Initial credentialing gets most of the attention when a provider joins a new practice or a new payer network. Re-credentialing — the recurring process of reverifying that a provider still meets the standards required for network participation — tends to get far less attention, right up until a missed deadline results in an unexpected denial of claims. Understanding exactly how recredentialing cycles work, and how unforgiving the deadlines actually are, is one of the more practical things a practice can do to protect its revenue.
Recredentialing Is Not the Same as a Renewal Reminder
It helps to be precise about what recredentialing actually involves. It is not simply renewing a license or updating a form — it's a full reassessment of a provider's qualifications, conducted by the payer (or delegated to a Credentials Verification Organization), covering:
- Re-verification of licensure status, with any disciplinary actions or board complaints since the last review
- Confirmation of continued malpractice coverage
- Review of sanctions, exclusions, and quality-of-care issues that may have arisen during the prior cycle
- A formal decision made by a credentialing committee — not an informal staff sign-off
This is a meaningfully heavier process than most providers expect, which is part of why starting it well before the deadline matters.
The NCQA 36-Month Standard
The National Committee for Quality Assurance (NCQA) sets the benchmark that most commercial payers follow: providers must be recredentialed at least every 36 months, calculated from the date of the provider's last approval — not “around three years,” but exactly 36 months on a fixed, documented cycle. NCQA's standards specifically state that this cycle generally cannot be extended, except in narrow circumstances such as active military deployment or documented medical leave.
A few specifics worth knowing:
- There is no grace period built into the NCQA standard. If a provider is not recredentialed within the 36-month window, the organization's file is scored down during NCQA review.
- A narrow catch-up provision exists, but it's limited: if an organization missed the original due date and still intends to keep the provider in-network, it can complete the recredentialing process and decide within 30 days of the original due date — but the clock starts from the original deadline, not from when someone notices the miss.
- The recredentialing process should begin 90 to 120 days before the expiration date, to leave enough time for primary source re-verification and committee review before the actual deadline arrives.
- Provider attestation has its own freshness requirement — it must be completed within 180 days of the credentialing committee's decision, which means even a technically “in-process” recredentialing file can stall if the attestation itself goes stale.
Why Every Payer’s Deadline Is Different
Here's where tracking gets genuinely complicated: NCQA's 36-month standard is the most common benchmark, but it is not universal. Some payers — certain state-specific Blue Cross Blue Shield plans, for example — operate on a 24-month cycle instead. Medicare revalidation, governed separately by CMS, runs on a 5-year cycle based on the provider's original enrollment date, with CMS typically sending a revalidation notice 6 to 12 months ahead of the deadline. CAQH ProView attestation, layered underneath all of this, needs to be refreshed roughly every 120 days, regardless of where any individual payer's recredentialing cycle stands.
The practical consequence is that a provider participating with even a modest number of payers will have a separate recredentialing due date for each one. A provider in 10 to 15 networks can easily track that many distinct deadlines simultaneously, none of which are synchronized with each other.
Texas Medicaid Has Its Own Revalidation Rules
For providers enrolled in Texas Medicaid, revalidation runs through TMHP's PEMS system on its own separate timeline from any commercial payer cycle. Texas guidance recommends submitting a revalidation application at least 120 days before the end of the current enrollment period. If the application is submitted before the due date and reaches “Closed–Enrolled” status within a 45-day grace period after that date, the provider is treated as having completed revalidation on time, with no enrollment gap. Miss that window entirely, and the consequence is disenrollment from all Texas state health-care programs — including Medicaid managed care organizations — which then requires a full re-enrollment application rather than a simple fix.
What Actually Happens If You Miss a Deadline
The consequences of a missed recredentialing deadline are more concrete than they might sound in the abstract:
- Network removal. Once a provider's network participation lapses, claims submitted to that payer are denied — not delayed, denied — because the provider is no longer recognized as in-network.
- Patient billing complications. Patients seen during a lapse may end up billed at out-of-network rates, which can create both a patient experience problem and, depending on how and when the patient was notified, potential complications under the federal No Surprises Act protections around unexpected out-of-network billing.
- Reenrollment instead of a quick fix. For both commercial payers and Texas Medicaid, missing the window typically means starting a new enrollment or recredentialing process from scratch rather than simply submitting late paperwork, which can mean weeks or months of network gap rather than a short administrative hiccup.
Many practices, when they discover a lapse, choose to keep seeing existing patients and absorb the financial impact of out-of-network billing rather than risk losing those patients permanently — but that's a costly position to be in, and one that's avoidable with earlier tracking.
Building a Tracking System That Actually Holds Up
Because every payer relationship runs on its own clock, ad hoc tracking — a note on a calendar, an email reminder from the payer — tends to break down once a practice has more than a handful of providers or payer relationships. A more durable approach includes:
- A master tracking record per provider, per payer, listing the recredentialing due date, the date the process needs to start (90–120 days out), and the date attestation was last refreshed.
- Internal alerts are set earlier than the payer's own reminder, since relying solely on a payer's notification leaves no buffer if that notice is delayed, misdirected, or missed.
- A standing CAQH refresh routine, since the 120-day attestation cycle is shorter than most recredentialing cycles, and easy to let lapse quietly in the background.
- A documented escalation point — someone specifically responsible for confirming that in-process recredentialing applications are actually moving forward, not just submitted and assumed to be fine.
- Separate tracking for Texas Medicaid revalidation, since its 120-day lead time and 45-day grace period don't align with the NCQA 36-month commercial standard or the 5-year Medicare cycle.
The Underlying Pattern
Across NCQA-governed commercial payers, CMS Medicare revalidation, and Texas Medicaid revalidation, the same pattern holds: these deadlines are fixed, generally not subject to informal extensions, and the consequences of missing them fall on the practice's revenue, not just its paperwork. The providers and practices that avoid disruption are not the ones with the fastest credentialing staff — they're the ones who treat every payer relationship as having its own independent deadline, tracked well ahead of time, rather than assuming all recredentialing runs on roughly the same schedule.



