Credentialing confirms that a clinician is qualified to practice, verifying licensure, education, training, and board certification, while a background check looks at criminal history, exclusion lists, and identity, information credentialing does not cover. The two processes overlap in places, both may touch licensure status, but neither substitutes for the other, and a healthcare organization that treats them as interchangeable is likely leaving a gap in its hiring and compliance program.
This confusion shows up constantly in healthcare hiring. A medical staff office runs a thorough credentialing file and assumes criminal history is covered. An HR team runs a criminal background check and assumes licensure is verified. Both assumptions can be wrong, and the gap between them is exactly where compliance risk lives.
What credentialing actually verifies
Credentialing is the process of confirming that a physician, nurse, or other clinician holds the qualifications required to practice and, in many settings, to hold privileges at a specific facility. A credentialing file typically documents:
- Active state licensure, verified directly with the issuing board
- Medical or professional school education and completed residency or training programs
- Board certification status in the relevant specialty
- Work history and any gaps in that history
- Malpractice history and adverse privileging actions at prior facilities
- National Practitioner Data Bank (NPDB) queries, run by hospitals, health plans, and other authorized entities as part of credentialing and peer review
The NPDB is a federal repository that holds reports on medical malpractice payments and certain adverse actions tied to healthcare practitioners, and access is limited to eligible entities under federal regulation rather than open to the public (NPDB, About Us). A hospital credentialing committee queries the NPDB as one input into a privileging decision. This is a clinical qualifications review, generally owned by a medical staff office, a credentialing verification organization, or a health plan network team, and it is built around a specific question: is this person qualified and in good standing to practice medicine or deliver a specific type of care.
What background screening actually verifies
Background screening asks a different question: does this person’s history raise a risk unrelated to clinical competence that the organization should know before placing them in a role. A background check for a healthcare hire typically includes:
- Criminal record searches at the county, state, or federal level
- Identity verification, often through a Social Security number trace
- Sex offender registry searches
- Exclusion and sanctions checks against federal lists such as the OIG List of Excluded Individuals/Entities (LEIE) and SAM.gov
- Employment verification and, depending on the role, motor vehicle record checks
This is the work of a consumer reporting agency operating under the Fair Credit Reporting Act, and inside a healthcare organization it is usually run by HR or a talent acquisition team, not the medical staff office. A healthcare background check and a healthcare compliance and sanctions check are built to answer questions credentialing was never designed to answer, because criminal history, exclusion status on a federal payment list, and clinical qualifications are three separate facts about a person.
Where the two overlap, and where they do not
The overlap is real but narrow. Both processes typically touch license verification, since an excluded or disciplined license matters to both a credentialing committee and an HR compliance file. Both may surface information relevant to patient safety. But a clean credentialing file says nothing about whether a candidate has a pending criminal case, and a clean criminal background check says nothing about whether a candidate’s board certification has lapsed or whether a prior hospital revoked their privileges.
Exclusion list screening sits in an especially easy spot to miss, because it can look like it belongs to either process. The OIG List of Excluded Individuals/Entities is a national list of people and entities excluded from participation in Medicare, Medicaid, and other federal healthcare programs, maintained under the exclusion authority in the Social Security Act (OIG, Background Information and Exclusion Authorities). The consequence of exclusion is direct: “no Federal health care program payment may be made for any items or services furnished (1) by an excluded person or (2) at the medical direction or on the prescription of an excluded person” (OIG, The Effect of Exclusion From Participation in Federal Health Care Programs). That prohibition can reach beyond the excluded individual to the organization that employs or contracts with them, which is why exclusion screening belongs in a healthcare compliance program even when a state license is active and a credentialing file looks complete.
SAM.gov exclusions are a separate, broader system covering federal procurement and nonprocurement transactions, and they do not fully overlap with the LEIE, so an organization that receives any form of federal funding beyond Medicare or Medicaid billing has reason to check both lists rather than one. A deeper walkthrough of how the two databases work together is in Reveal’s guide to healthcare exclusion screening against the OIG LEIE and SAM.
Comparison: credentialing vs background screening
| Question | Credentialing | Background screening |
|---|---|---|
| What it answers | Is this person qualified to practice or hold privileges | Does this person’s history raise a risk outside clinical qualifications |
| Typical owner | Medical staff office, credentialing verification organization, or health plan network team | HR, talent acquisition, or a consumer reporting agency under the FCRA |
| Core inputs | License verification, education, board certification, work history, NPDB query | Criminal records, identity verification, sex offender registry, exclusion and sanctions lists |
| Governing framework | State licensing boards, facility bylaws, accreditation standards, NPDB regulations | Fair Credit Reporting Act, state background check laws |
| Typical cadence | Initial credentialing plus periodic recredentialing, often every one to three years | Pre-hire check plus ongoing exclusion monitoring, commonly monthly for the LEIE |
Who runs what, inside a typical healthcare organization
In most hospitals and health systems, credentialing and background screening are run by different teams on different timelines, which is exactly how the gap opens up. The medical staff office or a credentialing verification organization manages primary source verification, NPDB queries, and privileging decisions for practitioners who need clinical privileges. HR or talent acquisition manages the pre-employment background check for every hire, clinical and non-clinical, and typically owns the ongoing exclusion list monitoring required to keep billing compliant. A consumer reporting agency supports the HR side of that work, while credentialing verification organizations and the medical staff office support the clinical qualifications side.
The risk is not that either team does its job poorly. It is that each team can reasonably assume the other one covers ground it does not. A candidate can clear credentialing on qualifications and still have a criminal history relevant to a patient-facing role that credentialing was never built to catch. A candidate can clear a criminal background check and still hold a license under active discipline that only a credentialing verification step would surface. Failing to catch either gap can also feed a broader negligent hiring exposure if an organization placed someone in a role without reasonably looking into risks relevant to that job.
State requirements add another layer
Beyond federal exclusion lists and NPDB rules, individual states set their own licensing, disciplinary reporting, and background check requirements for healthcare workers, and those requirements vary by state and by license type. Some states mandate fingerprint-based criminal background checks for specific healthcare roles, others set their own timelines for license verification, and state Medicaid programs may run their own provider screening on top of federal requirements. Because these rules change and differ by jurisdiction, an organization should confirm current state-specific obligations rather than assume federal exclusion and credentialing steps are sufficient everywhere.
Why ongoing monitoring matters for both processes
A one-time check at hire is a snapshot, not a guarantee. Credentialing files are refreshed on a recredentialing cycle, and a license or privilege status can change in between. On the screening side, OIG updates the LEIE monthly, and its own guidance states that “screening employees and contractors each month best minimizes potential overpayment and CMP liability,” while also clarifying that providers are not required by statute or regulation to check the LEIE (OIG, The Effect of Exclusion From Participation in Federal Health Care Programs). That monthly cadence is a strong practical benchmark even though it is not itself a legal mandate for every organization. Reveal’s guide to continuous background check monitoring covers how ongoing screening fits alongside a pre-hire check, and organizations weighing how a first check fits into onboarding timelines can review how long an employment background check typically takes.
Bringing the two together
Neither credentialing nor background screening is optional, and neither one is a substitute for the other. A defensible healthcare hiring and compliance program treats them as two coordinated tracks: credentialing confirming clinical qualifications and standing, background screening confirming criminal history, identity, and exclusion status, with clear ownership for each and a process for keeping both current after hire. Reveal supports the screening side of that work with employment background checks, national criminal record searches, and healthcare-specific exclusion and sanctions checks, information that requires human review and an individualized decision rather than an automated verdict. Organizations comparing screening packages can review Reveal’s pricing for current options.
Frequently asked questions
Does credentialing include a criminal background check?
Not on its own. Credentialing focuses on verifying qualifications, licensure, education, board certification, and work history, along with an NPDB query where applicable. A separate criminal background check is needed to search county, state, or federal criminal records, verify identity, and check sex offender registries.
Does a background check confirm someone is properly licensed?
A background check can include license verification as part of a broader screening package, but it is not the same as full credentialing. Credentialing goes further, confirming education, training, board certification, malpractice history, and privileging status, which a standard background check typically does not cover.
How often should healthcare organizations check the OIG exclusion list?
OIG updates the LEIE monthly and states that screening employees and contractors each month best minimizes potential overpayment and civil monetary penalty liability, while also noting that providers are not required by statute or regulation to check the LEIE (OIG guidance). Many organizations treat monthly screening as the practical standard even where it is not a strict legal mandate.
Who is responsible for credentialing versus background checks in a hospital?
These usually sit with different teams. A medical staff office or credentialing verification organization typically manages credentialing and NPDB queries tied to clinical privileges, while HR or talent acquisition typically manages pre-employment background checks and ongoing exclusion list monitoring for all hires. Requirements and internal structures vary by organization and by state.
Related Reading
This article is general information, not legal advice. Credentialing, exclusion screening, and background check requirements vary by state, by license type, and by facility, and they change over time. Confirm current obligations with your own counsel and compliance team before building or updating a screening program.
