How to find your Medicare revalidation due date
CMS publishes every provider's revalidation due date. How to look yours up, what "TBD" really means, and why waiting for the letter goes wrong.
Most practices find out about a Medicare revalidation the same way: a letter turns up, or worse, it doesn't and a claim gets rejected. Either way the information was public the whole time.
CMS publishes revalidation due dates in a file anyone can download. If you know where to look, you can see your providers' dates today without asking anyone.
Where the dates actually live
CMS maintains the Revalidation Due Date List on data.cms.gov. It's a public dataset, refreshed regularly, and it covers providers and suppliers enrolled in Medicare.
You can search it directly by NPI or by name. For a single provider, that's genuinely all you need — search, read the date, write it down.
The lookup itself is easy. Everything that goes wrong afterwards is a process problem, not a data problem.
What "TBD" means, and why it isn't good news
Search for a provider and you may find no date at all — just TBD.
This trips people up, because "no date" reads like "nothing to do." It doesn't mean you're exempt. It means CMS has not yet assigned this provider a due date in the current cycle. One will appear later.
CMS generally posts due dates roughly six months ahead. So a provider showing TBD today can show a firm date in a few months, with the clock already running. If you check once, write down "TBD," and move on, you will miss it — the record you're relying on was accurate for about a week.
TBD is not a result. It's a reason to check again.
What the date actually asks of you
Revalidation is not a renewal fee or a form letter. It is a full re-verification of the enrollment record: ownership, practice locations, reassignments, managing employees, and more. For a group with several locations and a stack of reassignments, it is real work, and it usually needs information from people who don't work in credentialing.
Most providers and suppliers revalidate every five years. DMEPOS suppliers revalidate every three. CMS can also request an off-cycle revalidation, which is a large part of why watching the published list beats counting five years forward from the last one.
Why waiting for the letter fails
Your Medicare Administrative Contractor does send notices. The problem is where they go.
Notices go to the address and contact in the enrollment record. That record may be years old. It may name someone who has left. It may point at a practice location that closed, or a billing company you no longer use. The letter is sent correctly and still reaches nobody.
This is the failure mode worth designing around. Not "CMS didn't tell us" — CMS did — but "the notice went to an address that stopped being real in 2023."
What happens if the date passes
If a revalidation isn't completed, CMS can deactivate the provider's Medicare billing privileges.
Deactivation is not a fine. It means that provider is no longer able to bill Medicare, while in all likelihood still seeing Medicare patients. Restoring privileges generally means submitting a fresh enrollment application and waiting for it to be processed, and claims for services delivered during the gap can be affected.
The practical cost is almost always much larger than the revalidation would have been. And it is usually discovered by the revenue cycle team weeks after the fact, which is the most expensive moment to find out.
Doing this for more than a handful of providers
For one or two providers, a calendar reminder works. Check the list, note the date, set a reminder, done.
It stops working somewhere around a dozen, for reasons that have nothing to do with the lookup:
- Dates appear and change. A provider showing TBD in March can have a firm date in June. A one-time check captures a moment, not a state.
- Your roster moves. Providers join and leave. A spreadsheet built in January quietly describes a practice that no longer exists.
- Noticing isn't finishing. Knowing a date is due in 60 days achieves nothing on its own. Someone has to own the filing, gather the information, submit it, handle whatever the contractor comes back asking for, and confirm it closed.
- It lives with one person. The spreadsheet is usually maintained by whoever cares most. When they're on leave — or gone — the practice finds out the hard way.
That last one is the real risk. Most missed revalidations aren't a failure to look something up. They're a handoff that never happened.
The short version
- The dates are public. Search the CMS Revalidation Due Date List by NPI.
- TBD means "not yet assigned," not "nothing to do." Re-check it.
- Don't rely on the letter. It goes to the record's address, which may be stale.
- Missing it can mean deactivation and a fresh enrollment application.
- Past a handful of providers, the hard part stops being the lookup and becomes ownership and follow-through.
Ziurta Revalidations checks the CMS list against your roster every day and turns each due date into tracked work with a named owner — see how it works, free for up to 100 providers.
General information, not legal or compliance advice. Confirm your own obligations with CMS or your Medicare Administrative Contractor.
About the author
Tony Kuka · Founder, Ziurta
Tony is the founder of Ziurta, a provider enrollment platform for medical practices, health systems, RCM firms, and credentialing companies. He has 30 years in healthcare administration, including 20 building outsourced revenue cycle companies, and founded and sold Medical Business Office and National Credentialing Solutions. He is based in Chattanooga, Tennessee.