Provider Directory Accuracy is Becoming a Public Scorecard for Health Plans 

For years, provider directory accuracy was an internal problem. A health plan might know its directory was messy, with outdated addresses, doctors who had retired, or phone numbers that rang a dermatologist’s old office, but that mess stayed inside the organization.

It showed up in a CMS audit occasionally, or in a member’s complaint call, but never something the public could see for themselves.

That changed twice in the last six months.

Two rules that changed the  calculus

CMS Final Rule CMS-4208-F2, finalized in September 2025, requires Medicare Advantage organizations to submit their provider directory data directly to CMS for public display on Medicare Plan Finder, the tool millions of beneficiaries use every Annual Enrollment Period to compare plans.

Starting with the 2027 plan year, a health plan’s directory is not just something members consult on the plan’s own website. CMS republishes it for public access. The organization must update it within 30 days of any change and attest to its accuracy annually.

Then, in February 2026, Congress went a step further.

The REAL Health Providers Act, part of the Consolidated Appropriations Act, 2026, requires Medicare Advantage plans to verify provider directory information on a fixed cycle and run an annual, statistically sampled accuracy analysis of their own directories, starting with the 2028 plan year.

That sample must include the specialties where inaccuracy tends to run highest, mental health and substance use disorder treatment among them, and the results go to CMS. Starting with the 2029 plan year, CMS will publicly post each plan’s accuracy score.

Here is what makes this moment different from the last decade of directory-accuracy guidance: it is no longer just about avoiding a fine. It is about what a competitor, a broker, a member, or a journalist can see about an organization with a few clicks.

Why provider data never stops moving

Directories are hard to keep clean for a simple reason: providers change constantly. An address changes. A physician stops accepting new patients or leaves one practice for another entirely.

Every one of those changes arrives through a different channel, a fax, a spreadsheet, an email from a credentialing coordinator, a PDF roster from a delegated IPA, and someone has to notice it, interpret it, and key it into the system of record before it becomes a compliance gap.

Why manual processes cannot keep pace

Many health plans still rely on manual processes to catch those changes, with someone reading the fax or email, interpreting what it means, and entering the update into the system of record.

This is not because they do not know better, but because the volume of change never stops, and building a fully automated pipeline has historically felt like a multi-year systems project.

It does not have to be. The plans that get ahead of these two requirements will not necessarily be the ones with the biggest provider-operations teams. They will be the ones that treat directory accuracy as a continuous, automated process instead of a periodic cleanup effort.

Where this actually breaks down

Picture a routine case: a provider leaves a delegated IPA and the group sends notice by email, a PDF roster bundling the update with a dozen unrelated changes.

The email sits in a shared inbox behind other requests. Five weeks pass before anyone opens it, past the 30-day window CMS-4208-F2 allows, and the directory stays live and incorrect longer than the rule permits.

Nobody made an obvious mistake. The process simply depended on someone noticing one specific email among many, and this time, that did not happen fast enough.

That gap, the time between when a change becomes known and when the directory reflects it, is the kind of operational vulnerability that CMS-4208-F2 and the REAL Health Providers Act now make harder for health plans to overlook.

Closing it requires treating provider data intake as a continuous pipeline, one that ingests every roster, document, and request, validates it, and routes it to resolution, rather than a queue that waits for someone to notice.

The real question for 2026

If a plan’s directory data went live on Medicare Plan Finder tomorrow, would leadership be comfortable with what members and competitors would see?

For most organizations, the honest answer is probably, ”I’d want a few weeks to clean things up first.” That is the tell.

The regulatory clock on this one is already running, and the path from directory data to public visibility is already underway.

Authors profile

Partha Bose

Chief Operating Officer

Partha Bose is a senior healthcare executive with more than 20 years of global experience in operations, sales, and P&L leadership in the payer and provider space. At the helm of strategic growth for MDI NetworX, he drives large-scale delivery models, embeds operational rigor and optimises margin performance for health plans and benefit administrators. Known for his ability to lead high-performing global teams and execute transformative business solutions, Partha is committed to enabling payer ecosystems to become more lean, agile, and tech-powered.