Credentialing Takes 90 Days. Your Locum Contract Starts in Two Weeks. The Compliance Gap That's Turning Independent Practices' Flexible Workforce Strategy Into a Liability Engine

The independent practice administrator who commits to locum tenens as a staffing strategy in 2025 is solving the right problem with the wrong infrastructure. The U.S. faces a shortfall of 3.2 million healthcare workers by 2026, and locum tenens usage jumped 25% beyond projected levels in 2024, with 80% of healthcare organizations planning to maintain or increase their reliance on the model. The economic pressure to adopt locum is genuine. The compliance scaffolding most independent practices bring to it is not.

The specific failure point is temporal: credentialing takes 30 to 90 days and can extend to 120, while locum contracts routinely activate in days or weeks. That gap is where malpractice exposure accumulates, where CMS billing rules get violated, and where fragmented documentation transforms routine adverse outcomes into plaintiff-ready records. Health systems have built operational infrastructure around this mismatch. Most independent practices have not, and at the current rate of locum adoption, they are scaling the liability faster than they are scaling the safeguards.

Why the 90-Day Credentialing Timeline Is Structurally Incompatible With How Locum Contracts Actually Activate

The standard locum placement operates on urgency. A physician departs, a volume spike materializes, or a rural primary care panel suddenly goes uncovered. The staffing agency responds in days. The credentialing apparatus does not.

AMN Healthcare documents the standard timeline as 30 to 90 days, with some facilities extending to 120. Temporary privileges can compress this window, but they carry their own constraints: valid for 90 to 120 days, requiring a clean malpractice file, no disciplinary actions, and an unrestricted license. A locum physician who doesn't meet those thresholds cannot access expedited pathways, leaving the practice to choose between delaying patient care or allowing a physician to treat patients outside their approved credentialing status.

CHG Healthcare's 2025 State of Locum Tenens report found that 49% of healthcare organizations identify credentialing delays as a critical operational bottleneck. Nearly half of organizations running active locum programs treat the credentialing pipeline as their single largest friction point, yet the typical response is to reach for technology solutions rather than address the more fundamental incompatibility: locum contracts activate faster than credentialing completes, and the scheduling decisions made in that gap carry direct liability exposure.

For independent practices, this incompatibility is more acute than for health systems. A three-physician primary care group doesn't have a medical staff office. It has a practice manager who also handles prior authorizations, payer contract renewals, and OSHA compliance. That person cannot run a parallel credentialing track for rotating locum physicians at the cadence the model demands.

The Tail Coverage Trap: Malpractice Exposure That Surfaces Months After a Locum Physician Walks Out the Door

Most locum physicians operate under claims-made policies. When the assignment ends and the policy lapses, coverage for that assignment period disappears unless tail coverage is purchased. The practice that assumes the staffing agency's policy extends through the applicable statute of limitations for medical malpractice is making an assumption that has produced significant real-world liability.

MagMutual documents that practice malpractice carrier coverage for locum arrangements typically extends for up to 60 days per policy period. A practice cycling through three locum physicians in a calendar year accumulates a layered tail exposure problem: multiple claims-made policy periods, potentially multiple carriers, and no single point of accountability when a patient files a claim 18 months after an adverse event.

The April 2025 AAEM statement on malpractice coverage standards, developed in direct response to physician exposure following the collapse of staffing intermediaries like Envision Healthcare, illustrates how quickly these coverage gaps materialize when contractual provisions aren't explicit. Physicians left without tail coverage because a staffing firm dissolved faced claims with no recourse. Independent practices that rely on agency-provided coverage without verifying the specific tail provisions in the master agreement face the same structural risk, with less leverage to resolve it after the fact.

The solution is contractual specificity before the assignment activates. Every locum staffing agreement should name who purchases tail coverage, for what occurrence period, at what limits, and which party bears financial responsibility if the agency's coverage lapses or the agency itself dissolves.

Billing Under the Wrong NPI: How Locum Compliance Errors Quietly Accumulate Into RAC Audit Triggers

CMS rules governing locum tenens billing under Medicare are specific and routinely misapplied at the independent practice level. When a substitute physician covers for a regular physician, claims must be submitted using the regular physician's NPI with modifier Q6 appended. That billing arrangement is capped at 60 continuous days. After day 60, the substitute must be independently enrolled in Medicare and billing under their own NPI.

ERA Locums details the full compliance architecture: the practice must maintain documentation of the substitute physician's NPI and a record of each service they provided, available for Medicare review upon request for up to 10 years. The documentation requirement is silent at claim submission and becomes fatal at audit. The claim processes without triggering a rejection; the underlying documentation gap surfaces only when a recovery audit contractor pulls records.

AAPC guidance makes clear that billing under another provider's NPI without proper modifier usage creates False Claims Act exposure. For an independent practice that has been running a locum program for 12 months without tracking the 60-day Q6 threshold per individual provider, a RAC audit can produce a recoupment demand that exceeds the revenue generated by those same encounters. The 60-day window is also shorter than most practices assume their arrangements last: a physician on a 90-day medical leave triggers a CMS compliance violation at day 61, and very few practices have a compliance calendar that flags this threshold.

Continuity-of-Care Liability: When Rotating Physicians and Fragmented Documentation Produce Adverse Outcomes and Plaintiff-Friendly Records

MagMutual's risk management guidance identifies miscommunication as a leading cause of serious adverse events in locum arrangements. The mechanism is predictable: a rotating physician encounters an EHR configured for permanent-staff workflows, a medication reconciliation process that assumes longitudinal patient knowledge, and a complex chronic disease panel whose history has not been meaningfully transmitted during the handoff.

The plaintiff's theory of liability in these cases doesn't require proving the locum physician was incompetent. It requires demonstrating that the handoff was incomplete, documentation was fragmented, and a preventable outcome resulted. When the locum physician who treated a patient three months earlier can't be located, their coverage has lapsed, and the practice's records show no structured handoff protocol, the resulting record set is highly favorable to plaintiff counsel.

Independent practices running locum programs need standardized transition-of-care protocols embedded in the EHR workflow, structured to give the covering physician access to the same longitudinal patient data a permanent provider would carry into an encounter. This is a governance requirement, not a technology one. Most practices running multiple locum rotations annually have no such protocol in place.

What Health Systems Do Operationally That Independent Practices Skip When Scaling Locum Tenens

Large health systems have built distinct infrastructure around locum compliance: dedicated medical staff offices handling credentialing verification, vendor management systems tracking contract terms and coverage obligations, and legal teams that have negotiated explicit tail coverage provisions into master staffing agency agreements. CHG Healthcare reports that 53% of health systems currently use a VMS to manage contingent workforce logistics, with primary motivations including reduced placement timelines and improved supplier oversight. Among independent practices, adoption is dramatically lower.

Health systems also treat the 60-day CMS billing threshold as a formal compliance milestone, tracked by billing compliance officers who monitor Q6 usage across all active locum engagements simultaneously. They run trailing credential audits to verify no physician treated patients before privileges were formally granted. These are not sophisticated interventions. They are basic governance practices that simply aren't replicated at the independent practice level, where the same person managing locum contracts is often also managing front-desk staffing and vendor payments.

Independent practices are adopting the locum model because the physician shortage is equally real for a single-specialty group as it is for a regional health system. The problem is that they are absorbing health-system-level workforce complexity without health-system-level compliance infrastructure, and the risk posture scales in the wrong direction as locum volume grows.

The Minimum Viable Infrastructure a Practice Needs Before Treating Locum as a Permanent Workforce Strategy

Running locum tenens safely at scale requires four operational capabilities that must exist before the first placement goes live, not after the first audit or claim.

The credentialing pipeline must start at contract signing rather than assignment start date, with explicit tracking of temporary privilege eligibility to prevent patient scheduling from advancing ahead of credentialing status. Every staffing agency agreement needs contractual tail coverage language specifying who purchases it, for what occurrence window, at what limits, and under what dissolution scenarios. The billing compliance protocol must track Q6 usage dates per individual provider, flag the 60-day Medicare threshold as a hard milestone, and maintain substitute physician NPI documentation in an audit-ready format retained for the full 10-year Medicare requirement period. Transition-of-care protocols must be structured, EHR-embedded, and mandatory rather than dependent on individual physician initiative.

The CHG 2025 report shows locum tenens generates a median 5.6x return on investment for healthcare organizations deploying it with adequate operational support, with some systems achieving 8x. That return calculation assumes the compliance infrastructure is in place. Without it, the ROI model contains a liability variable that doesn't appear on the spreadsheet until a RAC audit, a malpractice claim, or an adverse credentialing event makes it visible. By then, the compliance gap has been accumulating for months.