What is Medicare revalidation?

Medicare revalidation is CMS’s mandatory periodic renewal process requiring enrolled providers and suppliers to re-confirm that all information on file with Medicare remains current and accurate. Completing revalidation on time preserves active billing privileges. Missing the deadline causes immediate deactivation with no grace period, no payment for services delivered during the gap, and — under 2026 rules — potential automatic disenrollment from Medicaid and CHIP.

How often does Medicare revalidation occur?

Most providers revalidate every five years. DMEPOS suppliers revalidate every three years. Additionally, certain higher-risk provider specialties moved to a 3-year cycle under 2026 CMS policy changes. CMS also reserves the right to request off-cycle revalidations at any time. Providers enrolled solely to order or certify (CMS-855O) and formally opted-out providers are exempt from revalidation entirely.

What is the 7-month revalidation window and why does it matter?

CMS posts revalidation due dates up to seven months in advance on the Medicare Revalidation List at data.cms.gov. Providers must submit their revalidation application within that 7-month window — no earlier (applications are returned as unsolicited) and no later (late submission causes deactivation). The window matters because it defines exactly when you’re allowed to act, not just when you should.

What happens if Medicare billing privileges are deactivated?

A Medicare billing privilege deactivation means CMS stops processing and paying all Medicare claims submitted after the deactivation date. A stop billing privileges letter is issued, PECOS portal access may be revoked, and reactivation requires a full new enrollment application — not a simplified revalidation form. Processing takes 45–120+ days depending on PECOS or paper submission. Under 2026 rules, deactivation can also trigger automatic Medicaid and CHIP disenrollment.

Does the sole owner dual-application rule apply if only one enrollment was notified?

Yes. If you are a sole owner with both a Type I (individual) and Type II (group) NPI, you must submit two separate PECOS revalidation applications simultaneously — even if only one enrollment received a revalidation notice from your MAC. Submit a CMS-855I for your individual enrollment and a CMS-855B for your group enrollment. Revalidating only the notified enrollment leaves the other to lapse on its own schedule.

What changed in the 2026 CMS revalidation rules?

Key 2026 Medicare revalidation changes include: certain higher-risk specialties now revalidate every 3 years instead of 5; the SNF off-cycle revalidation deadline (January 1, 2026) was indefinitely suspended; Medicare terminations now trigger automatic Medicaid and CHIP cross-program disenrollment; monthly real-time license monitoring replaced older periodic cycles; and employment gaps longer than 30 days are now flagged (reduced from the prior 90-day threshold). Additionally, PECOS 2.0 now pre-populates revalidation applications with existing enrollment data.

How does Qualigenix handle Medicare revalidation tracking?

Qualigenix continuously monitors every enrolled provider’s revalidation due date on data.cms.gov and delivers advance alerts at six months and three months before each deadline. The revalidation management workflow includes PECOS application preparation, document compilation, I&A signature coordination, MAC information request response, monthly OIG and SAM.gov monitoring, and cross-program compliance checks — all integrated with the broader credentialing and billing management framework.

https://qualigenix.com/blogs/medicare-revalidation-2026