How to answer a Medicare enrollment development request in 30 days

A Medicare enrollment development request gives the provider 30 calendar days from the day the contractor sends it. Answer a paper CMS-855 by mail, fax, PECOS or scanned e-mail as the letter directs, with a newly signed certification statement for any page with missing data, and answer a PECOS application in PECOS; silence or a partial answer can mean rejection.

The request comes from the Medicare Administrative Contractor handling the application, such as First Coast, Noridian, Novitas or CGS. A rejected application carries no appeal rights, so the 30 days decide whether the filing survives or starts over.

How do you answer a Medicare enrollment development request?

A Medicare enrollment development request is answered by sending every item the letter lists, through the channel that matches the application, within 30 calendar days of the date the contractor sent it. The answer has four parts.

1. The send date on the letter starts the clock, and a later follow-up from the contractor does not restart it.
2. For a paper application, the missing information goes on the applicable form pages, sent with a newly signed and dated certification statement.
3. For a PECOS application, the clarifying data and documents go through PECOS.
4. The answer covers every requested item, since a contractor need not ask again for what a partial answer leaves out.

First Coast and Noridian send the request to the contact person named on the application. When a billing or credentialing service is that contact, the letter lands with the service, whose own fax setup is covered in HIPAA fax for medical billing companies.

Why does a Medicare contractor send a development request?

A Medicare contractor sends a development request when an application has at least one missing required data element, lacks a required document, carries an invalid certification statement, or has data that needs clarifying, under CMS's Program Integrity Manual, chapter 10. The same chapter governs the CMS-855 forms and the CMS-20134.

CMS's enrollment applications page lists the CMS-855A for institutional providers, the CMS-855B for clinics, group practices and certain other suppliers, and the CMS-855I for physicians and non-physician practitioners. Paper CMS-855 applications serve initial enrollment, revalidations, changes in status and voluntary termination. Revalidation, reactivation, change of information and change of ownership filings follow the same 30-day development rule.

A development request slows the file. Noridian says that when it issues a request for information, processing is delayed until the information is received and reviewed. CMS says PECOS applications tend to process faster than paper applications.

When does the 30-day clock start, and can it be extended?

The 30-day clock starts on the day the contractor sends the development request, whatever day the letter is read, and only the contractor can extend it, by no more than 30 more days. For a rejection, CMS counts from the date the contractor mails, faxes or e-mails the letter. A follow-up request for information does not start the clock anew, and the clock keeps running from the date the development letter was sent.

42 CFR 424.525 lets CMS or its contractor reject an application when the provider fails to furnish complete information within 30 calendar days from the contractor's request. First Coast states the same window: responses to development are due within 30 calendar days from the date of the request.

An extension is the contractor's call. The contractor has discretion to extend the 30 days when it determines the provider is actively working with it to resolve outstanding issues, and CMS allows no more than 30 additional days, for a provider making a good-faith effort or one that has sent most of what was requested.

What do you send back for a paper application, and what for PECOS?

A paper CMS-855 answer gives the missing information on the applicable form pages, with a newly signed and dated certification statement for any page with missing data, and a PECOS application's answer goes through PECOS. No new certification statement is needed when the only missing items are supporting documents. A paper application can carry a handwritten ink signature or a digital or electronic signature, such as one made in Adobe, and the certification statement can go back by scanned e-mail or fax. A stamped signature is invalid.

Sending a whole CMS-855 by fax or e-mail when the provider was not otherwise permitted to do so is itself a ground for rejection in CMS's manual. CMS also generally does not permit contractors to request missing or clarifying data by phone for paper or PECOS applications, so the request arrives in writing.

PECOS applications stay in PECOS. Because PECOS is paperless, CMS says a PECOS applicant no longer needs to submit anything by mail, and Noridian recommends internet-based PECOS because it allows document uploads.

Can you fax the response, and how does each MAC take it?

A response to a development request on a paper application can be faxed: CMS's manual lists mail, fax, PECOS and scanned e-mail, and Novitas, for one, accepts no emailed response to its letter. The table sets CMS's rule beside each contractor's own page, with "Not stated" where the contractor's page leaves a point out.

First Coast asks for additional information by email, fax or letter to the contact person on the application, and corrections can be faxed or revised in PECOS. Noridian sends requests by email or fax, mails them to the contact address when those fail, and tells applicants to check spam and junk mail. Noridian's enrollment page calls internet-based PECOS the recommended method.

Novitas cannot accept a response to its development letter by email. CGS gives the provider 30 days to respond to its letter, or the application is rejected.

A faxed answer's delivery record shows when it arrived, and the details on a fax record that prove delivery are covered in how to tell if a fax went through.

What happens if the contractor cannot reach you or the answer is incomplete?

A contractor that cannot reach the provider, for reasons that include a repeatedly busy fax number, makes one alternative attempt and may then reject the application once the 30-day period expires, and an incomplete answer can be rejected the same way. A partial answer is not chased: a contractor that receives some of the requested data within the period need not contact the provider again for the rest. Noridian lists requested information that was not sent in, was sent in incomplete or was sent in after the 30-day time frame as examples of rejections.

A rejected application has no appeal rights. The provider must complete and submit a new Form CMS-855 or CMS-20134, on paper or through PECOS, with all necessary documentation.

The stakes rise with the application type. A rejected revalidation past its deadline leads the contractor to deactivate Medicare billing privileges, and a rejected reactivation leaves them deactivated. For a rejected change of information or change of ownership past its reporting period, CMS decides whether billing privileges should be deactivated or revoked.

How is a development request different from an ADR or a records request?

A development request concerns an enrollment application and runs 30 calendar days, while an additional documentation request from a MAC, RAC or SMRC gives 45 calendar days, or 30 from a UPIC, under chapter 3 of CMS's Program Integrity Manual.

A faxed records request that claims to start a CMS audit is a warning sign. CMS has identified a fraud scheme targeting Medicare providers and suppliers, and the CMS alert that Noridian posts says CMS does not open audits with faxed requests for medical records and warns against answering a suspicious one. Claims follow a separate rule again, set out in whether you can fax a Medicare claim.

How do you handle development requests from a HIPAA fax account?

A paid Fax Pigeon plan receives a contractor's development request on the practice's own number. The request lands in the shared inbox, where the person who handles enrollment can see it and be assigned to it. Every delivered answer gets delivery proof. Every plan includes a BAA signed at signup.

* Official sources (CMS, the Code of Federal Regulations, First Coast, Noridian, Novitas, CGS) were read on October 20, 2026. Fax Pigeon prices and plan terms as of October 20, 2026.