Credentialing vs. Curation: Why 90-Day Mandates Require Both in 2026
How the REAL Health Providers Act, the 90-day verification rule, and continuous provider data curation are reshaping directory accuracy for Medicare Advantage, Medicaid managed care, and commercial health plans.
The "Verified Ghost" Problem
For years, Medicare Advantage (MA) plans have balanced credentialing cycles with periodic provider attestations to maintain directory data. But in 2026, the REAL Health Providers Act has rendered these episodic “snapshots” obsolete. This legislation moves directory accuracy from best-effort guidance to a statutory mandate with compounding consequences.
The industry’s biggest hurdle isn’t just bad data; it’s the “verified ghost.” A provider can be perfectly credentialed and recently attested, yet remains unreachable—having moved, changed phone numbers, or closed their panel to new patients. Under new federal mandates, these listings are no longer just administrative “digital litter”; they are active compliance liabilities.
What is the REAL Health Providers Act?
The REAL Health Providers Act — short for “Requiring Enhanced & Accurate Lists of Health Providers Act” — is the federal mandate reshaping provider directory compliance for health insurance plans in 2026. It establishes a 90-day verification rule for provider directory data and creates new public-facing transparency obligations for inaccurate or unverifiable provider records.
What does the REAL Health Providers Act require health plans to do?
The REAL Health Providers Act requires health plans to verify every provider record in their public directory at least once every 90 days. If a record cannot be verified within that window, the plan is legally required to flag the provider as “Unverified” in the public-facing directory. This shifts directory inaccuracy from an internal data-quality issue to a public compliance disclosure — putting the health plan’s reputation, CMS Star Ratings, and audit posture on the front line.
“Three-year credentialing and quarterly attestations cannot outrun a 90-day verification clock.”
Cúratus
What Else is Ahead for Medicare Advantage Plans?
The REAL Health Providers Act is rolling out with a clear focus on accountability:
- The 90-Day Clock: Plans must verify every directory record every 90 days or publicly label them as “Unverified”.
- Cost-Sharing Protections: Members who rely on inaccurate listings are legally entitled to in-network cost-sharing, regardless of the provider’s actual status.
- Public Accuracy Scores (2029): CMS will mandate a public “accuracy grade” on plan websites, making data quality a primary factor in member enrollment.
- Audit Rigor: HHS is standardizing audit methodologies to strictly enforce these transparency standards.
What is the Difference Between Credentialing and Curation in Healthcare?
To protect 2029 transparency scores, MA plans must shift from retrospective checks to real-time curation.
While Credentialing serves as the foundation—confirming a provider’s licenses, certifications, and lack of sanctions every few years—it cannot verify day-to-day availability. Continuous Curation fills this gap by monitoring “signals of change,” such as new claims, NPI updates, and license edits, to verify active practice status in real-time. One confirms qualification; the other ensures reachability.
Credentialing (the past) confirms a provider:
- Verifies a provider’s authority to practice;
Curation (the present) confirms a provider:
- Verifies a provider’s active practice status
“Credentialing tells you if they CAN practice; curation tells you if they ARE practicing.”
Cúratus
How Can Health Plans Stay Compliant?
MA plans must layer continuous provider data curation on top of their existing credentialing infrastructure. Relying on manual outreach or legacy data aggregators will leave plans exposed as public scoring mandates take full effect.
Compliance Made Simple
Cúratus delivers the continuous curation layer that credentialing systems were never designed to provide. We help ensure that “verified” providers are actually reachable, actually practicing, and actually accepting patients — with full data lineage, real-time signal monitoring, and audit-ready 90-day verification cycles aligned to the REAL Health Providers Act, CMS-0057-F, NCQA, and the No Surprises Act.
Don’t let ghosts haunt your directory. Download our guide to 2026 provider directory compliance →
Frequently Asked Questions
What is the REAL Health Providers Act? A federal mandate requiring health plans to verify provider directory data every 90 days and flag unverified providers publicly.
When does the REAL Health Providers Act take effect? The 90-day verification cycle is in active effect for the 2026 plan year.
What does “Unverified” mean in a provider directory? A status flag the plan is legally required to display when a provider record cannot be verified within the 90-day window.
Is credentialing enough to comply with the REAL Health Providers Act? No. Credentialing verifies qualification. The Act requires verification of active practice, location, reachability, and appointment availability — which only continuous curation can deliver.
What signals does continuous curation monitor? Claims data, state license updates, DEA registration changes, NPI registry updates, CAQH ProView attestations, demographic edits, payer roster changes, and provider-direct attestations.
How does the REAL Health Providers Act intersect with the No Surprises Act? Both regulate provider directory accuracy. The No Surprises Act sets directory standards and member-protection rules; the REAL Health Providers Act adds the 90-day verification cycle and the public “Unverified” flag.
What are the penalties for non-compliance with the REAL Health Providers Act? Public “Unverified” disclosures carry direct reputational and CMS Star Ratings consequences, alongside the existing financial penalties under the No Surprises Act and CMS audit findings.