Medicare Advantage Provider Directory Requirements: What Health Plans Must Know in 2026

Ask anyone who has tried to find a behavioral health provider through a Medicare Advantage plan's directory, and the experience is often the same.

The listing looks complete. The phone connects. But the provider retired two years ago, or never saw MA patients to begin with.

This gap between what directories show and what beneficiaries can actually access has defined the regulatory conversation around Medicare Advantage for nearly a decade.

In 2026, that conversation became a compliance mandate with layered financial consequences, from enrollment reversals to cost-sharing liability to publicly visible accuracy scores.

Understanding where the Medicare Advantage provider directory requirements stand today, how they got here, and what accurate management actually looks like operationally is now a strategic priority, not just a compliance task.

Why Provider Directories Have Become a Regulatory Priority

CMS has been auditing Medicare Advantage directories since 2016. That year, they found 52% of provider locations listed in directories were inaccurate. Despite years of guidance memos and audit cycles, the numbers have not improved meaningfully.

The problem runs deepest in behavioral health. A 2025 OIG review found that 72% of inactive providers included in MA and Medicaid managed care directories should not have been listed at all. They were either no longer at the listed location or would not treat patients enrolled in the plan. These are not edge cases. They represent a structural failure in how health plans collect, verify, and maintain provider data at scale, and they are what pushed regulators from guidance to statute.

The Core Requirements MA Plans Have Always Had to Meet

The foundational obligations under 42 CFR 422.111 have been in place for years:

• Maintain both a printed and an online directory of all contracted, credentialed providers
• List each provider by name, specialty, location, phone number, and patient acceptance status
• Include languages spoken, disability access, telehealth availability, and the specific specialty in which the provider serves that plan
• Update directory information when changes occur and ensure beneficiaries can access it without barriers

What the baseline never specified clearly enough: how often verification must happen, what happens when it does not, and how the public would hold plans accountable. That is exactly what the regulatory stack has been building toward.

How the Regulatory Landscape Has Evolved Since 2020

Medicare Advantage provider directory requirements have layered quickly over the past five years.

Each layer added specificity. What was once discretionary became expected. What was expected is now required by statute.

What CMS-4208-F2 Added to the Picture

The shift CMS-4208-F2 introduces is not about new data elements. The core Medicare Advantage provider directory requirements were already in place. What changed is that your directory data now feeds directly into Medicare Plan Finder, the tool beneficiaries use to compare and select plans during open enrollment. Directory accuracy is no longer reviewed internally during audits. It becomes the public-facing representation of your network to every beneficiary making a coverage decision, and the accountability for what appears sits with you.

For a detailed breakdown of CMS-4208-F2's technical specifications, submission deadlines, and enforcement mechanics, see our guide to CMS-4208-F2 compliance.

The REAL Health Providers Act: The Strictest Standards Yet

Signed February 3, 2026, the REAL Health Providers Act codifies directory accuracy in federal statute for the first time. Four provisions define what compliance now requires:

90-day verification: Every provider record must be verified at minimum once every 90 days. This is not a batch outreach cycle. It requires a system that tracks where each record stands in its verification window and flags records approaching the deadline.

Five-business-day removal: When a provider leaves the network, their listing must come down from both online and print directories within five business days. That timeline only works with a live connection between your network management system and your directory platform.

Annual accuracy analysis: Beginning plan year 2028, MA organizations must conduct a statistical accuracy audit using a random provider sample, with heightened attention to specialties with historically high inaccuracy rates, including behavioral health. Results are submitted to HHS.

Public accuracy scores from 2029: CMS will publish each plan's accuracy score publicly, and plans must display it prominently on their own directories. Plans that have managed directories reactively will have that reflected in a score visible to every broker and beneficiary comparing plans at open enrollment.

What "Accurate" Actually Means at the Operational Level

Accuracy is not binary. A record can be correct in some fields and wrong in others, and the wrong fields are often the ones members rely on most. The harder fields to keep current include:

• Whether the provider is accepting new patients, which can shift by payer, plan, and product within a single portfolio
• The specific location where a provider is regularly available, not satellite or occasional sites
• Telehealth availability, required as a directory field beginning in 2026
• The specialty in which the provider serves this specific plan, when they hold multiple credentials

Each of these changes independently of the others, and providers have little incentive to notify plans proactively. That asymmetry is what makes directory accuracy a systems problem, not a data entry problem.

Where Most Health Plans Are Falling Short

Persistent inaccuracy is not for lack of effort. Most plans run outreach. Most have credentialing workflows. The failure is structural, and it shows up in three places consistently.

Delegated data: Roster files from provider groups arrive in varying formats, timing, and structure. Without automated normalization and NPI matching, errors compound rather than get corrected.

Outreach frequency: Annual or quarterly cycles cannot keep pace with actual provider change rates.

Behavioral health gaps: On average, 55% of behavioral health providers listed in MA plan networks did not provide care for plan enrollees, according to the 2025 OIG report. CMS has signaled this specialty will receive heightened scrutiny in accuracy analyses under the REAL Act.

The Enrollment and Revenue Risk No One Is Talking About

Directory errors carry a consequence that gets far less attention than compliance exposure: member disenrollment.

CMS created a Special Election Period for beneficiaries who made MA enrollment decisions based on inaccurate Medicare Plan Finder directory data. Members who discover within three months of coverage starting that their preferred provider was not actually in network can use this SEP to switch plans or return to original Medicare. That is a direct enrollment reversal tied to directory quality.

The REAL Health Providers Act adds cost-sharing liability on top of this. When a member uses a provider listed as in-network who is not, the MA organization covers the out-of-network cost-sharing difference. Every inaccurate listing becomes a potential claims liability. Atlas Systems' 2025 Member Experience Monitor found that 80% of members who encountered a directory error trusted their health plan less as a result. From 2029, that trust deficit will have a government-published score next to it.

Building a Directory Compliance Program That Holds Up

A compliance program built for where the rules are heading requires three operational capabilities working together:

Continuous verification: A system that tracks each provider record's status in real time, not one that cycles through the directory once a quarter.

Automated data normalization: A pipeline that ingests delegated roster files in any format, resolves NPI mismatches, removes duplicates, and pushes clean records downstream without manual intervention.

Live system connectivity: A direct link between network management, credentialing, and directory platforms so that provider departures trigger removal within five business days, not at the next scheduled batch.

Plans building this infrastructure now will enter the 2028 accuracy analysis cycle with a documented track record of improvement. Plans that start in 2027 will be building under deadline pressure while trying to produce a score worth showing publicly in 2029.

PRIME® by Atlas Systems is built for this model: continuous monitoring against live provider data, automated roster normalization, and real-time directory updates at the pace these regulations demand. See how PRIME® supports MA directory compliance.

Get a demo today!

FAQs

What are the current Medicare Advantage provider directory requirements?

MA plans must maintain accurate online and print directories covering name, specialty, location, phone number, patient acceptance status, languages spoken, disability access, telehealth availability, and the specific specialty in which the provider serves that plan. Updates must be made within 30 days of any known change.

How often must Medicare Advantage plans update their provider directories?

Within 30 days of any change under CMS-4208-F2. The REAL Health Providers Act adds proactive 90-day verification for every provider record beginning plan year 2028, plus a five-business-day removal requirement when a provider leaves the network.

What is the penalty for inaccurate provider directories in Medicare Advantage?

Penalties now operate on three levels: directory suppression from Medicare Plan Finder during the Annual Enrollment Period under CMS-4208-F2; cost-sharing liability when a member uses a provider incorrectly listed as in-network; and public accuracy score exposure beginning in 2029 under the REAL Health Providers Act.

How do CMS-4208-F2 and the REAL Health Providers Act differ?

CMS-4208-F2 governs how directory data is submitted to CMS and displayed on Medicare Plan Finder. The REAL Health Providers Act governs the accuracy standards for that data over time and adds cost-sharing liability and public accountability through annual accuracy scores. One establishes the submission pipeline; the other sets the quality standard for what flows through it.

What data elements are required in a Medicare Advantage provider directory?

Required elements include provider name, specialty, practice location, phone number, patient acceptance status, languages spoken, disability accessibility, and telehealth status. Providers must be listed at their regular practice locations only, in the specialty relevant to that plan's network. CMS updates the complete required provider type list annually through the Medicare Advantage Provider Directory Model and Instructions.