Provider Notice issued 10/05/2026

Updated Provider Revalidation Cycle

The Federal Centers for Medicare & Medicaid Services (CMS) has issued guidance to states that will require more frequent provider revalidations in addition to those currently scheduled. Instead of completing provider revalidation every five years, those affected by this guidance will need to complete revalidations within an upcoming two-year cycle.

This change will not affect providers who have revalidated or newly enrolled within 12 months of this guidance (04/30/25–04/30/26). The category of providers affected will be high-risk providers, providers without a National Provider Identifier (NPI), laboratory providers, and Applied Behavior Analysis (ABA) providers.

CMS had previously required all actively enrolled providers to revalidate or renew their Medicaid provider information at least every five years, in accordance with (42 CFR 455.414).  This requirement applies to all Medicaid providers, including Facilities, Agency and Organizations (FAO), Groups, Individuals and Atypical providers.

All providers must successfully complete revalidation to remain eligible for reimbursement of services rendered to Illinois Medicaid customers. Failure to submit revalidation before the end of your assigned revalidation cycle will result in disenrollment. Any gap in enrollment eligibility will affect your payments, and reactivation cannot be made retroactive to remain compliant with this federal requirement.           

Actively enrolled providers receive two email notifications regarding their revalidation due date.  The first notice is sent 90 calendar days before the Revalidation Cycle end date. The second notice is sent 30 calendar days before the Revalidation Cycle end date.  

Notifications are emailed to the email address(es) listed in the Basic Information step of the IMPACT enrollment; notifications will not be sent via USPS. Providers with multiple service locations must revalidate each service location individually and will receive separate email notices for each. Providers should not attempt or initiate revalidation until they receive the email notification. 

Before beginning revalidation, providers are encouraged to verify the following information is up to date in IMPACT:   

• Confirm your IMPACT access
  IMPACT uses OKTA multi-factor authentication (implemented March 2022). Ensuring you can login through OKTA successfully will help in expediting the revalidation process. Instructions are available at HFS’ Presentations and Materials webpage under “IMPACT Sign On”. 

• Verify contact information
  All revalidation notifications will be sent to the email address(es) listed under Basic Information. Confirming accurate email information helps prevent missed communication.

• Use a supported web browser
  IMPACT supports Microsoft Edge and Firefox. Using supported browsers helps prevent errors during revalidation. 

• Verify all relevant licensure and certifications are current
  Confirm that any required licenses or certifications have not expired and are correctly documented in IMPACT.  
  Please note – if your license expires and is not updated before the revalidation notifications are sent, you will not be notified of your revalidation cycle due date.  

• Confirm your NPI information in NPPES
  Ensure NPPES reflects the correct Taxonomy for the services you provide and bill for.  

Providers will be notified by email when their revalidation cycle begins. Not all providers are revalidated at the same time. 

Additional information on provider revalidation is available on our Provider Revalidation webpage.

For any additional questions, please call 877-782-5565 to speak to a provider enrollment representative.

Laura Phelan, Administrator 
Division of Medical Programs