What Is the NPI Registry?

The NPI Registry is the free, public search tool from the Centers for Medicare and Medicaid Services (CMS) for looking up National Provider Identifier (NPI) records, the 10-digit IDs that identify US health care providers. For a health practice, your record there lists your name, practice location and specialty, which makes it one government source that confirms who you are. CMS describes the registry as a query-only database that is updated daily.

How the NPI Registry works

Federal law (HIPAA) required a standard, unique identifier for health care providers. CMS adopted the NPI for that purpose in a rule issued January 23, 2004. The NPI is a 10-digit number, and health plans including Medicare, Medicaid and private insurers require it in their administrative and financial transactions. A system called the National Plan and Provider Enumeration System (NPPES) assigns the numbers and stores every record.

There are two types of NPI.

• Type 1 goes to an individual provider, such as a physician, nurse practitioner or sole proprietor. An individual is eligible for only one.
• Type 2 goes to an organization, such as a physician group. An organization can hold more than one.

A provider who is incorporated can hold both, one for the person and one for the company. That matters for a clinic. A practice with three providers and a legal entity can have four separate records, and each one can drift out of date on its own schedule.

The NPI Registry is the public window into NPPES. You type a name or a number, and it returns what CMS is allowed to disclose. CMS says it began disclosing NPPES provider data that is releasable under the Freedom of Information Act, and that there is no way to opt out of or suppress the record of a provider with an active NPI. For a deactivated NPI, CMS discloses only the number and the deactivation date.

Updating works differently from viewing. Searching is open to everyone. Editing requires the provider, or someone the provider has authorized, to sign in to NPPES. CMS states that a covered health care provider must report any change to the information given for the NPI within 30 days of the change.

Two limits are worth knowing. CMS says having an NPI does not ensure that a provider is licensed or credentialed, does not guarantee payment by a health plan and does not enroll a provider in a plan. It is an identifier for billing and administration. Also, updating NPPES does not automatically update a provider's Medicare enrollment information, so those are separate tasks.

Why does this matter outside billing? Because the record is neutral and public, other sources can be checked against it. Schema.org, the shared vocabulary used for schema markup, gives the Physician type a usNPI property, described as the unique 10-digit number issued to health care providers. Putting the right NPI in your markup ties your website to the federal record. Directories, data vendors and verification software also pull from public provider data, which is one reason stale records spread. Matching your name, address and phone everywhere is the job of NAP consistency, and the NPI record is one more place where that data lives.

Example: the NPI Registry at a health practice

This example is illustrative, not a transcript. A functional medicine physician in a mid-size city moved her practice to a new suite in 2024. Her website, Google listing and state board profile show the new address. Her NPI record still shows the old one, along with a retired phone number.

A patient searches for her by name. A directory that copies public provider data shows the old address. A scheduling tool built on the same data sends a reminder to the old location. A verification process that compares sources sees two addresses for one provider and has to decide which to trust. An AI tool reading the same copied data can repeat the old address, which is an AI brand accuracy problem. Nothing here is dramatic, and each step costs the practice a little confidence or a lost visit.

Real data shows how many different sources describe a provider. MGMA published an analysis in June 2026 of 33,340 ChatGPT citation events, covering 200 practices in 20 metros and 10 specialties, run in May 2026. Hospital staff rosters made up 27.5% of citations, practice-owned websites about 23%, specialty association credentialing pages 22.1%, national medical directories 8.3%, federal sources 7.9% for family medicine and state medical board profiles 5.1%.

Notice what those sources have in common. Each one states who a provider is and where that provider works. Whenever one of them disagrees with the others, a system has to choose.

Two cautions apply. The article was written by the founder of a commercial AI growth service, and it measures one platform at one point in time. The numbers describe where ChatGPT looked in that test. They do not show that fixing your NPI record will earn a mention.

How to check yours in 60 seconds

1. Go to npiregistry.cms.hhs.gov.
2. Search a provider's last name, first name and state, or search the NPI number if you have it.
3. Open the record and compare the name, practice address, phone and taxonomy (the specialty code) to your website and Google listing.
4. Repeat for each provider and for your organization, if it has its own NPI.

Any difference counts, including a suite number, an old phone line or a specialty that no longer describes what the provider does. Write each one down, because you will fix them in one sitting.

What to do about it

1. Look up every provider on your team, plus the practice's organization record if you have one.
2. Write down each mismatch in name, credentials, address, phone or specialty.
3. Have each provider, or the person they have authorized, sign in at nppes.cms.hhs.gov and correct the record.
4. Match your website, entity details and listings to the corrected record, and add the NPI to your provider schema.
5. Keep a one-page list of every provider's NPI and the date you last checked it.
6. Add the registry to your checklist for any move, name change, new hire or departure, so the 30-day window is met.
7. When a provider leaves, ask them to update their own record, since only the provider or an authorized person can edit it. Then remove them from your site and schema so your sources stay in step.

Check your local citations in the same pass, because directories that copy public provider data often carry the same old address.