The clock with no grace period
Medicare revalidation deadlines.
Every five years Medicare requires you to prove your enrollment again, and it handles the deadline differently than any commercial payer: the due date is published months in advance, there is no grace period after it, and the billing gap a missed one creates cannot be recovered. Here is how the whole cycle works and how practices actually get caught by it.
The rules
Seven facts that run the whole cycle
The cycle
Every 5 years
Counted from your enrollment or your last revalidation, not from when anyone at the practice remembers it. DMEPOS suppliers run a tighter 3 year cycle.
Grace period
None
There is no cure window after the due date passes. Payments hold first, and the enrollment is deactivated after that.
Where due dates live
CMS's public revalidation list
Due dates appear roughly 7 months before they arrive, for anyone who looks. A provider without an assigned date yet shows exactly that on the list.
The mailed notice
Goes to the address on file
Which is where stale correspondence addresses quietly turn a public deadline into a surprise. CMS does not accept a lost letter as an excuse.
The response window
30 days on development requests
When the contractor asks for corrections and hears nothing within 30 days, the filing is rejected outright and the work starts over.
The second trigger
6 months without a Medicare claim
Deactivation also fires after six straight months with no claims, a rule tightened from twelve months in November 2023. Revalidation status does not matter here.
The gap
Cannot be billed, ever
Care delivered between deactivation and reactivation stays unpaid. Medicare's retroactive billing rules do not reach into a deactivation gap.
Checked against the Medicare enrollment regulations at 42 CFR part 424, CMS’s PECOS documentation, and CMS’s published revalidation data. Last verified August 2026. Next scheduled review November 2026. Reviewed by the Go Credentialing operations team. Rules change; this page changes with them.
Do this today
How to find your due dates right now
This takes about twenty minutes for a mid sized group and costs nothing. Once the dates are written down and someone owns the checking, the deadline stops being able to surprise anyone.
Open CMS's revalidation list
CMS publishes revalidation due dates in a public, searchable file, updated on a rolling basis. You do not need a PECOS login to read it, and the due date it shows is the one that counts, whether or not any letter ever reaches you.
Search every NPI, not just the owners
Each enrollment record carries its own date. That means every individually enrolled provider in the group, and the organization's own enrollment as well. Groups get caught when someone checks the two founding physicians and nobody checks the eleven clinicians who reassigned benefits to the group.
Write down what you find, including the blanks
A provider whose date has not been assigned yet shows that on the list too. A blank today can become a due date at the next update, which is the reason a single check is not enough.
Recheck on a schedule
Since dates post about seven months ahead, a quarterly check of the full roster means no date can appear and expire between your looks. Put a name on the task. Unowned calendars are how this deadline gets missed in the first place.
When it goes wrong
How a deactivation actually unfolds
About 7 months out
Your due date appears on CMS's public list
From this point the deadline is knowable by anyone who checks. A practice watching the list has two full quarters to gather documents, reconcile ownership and location details, and file without hurrying.
As the date approaches
The contractor mails a revalidation notice
It goes to the correspondence address on the enrollment record. If that address is a previous office, a departed manager, or an old billing company, the practice simply never hears, and nothing about the deadline changes.
The due date
A complete revalidation must be in
Filed through PECOS, with ownership, practice locations, and identifiers current. If the contractor sends a development request during review, the 30 day answer window applies, and silence gets the filing rejected.
Past due
Payments hold, then deactivation
Claims stop paying while the enrollment sits deactivated. Reactivation is a new filing with its own processing time, during which the practice is treating Medicare patients it cannot bill for.
After reactivation
The gap stays unpaid
Whatever was delivered between deactivation and reactivation cannot be billed afterward. For a provider with steady Medicare volume, the arithmetic on even a short gap runs to five figures before the reactivation paperwork clears.
The usual victims
Who this rule actually catches
Practices do not miss revalidations because the filing is difficult. They miss them for four ordinary reasons, and every one of them is a process problem, not a people problem.
The practice that moved
The revalidation notice went to the office the group left two years ago, and nobody updated the correspondence address on the enrollment record because claims kept paying fine. The first sign of trouble was remittances stopping. By then the enrollment was already deactivated and the gap was already growing.
The group that only tracked the founders
Someone kept an eye on the two owners' revalidation dates and assumed the rest of the roster ran on the same clock. It does not. Every enrolled clinician carries an individual date, set by their own enrollment history, and the organization's enrollment has one of its own. One associate's missed date stops that associate's billing while everyone else's continues, which makes it easy to miss for months.
The low volume provider nobody worried about
A specialist who sees a handful of Medicare patients a year, a clinician on leave, a provider whose panel shifted away from Medicare. Six straight months without a claim and the enrollment can be deactivated regardless of revalidation status, under the trigger CMS tightened in November 2023. These deactivations arrive with no deadline to miss, which is exactly why they surprise people.
The spreadsheet that outlived its author
The credentialing coordinator kept every date in a personal spreadsheet, and the spreadsheet was accurate right up until the coordinator left. Deadlines that live in one person's file, one person's memory, or one person's inbox share that person's turnover risk. The dates did not change when the coordinator did. The watching stopped.
What we do about it
For every provider we maintain, revalidation due dates get checked against CMS’s published list on a standing schedule, next to the six month claims trigger, license renewals, and the CAQH re-attestation cycle. Each date has a named owner, the filing gets prepared while the window is still months wide, and development requests get answered inside their 30 days because someone is watching the correspondence, not the mailbox at an old address.
None of this is clever. It is calendar work with accountability attached, which is exactly why practices skip it internally and exactly why it fails when they do. If your roster's dates currently live in a spreadsheet, or in nobody's hands at all, the compliance monitoring service was built for this exact shape of deadline, and revalidation is the first thing it gets watching.
Questions
Revalidation, answered
How do I find my Medicare revalidation due date?
CMS publishes revalidation due dates in a public list, posted about seven months in advance, and searchable without any login. Check every enrolled provider in the organization and the organization's own enrollment record, because each carries its own date. If no date has been assigned yet, the list shows that too, and it is worth rechecking quarterly since a date can be assigned at any update.
What actually happens if I miss the deadline?
Payments hold, and then the enrollment is deactivated. Getting back in means filing for reactivation and waiting out its processing time, and the stretch between deactivation and reactivation can never be billed, because Medicare's retroactive billing rules do not reach into a deactivation gap. For a provider with steady Medicare volume that gap is usually a five figure loss before the paperwork clears.
I never received a revalidation letter. Does that protect me?
No. CMS's position is that the due date is published and knowing it is the provider's responsibility. The letter goes to whatever correspondence address sits on the enrollment record, so a stale address means the deadline arrives unannounced, and CMS does not treat that as its problem. Monitoring the published list is the reliable path; the mail is a backup.
Can I revalidate early to be safe?
Not usefully. CMS instructs providers not to file a revalidation until a due date is listed or a notice arrives, and unsolicited early submissions can be returned unprocessed. The protection is not filing early. It is knowing the date months ahead, having the documents reconciled before the window opens, and filing complete the first time so no development request cycle starts.
Is the 6 month no-claims deactivation the same thing?
It is a separate trigger with the same result. Since November 2023, an enrollment that goes six straight months without a Medicare claim can be deactivated even when revalidation is nowhere near due. Low volume specialists, providers on extended leave, seasonal practices, and clinicians whose panels drifted away from Medicare all hit this one, and it belongs on the same watch calendar as the revalidation dates.
Do you track this as part of your service?
Yes. Revalidation due dates get monitored against CMS's published list for every provider we maintain, alongside the six month claims trigger, license renewals, and CAQH re-attestations, each with a named owner. The monitoring is the product: a due date that someone is paid to watch does not get missed.
Never learn about a due date from a deactivation letter.
Send your roster and we put every revalidation, renewal, and re-attestation on one watched calendar with named owners.