At least every 120 days, or every 180 days for Illinois (IL) providers. That's from the provider data portal's own FAQ, published by DataSpring (formerly CAQH). Providers who complete the attestation steps when the quarterly email arrives end up re-attesting every 90 days. If providers don't attest within the required timeframe, the FAQ says their portal status "will be changed to Expired."
The 120-day requirement
Here's the FAQ's wording:
"However, should providers not follow this 90-day schedule to update their provider data, they are still required to attest to their data profiles every 120 days (every 180 days for IL providers) to comply with credentialing requirements." (DataSpring, formerly CAQH, Directory Management FAQ)
Two details stand out:
- 120 days is the outer limit in that sentence, for providers who don't follow the 90-day schedule.
- Illinois is different: the FAQ says "every 180 days for IL providers".
The 90-day schedule: acting on the quarterly email
"Providers who complete the required attestation steps upon receipt of the quarterly email will, in fact, be re-attesting to their data every 90 days." (DataSpring, formerly CAQH, Directory Management FAQ)
The FAQ has two clocks: 90 days if you act on each quarterly email, and 120 days (180 in Illinois) as the requirement either way.
If the attestation window is missed
"If providers do not attest within the required timeframe, their CAQH Provider Data Portal status will be changed to Expired." (DataSpring, formerly CAQH, Directory Management FAQ)
That's the consequence the FAQ states: a status change to Expired in the portal.
At a glance
| situation | what the FAQ says |
|---|---|
| You complete the attestation steps when each quarterly email arrives | "re-attesting to their data every 90 days" |
| You don't follow the 90-day schedule | "still required to attest to their data profiles every 120 days" |
| You're an Illinois provider | "every 180 days for IL providers" |
| You don't attest within the required timeframe | status "will be changed to Expired" |
Desk habit: one shared calendar
This part is an operating habit, not FAQ text: put each provider's next attestation date on a shared calendar, so the date doesn't live in one person's inbox. Check the source and your plans' credentialing requirements for anything beyond the portal's own schedule.
FAQ
How often do providers have to attest to their provider data portal profile?
The FAQ says providers "are still required to attest to their data profiles every 120 days (every 180 days for IL providers) to comply with credentialing requirements."
Is it every 90 days or every 120 days?
Both appear in the FAQ. Providers who complete the attestation steps upon receipt of the quarterly email "will, in fact, be re-attesting to their data every 90 days." Providers who don't follow that schedule are "still required to attest to their data profiles every 120 days (every 180 days for IL providers)".
Is the attestation window different in Illinois?
Yes. The FAQ says "every 180 days for IL providers".
What happens if a provider doesn't attest in time?
The FAQ says, "If providers do not attest within the required timeframe, their CAQH Provider Data Portal status will be changed to Expired."
Related resources
Know what's moving, what's stuck, what happens next. Start with one queue.
This page is run by RxRev.
RxRev is not affiliated with DataSpring or CAQH.
Source: DataSpring (formerly CAQH), Solutions FAQs: Directory Management (no page date shown; checked October 10, 2026). All quotes above are from this FAQ.