Credentialing Deadline Laws by State

"Your application is in process." For a provider waiting to be paid, those four words can stretch for months. In many states they cannot stretch forever. State law sets a deadline for a plan to credential a completed application, and some states attach a consequence: a temporary credential, deemed participation, a daily penalty or payment at the in-network rate. These laws are some of the most practical tools in network disputes, because they are clear, they are enforced by insurance departments, and they turn on facts you can prove.

They also have a hard limit. They regulate how quickly a plan credentials an application it is processing. They do not require a plan to offer a contract when it has decided its network is full, and they reach only plans the state regulates, which leaves out self-funded employer plans. See self-funded plans and network access.

Which deadlines did we verify in the law itself?

These come from the statute text or the legislature's own summary of the enacted law. Check the current text before relying on any of them.

New York

Within 60 days of a completed application, a managed care insurer must tell a health care professional whether he or she is credentialed or whether more time is needed because a third party has not provided documentation; the insurer must then decide within 21 days of receiving that documentation (N.Y. Ins. Law 4803(a)(1)). New and relocated professionals joining fully participating groups are "deemed provisionally credentialed" after 60 days (4803(a)(2)). See New York and New York's credentialing deadlines.

North Carolina

An insurer that credentials providers must assess and verify a practitioner's qualifications within 60 days of a completed application on the Commissioner's approved form. If it has neither approved nor denied the application by then, it must issue a temporary credential within five business days of a written request, unless the applicant reported a history of malpractice claims, substance abuse or mental health issues, or medical board discipline (N.C. Gen. Stat. 58-3-230(a)). Insurers may not require information beyond the uniform form (58-3-230(b)). See North Carolina.

Colorado

For physicians, a carrier must send a receipt within 7 calendar days, conclude credentialing within 60 calendar days of a completed application, and give notice of the outcome within 10 calendar days of concluding. A carrier that fails to send the receipt must consider the physician participating no later than 53 calendar days after receiving the application. A carrier may not make a participating physician submit a new application or go through contracting to be recredentialed (Colorado General Assembly summary of SB21-126, 2021). See Colorado.

Ohio

A contracting entity must notify a provider of an incomplete credentialing form within 21 days and complete credentialing within 90 days after receiving the form. If it misses the 90 days, it is liable for either a civil penalty of $500 per day, payable to the provider, until the application is granted or denied, or retroactive reimbursement under the contract for services provided after day 90; the entity chooses which and must tell the provider. Hospitals are excepted, and for Medicaid managed care plans the clock starts when the provider submits the form and its NPI (Ohio Rev. Code 3963.06). See Ohio.

Virginia

A carrier that credentials providers must acknowledge an application (within 10 days if it does not use an online system), treat it as complete 30 days after receipt unless it gives notice that it is not, and approve or deny within 60 days of a completed application. Claims for services during the pending period are paid at the in-network rate once the applicant is credentialed and contracted, but these protocols apply "only if a contractual relationship exists" between the carrier and the applicant or the applicant's employer (Va. Code 38.2-3407.10:1(B)). See Virginia.

Texas

Texas's strongest rule is not a deadline but a payment rule: a physician joining an established medical group with a current contract must be treated as participating for payment purposes while credentialing is pending (Tex. Ins. Code 1452.102 to 1452.104). Texas PPO insurers must also give written reasons for denying an initial application and offer an advisory review panel (1301.051 and 1301.053). See Texas.

Which deadlines come from a plan's compliance list?

UnitedHealthcare publishes a State and Federal Regulatory Addendum to its credentialing plan (rev. September 2026) listing the state rules it follows, with citations. It is a carrier's own reading of the law, not the law, and we could not open every cited statute from our research server. These entries are reported as the addendum states them:

• Illinois: credentialing completed within 60 days after submission of all credentials data and completion of verification (citing 410 ILCS 517/15(f) and 77 Ill. Adm. Code 965.140(b)).
• California: behavioral health credentialing within 60 days of a completed application from January 1, 2023 (citing Health and Safety Code 1374.197), and, from January 1, 2027, a 90-day deadline for all credentialing with 120 days of provisional approval if the plan misses it, subject to exceptions (citing Health and Safety Code 1374.198 and Insurance Code 10144.565). See California's 2027 law.
• Maryland: incomplete applications returned within 10 days; within 30 days of a completed application, notice of intent to continue processing or to reject; a final determination within 120 days of that notice (citing Md. Ins. Code 15-112).
• New Jersey: initial credentialing completed within 90 days of a complete application (citing N.J. Admin. Code 11:24-3.9 and 11:24C-1.3).
• Arkansas: a decision within 60 days for physicians and 180 days for other providers; acknowledgment within 10 days; notice of incompleteness within 15 days, or the application is deemed complete (citing Ark. Code 23-99-411).
• Texas HMOs: during the annual application period only, a response to applications within 90 days (citing 28 Tex. Admin. Code 11.1402(c)).
• Georgia: no specific credentialing time requirements identified (citing Ga. Comp. R. and Regs. 120-2-80-.08(2)(f)).

The addendum lists day counts for many other states and none for some. "None listed" is not proof that a state has no law. Our state pages on the network access laws index show what has been verified for each state, with sources.

Do Medicaid plans follow different deadlines?

Often, yes. Medicaid plan deadlines usually come from the state's contract with the plan rather than the insurance code, and each state must set a uniform credentialing and recredentialing policy that its Medicaid plans follow (42 CFR 438.214(b)(1)). UnitedHealthcare's addendum, for example, describes Texas Medicaid contract terms requiring credentialing within 90 calendar days of a completed application and notice of missing information within 5 business days, and a Colorado Medicaid contract requiring credentialing and contracting or a denial within 90 days for at least 90 percent of applications. See each state's uniform Medicaid credentialing policy and Texas Medicaid credentialing deadlines.

When does the clock actually start?

Almost always at a completed application, and the plan usually decides what complete means. That is why the notice-of-incompleteness rules matter: North Carolina's uniform form limits what a plan can ask for, Virginia deems an application complete after 30 days without notice, and Arkansas (per the addendum) does the same after 15. Keep:

• proof of the date the plan received the application (portal confirmation, CAQH attestation date, certified mail receipt);
• every request for more information and the date you answered it;
• any receipt or completeness notice the plan sent, or a note that it never did.

White Glove Credentialing's post on how long credentialing takes covers the ordinary timeline; this is about what to do when the plan exceeds it.

What do you do when a plan misses the deadline?

1. Write to the plan. State the application date, the completion date, the statute and the deadline, and ask for a decision or the temporary or provisional status the law provides. Short, factual, dated.
2. Escalate inside the plan if there is no answer within a week or two: provider relations management, or the compliance contact in the provider manual.
3. Complain to the insurance department. A missed statutory credentialing deadline is a clear statutory question, which is the kind of provider complaint insurance departments can act on. See complaining to the state insurance department.

Each step is a document you sign and send. We prepare them as part of a Payer Network Dispute ($799 per payer), including the timeline exhibit that shows the dates. If the law entitles you to a penalty or retroactive payment and the plan refuses, that is a question for a healthcare attorney; we will tell you when we think you need one.

Why do these laws rarely help with a closed panel?

Because a closed panel usually stops the process before credentialing starts. A plan that says "no network need" has not accepted an application, so no credentialing clock is running. Some state laws make this explicit: the California rule as described in the addendum covers credentialing only and "does not include contracting completion," and Virginia's applies only where a contract already exists. The deadline laws are for the stalled file. For the closed door, see what a closed panel actually means.