Medicaid federal database checks need entity scope
42 CFR 455.436 requires Medicaid agencies to check defined providers and associated people against federal databases at specified points. Systems must preserve who, which source, when, and what followed.
Editorial figure by Credentialing Current. Source context: 42 CFR 455.436: Federal database checks.
The checked population is broader than a practitioner
Section 455.436 does not frame federal database checking as a one-person license lookup. It directs the State Medicaid agency to confirm identity and determine exclusion status for providers and for specified people connected to them, including people with ownership or control interests and people who are agents or managing employees. That scope makes entity relationships part of the screening record.
A credentialing or enrollment platform should preserve the provider entity, individual, role, ownership or control relationship, agent or managing-employee relationship, effective dates, disclosed identifiers, and source of each assertion. A person may be associated with several providers or change roles over time. Copying a screening result onto one practitioner profile can miss the regulated population and obscure which provider relationship was actually reviewed.
Different checkpoints require different clocks
The regulation identifies checks at enrollment and reenrollment and requires checks of the named federal exclusion systems no less frequently than monthly. Those are distinct workflow clocks. An enrollment result needs the application or reenrollment episode, source, query date, returned identity, reviewer, and disposition. Recurring exclusion monitoring needs its own schedule, run evidence, coverage population, exceptions, and resolution history.
Technology should not overwrite the enrollment snapshot each time a recurring screen runs. It should show what was known when the enrollment decision was made and what later monitoring found. Missed runs, delayed source access, ambiguous matches, identifier changes, and new entity relationships need visible exception states. A green dashboard without population and source evidence cannot establish that every required person was screened at the required point.
A database result is not the whole decision
The named federal sources serve different purposes: identity and enumeration information, death information, and exclusion or debarment information are not interchangeable. A returned candidate must remain linked to the searched identifiers, source, query method, response, match basis, and subsequent review. A name-only similarity is not the same thing as a confirmed person, and a no-result response is not evidence that unrelated credentialing requirements were satisfied.
Buyers should require systems to distinguish the raw result, automated match assessment, human resolution, enrollment or program-integrity action, notice, appeal or correction where applicable, and final status. The software can manage evidence and workflow; it does not determine legal identity, exclusion effect, enrollment eligibility, appointment, privileges, competence, or payer-network participation.
Test relationships, cadence, and historical evidence
A representative demonstration can use a provider organization with an owner, a managing employee, an agent, and an enrolled practitioner. Add an identifier conflict, a person associated with two entities, a relationship that ends midmonth, a possible exclusion match, and an unavailable source. Ask the platform to show who entered the screening population, which authority and database applied, when the query ran, what identifiers were used, who resolved the result, and which enrollment episode or recurring run it affected.
Then change an ownership record and run the next monthly cycle without rewriting the prior enrollment evidence. The system should identify newly in-scope people, preserve former relationships, expose incomplete source coverage, and retain accountable dispositions. Section 455.436 supplies a federal Medicaid screening baseline; state requirements, current source operations, case-specific legal effect, enrollment decisions, and product fitness require separate qualified review.
Enterprise buyer test
Translate this change into the exact population, record type, workflow stage, decision owner, effective date, and evidence that could be affected. Ask current or prospective providers to demonstrate the named workflow with representative data and an exception—not a polished feature tour. Record what official documentation establishes, what a provider states, what the team observes, and what remains unresolved.
A defensible review also identifies the dependency outside the product. Authority interpretation, policy configuration, data quality, integrations, human judgment, approval rights, release governance, training, and retained evidence may remain customer or service responsibilities. The evaluation should preserve those boundaries instead of treating a technology claim as the complete operating model.
What we will watch next
Credentialing Current will watch the named source and affected market records for later evidence that changes status, scope, availability, implementation timing, workflow consequence, or the limits of the initial report. A later announcement does not silently overwrite this dated account; the change ledger preserves the sequence.