CMS Requirements for Telehealth Provider Credentialing and Medicare Enrollment

The landscape of healthcare delivery has been significantly reshaped by the accelerated adoption of telehealth services. As healthcare businesses increasingly integrate virtual care into their models, understanding the regulatory framework governing these services, particularly concerning Medicare reimbursement, is critical. The Centers for Medicare & Medicaid Services (CMS) sets forth specific requirements for provider credentialing and Medicare enrollment that apply to practitioners delivering telehealth services.

The Foundation: Medicare Enrollment for Telehealth Providers

To bill Medicare for services, including those delivered via telehealth, a healthcare provider must be properly enrolled in the Medicare program. This fundamental requirement ensures that CMS can verify the provider's qualifications, licensure, and compliance with federal regulations. The enrollment process involves submitting an application (typically using Form CMS-855I for individuals or CMS-855B for groups) through the Provider Enrollment, Chain, and Ownership System (PECOS).

For telehealth, CMS generally considers the provider delivering the service from the distant site as the billing provider. These distant site practitioners must be eligible Medicare providers, meaning they must be licensed in the state where the patient is located at the time of the service and meet all other Medicare enrollment criteria. The services must also be covered by Medicare when furnished via telehealth.

Key Requirement: All providers billing Medicare for telehealth services must be enrolled in Medicare as an eligible distant site practitioner. This includes physicians, nurse practitioners, physician assistants, clinical nurse specialists, certified registered nurse anesthetists, clinical psychologists, clinical social workers, registered dietitians, and nutrition professionals. Physical therapists, occupational therapists, and speech-language pathologists were added as eligible distant site providers permanently for services furnished on or after January 1, 2024, as per the Consolidated Appropriations Act, 2023. (Source: CMS.gov)

Credentialing Standards for Telehealth

While Medicare enrollment is a prerequisite for billing, credentialing refers to the process of obtaining, verifying, and assessing the qualifications of a healthcare practitioner. For telehealth services, CMS maintains rigorous standards that often align with those for in-person care, with some specific considerations for the virtual environment.

State Licensure

One of the most critical aspects of credentialing for telehealth is state licensure. CMS requires that providers delivering telehealth services be licensed in the state where the patient is located at the time of the service. This is distinct from the state where the provider is physically located, unless those states are the same. This requirement is a cornerstone of ensuring patient safety and adherence to state practice acts. (Source: CMS.gov)

During the COVID-19 Public Health Emergency (PHE), many states and CMS offered temporary waivers or flexibilities regarding interstate licensure. However, most of these flexibilities have expired, and providers must now adhere to pre-PHE interstate licensure rules. This means a provider practicing telehealth across state lines must hold valid licenses in each state where their patients reside, or operate under specific interstate compacts (e.g., Nurse Licensure Compact, Interstate Medical Licensure Compact) if applicable and recognized by the patient's state.

Delegated Credentialing and Privileging

For hospitals and critical access hospitals (CAHs), CMS offers a flexibility known as delegated credentialing and privileging for distant site telehealth providers. This allows the hospital or CAH to grant privileges to a distant site practitioner based on the credentialing and privileging decisions of the distant site hospital or telehealth entity. This process streamlines the administrative burden but comes with strict requirements:

• The distant site hospital or telehealth entity must be a Medicare-participating hospital or CAH, or a distant site telehealth entity that provides its services through an agreement with a Medicare-participating hospital or CAH.
• The hospital or CAH must ensure that the distant site practitioner is privileged at the distant site. This means the distant site entity has already performed the necessary credentialing checks.
• The hospital or CAH must have a written agreement with the distant site entity that specifies the delegated responsibilities.
• The hospital or CAH must conduct an annual appraisal of the distant site entity's credentialing and privileging process. (Source: 42 CFR § 482.12(a)(9) and 42 CFR § 485.616(c))

This delegated process is particularly relevant for telehealth companies that contract with hospitals or health systems, as it can simplify the process of bringing new telehealth providers onto their platforms while maintaining compliance with hospital privileging requirements.

Ongoing Compliance and Reporting Requirements

Medicare enrollment is not a one-time event. Providers and healthcare organizations have ongoing obligations to maintain their enrollment and report changes to CMS. Failure to do so can lead to payment suspensions, revocations, or other enforcement actions.

Revalidation

CMS requires all enrolled providers and suppliers to revalidate their Medicare enrollment information periodically. This process ensures that the information on file is current and accurate. Revalidation cycles vary but are typically every 3-5 years. Providers are notified by CMS when their revalidation is due. (Source: CMS.gov)

Reporting Changes

Providers must report any changes to their enrollment information to CMS within 30 days for most changes, and within 90 days for changes of ownership. This includes changes in practice location, legal business name, tax identification number, adverse legal actions (e.g., license suspension, felony convictions), or changes in managing employees. Timely reporting is crucial for maintaining active enrollment and avoiding penalties. (Source: 42 CFR § 424.516)

Impact of the COVID-19 PHE on Telehealth Enrollment and Credentialing

During the COVID-19 Public Health Emergency (PHE), CMS implemented numerous temporary waivers and flexibilities to expand access to telehealth services. While many of these have expired, some have been made permanent or extended. It is crucial for providers to understand which flexibilities are no longer in effect and which have transitioned into permanent policy.

Key Changes Post-PHE (as of early 2024):

• Originating Site Restrictions: Most originating site restrictions for telehealth were waived during the PHE, allowing patients to receive telehealth services in their homes. The Consolidated Appropriations Act, 2023, extended this flexibility through December 31, 2024. After this, originating site requirements may revert to pre-PHE rules unless further legislative action is taken. (Source: CMS.gov)
• Eligible Distant Site Practitioners: As noted, the list of eligible distant site practitioners has been expanded permanently to include physical therapists, occupational therapists, and speech-language pathologists.
• Interstate Licensure: Most federal waivers regarding interstate licensure have expired. Providers must adhere to state-specific licensure laws for the patient's location.
• Enrollment Flexibilities: Temporary enrollment flexibilities, such as expedited enrollment or provisional enrollment for out-of-state providers, have largely ended. Providers must now follow standard Medicare enrollment processes.

Conclusion

CMS requirements for telehealth provider credentialing and Medicare enrollment are designed to ensure the quality and integrity of services delivered to Medicare beneficiaries. For any healthcare business engaged in telehealth, meticulous attention to these regulations is non-negotiable. This includes ensuring all practitioners are properly licensed in the patient's state, enrolled with Medicare, and that all enrollment information is kept current. Proactive compliance with these federal mandates is essential for successful and sustainable telehealth operations within the Medicare program.