Credentialing by proxy for teleradiology (CMS 482.22)

Ask a medical staff office how long it takes to bring on a teleradiology group and you'll usually hear the same assumption: every remote radiologist must clear the hospital's full privileging cycle, one physician at a time, before the first study is read. That assumption has been wrong since 2011. Credentialing by proxy, the mechanism at 42 CFR 482.22 of the Medicare Conditions of Participation, lets your governing body grant privileges to telemedicine physicians by relying on the distant site entity's own credentialing and privileging decisions, under a written agreement that carries the elements the regulation lists. Your board still grants the privileges. What collapses is the calendar: a packet review, then one board meeting.

The assumption is expensive. A hospital that prices outsourced coverage as a six month credentialing project will often decline it and keep living with the gap: the overnight worklist nobody signs, the locum bill, the transfer that happens because the study sat unread. The regulation was written to take that arithmetic off the table. The scenario that most often forces the timeline is standing up nighthawk radiology coverage before the next contract year begins.

42 CFR 482.22 gives credentialing by proxy two paths

Credentialing by proxy runs down one of two paths, depending on who the distant site is. If the distant site is another Medicare-participating hospital, 42 CFR 482.22(a)(3) lets your governing body privilege its telemedicine physicians on the strength of that hospital's credentialing decisions, backed by an agreement satisfying 42 CFR 482.12(a)(8). If the distant site is a telemedicine entity, which is what a teleradiology group is, 42 CFR 482.22(a)(4) applies, with the parallel governing-body duty at 42 CFR 482.12(a)(9): the same principle with a longer list of agreement elements, covered below.

Three points clear up most of the confusion. Your board remains the decision maker: the CMS State Operations Manual instructs surveyors that the hospital's governing body must grant privileges to each telemedicine physician before that physician provides services, so proxy changes the evidence the board relies on and each named radiologist still receives a recorded grant of privileges. Privileges stay specific: each radiologist carries a delineated privilege list, and if the entity's list stops at body CT, your grant stops there too. And licensure stays exactly where it was. The physician must hold a license issued or recognized by the state where your hospital sits: proxy credentialing is a privileging shortcut, never a licensure one. The state licensing side is its own analysis.

A compliant written agreement carries the entire mechanism

Without a written agreement that meets 42 CFR 482.22(a)(4), credentialing by proxy doesn't exist, and the agreement is the first document a surveyor reads. For a teleradiology group, the regulation requires five commitments on paper. The entity furnishes services in a way that lets your hospital meet its contracted services obligations under 42 CFR 482.12(e). Its credentialing and privileging program meets or exceeds the hospital standards at 42 CFR 482.12(a)(1) through (a)(7) and 482.22(a)(1) and (a)(2). Every physician reading for you is privileged at the entity, and you hold a current copy of that privilege list. Every physician is licensed in the state where your patients are located. And your hospital reviews each physician's services and sends the results back for periodic appraisal.

That last commitment is where surveys go wrong, because it turns proxy from a one-time signature into a standing obligation. The regulation requires your hospital to review the services each telemedicine physician furnishes and to send that information back to the distant site entity for its periodic appraisal, including, at minimum, every adverse event arising from those services and every complaint your facility has received about the physician. Most hospitals negotiate the agreement, file it, and forget the loop. A surveyor who finds the signed agreement with no evidence of feedback will cite the hospital, because the obligation sits on your side of the contract. The fix is administrative and cheap if you build it at go-live. Name an owner in the medical staff office. Set a cadence, quarterly is common, and write it into the agreement itself. Send the report even in a quiet period, because a dated memo saying there were no adverse events and no complaints is still evidence. Two years in, when a surveyor asks how periodic appraisal works for your teleradiologists, the answer is a folder, and the question takes five minutes.

Medical staff bylaws are the second trap. If your bylaws describe a single credentialing pathway with no telemedicine provision, they must be amended before proxy can be used, and bylaws amendments move on the medical executive committee calendar. Start that conversation before the vendor conversation.

Expect a complete packet for every radiologist

For each radiologist who will read for your facility, the distant site entity should deliver a current, dated evidence packet as a set. Seven items belong in the packet your medical staff office reviews:

• Primary source verified licensure in the state where your patients are located.
• ABR board certification with fellowship documentation.
• The current delineated privilege list the entity has granted, which bounds what your board can grant.
• Malpractice history and current coverage, including whether the policy is claims made with tail or occurrence based.
• A National Practitioner Data Bank query.
• Peer review and performance data showing the entity runs the internal review it attests to.
• A named recipient for the adverse event and complaint information you're obligated to send back.

Ask for a sample packet during evaluation, before you sign. A group that produces a complete, dated packet for a named radiologist within a day or two runs a working credentialing operation. A group that needs three weeks to assemble one will need three weeks per radiologist forever, and the regulation can't fix that. This test belongs alongside the other diligence items in our teleradiology buyer's guide.

How is credentialing by proxy different from delegated credentialing?

Credentialing by proxy, delegated credentialing and full medical staff review rest on three different legal bases and solve three different problems: proxy governs privileging at your hospital under 42 CFR 482.22, delegated credentialing governs network participation and payer enrollment under contract, and full medical staff review is your own bylaws verifying everything from scratch. Sales conversations blur them constantly.

The distinction that bites at contract time: proxy addresses privileging at your hospital, and delegated credentialing addresses enrollment with payers. Solving one leaves the other open. A radiologist can be fully privileged at your facility through proxy and still be unenrolled with a payer whose panel your reports must reach, which surfaces as a billing problem a month after go-live if nobody sequenced it.

Four boundaries where proxy stops

Proxy has hard edges. Check four of them before you build a timeline on the mechanism.

Non-hospital sites. 42 CFR 482.22 sits in the hospital Conditions of Participation. If your reading need is a freestanding imaging center, an urgent care group, or a physician-owned outpatient facility, proxy is the wrong tool for you: those facilities credential under their own policies and their accreditor's requirements, which are lighter to begin with, and the same packet satisfies them.

State law. The Medicare CoPs set a federal floor. State hospital licensure rules and medical staff statutes can layer their own privileging requirements on top, and a few states are prescriptive about whose decisions a governing body may rely on. Have counsel check your state before the agreement is drafted; our Texas and Florida pages cover the licensure half of that analysis.

Accreditor expectations. The Joint Commission aligned its standards with the CMS rule and permits privileging by proxy for telemedicine practitioners, expecting the same written agreement and the same evidence of ongoing review. The alignment runs one way, and CMS said so itself: in the 2011 final rule on hospital and critical access hospital telemedicine credentialing, CMS recorded that the accreditor must conform its program to the Medicare credentialing and privileging provisions and has been statutorily required to meet or exceed them. DNV and other accreditors have equivalents of their own. Ask your accreditation manager to confirm the current standard.

Everything beyond privileging. Proxy leaves payer enrollment, malpractice verification, the HIPAA business associate agreement, interface security review, and your own quality oversight untouched; those workstreams run in parallel. Our compliance page sets out the security and regulatory side of an AstraRad engagement.

AstraRad supplies the evidence a 482.22(a)(4) agreement names

We maintain the credentialing and privileging program a 482.22(a)(4) agreement references, and we supply the per-radiologist packet your medical staff office reviews. Every radiologist on the panel is board-certified, fellowship-trained, physically located in the United States, and licensed in the state where your patients are located. For each one who will read for your facility, you receive primary source verified licensure, ABR certification and fellowship documentation, the delineated privilege list we've granted, malpractice history and current coverage, NPDB results, and our internal performance review record.

That review record is working peer review data. We independently double-read 1 in 20 signed studies, and our major discrepancy rate runs under 0.3% of final signed reports; the underlying case level record is what we submit as evidence of the internal review the regulation requires. Each discrepancy is reviewed at the monthly discrepancy meeting and closed with the reading radiologist. The full measurement method is published in the SLA and QA methodology.

The obligation running back to us is part of the design. At go-live we name a recipient for your adverse event and complaint reporting, confirm the cadence in writing, and keep a mirrored record on our side, so a survey question about periodic appraisal gets the same answer from both parties. If you're replacing an incumbent, sequence the credentialing work inside the notice period; our guide to switching teleradiology providers walks through that overlap.

The agreement is the mechanism. The packet is the proof. Send us the telemedicine language from your medical staff bylaws and we'll tell you whether credentialing by proxy is open to you as written or needs an amendment first. Book a coverage consultation and it goes straight to the credentialing team. The rest of the onboarding research lives in the teleradiology resource library.