{ "name": "Medcontra Healthcare Contract Compliance Clocks", "title": "Healthcare Contract Compliance Clocks", "url": "https://medcontra.com/datasets/healthcare-contract-compliance-clocks/", "csv": "https://medcontra.com/datasets/healthcare-contract-compliance-clocks.csv", "markdown": "https://medcontra.com/datasets/healthcare-contract-compliance-clocks/index.md", "computed_at": "2026-10-18", "license": "https://medcontra.com/terms", "headline": "The Healthcare Contract Compliance Clocks carries 14 published figures read from 5 sources' own pages, from 30 to 90 day, read 17 October 2026.", "quotes": [ "The Healthcare Contract Compliance Clocks carries 14 published figures read from 5 sources' own pages, from 30 to 90 day, read 17 October 2026.", "5 of the 19 named sources read in full publish a figure; 14 publish none, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation HIPAA substitute notice web posting: median 90 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation HIPAA substitute notice toll-free line: median 90 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation Medicare enrolment application fee: median 750 USD across 2 sources, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation enrolment fee non-payment notice: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation Medicare participation election window: median 90 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation non-participating limiting charge: median 115 percent across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation MAC information request response: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation physician change of ownership reporting: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS change reporting: median 30 day across 2 sources, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation IDTF change reporting: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation MDPP change of ownership reporting: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation Medicare revalidation cycle change notice: median 90 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS liability insurance minimum: median 300,000 USD across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS reaccreditation: median 12 month across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS minimum opening hours: median 30 hour across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS surety payment on CMS notice: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS surety bond cancellation notice: median 30 day across 1 source, read 17 October 2026.", "Healthcare Contract Compliance Clocks, obligation DMEPOS replacement surety bond: median 30 day across 1 source, read 17 October 2026." ], "citation": "\"Medcontra Healthcare Contract Compliance Clocks\", updated 2026-10-18, https://medcontra.com/datasets/healthcare-contract-compliance-clocks/.", "changed_since": null, "national": { "unit": "day", "n": 14, "median": 30, "min": 30, "max": 90, "p25": 30, "p75": 90, "mean": 47.1429, "units": { "%": 1, "USD": 3, "day": 14, "hour": 1, "month": 1 }, "published_sources": 5, "named_sources": 20, "read_sources": 19, "not_published": 14, "published_share": 0.263 }, "by_axis": { "obligation": { "HIPAA substitute notice web posting": { "day": { "n": 1, "median": 90, "min": 90, "max": 90, "p25": 90, "p75": 90, "mean": 90 } }, "HIPAA substitute notice toll-free line": { "day": { "n": 1, "median": 90, "min": 90, "max": 90, "p25": 90, "p75": 90, "mean": 90 } }, "Medicare enrolment application fee": { "USD": { "n": 2, "median": 750, "min": 750, "max": 750, "p25": null, "p75": null, "mean": 750 } }, "enrolment fee non-payment notice": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "Medicare participation election window": { "day": { "n": 1, "median": 90, "min": 90, "max": 90, "p25": 90, "p75": 90, "mean": 90 } }, "non-participating limiting charge": { "%": { "n": 1, "median": 115, "min": 115, "max": 115, "p25": 115, "p75": 115, "mean": 115 } }, "MAC information request response": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "physician change of ownership reporting": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "DMEPOS change reporting": { "day": { "n": 2, "median": 30, "min": 30, "max": 30, "p25": null, "p75": null, "mean": 30 } }, "IDTF change reporting": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "MDPP change of ownership reporting": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "Medicare revalidation cycle change notice": { "day": { "n": 1, "median": 90, "min": 90, "max": 90, "p25": 90, "p75": 90, "mean": 90 } }, "DMEPOS liability insurance minimum": { "USD": { "n": 1, "median": 300000, "min": 300000, "max": 300000, "p25": 300000, "p75": 300000, "mean": 300000 } }, "DMEPOS reaccreditation": { "month": { "n": 1, "median": 12, "min": 12, "max": 12, "p25": 12, "p75": 12, "mean": 12 } }, "DMEPOS minimum opening hours": { "hour": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "DMEPOS surety payment on CMS notice": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "DMEPOS surety bond cancellation notice": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "DMEPOS replacement surety bond": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } } } }, "rows": [ { "source": "45 CFR 164.404 (timeliness of notification to individuals)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.404", "figure": "90 days", "value": 90, "unit": "day", "vat": null, "axis": { "obligation": "HIPAA substitute notice web posting" }, "retrieved_at": "2026-10-17", "quote": "(A) Be in the form of either a conspicuous posting for a period of 90 days on the home page of the Web site of the covered entity involved, or conspicuous notice in major print or broadcast media in geographic areas where the individuals affected by the breach likely reside; and", "source_class": "primary-government", "text_sha256": "c1d597d86cb00fbbf8635d1e373327f49deb9e94c23ecd05406f332ebf3c73cf" }, { "source": "45 CFR 164.404 (timeliness of notification to individuals)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.404", "figure": "90 days", "value": 90, "unit": "day", "vat": null, "axis": { "obligation": "HIPAA substitute notice toll-free line" }, "retrieved_at": "2026-10-17", "quote": "(B) Include a toll-free phone number that remains active for at least 90 days where an individual can learn whether the individual's unsecured protected health information may be included in the breach.", "source_class": "primary-government", "text_sha256": "c1d597d86cb00fbbf8635d1e373327f49deb9e94c23ecd05406f332ebf3c73cf" }, { "source": "CY 2026 Medicare provider enrollment application fee (Federal Register)", "url": "https://www.federalregister.gov/documents/2025/12/03/2025-21877/medicare-medicaid-and-childrens-health-insurance-programs-provider-enrollment-application-fee-amount", "figure": "$750.00 ", "value": 750, "unit": "USD", "vat": null, "axis": { "obligation": "Medicare enrolment application fee" }, "retrieved_at": "2026-10-17", "quote": "This notice announces a $750.00 calendar year (CY) 2026 ( printed page 55739)", "source_class": "primary-government", "text_sha256": "cb33b69ea8098cb6dad36b16af9d8d1cfc7933a3928ac72d7b78eac363e1ba5d" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "$750.", "value": 750, "unit": "USD", "vat": null, "axis": { "obligation": "Medicare enrolment application fee" }, "retrieved_at": "2026-10-17", "quote": "The 2026 enrollment application fee is $750.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "enrolment fee non-payment notice" }, "retrieved_at": "2026-10-17", "quote": "If you don’t pay the fee or submit a hardship exception request, your MAC will send a letter allowing you 30 days from the date of the letter to pay the fee.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "90 days", "value": 90, "unit": "day", "vat": null, "axis": { "obligation": "Medicare participation election window" }, "retrieved_at": "2026-10-17", "quote": "You have 90 days after we send your initial enrollment approval letter to decide if you want to be a participating provider or supplier.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "115%", "value": 115, "unit": "%", "vat": null, "axis": { "obligation": "non-participating limiting charge" }, "retrieved_at": "2026-10-17", "quote": "You can’t charge patients more than the limiting charge, 115% of the Medicare Physician Fee Schedule amount", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "MAC information request response" }, "retrieved_at": "2026-10-17", "quote": "Respond to MAC information requests within 30 days.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "physician change of ownership reporting" }, "retrieved_at": "2026-10-17", "quote": "Physicians, NPPs, and physician and NPP organizations must report a change of ownership or control (including a change in authorized official, delegated official, or managing employee), a change in practice location, and any final adverse legal actions (like a felony or suspension of a federal or state license) within 30 days and report all other changes within 90 days.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "DMEPOS change reporting" }, "retrieved_at": "2026-10-17", "quote": "DMEPOS suppliers must report changes in their enrollment application information within 30 days.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "IDTF change reporting" }, "retrieved_at": "2026-10-17", "quote": "Independent diagnostic testing facilities must report changes in ownership, location, general supervision, and adverse legal actions within 30 days and report all other changes within 90 days.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "CMS Medicare Provider Enrollment (MLN9658742)", "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "MDPP change of ownership reporting" }, "retrieved_at": "2026-10-17", "quote": "MDPP suppliers must report changes in ownership (including the authorized official, delegated official, or managing employee), changes to the coach roster, and final adverse legal actions within 30 days and report all other changes, including changes in location, within 90 days.", "source_class": "primary-government", "text_sha256": "925fbd45adbcea7b8fa2b60982cde9726a41dbedf047cf6d894bbd7294f4524e" }, { "source": "42 CFR 424.515 (revalidation of enrollment)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-P/section-424.515", "figure": "90 days", "value": 90, "unit": "day", "vat": null, "axis": { "obligation": "Medicare revalidation cycle change notice" }, "retrieved_at": "2026-10-17", "quote": "If a change occurs, CMS notifies all affected providers and suppliers at least 90 days in advance of implementing the change.", "source_class": "primary-government", "text_sha256": "28ccafa25e82eaa840b97ae383f50e4f1fe532bda6ee8c2f2a095910e9eb1f1e" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "DMEPOS change reporting" }, "retrieved_at": "2026-10-17", "quote": "The supplier must report to CMS any changes in information supplied on the application within 30 days of the change.);", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "$300,000 ", "value": 300000, "unit": "USD", "vat": null, "axis": { "obligation": "DMEPOS liability insurance minimum" }, "retrieved_at": "2026-10-17", "quote": "(10) Has a comprehensive liability insurance policy in the amount of at least $300,000 that covers both the supplier's place of business and all customers and employees of the supplier.", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "12 months", "value": 12, "unit": "month", "vat": null, "axis": { "obligation": "DMEPOS reaccreditation" }, "retrieved_at": "2026-10-17", "quote": "(24) All accredited DMEPOS suppliers must be surveyed and reaccredited at least once every 12 months.", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "30 hours", "value": 30, "unit": "hour", "vat": null, "axis": { "obligation": "DMEPOS minimum opening hours" }, "retrieved_at": "2026-10-17", "quote": "(i) Except as specified in paragraph (c)(30)(ii) of this section, is open to the public a minimum of 30 hours per week.", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "DMEPOS surety payment on CMS notice" }, "retrieved_at": "2026-10-17", "quote": "(i) The bond must guarantee that the surety will, within 30 days of receiving written notice from CMS containing sufficient evidence to establish the surety's liability under the bond of unpaid claims, CMPs, or assessments, pay CMS a total of up to the full penal amount of the bond in the following amounts:", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "DMEPOS surety bond cancellation notice" }, "retrieved_at": "2026-10-17", "quote": "(i) A DMEPOS supplier may cancel its surety bond and must provide written notice at least 30 days before the effective date of the cancellation to the CMS contractor and the surety.", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" }, { "source": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "obligation": "DMEPOS replacement surety bond" }, "retrieved_at": "2026-10-17", "quote": "A DMEPOS supplier that obtains a replacement surety bond from a different surety to cover the remaining term of a previously obtained bond must submit the new surety bond to the CMS contractor at least 30 days prior to the expiration of the previous surety bond.", "source_class": "primary-government", "text_sha256": "a6b24c29242d067a859a8e5900e8ddaafe4eb4fdd076557e5b5b9d2499533a49" } ], "not_published": [ { "source": "45 CFR 164.504 (organizational requirements, business associate contracts)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.504", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "45 CFR 164.410 (breach notification by a business associate)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.410", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "45 CFR 164.502 (uses and disclosures, general rules)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "45 CFR 164.308 (administrative safeguards)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "45 CFR 160.404 (amount of a civil money penalty)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-D/section-160.404", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "45 CFR 160.316 (refraining from intimidation or retaliation)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-C/section-160.316", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "42 CFR 424.44 (time limits for filing claims)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-A/section-424.44", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "42 CFR 422.204 (provider selection and credentialing, subpart E)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-422/subpart-E/section-422.204", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "42 CFR 422.204 (subpart D listing)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-422/subpart-D/section-422.204", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "42 CFR 455.414 (Medicaid revalidation of enrollment)", "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-C/part-455/subpart-E/section-455.414", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "CMS revalidations", "url": "https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/revalidations", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "CMS PECOS", "url": "https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/chain-ownership-system-pecos", "retrieved_at": "2026-10-10", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS sample business associate agreement provisions", "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS guidance on business associates", "url": "https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.504", "label": "45 CFR 164.504 (organizational requirements, business associate contracts)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.410", "label": "45 CFR 164.410 (breach notification by a business associate)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.404", "label": "45 CFR 164.404 (timeliness of notification to individuals)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502", "label": "45 CFR 164.502 (uses and disclosures, general rules)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308", "label": "45 CFR 164.308 (administrative safeguards)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-D/section-160.404", "label": "45 CFR 160.404 (amount of a civil money penalty)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-C/section-160.316", "label": "45 CFR 160.316 (refraining from intimidation or retaliation)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-P/section-424.515", "label": "42 CFR 424.515 (revalidation of enrollment)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.57", "label": "42 CFR 424.57 (DMEPOS supplier standards and revalidation)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-A/section-424.44", "label": "42 CFR 424.44 (time limits for filing claims)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-422/subpart-E/section-422.204", "label": "42 CFR 422.204 (provider selection and credentialing, subpart E)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-422/subpart-D/section-422.204", "label": "42 CFR 422.204 (subpart D listing)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-C/part-455/subpart-E/section-455.414", "label": "42 CFR 455.414 (Medicaid revalidation of enrollment)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.federalregister.gov/documents/2025/12/03/2025-21877/medicare-medicaid-and-childrens-health-insurance-programs-provider-enrollment-application-fee-amount", "label": "CY 2026 Medicare provider enrollment application fee (Federal Register)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/EnrollmentResources/provider-resources/provider-enrolment/Med-Prov-Enroll-MLN9658742.html", "label": "CMS Medicare Provider Enrollment (MLN9658742)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/revalidations", "label": "CMS revalidations", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers/chain-ownership-system-pecos", "label": "CMS PECOS", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html", "label": "HHS sample business associate agreement provisions", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html", "label": "HHS guidance on business associates", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164", "label": "ecfr.gov", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 5 of the 19 named sources that could be read published a usable figure; 14 published none and are recorded as not published, never filled in; 1 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in day (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 14 figures, never sentences; 20 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per obligation: the rule, the clock, the citation and the effective date, quoted verbatim from the CFR or the agency - BAA required provisions (45 CFR 164.504(e)), business-associate breach notice to the covered entity (60 days, 164.410(b)) beside the covered entity's own notice duty (164.404), the HIPAA penalty tiers (160.404), Medicare revalidation (424.515) and its DMEPOS variant (424.57), Medicare Advantage credentialing and recredentialing (422.204), the Medicare claim-filing limit (424.44), Medicaid revalidation (455.414), and the enrolment application fee, which is the only number here that changes every year. The derivation nobody publishes is the CALENDAR: every obligation on one timeline keyed to the contract type a provider actually signs, with changed-since per rule, so a contract owner sees which clock moved this year rather than reading eleven CFR parts", "embed": "

30 to 90 day

14 published figures, Healthcare Contract Compliance Clocks, across 5 sources, read 17 October 2026

Source: Medcontra Healthcare Contract Compliance Clocks
" }