Medicare Compliance & Reimbursement

Industry Note:

CMS Pushes MFA Requirement Deadline for PECOS, NPPS, and I&A

As the feds roll out more regulatory relief in times of COVID-19, you can take another administrative task off your plate — at least for now.

“In an effort to reduce provider burden,” the Centers for Medicare & Medicaid Services (CMS) has delayed multi-factor authentication (MFA) requirements for the Provider Enrollment, Chain, and Ownership System (PECOS) “until further notice,” it says.

For the Identity and Access Management System (I&A) and the National Plan and Provider Enumeration System (NPPES), “you have a 360-day grace period to set up MFA after your first login,” CMS says. “By September 30, 2021, you are required to use MFA to successfully access the system.”