Medical Practice Start-Up Regulatory Build

Last updated: November 2026. All linked regulations: current eCFR text, page opened 2026-11-05 via official GPO data. Title 42 last amended 2026-10-08; Title 29, 2026-09-30; Title 45, 2026-11-03.

A medical practice start-up regulatory build is the sequenced plan a new physician group assembles so it can enroll in Medicare, hold the certificates and written programs its services require, and open ready to bill. Integral Healthcare Solutions (IHS) drafts the sequence plan, the enrollment packet checklist and the policy and safety program set; the physicians approve, sign and file. It is program development work, not a billing service or legal advice.

What does a new physician group need in place before it can bill Medicare?

It needs a complete enrollment application filed with the designated Medicare fee-for-service contractor, and it must be operational to furnish covered items or services before billing privileges are granted (42 CFR 424.510(d)(1), (d)(6)). Section 424.502 defines operational: a qualified physical practice location, open to the public for providing health care related services, prepared to submit valid Medicare claims, and properly staffed, equipped and stocked, as applicable to the organization type, specialty and services. The source note cites amendments through 90 FR 55617 (December 2, 2025).

IHS organizes the drafting work around the topics below. This is a project plan, not a statement that the rules require this sequence; the practice and its counsel determine applicable requirements and timing.

1. Entity and signer. A group's application is signed by an authorized official, whose signature legally binds the organization (42 CFR 424.510(d)(3)(i)(C)).
2. Location, licenses and staff. Operational status (d)(6) and the licenses filed with the application (d)(2)(iii)(A) depend on them.
3. Laboratory certificate. Under 42 CFR 493.3(a), a laboratory needs the applicable current, unrevoked or unsuspended HHS certificate or CLIA-exempt status to avoid being cited under section 353 of the Public Health Service Act, subject to paragraph (b). Its exceptions cover forensic-only testing; research testing that does not report patient-specific results for diagnosis, prevention, treatment or individual health assessment; and drug testing in SAMHSA-certified laboratories that meets SAMHSA guidelines and regulations. Other testing in those laboratories remains subject to the rule. See CLIA laboratory start-up.
4. Employee safety. An employer with occupational exposure must have a written Exposure Control Plan to eliminate or minimize exposure. Occupational exposure means reasonably anticipated skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials resulting from employee duties. Review and update the plan at least annually and whenever needed for changed exposure-related tasks, procedures or positions. Updates must reflect technology that reduces or eliminates exposure and annually document consideration and implementation of appropriate, commercially available, effective safer medical devices (29 CFR 1910.1030(b), (c)(1)(i), (iv)). See OSHA bloodborne pathogens program.
5. Privacy and security. A covered entity or business associate must conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity and availability of the electronic protected health information it holds (45 CFR 164.308(a)(1)(ii)(A), Required). A health care provider is a covered entity if it transmits health information electronically in connection with a transaction covered by that subchapter (45 CFR 160.103). See HIPAA Security Rule risk analysis.
6. Filing calendar for the practice to review and approve.

What does 42 CFR 424.510 require of the application and the signer?

In IHS's words, the paragraphs that shape a start-up:

• Responses and documents. Complete, accurate and truthful responses to all information requested for the provider or supplier type (d)(2)(i); documents that uniquely identify the provider, which may include, but are not limited to, proof of legal business name, practice location, SSN, TIN, NPI if issued, and owners (d)(2)(ii); all applicable Federal and State licenses and certifications (d)(2)(iii)(A); and other documentation needed to verify the application, including but not limited to ownership or management documentation (d)(2)(iii)(C).
• Signature. An authorized official signs initial and revalidation applications. The official must be authorized to bind the organization legally and financially and have an ownership or control interest as defined in section 1124(a)(3) of the Act, or a position of similar status and authority (42 CFR 424.510(d)(3)). For other updates, a delegated official may sign after delegation is established. The authorized official on file must assign the delegation; it must be submitted through the appropriate enrollment application or CMS electronic process, include the delegate's title and SSN, and carry both officials' signatures. The delegate must have an ownership or control interest or be a W-2 managing employee ((d)(3)(ii)(A)-(E)).
• Responsibility. All providers and suppliers are legally responsible for the accuracy, completeness and truthfulness of all information they provide on or with their applications, regardless of whether another party completed the application (d)(10).

For the CMS-855 forms, see Medicare provider enrollment consulting.

How does the billing effective date affect when a new group files?

For physicians and physician organizations, the effective date of billing privileges is the later of the date of filing of an enrollment application that is subsequently approved, or the date the provider first began furnishing services at a new practice location (424.520(d)(1), (d)(2)). Seeing patients before filing does not move the date earlier than the filing date.

Section 424.521(a)(1) lets these provider types bill retrospectively, when all program requirements including State licensure are met and the services were provided at the enrolled practice location, for up to 30 days before the effective date if circumstances precluded enrollment in advance, or up to 90 days if a Presidentially-declared disaster under the Robert T. Stafford Disaster Relief and Emergency Assistance Act precluded enrollment before services were provided to Medicare beneficiaries. IHS drafts a filing calendar for the practice to review.

Who needs a medical practice start-up build, and what triggers it?

This service is for physician groups preparing a new practice for Medicare enrollment. Later work may address ownership changes, adverse legal actions, or changes, additions or deletions of practice locations, which physician groups must report within 30 days; other enrollment changes must be reported within 90 days (424.516(d)). A changed signer or outside application preparer may also prompt a packet review.

How does IHS build a medical practice start-up?

IHS works in five steps as an outside drafting team under the founding physicians and administrator.

1. Gap assessment. IHS lists what the group has against what these rules call for.
2. Packet mapping. IHS ties each application item to its supporting document.
3. Drafting. IHS drafts the sequence plan, policy set, safety and privacy programs, and an owner-and-date sheet for each task. The physicians approve each one.
4. Mock review. IHS reads the finished packet looking for blanks, mismatched names and missing licenses.
5. Readiness support. IHS drafts briefing notes for your administrator at filing and opening.

You supply the legal business name, practice location, tax and NPI information, licenses, ownership documentation, the CMS-588, the authorized official's signature, and the physicians' approval of each draft. The real limit: IHS does not file or sign the application and does not contact CMS, the Medicare contractor or any payer for the practice.

IHS, founded in 2002, is led by Thomas G. Goddard, JD, PhD, former Chief Operating Officer and General Counsel of URAC. Its practice lines are accreditation consulting, compliance services and program development; this program is program development.

What should a new practice have ready for a start-up build?

Bring the following documents and decisions for review.

• The applicable enrollment application, completed fully (42 CFR 424.510(a)(1), (d)(2)(i)).
• Licenses, certifications and ownership documentation, CMS-588 and the named authorized official (42 CFR 424.510(d)(2)(iii), (e)(2), (d)(3)).
• Evidence the practice is operational (424.502).
• The CLIA certificate decision, if specimens will be examined on site (42 CFR 493.3(a)).
• The written Exposure Control Plan, if any employee has occupational exposure (29 CFR 1910.1030(c)(1)(i)).
• The risk analysis, if the practice is a covered entity (45 CFR 164.308(a)(1)(ii)(A)).
• An IHS-requested review log to support the practice's accuracy checks; the log itself is not required by 42 CFR 424.510(d)(10).

If most of these do not exist yet, a free introductory call with IHS sorts what to build first.

How does an outside start-up build compare with the other routes?

A new group can start up in several ways, and they are not exclusive. The table does not rank them.

What does a medical practice start-up build cost?

Under 424.514(a), (b), institutional providers submit the applicable fee, a hardship-exception request, or both at initial enrollment, enrollment of a new practice location or revalidation; hardship requests accompany the application. Section 424.502 excludes physician and nonphysician practitioner organizations from the CMS-855B category of institutional providers. That exclusion concerns their CMS-855B enrollment, not every possible enrollment of a related entity. Verify current fees with CMS.

IHS scopes each engagement after a free introductory call; scope moves with the number of physicians and locations, the services offered and how much already exists.

What this is not

This is not legal advice. IHS is a consulting firm, not a law firm; questions about structure, ownership or contracts go to your counsel. It is not a billing service or a guarantee that the Medicare contractor will approve an application.

Frequently asked questions

What does a new medical practice have to do to enroll in Medicare?

It submits a complete enrollment application and supporting documentation to the designated Medicare fee-for-service contractor, with complete, accurate and truthful responses (42 CFR 424.510(d)(1), (d)(2)(i)). It must be operational before billing privileges are granted (d)(6).

In what order should a new physician group do enrollment, licenses, lab certificate and safety programs?

IHS organizes a drafting plan around the signer, location, licenses, laboratory testing, employee safety, information security and enrollment. This is a project plan, not a legally required sequence; the practice and its counsel determine requirements and timing.

Who can sign a Medicare enrollment application for a group practice?

An authorized official signs a group's initial and revalidation applications (42 CFR 424.510(d)(3)). The official needs authority to bind the group legally and financially and an ownership or control interest as defined in section 1124(a)(3) of the Act, or a position of similar status and authority. Other updates may be signed by a delegated official after delegation meeting (d)(3)(ii)(A)-(E) is established.

Does a practice have to be operational before it is granted Medicare billing privileges?

Yes. The provider or supplier must be operational to furnish Medicare covered items or services before being granted Medicare billing privileges (42 CFR 424.510(d)(6)).

What happens if the enrollment application has errors, and who is responsible for them?

Providers and suppliers remain legally responsible for the accuracy, completeness and truthfulness of application information, whoever completed it (42 CFR 424.510(d)(10)). That paragraph does not specify the consequences of an error.

Can a consultant complete the enrollment application for a practice?

Section 424.510(d)(10) leaves providers and suppliers responsible even when another party completes an application. For initial enrollment, the group's authorized official signs under (d)(3). IHS drafts; the practice reviews, signs and files.

What is the CMS-588 form and when is it required?

It is the form submitted to receive Medicare payment by electronic funds transfer. Providers and suppliers must agree to EFT payment at enrollment, revalidation, a change of Medicare contractors where they were already paid by EFT, or an enrollment change request (42 CFR 424.510(e)).

Does a new physician group pay a Medicare application fee?

Section 424.502 excludes physician and nonphysician practitioner organizations from the CMS-855B category of institutional providers subject to the application fee. The exclusion concerns that enrollment; it does not establish the fee status of every related entity or application.