Hospital credentialing is the process a healthcare organization uses to verify that a doctor, nurse practitioner, or other clinician is qualified to treat patients at that facility. It involves confirming a provider’s education, training, licensure, board certifications, and professional history before they’re allowed to practice. The process typically takes 90 to 120 days, though it can stretch to 180 days or longer depending on the complexity of the application.
If you’ve encountered this term because you’re a new provider navigating the system, a practice manager handling paperwork, or a patient wondering how hospitals vet their doctors, here’s how the whole process works.
What Gets Verified
Credentialing is essentially a background investigation into a clinician’s professional qualifications. Hospitals don’t just take a provider’s word for it. They go directly to the original sources to confirm key credentials, a practice known as primary source verification. That means contacting medical schools for proof of graduation, reaching out to state licensing boards to confirm an active license, and checking with specialty boards to verify certifications.
The specific items hospitals verify include:
- Medical education and training: graduation from medical, dental, or other clinical professional school, plus residency and fellowship completion
- State licensure: current and valid license to practice in the relevant state
- Board certification: specialty training and examination status
- DEA registration: authorization to prescribe controlled substances
- Work history and prior employment
- Malpractice claims history
- Criminal background check
- Peer references and supervisor evaluations that speak to clinical competency and professional character
Hospitals are the only healthcare entities required by federal law to query the National Practitioner Data Bank, a federal repository that tracks malpractice payments, license actions, and other disciplinary events tied to individual providers. This query is mandatory at the time of initial application and again every two years for every provider on the medical staff.
Credentialing vs. Privileging
These two terms often appear together, but they refer to different steps. Credentialing confirms who a provider is and whether their qualifications are legitimate. Privileging determines what that provider is actually allowed to do at a specific facility.
A surgeon, for example, might be fully credentialed at a hospital, meaning all education, licensure, and background checks are confirmed. But privileging is where the hospital decides which specific procedures that surgeon can perform there. The surgeon applies for privileges by submitting procedure logs, records of proctored cases, and documentation of specialty training. A credentialing committee then reviews the evidence and grants or limits privileges based on demonstrated competency.
This distinction matters because a provider credentialed at one hospital doesn’t automatically get the same scope of practice at another. Each facility makes its own privileging decisions based on its resources, patient population, and the provider’s individual track record.
What Providers Need to Prepare
If you’re a clinician going through credentialing for the first time, the paperwork is substantial. The American Academy of Family Physicians recommends gathering copies of these documents before you start:
- State medical license(s)
- Board certification documentation
- DEA and Controlled Dangerous Substances certificates
- Malpractice liability certificate
- Letters of recommendation from instructors, preceptors, or clinical supervisors
- Current CV in the hospital’s required format
- Photo ID (driver’s license or passport)
- NPI number and other identification numbers (Medicare, Medicaid)
- IRS Form W-9
When you sign the application, you’re also authorizing the hospital to contact your references and past employers about your competence, character, and any professional liability actions. Incomplete submissions are the most common reason credentialing drags past the typical 90 to 120 day window, so having everything organized upfront saves significant time.
How the Review Process Works
Once a provider submits their application, the hospital’s credentialing staff begins the verification process. They contact schools, licensing boards, previous employers, and references. They run the National Practitioner Data Bank query and criminal background check. All of this documentation is compiled into a file.
That file then goes to a designated credentialing committee, typically made up of physicians and administrators who review the provider’s qualifications and make a recommendation. The final decision usually requires approval from the hospital’s governing board. Throughout the provider’s tenure at the facility, the hospital continues monitoring for sanctions, complaints, and quality issues between recredentialing cycles, which occur every two years.
Why Credentialing Carries Legal Weight
Credentialing isn’t just an administrative formality. Hospitals have a legal duty to hire and retain qualified, competent, and safe clinicians. When a hospital fails to fulfill that duty with reasonable diligence, it’s called negligent credentialing, and more than 27 states recognize it as grounds for a lawsuit.
Here’s how it plays out in practice: if a provider harms a patient through negligent care, and the hospital failed to properly vet that provider’s qualifications, the patient can sue both the provider and the hospital. Courts generally require that medical malpractice must first exist, meaning a provider must have actually harmed a patient, before the hospital’s credentialing failure becomes legally actionable. But once that threshold is met, the hospital faces liability for its role in allowing an unqualified clinician to practice.
This legal framework is what gives credentialing its teeth. It creates a direct financial and legal incentive for hospitals to take the verification process seriously rather than rubber-stamping applications. The credentialing committee, the primary source verification requirements, the mandatory data bank queries: all of these safeguards exist because courts have held hospitals accountable when they skip steps and patients get hurt.
Accreditation Standards
Beyond federal requirements, hospitals also follow credentialing standards set by accrediting organizations. The National Committee for Quality Assurance (NCQA) sets widely recognized benchmarks that cover credential verification through primary sources, a peer review process, protection of credentialing information, and ongoing monitoring of sanctions and complaints. Hospitals seeking or maintaining accreditation must demonstrate compliance with these standards, which overlap with but sometimes exceed federal minimums.
The Joint Commission, which accredits most U.S. hospitals, has its own parallel set of credentialing requirements. Meeting these standards is what allows hospitals to participate in Medicare and Medicaid programs, making credentialing compliance a financial necessity as well as a patient safety measure.