F-Tags and Staff Credentialing in Skilled Nursing Facilities: What SNFs Need to Track

Staff credentialing is one of the most important—and frequently fragmented—compliance responsibilities in a skilled nursing facility. A nursing home depends on licensed nurses, nurse aides, physicians, therapists, social workers, administrators, contractors, agency personnel and other professionals to provide services to residents. Each category of worker may be subject to different licensing, certification, competency, training, screening and documentation requirements.

Credentialing therefore involves much more than keeping a copy of a nurse's license in an employee file. A comprehensive credentialing process may include verifying professional licenses, monitoring expiration dates, checking nurse aide registries, maintaining CPR certifications, documenting required education and competencies, tracking immunization requirements, performing background and exclusion screening, and ensuring that contracted personnel meet applicable requirements.

Failure in any one of these areas can expose a skilled nursing facility to survey deficiencies, repayment obligations, civil monetary penalties and other compliance risks. CMS maintains F-tags that surveyors use when determining whether nursing homes comply with federal requirements, and several of those F-tags directly or indirectly address staff qualifications and credentialing. CMS's current nursing-home citation data continues to identify F-tags as the basis for health inspection deficiencies. (CMS Data)

Understanding which F-tags relate to credentialing can help SNFs build a more organized compliance program—and recognize why credentialing should be treated as a continuous process rather than a once-a-year administrative exercise.

F839: Staff Qualifications and Professional Licensure

One of the most directly relevant credentialing tags is F839, Staff Qualifications.

Under 42 C.F.R. §483.70(e), a facility must employ the professionals necessary to meet the federal requirements for nursing facilities, and professional staff must be licensed, certified or registered in accordance with applicable state law. CMS's survey guidance specifically instructs surveyors that when there is reason to question someone's qualifications or competencies, they may verify the individual's qualifications with the appropriate state registry or professional licensing body. That guidance specifically encompasses temporary, agency and contracted individuals—not only traditional employees. (Centers for Medicare & Medicaid Services)

F839 therefore has obvious implications for license tracking. A facility that employs a professional whose license has expired, been suspended or is otherwise invalid may have much more than an HR documentation issue.

CMS also makes an important distinction in its F839 guidance. Certain professions have their own applicable F-tags. Nursing-staff competency concerns, for example, are directed to F726, while qualifications involving other categories such as food and nutrition or specialized rehabilitation may be evaluated under other tags. CMS says F839 should be cited for staff not otherwise addressed by those provisions or where professional staff are not appropriately licensed, certified or registered under applicable state law. (Centers for Medicare & Medicaid Services)

For a facility, that means credentialing cannot simply involve maintaining an employee's original license at the time of hire. Licenses need to be monitored throughout employment, because the compliance question is whether the professional is currently qualified to perform the role.

For a broader discussion of why ongoing verification matters, see Perla's article, Why Credentialing Compliance Is Critical for Long-Term Care Facilities.

F726: Competent Nursing Staff

Nursing credentialing is closely connected to F726, Competent Nursing Staff.

CMS separates the concepts of having enough nursing personnel and ensuring that those personnel actually possess the required competencies and skills. F726 focuses on the competency and skill sets of licensed nurses and nurse aides necessary to provide care consistent with the resident population and individual resident needs. CMS's own guidance cross-references nursing-staff qualification concerns from F839 back to F726. (Centers for Medicare & Medicaid Services)

This makes credential management for nursing personnel broader than license expiration dates. Facilities need systems capable of maintaining evidence of licenses, certifications, competencies, education and other documentation relevant to the individual's responsibilities.

This is particularly important in long-term care because employees may move between positions, responsibilities may change, and a credential that was adequate when someone was hired may later expire or become insufficient for a new role.

F729: Nurse Aide Registry Verification

For certified nursing assistants and other individuals serving as nurse aides, F729 is particularly important.

CMS requires a facility, before allowing an individual to serve as a nurse aide, to obtain required registry verification that the individual has met competency-evaluation requirements, subject to limited exceptions relating to training programs or recently completed competency programs. CMS also addresses multi-state registry verification where applicable. (Centers for Medicare & Medicaid Services)

This is a classic example of a credentialing requirement that can easily fall between departments.

HR may collect the employment application. Nursing may interview and approve the CNA clinically. An administrator may handle the background check. Someone else may verify the nurse aide registry. Unless those activities are coordinated, there may be no single person looking at the complete credentialing record and asking whether every required step was completed before the employee began working.

That type of fragmented workflow is precisely where centralized credential management can become valuable.

F678: CPR Certification

CPR certification provides another clear example of credentialing intersecting with CMS survey requirements.

CMS guidance associated with F678 states that staff must maintain current healthcare-provider CPR certification through training that includes hands-on practice and an in-person skills assessment. An online knowledge component may be part of the program, but CMS states that online-only certification does not satisfy the requirement. Surveyors are instructed to review facility records verifying staff CPR certification. CMS also directs surveyors to consider F659, Services Provided by Qualified Persons, where concerns involve the qualifications of the individuals performing CPR. (Centers for Medicare & Medicaid Services)

For credentialing purposes, CPR should therefore be treated like other expiring credentials. The facility needs to know who requires the certification, when it expires, whether the certification meets applicable requirements and whether replacement documentation has been obtained before expiration.

A paper certificate buried in an employee folder does not provide much protection if nobody knows that it expired two months earlier.

Training and Education: F942 Through F949

Staff education can also be part of the credentialing and compliance picture.

CMS's training requirements are found in the F940-series, including general training, communication, resident rights, abuse and neglect, QAPI, infection control, compliance and ethics, nurse aide in-service training, feeding-assistant training and behavioral-health training. (Centers for Medicare & Medicaid Services)

One particularly relevant example is F945, Infection Control Training. CMS requires facilities to include mandatory training concerning the written standards, policies and procedures of the infection prevention and control program. The guidance states that the training program applies to facility staff and also encompasses contracted staff and volunteers as appropriate to their roles. CMS further expects facilities to have a process for tracking staff participation and understanding of required training. (Centers for Medicare & Medicaid Services)

That last point is important. Credentialing systems should not be limited to licenses.

A complete workforce-compliance record can include required education, annual training, competencies and certificates in addition to professional licensure. If different training programs are tracked through spreadsheets, paper sign-in sheets, email attachments and separate departmental systems, proving compliance during a survey becomes significantly more difficult.

Vaccination and Other Occupational-Health Documentation

Vaccination and infection-control requirements have also created substantial workforce-documentation responsibilities for nursing facilities.

CMS maintains requirements related to resident and staff COVID-19 immunization under F887 and separately maintains infection-prevention requirements within the F880 series. These requirements and the associated guidance have changed over time, making it especially important for facilities to distinguish between current federal requirements, state requirements, facility policies and historical mandates rather than relying on an old checklist. (Centers for Medicare & Medicaid Services)

The larger credentialing lesson is that occupational-health information is another category that frequently sits outside the traditional "license file." Depending upon applicable federal law, state law, job responsibilities and facility policy, a facility may need to maintain documentation relating to immunizations, health screenings, testing or other employment requirements.

These records need the same centralized oversight as licenses and training because compliance requirements can change.

OIG LEIE Screening Is Different: There Is No Single "OIG F-Tag"

One of the most important distinctions for long-term care organizations is that OIG exclusion screening should not be treated as simply another F-tag requirement.

The HHS Office of Inspector General maintains the List of Excluded Individuals and Entities, or LEIE. An exclusion generally means that Federal health care programs cannot pay for items or services furnished, ordered or prescribed by an excluded person or entity. OIG explains that this payment prohibition can apply to many different payment methodologies and extends beyond separately billed clinical services. (OIG HHS)

OIG therefore advises healthcare organizations to routinely check the LEIE to make sure new hires and current employees are not excluded. (OIG HHS)

This is significant because a facility could have an employee whose professional license is perfectly valid but who is nevertheless excluded from participation in Federal healthcare programs. A licensing-board check and an OIG exclusion check answer two different compliance questions.

For additional examples of the financial risks involved, see 3 OIG Settlements That Show Why Credentialing Matters.

Vendors and Contractors Must Be Part of the Exclusion-Screening Process

Exclusion screening should not stop with W-2 employees.

OIG's exclusion guidance specifically discusses people and entities that a healthcare provider employs or contracts with. OIG explains that a provider may face civil monetary penalty exposure where it knows or should know that an excluded person is providing items or services payable directly or indirectly by a Federal healthcare program. The guidance expressly states that exclusion concerns can involve employees, contractors, volunteers and other relationships. (OIG HHS)

OIG even gives the example of a hospital using a staffing agency: if an excluded nurse supplied by the staffing agency furnishes services to Federal program beneficiaries, exclusion-related liability can arise even though the individual is not directly employed by the facility. (OIG HHS)

For nursing homes, the practical takeaway is that exclusion-screening policies should consider more than nurses, CNAs and administrators. Depending on the services provided and payment involved, the compliance universe may include agency staff, therapists, physicians, consultants, contractors, suppliers and other vendors.

This is why vendor credentialing belongs within the broader credential-management strategy rather than being maintained as an unrelated accounts-payable function.

How Often Should Facilities Check the LEIE?

OIG's guidance states that healthcare entities should routinely check the LEIE, and OIG maintains downloadable exclusion data that organizations can use for systematic screening. (OIG HHS)

Federal Medicaid guidance adds another layer. CMS has instructed state Medicaid programs to direct providers to screen employees and contractors for excluded persons before hiring or contracting and on a periodic basis. CMS and OIG also state that state Medicaid agencies should check the LEIE monthly and in connection with new enrollments. (Medicaid)

As a result, facilities should not assume that one universal screening frequency applies everywhere. State Medicaid participation agreements, managed-care contracts, payer requirements, corporate compliance policies and state-specific rules can impose additional screening obligations. In some circumstances, organizations are required or contractually expected to conduct exclusion screening every month.

Facilities should therefore review their own state Medicaid requirements and payer agreements rather than assuming that an annual background check or one-time pre-employment LEIE search is sufficient.

Why Credentialing Becomes So Difficult in Long-Term Care

Many hospitals and large health systems have centralized medical-staff offices or credentialing departments. Many nursing homes, assisted-living organizations and senior-care providers do not.

Instead, credentialing functions are frequently divided among several departments.

The clinical or nursing department may monitor nursing licenses, CPR cards and clinical competencies. Human resources may maintain employee files, background checks and required employment documents. The administrator, director of nursing, HR director or compliance officer may perform exclusion checks or license verification. Education personnel may track in-service training. Infection prevention may maintain another set of education and vaccination records. Accounts payable or operations may maintain vendor contracts.

Every department may be performing its assigned task correctly, yet the organization can still have a credentialing problem because no one has a complete view of the workforce.

The challenge becomes even greater when documents are maintained in separate electronic folders, spreadsheets, email accounts and filing cabinets.

Perla discusses this broader operational problem in Rethinking Credentialing in Nursing Homes: Centralizing Compliance and Operational Documentation, which examines why credentialing in nursing homes extends beyond individual employee licenses.

Fragmented Policies Create Another Compliance Risk

Documents are only one piece of credentialing. Policies determine what the organization is supposed to do.

A facility may have an HR policy requiring one type of background verification, a clinical policy requiring another, a corporate compliance policy addressing exclusion screening and an infection-control policy establishing additional workforce requirements.

If those policies are stored separately and updated independently, employees may be working from different versions.

For example, HR may believe OIG screening occurs when someone is hired, while compliance believes monthly screening is being performed. Nursing may believe HR monitors CPR expiration dates, while HR believes the director of nursing is responsible. The administrator may assume vendors are being screened because employees are being screened, while accounts payable may have no exclusion-screening procedure at all.

The problem is not necessarily that anyone deliberately failed to comply. The problem is that the process itself lacks centralized accountability.

This is one reason credentialing compliance in nursing homes should be treated as an organizational workflow rather than simply an HR function. Perla's Credentialing in Healthcare: The Complete Guide for Long-Term Care Facilities, SNFs, CCRCs and ASCs explores this broader definition of healthcare credentialing.

Creating a Centralized Credentialing Process

Long-term care organizations generally have two ways to address this fragmentation.

Larger organizations may develop a dedicated credentialing or compliance department responsible for coordinating professional licenses, certifications, registries, training requirements, exclusion screening, vendors and related policies.

For many independent and mid-sized nursing facilities, however, creating another department may not be practical. A centralized credentialing technology platform can serve a similar coordinating function by bringing information maintained by nursing, HR, administration, compliance and operations into one system.

A centralized approach makes it possible to see which credentials are required for each person, whether those credentials have been verified, when they expire, who is responsible for renewal, whether required training has been completed, whether exclusion screening has been performed and whether documentation is immediately available during a survey or audit.

Automation can further reduce the dependence on individual employees remembering expiration dates or manually checking multiple databases. Perla discusses these operational benefits in Save Time and Reduce Stress: How HR Teams in Nursing Homes Can Automate Credential Management and The ROI of Automated Credentialing for Nursing Homes.

Credentialing Should Be Continuous, Not Episodic

The most important lesson from the credentialing-related F-tags is that compliance does not end when an employee is hired.

Licenses expire. CPR certificates expire. Employees change positions. Training requirements recur. Registries change. OIG adds new exclusions. Contractors and vendors change personnel. Regulations and facility policies are updated.

A credentialing process that was complete six months ago may not be compliant today.

CMS requirements such as F839, F726, F729, F678 and the F940-series illustrate how many different aspects of workforce qualification can become relevant during a nursing-home survey. Meanwhile, OIG exclusion requirements create a parallel compliance obligation that extends beyond the F-tag system and can reach employees, contractors and vendors.

For many long-term care facilities, the greatest risk is not the absence of effort. It is fragmentation. Nursing is tracking one requirement, HR another, administration another and compliance another, with no single source of truth.

Building a robust credentialing department—or implementing a centralized credentialing system that connects these functions—can turn credentialing from a reactive paperwork exercise into a continuous compliance process. It can help facilities identify expiring credentials before they become deficiencies, document verification before a surveyor asks for it, ensure employees and vendors receive appropriate screening, and provide leadership with visibility into the facility's overall compliance status.

The result is not simply administrative efficiency. Better credential management can reduce regulatory risk, improve survey readiness, protect reimbursement and help facilities avoid potentially significant fines, penalties and repayment obligations while ensuring that the people caring for residents are properly qualified to do so.

For additional guidance, see Perla's Credentialing Compliance in Nursing Homes: How to Avoid Fines and Stay Audit-Ready and The Legal Costs of Missed Credential Renewals in Nursing Homes.

This article is intended for general educational purposes and does not constitute legal advice. Credentialing, exclusion-screening and training requirements can vary by state, payer, profession and facility type. Facilities should review current federal and state requirements, Medicaid participation agreements and applicable payer contracts.