Medicare Enrollment Change Reporting in Behavioral Health: The 30-Day and 90-Day Clocks Operators Miss

Most behavioral health operators treat Medicare enrollment as a one-time project: the application goes in, the PTAN comes back, and the file goes in a drawer. The trouble is that a Medicare enrollment record is a living description of your organization, and CMS expects it to stay accurate. When it drifts away from reality, the consequence is rarely a polite letter. It is usually a payment hold, a revalidation that cannot be completed, or in the worst cases a revocation that follows the organization for years.

This post walks through the reporting clocks that apply after enrollment, the changes that most often go unreported in behavioral health programs, and the file you should be able to pull on any given day to prove your record matches your operation. It is operational guidance, not legal advice; the governing rules sit in the CMS enrollment regulations and your Medicare Administrative Contractor’s (MAC) instructions.

The Two Reporting Clocks, Stated Plainly

Medicare-enrolled behavioral health organizations, including community mental health centers, group practices and opioid treatment programs, must report a change of ownership or control to CMS within 30 days, and that includes a change in the organization’s authorized official or delegated official. Most other changes to the enrollment record, such as a new managing employee, a changed practice location or updated contact information, must be reported within 90 days. Separately from these change clocks, CMS requires most providers and suppliers to revalidate their entire enrollment roughly every five years, and it can request an off-cycle revalidation at any time.

Individually enrolled practitioners run on a slightly different clock. For physicians and non-physician practitioners, including the marriage and family therapists and mental health counselors who became eligible to enroll in Medicare in 2024, a change of ownership, an adverse legal action or a change of practice location must be reported within 30 days, with most other changes reported within 90 days. The regulations behind both clocks are in 42 CFR Part 424, Subpart P, and CMS summarizes the enrollment and revalidation process on its provider and supplier enrollment pages.

The practical point is that 90 days sounds generous until you realize nobody in the organization owns the clock. In our work with operators, the reporting obligation is almost never missed because someone decided not to file. It is missed because the event that triggered it, a resignation or a new lease, happened in a department that has never heard of PECOS.

Why Enrollment Records Drift in Behavioral Health

Behavioral health programs are unusually prone to enrollment drift because of how they grow and staff. The causes we see most often are predictable.

• Clinical director turnover: the departing clinical director or program administrator is usually listed as a managing employee, and the replacement is rarely added within 90 days because HR does not know the record exists.
• Authorized official departures: when the only authorized official leaves, nobody remaining has the authority to sign enrollment changes, so every other update stalls until a new one is appointed and reported within 30 days.
• Satellite sites opened ahead of paperwork: a new outpatient location starts seeing Medicare patients before it is added to the enrollment, which creates claims billed from an address CMS has never verified.
• Quiet ownership changes: an investor buys a minority stake, a holding company is inserted above the operating entity, or a partner exits, and nobody treats it as a change of ownership or control because the clinical program did not change.
• Banking changes after a transaction: a new lender or treasury arrangement moves the deposit account, and electronic funds transfer details are updated with the bank but not with Medicare.

Each of these is ordinary business. None of them feels like a compliance event in the moment, which is exactly why they slip.

What Happens When a Change Goes Unreported

The first consequence is usually discovered at revalidation. When the MAC sends a revalidation request, it is effectively asking you to restate the whole record. If the record lists a managing employee who left two years ago, an authorized official who no longer works there and a practice location you closed, the revalidation becomes an archaeology project under a deadline. Development letters follow, and if the response is late or incomplete, billing privileges can be deactivated until the record is fixed.

The more serious consequence is revocation. CMS can revoke enrollment when a provider fails to report required changes, and a revocation generally carries a reenrollment bar that can last for years. For an operator whose census leans on Medicare or Medicare Advantage referrals, that is an existential problem, and it often surfaces in diligence when a buyer or lender asks for a clean enrollment history.

There is also a quieter exposure. Claims billed from a location that was never added to the enrollment, or under an organization structure that no longer matches the record, can be treated as improperly billed. That pulls the issue into overpayment territory and the obligations that come with identifying one.

What a Reviewer Actually Compares

When a MAC or a CMS contractor looks at an enrollment record, it is comparing the record to outside sources: state licensure, the NPPES record, the Secretary of State filing, the OIG exclusion list, and sometimes a site visit. A site visit is the moment drift becomes visible. The inspector arrives at the address listed, and if the sign on the door, the hours posted or the staff present do not match what the record says, that discrepancy goes in the report.

We have seen site visits go sideways on details operators considered trivial: a suite number that changed when the landlord renumbered the building, posted hours that did not match the hours on the application, and a front desk that could not name the person listed as the on-site contact. None of those are fraud. All of them generate follow-up.

The Enrollment Change File to Build This Week

The fix is not complicated. It is a short file and a standing rule about who gets told when certain things happen. Here is what we recommend operators assemble.

1. Pull the current record. Log in to PECOS and print or save the full enrollment record for every enrollment you hold: the organization, each reassignment and each individually enrolled practitioner.
2. Check your revalidation date. Look up each enrollment on the CMS Medicare revalidation list and put the due date, or the absence of one, in your compliance calendar with a reminder well ahead of it.
3. Reconcile four sections line by line. Compare the listed authorized and delegated officials, managing employees, owners with a reportable interest, and practice locations against your current org chart, operating agreement and leases. Mark every mismatch with the date the real-world change happened.
4. Date each mismatch against its clock. Ownership, control and official changes run on the 30-day clock; most others run on the 90-day clock. Anything past its window should be filed now and documented.
5. Write the trigger list. Give HR, finance and operations a one-page list of events that must be reported to compliance within five business days: an executive or clinical director hire or exit, any ownership or investor change, a new or closed site, and a bank account change.

Step five is the one that keeps the record accurate. The first four only clean it up once.

Where This Fits With Licensure and Accreditation

Medicare is rarely the only body that needs to hear about these changes. A change of ownership, a new site or a new administrator can also trigger notice to your state licensing agency, your accreditor and your commercial payers, often on different timelines. Operators who handle each notice separately end up with three records describing three slightly different organizations. A single change log that lists every body notified, the date and the confirmation received is the simplest way to keep them aligned. If you are already operating and suspect your records have drifted, our support for existing treatment centers starts with exactly this reconciliation.

For organizations without an in-house compliance lead, this is also one of the cleaner functions to hand to a fractional compliance officer, since the work is periodic, deadline driven and easy to audit. It fits naturally into a broader compliance services engagement alongside exclusion screening and payer enrollment.

If you would like a second set of eyes on your enrollment record before your next revalidation, call our team at (888) 458-6619.

One Thing to Do Today

Open PECOS, find the managing employee section of your organizational enrollment and check whether every name listed still works for you. If even one does not, you have found your first unreported change and the start of your enrollment change file. If you want help working through what you find, reach us at (888) 458-6619.