Physician Privileging Packets: Why Every Hospital Asks for the Same Documents Again (and What to Do About It)

"Credentialing is how you are vetted." That description from a locums resource is accurate and not particularly controversial. What is controversial — or at least, deeply frustrating — is that being vetted by one system does not carry over to the next one. Every new hospital runs its own credentialing process. Every locum agency needs its own packet. Every job change restarts the documentation cycle.

"This gets more time consuming as the list of 'where you've been' gets longer." That progression is built into the structure of hospital credentialing. It is not a system failure. It is working as designed — and the cost of that design falls almost entirely on the physician.

What a Privileging Packet Actually Contains

The 8 documents every medical staff office will ask for

Across hospitals, health systems, and agencies, the core credentialing document set is remarkably consistent. Expect requests for:

1. Current state medical license(s) — copies of the actual license certificate, plus attestation to any prior disciplinary actions
2. DEA registration certificate — current, covering the relevant state(s) of practice
3. Board certification documentation — ABMS verification letter or printout, or specialty board certificate
4. Medical school diploma and training certificates — original medical degree and all residency and fellowship completion documentation
5. Malpractice insurance certificate — current policy, including carrier name, coverage limits, and coverage dates; and tail coverage documentation or prior carrier certificates for the past 5–10 years
6. Curriculum vitae — complete employment and affiliation history with no unexplained gaps, including dates, facility names, and supervisor contacts
7. Professional references — typically 2–3 from physicians with direct clinical knowledge of your work, usually within the past 12–24 months
8. National Provider Identifier (NPI) confirmation

Beyond this core, facilities routinely ask for immunization records, health clearance (TB testing, occupational health screening), CAQH profile access, ECFMG certificate if applicable, and DEA registration history if relevant to the specialty.

"Submit copies of diplomas, residency certificates, board certifications, licenses…" That is an accurate summary from a physician describing what the credentialing process requires. It is not an exaggeration. It is the list.

What differs between hospitals, health systems, and locum agencies

The core documents are standard. The supplementary requirements are not. Variation appears in:

• Procedure logs and case volumes: Surgical specialties, interventional specialties, and any area where facility-specific privileges depend on demonstrated volume (endoscopy, cardiac cath, deliveries) require documented case counts. Requirements differ by facility — one hospital may require 50 recent colonoscopies; another may require 100. If you do not have the logs, there is no way to retroactively produce them.
• Facility-specific training requirements: Some hospitals require documentation of facility-specific modules (HIPAA training, hazardous materials, EHR credentialing) as part of onboarding that is separate from and in addition to clinical credentialing.
• Specialty-specific certifications: ATLS, ACLS, PALS, NRP — hospitals may require current cards for specialties that routinely use these. Expiration dates vary by certificate (ACLS is 2 years; ATLS is 5 years) and must be tracked independently.
• Malpractice tail coverage: Physicians who have been on claims-made policies need to document either tail coverage or prior acts coverage for each prior employer. Gaps in this documentation — especially for employers who are no longer in operation — can hold up credentialing indefinitely.

Primary source verification and why it restarts every time

Hospital accreditation standards under The Joint Commission, NCQA, and URAC all require primary source verification of certain credentials — meaning the receiving institution must verify training, licensure, board certification, and other critical credentials directly from the issuing source, not from the applicant or a prior credential verification they did not conduct themselves.

This is why agency credentialing does not substitute for facility credentialing. Even when a locum staffing agency has verified your credentials and considers you approved to place, each new facility still runs primary source verification independently. Weatherby Healthcare's own guidance says its credential approval is valid for 2 years, but each hospital still requires its own credentialing process. The agency approval is an internal screening step — it does not create hospital privileges.

Why This Problem Gets Worse Over a Career

The compounding list: every past job, every past facility, every past state

Early in practice, employment history is short. A residency, a fellowship, one or two attending positions. The CV takes up two pages. Reference contacts are recent and current. Malpractice documentation covers a handful of years with one or two carriers.

After ten years of practice — particularly for physicians who have changed jobs, moved states, or worked locums — the list compounds. Each position adds to the employment history. Each position adds to the list of facilities from which a medical staff office might want verification. Each carrier adds to the malpractice documentation stack. References from five years ago may no longer be reachable.

"This gets more time consuming as the list of 'where you've been' gets longer." The physician who wrote that was not being dramatic. They were describing a compounding arithmetic problem.

Case logs, procedure volumes, and references that are hardest to recreate

There are three categories of documentation that become effectively irretrievable if you do not maintain them contemporaneously:

Procedure logs: If you performed 200 colonoscopies at a facility and did not keep a log, the hospital's record of your activity exists within their system — but extracting it requires administrative cooperation from a facility you may no longer have a relationship with, using an EMR system you no longer have access to. For physicians who have moved across multiple systems, each on a different EMR platform, reconstructing procedure volumes from five years ago may be practically impossible.

Malpractice tail coverage from closed employers: When a practice closes or a hospital changes malpractice carriers, the documentation of your coverage during that period may not be easy to retrieve. Tail policies should be documented immediately when coverage changes, not three years later when a new employer asks for the prior five years of coverage history.

References from retired or relocated physicians: Clinical references are perishable in a way that documents are not. A physician who retired two years ago, moved out of state, or changed institutions may be difficult to reach. References who have agreed to vouch for you in the past are a relationship asset that degrades over time without maintenance.

The CAQH ProView Gap

What CAQH captures (payer workflows, professional data)

More than 2.5 million providers actively enter and verify information in CAQH ProView. It is the standard tool for payer credentialing and panel enrollment. The profile stores professional information including licensure, board certifications, education, training, and practice locations. Payers who accept CAQH can pull this data without requiring you to submit it separately.

For payer panel management, CAQH ProView is genuinely useful. It reduces the duplicative work of submitting the same information to multiple payers independently. For physicians managing complex multi-payer panel situations, keeping CAQH current (re-attestation required every 120 days) is worth the effort.

What CAQH doesn't capture (privileging specifics, case logs, site-specific references)

CAQH does not hold procedure logs or case volumes. It does not hold facility-specific references. It does not hold site-specific training certifications. It does not hold the malpractice tail coverage letters that prove your coverage history at each prior employer. It does not hold the letter from your last locum facility confirming you left in good standing.

These are not oversights in CAQH's design — they are outside its scope. CAQH is a payer-facing tool, not a physician-owned career dossier. The documents that CAQH does not capture are exactly the documents that most frequently create bottlenecks in facility credentialing.

Why you can't hand a facility your CAQH login and call it done

A medical staff office running credentialing for facility privileges needs more than what CAQH holds. They need to run their own primary source verification. They need procedure logs if specialty-specific privileges are being requested. They need references who can speak to your current clinical performance. They need malpractice history going back years.

CAQH is a starting point. It is not a complete credentialing package.

What the Locums Version of This Problem Looks Like

The agency credential approval vs. facility credentialing gap

Physicians who work locum tenens go through credentialing multiple times per year across different states, systems, and agencies (Locumstory). The agency approval is step one of a two-step process — and the second step, facility credentialing, starts over from scratch each time regardless of what the agency has already done.

For the detailed picture on locum credentialing mechanics and how to shorten the time from contract to start date, see the locum tenens credentialing article.

Why physicians work through multiple agencies and re-credential for each facility

Different agencies have contracts with different facilities. A physician who wants access to assignments across multiple hospital systems may need to work through multiple agencies, each of which has its own credentialing standards and its own packet format.

Each agency needs a complete, current credentialing packet. Each facility the agency places you at conducts its own primary source verification. A physician working across three agencies at four facilities in two states may be in some stage of credentialing for multiple engagements simultaneously — submitting documents to one facility while waiting on verification from another while preparing for a third.

Weatherby's own guidance: valid for two years, but each facility still wants a fresh review

Weatherby Healthcare, one of the largest locum tenens agencies, is explicit: its credentialing approval is valid for 2 years, but each new hospital still requires its own credentialing process. This is the industry standard, not an idiosyncrasy. It exists because hospitals have independent accreditation requirements and independent liability for credentialing decisions.

How to Build a Privileging Packet You Can Update and Reuse

Documents that travel vs. documents that need refreshing

Some documents remain valid for extended periods and travel well between engagements:

• Medical school diploma and training certificates (permanent)
• DEA registration certificate (valid for current 3-year period, see the DEA renewal article for renewal details)
• Board certification documentation (valid until next cycle deadline)
• Employment history up to a current end date

Documents that require regular refreshing:

• Malpractice certificate (new certificate each policy period)
• State license copies (update when renewed)
• References (should be refreshed regularly; same references are not always appropriate indefinitely)
• CV (add each new engagement immediately, not at the next credentialing request)
• Health clearances and life support cards (ACLS, ATLS) — expiration varies

References: how to bank them once and use them repeatedly

The most sustainable approach to reference management is to identify a small group of trusted clinical colleagues who have agreed, in advance, to serve as references for credentialing purposes. Inform them each time you submit their contact information. Many credentialing processes allow references to submit via electronic form — confirm this and send your references the link directly, rather than waiting for the facility to reach out cold.

For high-volume locums physicians, a reference request from a facility the reference has never heard of, arriving without warning, is the most common failure point. Warm references who are expecting contact respond faster and more completely.

The packet export concept: one clean share vs. 40 individual emails

The goal is a privileging-ready bundle that you can share as a single export — a complete, organized document set that gives a medical staff office everything they need to begin primary source verification without follow-up requests for missing items.

Enterprise tools like Modio and Medallion are designed to serve health systems running credentialing operations — they are B2B tools, not physician-owned. CAQH covers the payer side. The physician-owned equivalent — a portable, current, exportable credential package spanning all four categories (licenses, board status, DEA, credentialing documents) — is the missing piece in the current landscape.

Caliber stores the physician's master packet — licenses, board status, DEA, CME transcripts, malpractice history, employment history, and references — and can generate a privileging-ready bundle so the physician sends one clean package instead of fielding 20 individual document requests every time a new engagement starts.