Privileging in healthcare is the process by which a hospital or healthcare facility authorizes a specific provider to perform specific clinical services. It determines not just whether a doctor, nurse practitioner, or other clinician can work at a facility, but exactly which procedures and treatments they’re approved to deliver. Every hospital that participates in Medicare is required to have a formal privileging system, and privileges must be reviewed at least every three years.
How Privileging Works
When a clinician joins a hospital’s medical staff, the facility doesn’t simply hand them a badge and let them practice however they see fit. Privileging creates a defined scope: a list of patient care services and clinical procedures that provider has been approved to perform at that particular institution. A general surgeon might be privileged to perform appendectomies and hernia repairs at one hospital but not cardiac procedures, even if their training technically covered cardiac surgery. The privileges reflect what the facility can support, what the provider has demonstrated competence in, and what the institution’s leadership has formally approved.
The hospital’s governing body, typically its board of directors, holds the ultimate authority to grant, deny, or revoke privileges. Medical staff committees review applications, evaluate qualifications, and make recommendations, but the final decision sits with hospital leadership. This structure exists because hospitals bear a direct legal duty to ensure the clinicians practicing within their walls are qualified for the services they provide.
Privileging vs. Credentialing
These two terms often appear together and are easy to confuse, but they answer different questions. Credentialing asks: does this provider meet our baseline requirements to join the medical staff? It verifies training, board certification, licensure, and malpractice history. Think of it as checking someone’s résumé and references.
Privileging comes next and asks a more specific question: what exactly should this provider be allowed to do here? It evaluates a clinician’s actual skills, behavior, and procedural competence within the context of that particular institution. A provider could be fully credentialed (all qualifications verified) but receive only a limited set of privileges based on what the facility offers or what the provider has demonstrated the ability to do safely. A rural hospital, for instance, might credential an orthopedic surgeon but only privilege them for common fracture repairs rather than complex joint replacements the facility isn’t equipped to support.
Types of Privileges
- Core privileges cover the standard procedures and services expected within a provider’s specialty. A family medicine physician’s core privileges might include routine physical exams, managing chronic conditions, and performing minor office procedures.
- Special or additional privileges go beyond the core set and require extra documentation of training or competence. A hospitalist requesting permission to perform bedside ultrasound-guided procedures would apply for a special privilege.
- Temporary privileges allow a provider to deliver care at a facility for a limited time. These are common for locum tenens providers (traveling clinicians filling short-term gaps) and still require a formal application and background check each time.
- Disaster or emergency privileges can be granted during declared emergencies when a facility needs additional clinical capacity quickly. The verification process is streamlined but not eliminated.
The Role of the National Practitioner Data Bank
Federal law requires hospitals to query a national database called the National Practitioner Data Bank (NPDB) during the privileging process. This database tracks malpractice payments, licensure actions, and other disciplinary events tied to individual clinicians. Hospitals must query the NPDB every time a provider applies for staff membership, clinical privileges, or temporary privileges. They must also run a query every two years on every clinician already on staff.
The requirements are strict. If a locum tenens provider applies for temporary privileges four times in one year, the hospital must query the NPDB on each of those four occasions. If a provider wants to expand their existing privileges to include new procedures, that also triggers a mandatory query. The system is designed to prevent a clinician with a problematic history at one institution from quietly moving to another without detection.
How Providers Are Monitored After Privileges Are Granted
Granting privileges isn’t a one-time event. Hospitals use two ongoing evaluation systems to ensure providers continue to meet standards. The first is Ongoing Professional Practice Evaluation (OPPE), a continuous, data-driven review that tracks trends in every privileged provider’s clinical performance. OPPE uses both quantitative data (complication rates, patient outcomes, procedure volume) and qualitative information to flag potential problems early. It applies to all practitioners who hold privileges.
When OPPE identifies a concern, or when a provider first receives new privileges, the facility implements a Focused Professional Practice Evaluation (FPPE). This is a more intensive, time-limited review of a specific area of practice. FPPE also kicks in reactively when a “red flag” event occurs, such as an unexpected patient outcome or a complaint about a provider’s competence. Based on the results, the hospital can continue privileges as they stand, require additional monitoring, limit the scope of privileges, or revoke them entirely.
Re-Privileging Every Three Years
The Joint Commission, the organization that accredits most U.S. hospitals, requires re-privileging no later than every three years from the date of the previous appointment. State law may require a shorter cycle. During re-privileging, the hospital reviews the provider’s OPPE data, any FPPE results, current licensure, malpractice history, and NPDB query results before deciding whether to renew, modify, or deny privileges for the next cycle. The governing body approves these renewal periods in advance of their expiration, so there’s no gap in a provider’s authorization to practice.
What Happens When Privileging Goes Wrong
Hospitals that fail to properly vet or monitor their providers face a legal theory called negligent credentialing (which encompasses negligent privileging). If a patient is harmed by a clinician who had a documented history of incompetence or questionable conduct, the hospital itself can be held liable, not just the individual provider. This is significant because many physicians operate as independent contractors, which would normally shield the hospital from responsibility for their actions. Negligent credentialing cuts through that shield by arguing the hospital breached its own duty to patients.
To succeed with this claim, a plaintiff must show that the hospital had a duty to select and retain competent physicians, that the hospital failed to adequately investigate or ignored what its investigation uncovered, that the provider was negligent in treating the patient, and that the negligent treatment happened at that hospital. Courts have described this as a “non-delegable duty,” meaning hospitals cannot avoid responsibility by leaving the credentialing and privileging process entirely to their medical staff committees without institutional oversight.
This legal framework is one of the key reasons privileging standards are so detailed and heavily regulated. For hospitals, getting privileging right isn’t just an administrative task. It’s a core patient safety obligation with real financial and legal consequences when it breaks down.