The NPDB and credentialing — what the National Practitioner Data Bank checks and when it matters

The short answer: The NPDB tracks malpractice payments and adverse actions against licenses, clinical privileges, and DEA registrations. Every serious credentialing checkpoint queries it. Run a self-query before applications go out — knowing what’s in the file beats discovering it in committee review.

The National Practitioner Data Bank is queried at every major credentialing checkpoint. Hospital credentialing. Payer enrollment. State licensing. Medicare enrollment. Every organization doing serious credentialing work pulls an NPDB query — and what that query returns shapes what happens next.

Most providers pass these queries without incident. But for providers who have a report in the database — or who don’t know whether they do — the NPDB is the single most important file to understand before applications go out.

What the NPDB actually tracks

The NPDB is a federal database administered by HRSA (Health Resources and Services Administration). It collects reports from:

Malpractice payers. Any payment made on behalf of a licensed health care practitioner in settlement of, or in satisfaction of, a written claim or judgment for malpractice must be reported. The threshold is one dollar — there is no minimum payment floor. If the carrier paid, it was reported.

Hospitals and other health care entities. Any adverse action taken against a practitioner’s clinical privileges — reduction, restriction, suspension, revocation, or voluntary surrender during a pending investigation — must be reported. “Voluntary surrender” is a common trip wire: a provider who surrenders privileges while under review is treated the same as a provider who had privileges revoked.

Medical licensing boards. Any adverse action taken against a state medical license — reprimand, probation, suspension, revocation — must be reported.

DEA. Surrenders or revocations of DEA registration are reported.

Medicare/Medicaid exclusion. OIG exclusion actions are reported and are also visible in the OIG exclusion database independently.

Judgments and convictions. Civil judgments and criminal convictions related to health care delivery are reported.

The database does not track everything. A complaint to a medical board that was investigated and dismissed without action does not generate an NPDB report. A malpractice suit that was litigated and won by the provider does not generate a report. Only the defined reportable events above appear in the database.

Who can query the NPDB

Not everyone can query. The NPDB authorizes queries by:

• Hospitals (mandatory at initial privileging and every two years thereafter for reappointment)
• Other health care entities with formal peer review processes
• State licensing boards
• State agencies
• Federal agencies (including CMS for Medicare enrollment)
• Plaintiffs’ attorneys (limited self-query only)
• Providers (self-query, available to any licensed practitioner)

Private insurance payers do not have direct NPDB query access. However, many commercial payers require providers to disclose malpractice history in their applications, and the application is then cross-checked against state court records and the payer’s own data sources. The effect is similar.

What a report means in a credentialing context

A report in the NPDB does not automatically disqualify a provider from hospital privileges, payer enrollment, or state licensure. What the report does is create a disclosure and documentation obligation that, if handled well, can be managed through any credentialing process — and if handled poorly, can stop an application cold.

The three things that matter when a report exists:

1. Disclosure consistency. The credentialing application will ask about malpractice history, adverse privilege actions, and license actions. The answers on the application need to match what the NPDB query returns. A discrepancy — even a technical one, even an inadvertent omission — is treated as a material misrepresentation. That creates a credentialing problem independent of whatever the underlying report says.

2. Documentation depth. Every report needs a narrative. For a malpractice payment, the narrative covers: what the patient alleged, what the clinical facts were, why the carrier chose settlement, and what — if anything — changed in the provider’s practice as a result. Generic responses (“the case was settled without admission of liability”) are noted and often followed up. Specific, honest narratives move through committee faster.

3. Pattern versus isolated event. A single malpractice payment from 12 years ago on a complex case is processed differently than three payments in five years across multiple facilities. Credentials committees assess pattern. Providers with multiple reports need to be able to explain the context of each one and demonstrate that they represent isolated events, not ongoing risk.

The self-query every provider should run before applying

The NPDB provides a self-query tool at npdb.hrsa.gov. Any licensed practitioner can query their own record. The result is typically returned within 24 hours.

Every provider should run a self-query before any new application goes out — to a hospital, to a payer, to a state licensing board, or to Medicare. The cost is nominal. The value is knowing exactly what the credentialing organization will see before they see it.

We make self-query results part of every intake we run. A provider who reviews their own query before application submission can prepare accurate disclosures and a ready narrative. A provider who discovers a report mid-application — because the credentialing committee found it and the application didn’t mention it — is now managing a misrepresentation question in addition to the underlying report.

The four situations that generate unexpected NPDB entries

1. Tail coverage payments made without provider knowledge

When a physician leaves a practice and the prior carrier’s tail coverage pays a claim, the payment is reportable to the NPDB — even if the provider wasn’t notified of the payment. Providers who haven’t checked their NPDB record in several years may have entries they don’t know about.

2. Voluntary surrender of privileges during a peer review

A provider who surrenders hospital privileges while a peer review is pending has generated a reportable event, regardless of the outcome of the peer review or whether the surrender was made “voluntarily.” The report is in the database and will appear on every subsequent hospital query.

3. Temporary suspension of privileges for administrative reasons

Some hospitals report privilege suspensions that were purely administrative — a provider whose privileges were temporarily suspended because a peer review paperwork deadline was missed. Whether this was reportable is a legal question, but the entry exists. The provider needs to be ready to explain it.

4. Out-of-state license actions the provider didn’t consider relevant

A reprimand in a state where the provider no longer holds a license and no longer practices is still in the NPDB. Credentials committees review all entries, regardless of which state issued them.

What to do this week

If you have a provider entering any credentialing process — hospital, payer, state license, Medicare:

1. Run an NPDB self-query. Go to npdb.hrsa.gov. The provider does this themselves. It takes ten minutes.
2. Review the result before the application is drafted. If there are entries, read each one and draft a narrative before the application form asks for disclosure.
3. Cross-check the application disclosure against the query. Every question about malpractice history, license actions, and privilege actions on the application needs to match what the NPDB will return.
4. Don’t omit, even for entries that seem minor. The credentialing committee’s tolerance for undisclosed entries is zero. Their tolerance for disclosed-and-explained entries is generally workable.

If you have a provider with NPDB entries and you’re not sure how to position the application, talk to us. Disclosure strategy — what to say, how to say it, in what order — is something we work through routinely.

— Medical Credentialing Services