Guide

Directory duties: verify on the payer's clock

Summary

Under the No Surprises Act, keep the directory information health plans hold about you accurate and current, updating it when your network status, address, or panel changes. The teeth are financial: when a patient relies on inaccurate information that shows you as in-network, they owe only the in-network cost-sharing amount, and you cannot bill the difference. In practice the cadence runs on each payer's re-attestation clock, not one federal deadline.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

What does the NSA require of my directory listing?

Keep the directory information plans hold about you accurate, and correct it when your status changes. The No Surprises Act is the federal transparency law behind this duty, and its consumer protection is what gives the duty force: a patient who relies on inaccurate information that shows you as in-network can be charged no more than the in-network cost-sharing amount 12. The obligation is less a filing than a standing habit of keeping payers' records true.

That means the burden of an out-of-date listing lands on you, not the patient. If a plan's directory says you take a patient's coverage and you do not, the patient is protected and the shortfall is yours to absorb. The practical takeaway for a solo practice is that directory accuracy is a revenue-protection task, not a compliance formality you can let slide.

The financial teeth: in-network cost-sharing on reliance

This is where a listing error costs money. When a patient reasonably relies on inaccurate directory information — the plan told them you were in-network — and gets care from you, their cost-sharing is capped at the in-network amount and the balance cannot be billed to them 1. You collect the in-network share and lose the difference between that and your intended charge. When the directory lists you wrong, the correction is retroactive to the patient's benefit, not yours.

The protection is designed to keep patients from being punished for a database error they had no way to catch. For you, the lesson is defensive: verify a new patient's actual network status against the plan yourself at intake rather than trusting any directory — including your own listing — as the last word on coverage. The few minutes that check takes is trivial against the full-fee shortfall a wrong listing can create, and it spares the patient a bill they were told not to expect — the exact outcome the protection was written to produce, and no small thing for a practice that lives on referrals and goodwill.

Verifying on the payer's clock

There is no single federal date; you move when each payer asks. Payers publish their own provider policies and processes — Anthem's provider portal 3 and Aetna's published policy pages 4 are two examples — and each sets how you keep your listing current, with your contract controlling the exact process. Many payers draw directory and credentialing data from a shared database and require periodic re-attestation, so a lapsed attestation is a common way a listing silently goes stale.

The pragmatic workflow runs from ProView to the provider directory: keep your profile in the shared credentialing database current, complete each re-attestation when it lands, and treat those prompts as hard deadlines rather than reminders. A recurring calendar hold to review your listings — a common practice among solo practices that manage their own credentialing — catches drift before a patient does.

The state layer

Federal law is not the only source of directory duties. State insurance departments regulate fully-insured plans and impose their own network-adequacy and directory-accuracy requirements, and the National Association of Insurance Commissioners coordinates the model laws that states adapt 5. For a state-regulated plan, the directory-accuracy rule that actually binds your patient's coverage may be your state's, not the federal baseline.

Because these rules vary, find your own state's department of insurance and read its directory-accuracy and prompt-pay provisions rather than assuming the federal frame is the whole picture. Self-funded employer plans generally answer to federal law, while fully-insured plans answer to the state — a distinction worth knowing when a directory dispute turns on which rulebook applies to a given patient's plan. Reading your state's rule once, and noting which of your contracted plans are state-regulated versus self-funded, turns an abstract federalism question into a short list you can act on when a coverage dispute actually lands.

What to update, and when

Update whenever a fact a patient would rely on changes. The events that most often make a listing wrong are concrete, and each one is a trigger to refresh your payer records the same week it happens rather than at the next scheduled attestation. Waiting until the next cycle is the gap where a patient books on stale information.

  • Network status — you join or leave a plan's network, or a contract lapses
  • Practice location — a new office, a closed location, or a move
  • Contact details — phone, address, or the way patients reach you to schedule
  • Panel status — you open or close to new patients
  • Specialty or service scope — a change in what you offer or the populations you serve

Each of these is a material change that a directory should reflect promptly. Logging them into your credentialing profile as they occur keeps the once-a-cycle attestation from becoming a scramble.

Where directory duty meets the rest of the NSA

Directory accuracy is one thread in the No Surprises Act, and it connects to the others. The same statute that protects a patient relying on a wrong listing also drives the good-faith-estimate rules that shape the NSA for office practice, and it sits alongside the balance-billing limits and the patient's dispute path known through the $400 rule. Treating them as one system, rather than separate errands, is how a solo practice stays clean.

Enforcement of the NSA runs through federal and state channels, so understanding NSA enforcement helps you weigh where directory risk actually bites. For a self-pay practice, the directory duty overlaps less with day-to-day billing than the estimate rules do — but for any patient you see through insurance, an accurate listing is the difference between collecting your contracted rate and eating a shortfall you cannot pass on.

Common questions

There is no single federal date you must hit. The practical cadence is set by each payer's re-attestation process and your contract with that payer, and by any state directory-accuracy rule that applies. Update material changes — network status, address, panel status — the week they happen, and complete each payer's re-attestation prompt when it arrives.

A patient who relies on that inaccurate information can be charged no more than the in-network cost-sharing amount, and you cannot bill them the difference. The financial loss from the error falls on you, not the patient. That is why verifying a patient's actual network status at intake, independent of any directory, is worth the minute it takes.

Broadly, yes. Fully-insured plans answer to state insurance regulators and their directory-accuracy rules, while self-funded employer plans generally fall under federal law. When a directory dispute turns on a specific patient's coverage, knowing which rulebook governs their plan tells you which accuracy standard and which enforcer actually apply.

It is the backbone, because many payers pull directory data from a shared credentialing database, but it is not automatically enough. Some payers maintain separate directory processes, and state-regulated plans may impose their own requirements. Keep the shared profile current, complete each payer's re-attestation, and confirm your listing reads correctly wherever patients actually search.

The in-network cost-sharing protection turns on a patient relying on insurance directory information, so a purely self-pay practice has little directory exposure on that front. The moment you contract with any plan and appear in its directory, the accuracy duty and its financial consequence attach for those patients.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.Centers for Medicare & Medicaid Services (2026). No Surprise Billing. Centers for Medicare & Medicaid Services (CMS). linkThat the No Surprises Act restricts balance billing in defined settings, including the protection that a patient who relies on inaccurate in-network directory information owes only the in-network cost-sharing amount, with CMS hosting the implementing guidance.
  2. 2.Office of the Federal Register (2026). 45 CFR Part 149 — Surprise Billing and Transparency Requirements. eCFR. linkThe operative federal rule implementing the No Surprises Act's surprise-billing and transparency requirements, the regime within which the directory-accuracy obligation and its patient protection sit.
  3. 3.Anthem (2026). Anthem Provider Policies. Anthem provider portal. linkThat a payer publishes its own provider policies and processes on its provider portal — cited as a single named example of a payer-specific process, with the reader's contract controlling the exact requirements.
  4. 4.Aetna (2026). Aetna Clinical Policy Bulletins. Aetna provider portal. linkThat a payer publishes its own provider policies on its provider portal — cited as a second named example of a payer-specific process, with the reader's contract controlling the exact requirements.
  5. 5.National Association of Insurance Commissioners (2026). National Association of Insurance Commissioners. NAIC. linkThat state insurance departments regulate fully-insured plans and impose their own network-adequacy and directory-accuracy requirements, with the NAIC coordinating the model laws states adapt.

https://www.gale.care/for-providers/nsa-directory-response-duty · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)