Medicare Revalidation for Behavioral Health Programs: The Five-Year Cycle and Where Enrollments Lapse

Medicare revalidation rarely fails because a program is ineligible. It fails because nobody owned the date. A behavioral health operator can pass a Joint Commission survey, clear a payer audit and still lose Medicare billing privileges because a revalidation notice went to an office manager who left two years ago. This guide covers how the cycle works, why it lapses in practice and the file that keeps it from happening.

What Medicare Revalidation Requires

Medicare revalidation is the process by which every enrolled Medicare provider and supplier, including community mental health centers, opioid treatment programs, group practices and individual clinicians, must resubmit and recertify the accuracy of its enrollment information every five years, or every three years for durable medical equipment suppliers. CMS can also request an off-cycle revalidation at any time. A program that does not respond by its due date can have its Medicare billing privileges deactivated, and services furnished while deactivated can be difficult or impossible to bill.

That five-year cycle is set by CMS, which publishes upcoming due dates in its Medicare revalidation lookup tool and explains the process on its revalidation page for providers and suppliers. Most submissions go through PECOS, the CMS online enrollment system. Your Medicare Administrative Contractor (MAC) processes the application and sends the notice that the clock has started.

Revalidation is not a renewal form you fill in from memory. It is a full recertification of ownership, managing employees, practice locations, licensure, adverse legal history and banking information. Anything that changed since your last approval and was never reported becomes visible at this point.

One Program, Several Clocks

The single most useful thing an operator can understand about revalidation is that a behavioral health program almost never has one Medicare enrollment. It has several, and each carries its own due date.

• The organizational enrollment. A community mental health center enrolls as an institutional provider on the CMS-855A. Most group practices and opioid treatment programs enroll as Part B suppliers on the CMS-855B.
• Each individual practitioner. Psychiatrists, psychiatric nurse practitioners, psychologists, clinical social workers, and now marriage and family therapists and mental health counselors each hold their own enrollment, typically on the CMS-855I.
• Each reassignment of benefits. When a clinician reassigns billing to your organization, that relationship sits on the enrollment record and must stay accurate through each revalidation.

A 40-clinician outpatient group can easily carry 40 or more separate revalidation due dates scattered across a five-year window. The organization revalidates cleanly, everyone assumes the job is done, and eight months later claims for three prescribers start rejecting because their individual enrollments were deactivated.

Why Revalidations Lapse: The Patterns We See

In the enrollment files we review for operators, revalidation failures cluster around a short list of causes. None of them are exotic.

• Stale contact of record: The MAC sent the notice to the correspondence address or contact person listed in PECOS, and that person or mailbox no longer exists.
• Organization-only tracking: The compliance calendar tracks the facility’s due date but not individual clinicians, whose dates were set by their own enrollment history.
• Unreported changes surfacing late: A new managing employee, an added location or a minority ownership transfer was never reported, so the revalidation application cannot be signed as accurate without first correcting the record.
• Authorized official turnover: The person with signing authority in PECOS left, and adding a replacement takes time the program does not have once the due date is close.
• Development requests ignored: The MAC asked for missing information after submission, the request sat in an unmonitored inbox, and the application was rejected as if it had never been filed.

The inconvenient truth is that revalidation usually exposes a reporting problem rather than creating one. Programs that keep up with ongoing enrollment change reporting rarely struggle at revalidation. Programs that do not usually discover the gap here, under a deadline.

What Happens When the Date Passes

When a revalidation is not submitted, or is submitted but not completed, the MAC can deactivate Medicare billing privileges. Deactivation is not the same as revocation, and it is generally reversible, but reactivation typically means submitting a complete enrollment application and waiting for it to be processed. During that window, claims stop paying.

For a behavioral health operator, the practical damage is uneven. A deactivated individual psychiatrist may mean that a medication management caseload cannot be billed to Medicare under that clinician. A deactivated organizational enrollment can stop billing for the entire Medicare line of business, including partial hospitalization or intensive outpatient services. Some Medicare Advantage plans and state Medicaid programs look at Medicare enrollment status during their own credentialing, so a lapse can slow those processes down as well.

Precise reactivation rules and effective-date policies are set by CMS and applied by your MAC. Check the current guidance on the CMS revalidation page before relying on any particular outcome, and treat this article as operational guidance rather than legal advice.

The Revalidation File: What to Build This Week

Here is the file we recommend every program keep, and the steps to build it.

1. Pull every NPI. List your organizational NPI or NPIs and the individual NPI of every clinician who bills Medicare through you. Your credentialing roster is the starting point, but reconcile it against the reassignments actually shown in PECOS.
2. Look up each due date today. Enter every NPI into the CMS revalidation lookup tool and record the listed due date, or note that none is yet assigned. Put each one on the compliance calendar with a reminder at 120 days and another at 60 days.
3. Verify the contact of record. In PECOS, confirm the correspondence address, the contact person and the email address for each enrollment. Replace any individual’s personal address with a monitored role mailbox.
4. Confirm signing authority. Make sure at least two current employees can act as authorized or delegated officials, so a single departure cannot freeze the process.
5. Reconcile before you are asked. Compare PECOS ownership, managing employee and location data against your current organizational chart and licenses. Report discrepancies now through the normal change-of-information process rather than at revalidation.
6. Budget the fee. Institutional providers generally owe an application fee at revalidation, while individual practitioners generally do not. Confirm the current amount on the CMS site before you file.
7. Watch for development letters. After submission, assign one person to monitor for MAC requests and respond within the stated timeframe.

A program that completes steps one through four in a single afternoon has removed most of the risk described above.

Where Revalidation Fits in the Compliance Calendar

Revalidation belongs alongside DEA registration renewals, state license renewals, CLIA certificates and accreditation cycles on one master calendar, not in a billing manager’s personal spreadsheet. The reason is ownership. Revalidation sits at the boundary between credentialing, billing and compliance, which is exactly why it falls through. Assigning it explicitly to the compliance function, with credentialing feeding it a current roster each month, closes the gap.

Surveyors and auditors may not ask for your revalidation tracker by name, but payers and accreditors both expect evidence that you know who is enrolled and billing on your behalf. A clean revalidation file is part of that evidence.

If you are not sure how many enrollments your program carries or when they come due, our behavioral health compliance services team can build the tracker with you. Programs without in-house compliance leadership often use a fractional compliance officer to own enrollment and revalidation alongside the rest of the calendar, and new programs can set this up from the start through our startup operations support. Call us at (888) 458-6619 to talk through your enrollment file.

Frequently Asked Questions

How often does Medicare require revalidation? Every five years for most providers and suppliers, and every three years for durable medical equipment suppliers. CMS can also request an off-cycle revalidation.

Does revalidating our organization also revalidate our clinicians? No. Each individual practitioner enrollment carries its own due date and must be revalidated on its own schedule.

Where do we find our due dates? In the CMS revalidation lookup tool, searchable by NPI or name, and in notices sent by your MAC.

Can we submit early? CMS sets a submission window ahead of each due date. Check its revalidation page for the current guidance rather than filing far in advance, because very early applications may be returned.

Questions about a specific enrollment? Reach the Circa Behavioral team at (888) 458-6619.