Guide
How Often to Re-screen for Exclusions
By Keelstar Team · Updated June 1, 2026
The short answer
Re-screen vendors and employees on a fixed schedule — monthly or quarterly is common for healthcare organizations, with annual minimums for lower-risk relationships. Exclusions and sanctions lists update continuously; a clear result at onboarding expires the moment a party is added to a list. Your written policy should define frequency by risk tier and require automated reminders.
Why one-time screening fails
Exclusion and sanctions lists change daily. OIG publishes monthly updates to the LEIE; OFAC adds and removes SDN entries on an ongoing basis. A vendor cleared in January can be excluded in March. Without re-screening, your compliance program has a growing blind spot.
Industry norms in U.S. healthcare
Healthcare providers subject to CMS conditions of participation or payer credentialing requirements typically re-screen employees monthly or quarterly. Vendors with billing access or clinical involvement follow similar cadences. Low-touch administrative vendors may re-screen semi-annually or annually if your risk assessment supports it — document the rationale.
Build risk-based tiers
Not every relationship carries equal exposure. Define tiers in your compliance policy and assign a re-screen frequency to each.
- Tier 1 — employees, billing vendors, clinical contractors: monthly or quarterly
- Tier 2 — general vendors with system or facility access: quarterly or semi-annually
- Tier 3 — low-risk, non-healthcare vendors: annually with documented risk assessment
- Ad hoc — re-screen immediately after name changes, mergers, or adverse news
Trigger-based re-screening
Scheduled checks are the baseline. Also re-screen when a vendor changes legal name, ownership structure, or banking details; when an employee's legal name changes; when you renew a contract; and when a regulator or payer updates screening requirements in your agreement.
Put the schedule in writing
Your exclusion screening policy should state frequencies by tier, responsible owners, and what happens when a re-screen is overdue — hold payment, suspend access, or escalate to compliance. Verbal 'we check quarterly' without a enforced schedule does not hold up in an audit.
Automate so the schedule survives turnover
Calendar reminders and spreadsheet due dates depend on someone remembering. Automated re-screening runs on the defined cadence, logs results, and flags overdue checks before they become audit findings. That is the difference between a policy document and an operating control.
Frequently asked questions
- Is annual re-screening enough?
- Annual checks may satisfy some low-risk relationships, but CMS and payer scrutiny often expect more frequent screening for healthcare providers and vendors touching federal programs. Many organizations use monthly or quarterly cycles.
- Should employees and vendors use the same schedule?
- Not necessarily. Risk-based tiers are standard — clinical and billing staff often re-screen more frequently than administrative vendors with no patient or claims access.
Related guides
Put this into a monitored workflow
Exclusion Monitor handles this continuously — with reminders and an audit trail.