Change of Information Filings for Medicare Providers: A Strategic Guide

For healthcare practice administrators and solo practitioners, maintaining an active and accurate Medicare enrollment is not a "set it and forget it" task. While the initial credentialing process is often viewed as the most significant hurdle, the ongoing maintenance—specifically Change of Information (COI) filings—is where many practices face operational disruptions.

Failing to report changes to the Centers for Medicare & Medicaid Services (CMS) within the mandated timeframes can lead to deactivated billing privileges, rejected claims, and even the loss of your Medicare provider agreement. Understanding the nuances of the PECOS system and the specific 855 forms is critical to ensuring uninterrupted revenue cycles.

Why Change of Information Filings Matter

Medicare operates on a foundation of data integrity. CMS must know exactly who is providing care, where they are providing it, and where the payments are being sent. A Change of Information filing is the formal mechanism used to update any data element currently on file in the Provider Enrollment, Chain, and Ownership System (PECOS).

When information becomes outdated—such as a change in your practice’s physical location or a new bank account for electronic funds transfers (EFT)—the discrepancy triggers a red flag. At best, this results in a "development request" from your Medicare Administrative Contractor (MAC), delaying payments. At worst, it can lead to a revocation of billing privileges for "non-compliance with enrollment requirements."

Mandatory Reporting Timeframes

CMS is strict regarding how quickly a provider must report updates. These timeframes are generally divided into two categories:

The 30-Day Rule

Certain high-priority changes must be reported within 30 days of the change occurring. These include:

• Changes in ownership or control (particularly for institutional providers).
• Any change in "adverse legal action" (e.g., license suspensions, debarments, or exclusions).
• Changes in practice location (this includes the addition of a new site or the closure of an old one).

The 90-Day Rule

Most other changes must be reported within 90 days. This includes:

• Contact information and "Special Payments" address.
• Changes in the Authorized or Delegated Official for a group practice.
• Updates to organizational structure that do not constitute a full change of ownership.

Common Triggers for a Change of Information Filing

1. Relocation or Adding New Sites

Moving your practice is more than just a logistical challenge; it is a credentialing event. If you move to a new suite or open a satellite office, you must update your enrollment to reflect the new service location. If the MAC sends a site inspector to your listed address and finds it vacant, they may move to terminate your billing privileges immediately.

2. Banking and EFT Updates (CMS-588)

Changing banks is a common cause of payment "blackouts." When updating your financial information, you must submit the CMS-588 form. It is a best practice to keep your old bank account open until you have confirmed that the first Medicare payment has successfully landed in the new account.

3. Changes in Reassignment of Benefits (CMS-855R)

If your practice hires a new physician or a provider leaves the group, you must manage the reassignment of benefits. While adding a provider requires an 855R, terminating the reassignment when a provider leaves is equally important to protect the group from liability and ensure the provider can link their NPI to a new employer.

4. Updates to Ownership and Managing Control

Medicare requires full transparency regarding who owns or exerts "managing control" over a healthcare entity. If your practice brings on a new partner or a professional corporation changes its board of directors, these individuals must be reported via the 855B (for groups) or 855A (for institutional providers).

Methods of Filing: PECOS vs. Paper Forms

There are two primary ways to file a Change of Information:

The PECOS Web Portal

The Provider Enrollment, Chain, and Ownership System (PECOS) is the preferred method for most filings.

• Pros: Faster processing times (often 45 days or less), real-time validation of data, and the ability to upload digital signatures.
• Cons: The interface is notoriously complex and requires a secure I&A (Identity & Access) account.

Paper 855 Forms

You can still submit changes via physical mail using the 855I (Individuals), 855B (Groups), or 855A (Institutional) forms.

• Pros: Useful for complex ownership structures where digital signatures are difficult to coordinate.
• Cons: Significantly longer processing times (often 60–90 days) and higher risk of clerical errors or lost mail.

Navigating the "Interim" Period

One of the greatest challenges during a Change of Information filing is the "interim" period—the time between when the change occurs and when the MAC approves the update.

For example, if you move locations on June 1st but your filing isn't approved until July 15th, claims submitted with the new address may be rejected because they don't match the "legacy" data in the system. To mitigate this risk, providers should file the Change of Information as soon as a "prospectively certain" date for the change is established, rather than waiting until the move is complete.

The Role of Revalidation

It is important to distinguish between a voluntary Change of Information filing and a Medicare Revalidation. Every five years (or three years for DMEPOS suppliers), Medicare requires providers to re-verify their entire enrollment record.

However, you should not wait for your revalidation cycle to report changes. If you attempt to update three years' worth of address and ownership changes during a revalidation, the complexity of the filing increases exponentially, often leading to months of back-and-forth with the MAC.

Best Practices for Practice Managers

To maintain compliance and protect your cash flow, follow these organizational protocols:

1. Conduct Quarterly Audits: Every 90 days, review your PECOS profile to ensure the "Correspondence Address" and "Special Payments Address" are current.
2. Centralize I&A Access: Ensure that more than one person in the organization has "Authorized Official" or "Credentialing Coordinator" access in the Identity & Access Management system. If your only administrator leaves, regaining access to PECOS can take weeks.
3. Document Everything: Keep copies of submitted 855 forms and screenshots of PECOS submission confirmation pages. MACs occasionally lose data, and having a paper trail is your only defense.
4. Monitor Your MAC's Portal: Most MACs (such as Novitas, Palmetto, or NGS) have their own portals where you can track the status of a pending enrollment application. Check this weekly until the status moves to "Approved."

Conclusion

Medicare Change of Information filings are an administrative burden, but they are also a critical component of risk management. By treating the PECOS record as a "living document" and adhering to the 30 and 90-day reporting windows, you ensure that your practice remains in good standing and that payments continue to flow without interruption.

If the complexity of PECOS or the specific requirements of the 855 forms feel overwhelming, partnering with a professional credentialing service can provide the expertise needed to navigate these filings accurately and efficiently.

Key Takeaways

• Priority Updates: Report changes in location or adverse legal actions within 30 days.
• Standard Updates: Report banking, ownership, or official changes within 90 days.
• EFT Caution: Keep old bank accounts open until the CMS-588 update is fully processed.
• PECOS Efficiency: Use the web-based PECOS system for faster approval times compared to paper forms.
• Risk Mitigation: Unreported changes can lead to deactivation of billing privileges and loss of revenue.
• Continuous Monitoring: Audit your Medicare enrollment record quarterly to prevent revalidation surprises.