Medicare Administrative Contractor, and that date — not just the interval — is what you plan around.
What happens if I miss my revalidation due date?
Your MAC can deactivate your Medicare billing privileges. Your enrollment is not erased, but you cannot bill until you reactivate, and claims for services during the deactivated period are generally not payable. Reactivating typically requires a full revalidation submission, so avoiding the lapse is far cheaper than recovering from one.
Is revalidation the same as a new enrollment application?
No. Revalidation re-verifies your existing record rather than creating a new one, and it does not change your effective date. It does, however, review the same information you submitted at enrollment, so accuracy and consistency still matter on every field.
Stay Enrolled Without the Scramble
Revalidation is predictable, which means it is preventable as a crisis. The providers who get deactivated are almost never the ones who planned ahead — they are the ones who let a due date go unowned. If you would rather hand the calendar, the data reconciliation, and the development responses to someone who does this every day, book a free consultation and we will map your revalidation timeline, or see our pricing for what concierge credentialing covers.
Sources: Centers for Medicare and Medicaid Services (CMS); CMS Provider Enrollment, Chain, and Ownership System (PECOS); Medicare Administrative Contractors (MACs); National Plan and Provider Enumeration System (NPI); Council for Affordable Quality Healthcare (CAQH).
Need Help with Your Application?
We handle credentialing and payer enrollment end-to-end — applications, CAQH, primary source verification, and payer follow-ups, so you get in-network faster.