The "Network Adequacy" Illusion: Why NPI Counts Are No Longer Enough
Your directory might say you’re adequate. CMS is calling to find out if that’s actually true.
Mark Fabiano
CEO of Cúratus
Your Network May Look Strong on Paper. That Doesn't Mean Members Can Access Care
If you’re like most health plans, you’ve invested countless hours building a strong provider network. You track provider counts, monitor geographic coverage, and work hard to stay compliant. Yet many plans are finding that even when everything looks right on paper, CMS is uncovering a very different story.
What Is a “Paper Network” and Why is it a Compliance Risk?
A paper network is a provider directory that looks adequate on paper but doesn’t reflect clinical reality. Providers are listed who have left the network, retired, relocated, or stopped accepting new patients. The NPI count is technically compliant. The member experience is not. The problem isn’t that health plans don’t have enough providers. It’s that provider data changes every day, and it’s incredibly difficult to keep up. By the time an annual update is complete, parts of the directory are already out of date.
Why Is Network Adequacy Becoming Harder to Prove?
For years, network adequacy was largely about demonstrating enough providers across the right specialties and locations. If those numbers checked out, most plans felt confident moving forward. Today, that’s no longer the finish line. CMS wants to know something much more practical: Can a member actually call the provider listed in your directory and schedule an appointment? If the answer is no, the provider count doesn’t matter nearly as much as it once did.
The Real Challenge Isn’t Your Network. It’s Keeping Your Data Current.
Every week, providers retire, relocate, join new organizations, stop accepting patients, or update their contact information. None of those changes happen on a convenient schedule, and they rarely wait for an annual directory review. That leaves health plans trying to manage a moving target.
The result is something many organizations don’t discover until an audit: a network that appears complete but doesn’t accurately reflect what’s happening in the real world. Members feel it first. Regulators usually aren’t far behind.
“A directory can be 100% compliant on paper while being a ghost town in reality.” – Cúratus
Why does Directory Accuracy Matter so much?
When provider information is wrong, the consequences extend well beyond compliance. Members become frustrated, provider relations teams spend valuable time resolving issues, and audit findings can affect Star Ratings and Medicare Advantage revenue. What starts as a data problem quickly becomes an operational and financial one.
Many health plans already know this firsthand. The challenge isn’t recognizing the problem, it’s finding a sustainable way to stay ahead of constant change.
What Is the Difference Between Network Adequacy and Directory Accuracy?
These terms are related but not the same — and confusing them is a common and costly mistake.
Network adequacy is about having enough providers of the right types in the right geographic areas to meet access standards. It’s a structural question: does your network include sufficient capacity to serve your members?
Directory accuracy is about whether the information in your directory is correct. It’s an operational question: does your directory reflect what’s actually true about those providers today, their location, their contact information, their accepting-patients status?
A plan can have adequate network structure and still fail a CMS audit because the directory information is wrong. In practice, the two are inseparable: a network is only as adequate as the accuracy of the data used to measure it. If your directory shows providers who are no longer reachable, your network appears more adequate than it is and CMS Secret Shopper audits will expose that gap.
What Is Active Monitoring in Provider Data Management?
Active Monitoring is the practice of continuously verifying that providers in a health plan’s directory are not just listed, but genuinely accessible to members. It goes beyond confirming that an NPI exists. It verifies that the provider is reachable, in the right location, accepting new patients, and credentialed under current standards.
Traditional provider data management is reactive: update the directory when a provider reports a change. Active Monitoring flips that model. Instead of waiting for providers to self-report, the plan proactively verifies provider information on a continuous or scheduled basis, using AI in healthcare data systems, automated outreach, and cross-referencing against authoritative sources like NPPES, CAQH, and state licensing boards. The result is a provider directory that doesn’t just look adequate on paper. It reflects what members will actually experience when they try to access care.
What Are CMS Secret Shopper Audits — and How Do They Work?
CMS Secret Shopper audits are a compliance enforcement tool in which CMS or its contractors call providers listed in a health plan’s directory and attempt to schedule appointments as if they were members. The audit measures actual reachability not just the presence of a record.
Auditors assess whether:
- The provider’s phone number is correct and answered
- The provider is still at the listed location
- The provider is still accepting new patients with the plan
- Appointment wait times meet access standards for the specialty
The results are not theoretical. Low accuracy scores from Secret Shopper audits directly impact a plan’s Star Ratings (the CMS quality measurement system that affects Medicare Advantage bonus payments and member plan selection). Plans with significant directory inaccuracies face corrective action plans, public disclosure of findings, and potential enrollment sanctions.
In short: this is no longer a paperwork problem. It’s a revenue and reputation problem.
How Can Health Plans Prepare for CMS Secret Shopper Audits?
The plans that perform well in Secret Shopper audits are the ones that treat their provider directories as living, operational infrastructure not static compliance documents. Preparation comes down to four disciplines:
Real-time data verification. Provider information should be cross-referenced against multiple authoritative sources continuously, not just during annual credentialing cycles. Address changes, license lapses, and network departures happen every day.
Accepting-patients status monitoring. This is the most common failure point in Secret Shopper audits. Plans need a systematic process for verifying whether listed providers are actively accepting new patients with the plan not just whether the provider exists.
Access time tracking. CMS standards require that members be able to reach specialists within defined timeframes. Plans need data on actual wait times by specialty and geography — not theoretical capacity based on NPI counts.
Audit-ready documentation. When CMS asks how and when provider information was verified, health plans need a clear, timestamped record. Trusted provider data requires a documented verification chain, not just a clean-looking directory.
Many health plans already know this firsthand. The challenge isn’t recognizing the problem, it’s finding a sustainable way to stay ahead of constant change.
What Role Does AI Play in Solving the Network Adequacy Problem?
AI in healthcare data management is what makes Active Monitoring scalable. Manually calling and verifying every provider in a large network, on a continuous basis, is operationally impossible without automation.
AI-driven curation tools can:
- Detect anomalies in provider records before they surface in audits; a phone number that’s no longer working, an address that doesn’t match claims data, a license that has lapsed
- Cross-reference provider records in real time against NPPES, CAQH, DEA registries, and state licensing boards
- Flag high-risk records for human review, prioritizing the providers most likely to generate Secret Shopper failures
- Score each provider record by accuracy confidence, giving compliance teams visibility into where directory risk is concentrated
The outcome is a directory that isn’t just defensible in an audit — it’s genuinely accurate for the members who depend on it.
Bottom Line: Adequacy Is Earned, Not Filed
The plans that treat network adequacy as a filing exercise are the ones showing up in CMS corrective action reports. The plans that treat it as an ongoing operational discipline, with real-time data curation, active monitoring, and audit-ready documentation, are the ones with strong Star Ratings and members who can actually get care.
A compliant directory and an accurate directory are not the same thing. In 2026, CMS is measuring both.
“The question isn’t whether your network looks adequate. It’s whether your members can actually get an appointment.”
Is your network actually adequate? Run a directory health check with Curatus →
Key Terms: Network Adequacy & Provider Directory Glossary
- Network Adequacy: The regulatory standard requiring health plans to maintain a provider network with sufficient capacity and geographic coverage to give members reasonable access to covered services.
- Paper Network: A provider directory that appears compliant on paper but doesn’t reflect clinical reality — listing providers who are unreachable, no longer in-network, or not accepting new patients.
- Ghost Town Directory: Industry term for a provider directory with high rates of inaccurate or outdated information, resulting in members being unable to reach listed providers.
- CMS Secret Shopper Audits: CMS compliance reviews in which auditors call providers listed in a health plan’s directory to verify actual reachability, location accuracy, and patient acceptance — measuring real-world access, not just record presence.
- Star Ratings: The CMS 1-to-5 quality rating system for Medicare Advantage and Part D plans, which affects bonus payments, marketing eligibility, and member plan selection.
- Active Monitoring: The practice of proactively and continuously verifying provider directory information — including reachability and accepting-patients status — rather than waiting for providers to self-report changes.
- Directory Accuracy: The degree to which a health plan’s provider directory reflects current, correct information about provider location, contact details, network status, and patient acceptance.
- Provider Reachability: Whether a member can successfully contact a listed provider, reach the correct location, and schedule an appointment — the core metric in CMS Secret Shopper audits.
Frequently Asked Questions
What is network adequacy in healthcare? Network adequacy is the CMS and state regulatory standard requiring health plans to maintain a provider network with enough providers — by type, specialty, and geography — to give members reasonable access to covered services. In 2026, adequacy is measured not just by NPI counts but by actual provider reachability, appointment availability, and accurate directory information.
What is a paper network in healthcare? A paper network is a provider directory that appears compliant on paper but doesn’t reflect clinical reality. Providers are listed who have moved, retired, left the network, or stopped accepting new patients. The NPI count is technically sufficient, but members who try to access those providers can’t actually get care — which is the standard CMS Secret Shopper audits are now designed to catch.
How do provider directory errors affect CMS Star Ratings? Directory accuracy is a measured component of CMS Star Ratings for Medicare Advantage plans. When Secret Shopper audits find high rates of unreachable providers or incorrect directory information, those findings lower a plan’s Star Rating — reducing bonus payments, restricting marketing eligibility, and triggering additional regulatory scrutiny.
How does AI help health plans maintain provider directory accuracy? AI in healthcare data management enables continuous, automated cross-referencing of provider records against authoritative sources like NPPES, CAQH, and state licensing boards. AI systems flag anomalies — incorrect phone numbers, lapsed licenses, address mismatches — before they surface in audits, and score each provider record by accuracy confidence. This makes Active Monitoring scalable for networks of any size.
What happens if a health plan fails a CMS network adequacy audit? A health plan that fails a CMS network adequacy or directory accuracy audit may face a corrective action plan (CAP) requiring remediation within a defined timeframe, public disclosure of audit findings, reduced Star Ratings, and in severe cases, restrictions on enrollment or marketing. The cost of remediation after a finding is typically far higher than the cost of maintaining accurate data proactively.
How Do Directory Errors Affect CMS Star Ratings CMS Star Ratings are a 1-to-5 scale quality rating system for Medicare Advantage and Part D plans. They affect how much bonus revenue a plan receives, whether a plan can market to new members, and how members perceive and choose between plans.
Related questions this content answers: What is network adequacy in healthcare? | What is a paper network? | How do CMS Secret Shopper audits work? | What are the consequences of failing a network adequacy audit? | What is Active Monitoring in provider data? | How does directory accuracy affect Star Ratings? | How does AI improve provider directory management? | What is the difference between network adequacy and directory accuracy?