Provider Data Management (PDM)

Key facts

Core identifiers

NPI, Taxpayer Identification Number (TIN), state license, taxonomy code

No Surprises Act directory review

Plans verify directory information at least every 90 days

No Surprises Act update window

Within 2 business days of receiving updated provider information

NPPES change reporting

Providers report NPI data changes within 30 days, 45 CFR 162.410

What is provider data management?

Provider data management (PDM) keeps one reliable record for each clinician, practice location and facility an organization works with. The record typically holds identifiers, names, specialties, licenses, board certifications, practice addresses, phone numbers, hospital affiliations, network participation and whether the provider is accepting new patients.

Health plans rely on this data for credentialing, claims payment, provider directories and network adequacy reporting. Health systems use it for referrals, scheduling and payer enrollment. Life sciences companies keep similar master records to support sales, compliance and transparency reporting.

How provider data management works

Most PDM programs cycle through the same steps:

• Collect: gather data from provider applications, credentialing files, contracts, group rosters and public sources such as the National Plan and Provider Enumeration System (NPPES).
• Match: resolve duplicates so one provider with several locations or identifiers maps to one master record.
• Verify: confirm licenses, sanctions, board certification and practice details against primary sources and through direct outreach.
• Distribute and maintain: push approved records to claims, directory and analytics systems, then re-verify on a schedule as providers move, retire or change affiliations.

Why provider data management matters

Inaccurate provider directories send patients to clinicians who have moved, retired or left the network. The No Surprises Act, part of the Consolidated Appropriations Act, 2021, requires group health plans and insurers to verify directory information at least every 90 days and to update entries within two business days of receiving new information. Medicare Advantage and Medicaid managed care plans face separate federal directory rules.

How the directory provisions are enforced has developed through agency guidance and rulemaking, so compliance teams should check current federal and state requirements. Clean provider data also underpins network adequacy filings, accurate claims routing and any analysis that joins datasets on NPI.

Common provider data pitfalls

Several recurring errors undermine provider data:

• Treating NPPES as verified: NPPES data is self-reported. Providers must report changes within 30 days, but many records still carry outdated addresses and phone numbers.
• Confusing billing and practice locations: the address on a claim or NPI record may be a billing office, not where patients are seen.
• Mixing individual and organizational records: a Type 1 NPI identifies an individual clinician, a Type 2 NPI identifies an organization, and one organization can hold many Type 2 NPIs.