A nurse practitioner joined a two-location family practice we support. The credentialing coordinator opened the NPI Registry to start the payer applications and found two numbers under the NP's name. One was a Type 1 that a hospital had applied for on her behalf during her first job. The other was a Type 2 that a previous employer had told her to get because she was "billing under her own tax ID" as a sole proprietor. She had been using the Type 2 as her personal identifier for three years. Two Medicaid plans had her enrolled under one number, Medicare had her under the other, and a quarter of her claims at the new practice were coming back with CO-16 and remark code N290 before anyone understood why.
Nothing about that story is unusual. The NPI is the simplest identifier in healthcare: ten digits, free, issued once. The confusion comes from the two entity types and from the fact that payers, clearinghouses and practice management systems all use the words "individual", "group", "billing" and "rendering" slightly differently.
The short version: a Type 1 NPI belongs to a human being who delivers care, and that person gets exactly one for life no matter where they work. A Type 2 NPI belongs to an organization, which is any legal entity that bills and receives payment as something other than an individual: a group practice, a professional corporation, a hospital, a lab, or a subpart of a larger organization. On a group claim, the Type 2 is the billing provider and the Type 1 is the rendering provider, and the two have to be linked in the payer's enrollment file or the claim will not pay.
What is an NPI and why does every claim need one?
The National Provider Identifier is the standard unique identifier for health care providers under HIPAA. CMS published the NPI final rule in January 2004, and covered providers, health plans and clearinghouses were required to use it in standard transactions from May 2007 (small health plans had until May 2008). It replaced the mess that came before it: UPINs for Medicare, a different number for every Medicaid program, and a legacy provider ID for each commercial payer.
CMS describes the NPI as "intelligence-free", and that phrase matters in practice. The ten digits carry no information about specialty, state, license or tax status. The last digit is a check digit calculated with the Luhn formula, which is why a practice management system can tell you a typed NPI is invalid before the claim ever leaves the building. Everything else about a provider lives in the NPPES record attached to the number: name, entity type, practice location and mailing addresses, taxonomy codes, license numbers and the authorized official for organizations.
NPPES, the National Plan and Provider Enumeration System, is the CMS system that assigns NPIs and holds those records. Applying is free. You can do it online through NPPES with an Identity and Access Management (I&A) account, on paper with form CMS-10114, or through an Electronic File Interchange Organization that submits on behalf of many providers. Web applications are typically processed in days; paper applications take noticeably longer. Once a number is issued, the public NPI Registry shows the record to anyone who searches it, which is how payers, hospitals and other practices verify you.
What is a Type 1 NPI?
A Type 1 NPI is assigned to an individual: a physician, nurse practitioner, physician assistant, dentist, therapist, pharmacist, or any other person who provides health care. The rule is one person, one number, forever. A physician who moves from Ohio to Texas, changes from an employed position to her own practice, and then joins a hospital system keeps the same Type 1 for the whole career. If a provider dies or permanently leaves health care, the number is deactivated, never reissued.
The record behind a Type 1 belongs to the individual, not to the employer. That matters when staff turn over. We regularly find NPPES records where the contact person is a credentialing coordinator who left years ago, or where the practice location still shows an address the provider has not worked at since residency. Payers check these records. A Medicaid plan that sees a practice address in a different state will hold the enrollment until it is fixed.
A sole proprietor is still an individual. This is the point the NP in our opening story was given wrong. A provider who practices alone, is not incorporated, and bills under either a Social Security number or an EIN obtained as a sole proprietor is a Type 1 only. NPPES is explicit that a sole proprietor is not eligible for a Type 2 NPI. The EIN does not change that; the legal entity is still the person.
What is a Type 2 NPI?
A Type 2 NPI is assigned to an organization health care provider. The test is legal form: if the entity that bills and receives payment is a corporation, LLC, partnership, professional association, hospital, group practice or similar organization, it needs a Type 2. The organization's NPI is tied to its legal business name and its EIN, and the record names an authorized official who takes responsibility for the application.
This produces a situation that confuses new owners. A solo physician who forms a professional corporation (Jane Smith, M.D., P.C.) has two NPIs: her own Type 1, and a Type 2 for the corporation. Claims go out with the corporation as the billing provider and her as the rendering provider. From the payer's side, the corporation holds the contract and the person is the one enrolled under it. The same physician as an unincorporated sole proprietor would bill with only her Type 1 in both roles, and the claim form would simply repeat it.
Organizations can also enumerate subparts. A hospital may give its outpatient rehab department or its laboratory a separate Type 2 so that each bills under its own number, because a payer requires it or because the department is separately certified. Independent practices rarely need subparts, and we usually advise against creating them without a specific payer reason. Each extra Type 2 is another enrollment to maintain, another revalidation cycle, and another place a claim can be routed wrong.
Type 1 vs Type 2: the comparison table
| Question | Type 1 (individual) | Type 2 (organization) |
|---|---|---|
| Who gets it | A human provider: physician, NP, PA, therapist, dentist, pharmacist | A legal entity: group practice, P.C. or LLC, hospital, lab, DME supplier, subpart |
| How many | One per person for life | One per legal entity, plus optional subparts |
| Tied to which tax ID | The person's SSN, or an EIN held as a sole proprietor | The organization's EIN |
| Who may apply | The individual, or someone with surrogacy in the I&A system | The authorized official named on the record, or a surrogate |
| Sole proprietor | Yes, this is the only correct type | Not eligible |
| Incorporated solo physician | Yes, for the physician | Yes, for the corporation; both appear on the claim |
| Where it appears on a group claim | Rendering provider (CMS-1500 box 24J, 837P loop 2310B), referring or ordering provider (box 17b, loop 2310A) | Billing provider (box 33a, loop 2010AA), service facility if the location has its own NPI (box 32a, loop 2310C) |
| Medicare enrollment form | CMS-855I, with CMS-855R to reassign benefits to a group | CMS-855B for a group or clinic |
| What happens when the provider changes jobs | Nothing to the number; update the NPPES practice location and re-enroll with payers under the new group | Nothing; the organization keeps its number until it dissolves |
| Deactivation | Death, retirement from health care, or a duplicate found | Dissolution, merger, or the subpart no longer exists |
| Update deadline | Within 30 days of any change to the record | Within 30 days of any change to the record |
The row most practices should read twice is "where it appears on a group claim". Payers do not pay the rendering provider; they pay the billing provider. If your group's Type 2 is in the billing position and the physician's Type 1 is in the rendering position, the payer checks that the Type 1 is enrolled and linked to that Type 2 in its system. If the link is missing, you get a denial that looks like a credentialing problem even when every number on the claim is accurate.
Worked examples: which number goes where
Here are three arrangements we see every week, with the fields that matter. The CMS-1500 box numbers apply to paper and to the printed image most practice management systems show; the loop references are for the 837P electronic claim.
Example 1: unincorporated sole proprietor
Dr. Lee practices alone, has not incorporated, and bills under an EIN she obtained as a sole proprietor. She has one NPI, a Type 1. Her claim for a 99214 shows her Type 1 in box 24J as the rendering provider and the same Type 1 in box 33a as the billing provider, with her EIN in box 25. Many payers, and Medicare, will accept the claim with box 24J blank because billing and rendering are the same person, but filling it costs nothing and avoids a clearinghouse edit.
Example 2: incorporated solo physician
Dr. Lee forms Lee Internal Medicine, P.C. She applies for a Type 2 for the corporation (the authorized official is her), enrolls the corporation with Medicare on CMS-855B, and reassigns her own benefits to it with CMS-855R. Her claim now shows the corporation's Type 2 in box 33a and her Type 1 in box 24J. The EIN in box 25 is the corporation's. Her old sole proprietor EIN should be retired with the payers, or the payer will keep two profiles for her and pay the wrong one.
Example 3: group practice with a new nurse practitioner
Westside Family Medicine (Type 2) hires an NP. The NP keeps her Type 1. The practice updates her NPPES practice location, submits the NP's enrollment to each payer under the group's contract (CMS-855I plus CMS-855R for Medicare), and only then bills her visits with the group's Type 2 in box 33a and the NP's Type 1 in box 24J. If the NP sees a patient referred by Dr. Patel at another practice, Dr. Patel's Type 1 goes in box 17b with qualifier DN. If the group also owns a separately enumerated imaging suite, that suite's Type 2 goes in box 32a as the service facility.
| Scenario | Box 33a / loop 2010AA (billing) | Box 24J / loop 2310B (rendering) | Box 17b / loop 2310A (referring) | Box 25 (tax ID) |
|---|---|---|---|---|
| Sole proprietor | Dr. Lee Type 1 | Dr. Lee Type 1 (or blank, payer dependent) | Referring physician Type 1 when required | Dr. Lee's EIN or SSN |
| Incorporated solo | Lee Internal Medicine P.C. Type 2 | Dr. Lee Type 1 | Referring physician Type 1 when required | Corporation EIN |
| Group with NP | Westside Family Medicine Type 2 | NP Type 1 | Dr. Patel Type 1 | Group EIN |
The denial codes tell you which field went wrong. CARC 16 (claim lacks information) paired with RARC N290 points at the rendering provider identifier, N257 at the billing provider identifier, and N265 at the ordering provider. CARC 206 means the NPI is missing, 207 means the format is invalid (usually a typo that failed the check digit), and 208 means the NPI did not match the payer's enrollment record. If you see 208 on every claim for one provider, the number is right and the enrollment link is wrong. Our denial code lookup lists these with the fix we apply for each.
The mistakes we see most often
Most NPI problems are not application errors. They are maintenance errors that build up over years and surface when a provider changes jobs or a payer revalidates.
- A sole proprietor with a Type 2. The provider was told to "get a group NPI" and did. Now two numbers point at one person. The fix is to deactivate the Type 2 through NPPES and re-enroll with every payer that has the wrong one. Expect weeks of cleanup, so start with the payers that make up most of the revenue.
- Duplicate Type 1 numbers. A residency program, a locum agency and the provider all applied at different times. NPPES has duplicate detection, but variations in name or SSN entry get through. Keep the oldest, deactivate the rest, and tell every payer which one survives.
- The group NPI in the rendering field. Usually a practice management setup error: the "default rendering provider" on a location is set to the organization. Medicare rejects these at the front end. Commercial payers often pay them for a while and then recoup.
- Taxonomy that does not match the enrollment. The NPPES taxonomy is self-reported from the NUCC Health Care Provider Taxonomy code set, which NUCC updates twice a year. Medicaid programs in particular compare the taxonomy on the claim with the one on the enrollment, and a family medicine physician whose NPPES record still says "Student in an Organized Health Care Education/Training Program" (390200000X) will be denied. Medicare uses its own specialty codes rather than taxonomy, so a mismatch there shows up as an enrollment question instead of a denial.
- Addresses nobody updated. The 30-day update rule is a regulatory requirement, not advice. Payers cross-check the NPPES practice location against the enrollment. A provider whose record shows an old employer's address can be excluded from a payer directory, which costs new patients, and can be flagged at revalidation.
- The NPPES login belongs to a person who left. The I&A account for a Type 2 should be controlled by the authorized official, with staff and any outside credentialing partner set up as surrogates. When the only login belongs to a departed coordinator and nobody knows the password, a simple address change becomes a multi-week identity verification exercise.
- New provider billed before the link exists. The Type 1 is valid, the Type 2 is valid, but the payer has not yet connected them. Claims go out on day one and come back with CARC 208 or a "provider not eligible on date of service" message. Hold the claims or bill under a supervising physician only where the payer's incident-to or locum rules actually allow it; otherwise wait for the effective date. Our credentialing timeline tool shows how long that gap typically runs by payer type.
How we keep NPI records clean
The process is small enough to run from a spreadsheet, and the practices that do it stop seeing identifier denials almost entirely.
- Build a roster: every Type 1 and Type 2 the practice uses, with the entity type, the EIN it is tied to, the taxonomy codes on the NPPES record, the authorized official, and who holds surrogacy in I&A.
- Pull each record from the NPI Registry once a quarter and compare addresses, taxonomy and license numbers with what the payers have. The Registry is public; it takes a minute per provider.
- Put the 30-day update rule in the onboarding and offboarding checklists. New hire: update practice location before the first payer application goes out. Departure: update the record, then submit the termination to each payer so the group is no longer billing under that provider.
- Match the practice management system to the roster. Check the billing provider on every location, the rendering provider defaults, and the referring provider table where staff type NPIs by hand.
- When a provider joins, search the Registry for duplicates before you enroll anyone. It is far cheaper to find a second NPI before the applications than after.
If you would rather hand that roster to someone, our credentialing and provider enrollment service maintains NPPES, PECOS and payer records together, so a change made in one place is made in all of them.
Questions we hear
Does a nurse practitioner or physician assistant need a Type 2 NPI?
No, unless the NP or PA has formed a corporation or LLC that bills in its own name. As an employee, or as an unincorporated sole proprietor, an NP or PA is an individual and has a Type 1 only. The group that employs them already has the Type 2.
Can a provider have more than one Type 1 NPI?
Not legitimately. The standard is one NPI per individual for life. Duplicates happen by mistake when different organizations apply on a provider's behalf. When you find one, contact NPPES to deactivate the newer number and notify every payer that has it on file. Leaving both active creates mismatched enrollment records that payers resolve by denying.
Does the NPI change when a provider moves to a new state or a new practice?
No. The number is permanent. What changes is the record behind it: practice location, mailing address, possibly the taxonomy, and the license numbers for the new state. Update those in NPPES within 30 days, then start the payer enrollments for the new group. Payers link the existing Type 1 to the new Type 2; they do not issue anything new.
Do I need a separate Type 2 for each office location?
Usually not. One legal entity, one Type 2, with multiple practice locations listed in PECOS and in the payer enrollments. You only need a subpart NPI when a payer requires it, when a location is separately certified (a lab with its own CLIA certificate that bills independently, for example), or when the location is actually a different legal entity. Adding Type 2 numbers without a reason multiplies revalidations and claim routing problems.
Is the taxonomy code on my NPI the same as my Medicare specialty?
No. Taxonomy codes come from the NUCC Health Care Provider Taxonomy code set and are self-reported in NPPES. Medicare assigns its own two-digit specialty codes during enrollment, and PECOS maps your taxonomy to the closest specialty. Medicaid and many commercial payers do read the taxonomy directly, so choose the code that matches your license and what you actually bill, and update it when your practice changes.
How long does it take to get an NPI?
Web applications through NPPES are often processed within a few business days, though the NPPES FAQ says to allow longer and paper applications take weeks. The NPI is only the first step: payer enrollment under that NPI is what takes months, and the NPI application should never be the thing that holds up a start date.
Sources and references
- National Provider Identifier Standard (NPI), CMS: the official overview of the NPI as the HIPAA standard identifier, with links to apply online, by paper or through an EFIO.
- NPPES, CMS: the National Plan and Provider Enumeration System where NPIs are applied for and records are updated.
- NPPES Help: Frequently Asked Questions, CMS: the FAQ covering entity types, sole proprietors, subparts, duplicates, deactivation and the 30-day update rule.
- NPPES NPI Registry, CMS: the public search for any NPI record, used to verify names, addresses and taxonomy before enrollment.
- NPPES Help: Health Care Provider Taxonomy, CMS: how taxonomy codes are selected and reported in an NPPES record.
- Become a Medicare Provider or Supplier, CMS: the Medicare enrollment path that follows the NPI, including the CMS-855 forms and PECOS.
- Provider Enrollment and Certification (PECOS), CMS: the system where a Type 1 is reassigned to a Type 2 for Medicare billing.
