Standards

Accreditation overview

Plain-language overviews of how the major accreditors approach credentialing. These are our own summaries, not standards text. Standards are copyrighted, so always use the accreditor's current official publication.

Accreditors

Reminder: Standards change every year. Use your organization's licensed copy of the current manual for exact requirements, timelines and element-of-performance wording.

FPPE, proctoring & temporary privileges

Focused professional practice evaluation (FPPE)

FPPE is a time-limited review of a practitioner's performance when they get new privileges. The Joint Commission's FAQs say:

  • FPPE is required for all newly requested privileges. Board certification or years of experience don't exempt anyone.
  • The medical staff defines the process ahead of time: the criteria for monitoring, the monitoring method, how long it lasts, and when outside monitoring is needed.
  • FPPE starts when privileges are granted, including temporary privileges.

Proctoring is one way to do FPPE: an assigned practitioner observes or reviews cases. Your medical staff picks the methods, such as chart review, direct observation or proctoring (general practice). Our Privileging Request Form Outline has a focused evaluation and proctoring section.

Temporary privileges

TJC's FAQ allows temporary privileges in only two situations, and your bylaws must describe both:

  1. An important patient care, treatment or service need. Document the need in the file when you grant the privileges, usually as a recommendation from the medical staff president to the CEO. A late reappointment isn't a patient care need by itself.
  2. A new applicant whose application is complete and raises no concerns, while it waits for medical executive committee and governing body approval. These privileges can last no more than 120 consecutive days.

Example from TJC: privileges granted July 1 with a governing body meeting on Sept 15 means FPPE starts July 1.

Verification time limits (180 / 120 days)

Verifications go stale. NAMSS's Industry Credentialing Standards (voluntary) recommend primary-source verifying all 13 of its credentialing criteria within 180 days before the credentialing decision. If a file sits too long before committee, re-verify the older items.
NCQA is stricter: 120 days. For NCQA Credentialing Accreditation and NCQA health plan accreditation, most primary-source verifications must be no more than 120 days old at the credentialing decision. That includes board certification, malpractice history, state licensing sanctions, and Medicare/Medicaid sanctions and exclusions. Work history and the signed application attestation can be up to 180 days old. For NCQA Credentialing Certification (the program for verification organizations, formerly CVO Certification), most limits are 90 days (120 days for work history and the attestation). These limits apply to files processed on or after July 1, 2025. NCQA credentialing guide (PDF) (opens in new tab) · NCQA 2025 standards update slides (PDF) (opens in new tab) · NCQA 2025 policy updates (PDF) (opens in new tab)
NCQA ongoing monitoring (2025–2026).
  • Frequency: review sanctions, exclusions, limitations and expiration information at least monthly, or within 30 calendar days of a new alert if you use a monitoring service. On Sept 15, 2025 NCQA retracted its July 2025 “every 30 calendar days” wording.
  • Adverse events: monitor them for all practitioners. Limiting it to primary care and high-volume behavioral health is no longer acceptable (2025 standards on).
  • Medicaid sources: since Oct 15, 2025 the state Medicaid agency is an optional source. For sanctions, NCQA lists the AMA Physician Master File, FSMB, NPDB and SAM.gov. For exclusions, it lists the OIG LEIE and NPDB.
  • 2026 CR-PN change (Mar 30, 2026): monitor licensure sanctions and limitations in every state where the practitioner practices, even outside your service area. Check NCQA for which files and survey dates it applies to.
NCQA FAQs (opens in new tab) · NCQA 2026 CR-PN policy updates (PDF) (opens in new tab) · NCQA 2025 HPA policy updates (PDF) (opens in new tab)

Accreditors set their own time limits, and they may differ by item. Check your accreditor's current standards and write your limit into policy. A practical habit (general practice): record the verification date on every item, and before the file goes to committee, re-check anything that will be past your limit on the decision date.

Photo ID, signed release & committee approval

Government-issued photo ID

NAMSS recommends confirming identity with a government-issued photo ID (such as a driver's license or passport), in person or virtually, before the practitioner provides patient care. NAMSS says a copy of the ID should not be taken or kept in the file, because of identity theft risk. Record who checked it and when instead.

Signed release & attestation

Get a signed, dated authorization and release before you ask other organizations for information, and a signed attestation that the application is correct and complete. Facilities, schools and references often won't answer without the release. Our attestation questionnaire and request letters assume one is attached (general practice).

Committee & governing body approval

For Medicare hospitals, 42 CFR 482.22(a)(2) says the medical staff examines each candidate's credentials and recommends to the governing body, which makes the appointment. Document each step with dates: department review, credentials committee, medical executive committee and governing body. Read 42 CFR 482.22 (opens in new tab)

Matching privileges to case logs

NAMSS recommends sending each reference a copy of the privileges requested and asking them to recommend them. Our Peer Reference Request does this. Many organizations also check each privilege requested against evidence of current competence (general practice, check your bylaws and department criteria):

  • Compare the delineation of privileges with case or procedure logs, training letters and recent activity, especially for special (non-core) procedures.
  • Look for the volume or recency your department's criteria require.
  • Don't grant what isn't supported. Flag gaps for the department chair, or plan FPPE or proctoring for them.

Medicare Practitioner Acknowledgment

Under 42 CFR 412.46, a hospital paid under Medicare's inpatient prospective payment system must have each physician sign and date an acknowledgment that they received the notice of penalties for misrepresenting or falsifying information. The physician signs it when granted admitting privileges, or before or at the first admission, and it stays in effect for as long as they hold admitting privileges. Keep it in the credentials file. Read 42 CFR 412.46 (opens in new tab)

Joint Commission 2026 renumbering (Accreditation 360)

New numbers since Jan 1, 2026. Under Accreditation 360, TJC renumbered every standard and element of performance (EP) in the hospital and critical access hospital Medical Staff (MS), Human Resources (HR) and Leadership (LD) chapters. TJC says no new concepts were added and expectations are unchanged. Some requirements moved to a new National Performance Goal (NPG) chapter.
Topic2026 standard
Bylaws; bylaw amendments; multihospital systemMS.14.01.01; MS.14.02.01; MS.14.03.01
Medical staff executive committeeMS.15.01.01
Oversight of patient careMS.16.01.01
Credentialing: necessary resources; supporting informationMS.17.01.01; MS.17.01.03
Privileging: planning & procedures; decision processMS.17.02.01; MS.17.02.03
Expedited approvalMS.17.03.01
Temporary privilegesMS.17.04.01
Peer recommendationsMS.18.01.01
Criteria & triggers for evaluating performance (FPPE)MS.18.02.01
OPPEMS.18.02.03
Investigating clinical practice concerns; fair hearing & appeal; individual healthMS.18.03.01; MS.18.04.01; MS.18.05.01
Continuing educationMS.19.01.01
TelemedicineMS.20.01.01 EP 1; MS.20.01.03 EPs 1–2; LD.13.03.03 EPs 3 & 6
Verification of credentials (primary source verification is EP 3)HR.11.01.03
Staff qualifications; education & training; competenceHR.11.02.01; HR.11.03.01; HR.11.04.01
Contractual agreementsLD.13.03.03
Disaster privilegesNPG.03.02.03 (per TJC FAQ 000001080)

Sources: TJC Medical Staff chapter webinar slides (PDF) (opens in new tab) · TJC HR & Leadership webinar transcript (PDF) (opens in new tab) · TJC Accreditation 360 (opens in new tab) (blocks automated checks; found by search). Old-to-new crosswalks are on TJC's free public standards pages. Not confirmed: 2026 HR numbers for contracted and volunteer staff, and EP-level wording (paid manual). Use your licensed manual for those.

OPPE & expedited credentialing

Ongoing professional practice evaluation (OPPE)

Under 42 CFR 482.22(a)(1), the medical staff must periodically appraise its members. TJC handles ongoing evaluation in OPPE (MS.18.02.03 in 2026). The concept: collect practitioner-specific performance data on an ongoing basis, and use it to decide whether to keep, limit or revoke privileges. FPPE (MS.18.02.01) covers new privileges and concerns raised by triggers.

How often to review OPPE data, which indicators to use, and the thresholds are set by your medical staff (general practice; check your manual for exact requirements).

Expedited credentialing

TJC lists expedited approval as its own standard (MS.17.03.01 in 2026). In general practice, it lets a governing-body committee approve clean applications that meet criteria set in the bylaws. Confirm the exact conditions in your licensed manual (EP-level detail is not confirmed here).

To audit a provider file for credentialing, OPPE and FPPE elements, use our Joint Commission Provider Checklist (fillable PDF and Word).

ReferencePDFWord

Joint Commission & Bylaws Verification Crosswalk

Credentialing Verification Process and Requirements for Licensed Independent Practitioners and Dependent Practitioners

A reference grid of 24 credentialing items. For each item it lists the method of verification, the TJC/CMS reference, and whether verification is required for initial appointment, abbreviated initial application, reappointment, update as expires, addition of privilege, temporary privileges and return from LOA. Adapt it to your own bylaws and policies.

Reference, not legal advice

Telemedicine credentialing by proxy (CMS)

Hospitals: 482.22(a)(3)–(4)

Instead of the usual (a)(1)–(a)(2) process, the governing body may let its medical staff rely on the credentialing and privileging decisions of a distant-site hospital or distant-site telemedicine entity. Conditions: there is a written agreement; the distant site is Medicare-participating (hospital) or meets the CMS standards (entity); the practitioner is privileged there and you get a current privileges list; the practitioner is licensed or recognized in your state; and you send the distant site performance information, at minimum all adverse events and complaints. 42 CFR 482.22 (opens in new tab)

Critical access hospitals: 485.616(c)

CAHs have parallel rules: a written agreement making the distant-site hospital or entity responsible for meeting the listed credentialing requirements. 42 CFR 485.616 (opens in new tab)

CMS guidance & TJC

CMS memo S&C 11-32 explains the 2011 telemedicine rules. TJC puts telemedicine at MS.20.01.01 and MS.20.01.03, with contract requirements at LD.13.03.03 (2026 numbering). CMS S&C 11-32 (PDF) (opens in new tab)

eCFR pages checked in a browser Oct 31, 2026. We found no 2024–2026 rule changing these provisions; check eCFR for the current text.

Disaster privileges

TJC (NPG.03.02.03 in 2026). TJC's FAQ says:
  • Disaster privileges can be granted to volunteer physicians and other licensed practitioners only when the Emergency Operations Plan is activated.
  • Before granting them, get a valid government-issued photo ID plus at least one listed item, such as a current license, a health care organization ID showing professional designation, primary source verification of licensure, DMAT/MRC/ESAR-VHP membership, or confirmation by a currently privileged practitioner.
  • Primary source verification of licensure happens as soon as the disaster is under control, or within 72 hours of the volunteer's arrival, whichever comes first.
  • The medical staff oversees each volunteer, and within 72 hours of arrival the hospital decides whether the privileges should continue.
  • Privileges are granted by the person or people named in the medical staff bylaws.
TJC FAQ: granting privileges during a disaster (opens in new tab) (blocks automated checks; found by search Oct 31, 2026)

For CMS, check your hospital's emergency preparedness requirements (42 CFR 482.15) and any 1135 waivers in effect.

Delegated credentialing

NCQA. NCQA's credentialing guide says that when an organization delegates credentialing, NCQA holds the delegating organization responsible and expects it to oversee the delegate. NCQA evaluates both the delegate's performance and the organization's oversight. The guide's keys to success:
  • Evaluate the delegate's capacity before signing.
  • Have a signed, dated agreement that spells out each side's responsibilities.
  • Get regular reports and analyze them.
  • Do a formal annual assessment.
  • Follow up with corrective action.
Exact factors are in the paid standards. NCQA credentialing guide (PDF) (opens in new tab)

Hospitals use written agreements for telemedicine (see above) and for contracted services (TJC LD.13.03.03). Use our Delegated Credentialing Audit Checklist for annual oversight (general practice).

Peer review & bylaws

Bylaws (CMS)

Under 42 CFR 482.22(c), medical staff bylaws must:

  • be approved by the governing body;
  • state the duties and privileges of each staff category;
  • describe the medical staff's organization;
  • describe the qualifications for appointment;
  • include history and physical requirements;
  • include criteria for granting privileges and a procedure for applying them.

TJC's 2026 bylaws standards are MS.14.01.01 and MS.14.02.01.

Peer review

TJC's 2026 chapter covers peer recommendations (MS.18.01.01), investigating clinical practice concerns (MS.18.03.01), and fair hearing and appeal (MS.18.04.01). How your organization structures peer review, such as committees, referral triggers and outside review, is set by your bylaws and policies (general practice).

Accreditor comparison

AccreditorMain settings (credentialing-related)Current standards editionReappointment / recredentialing cycleFree resource
The Joint CommissionHospitals, CAHs and many other settingsAccreditation 360 manual, effective Jan 1, 2026See standards manualStandards FAQs; public standards & crosswalks
DNV (NIAHO)HospitalsNIAHO Revision 25-1 (Updated), effective Sept 8, 2025See standards manualFree standards download (opens in new tab)
ACHCHospitals and other programsSee standards manualSee standards manualACHC hospital accreditation (opens in new tab)
CIHQAcute care hospitalsSee standards manualSee standards manualCIHQ hospital accreditation (opens in new tab)
AAAHCAmbulatory carev44; v45 released Aug 18, 2026 (check AAAHC for the survey effective date)See standards manualv45 announcement (opens in new tab)
NCQAHealth plans, credentialing organizations, CVOs2026 CR-PN Standards (check NCQA for effective dates)See standards manualCredentialing guide (PDF) (opens in new tab)
URACCVOs, health plansCVO v5.0; Health Plan v8.1See standards manualCVO v5.0 Standards at a Glance (PDF) (opens in new tab)

TJC, DNV, ACHC and CIHQ hold CMS deeming authority for hospitals, per each accreditor's site. "See standards manual" means we haven't confirmed it from a free official source.

Free official resources & survey readiness

Survey readiness (general practice): pull a sample of files and check them against your current manual's numbering, verification dates, required approvals and FPPE/OPPE documentation before the survey window.