Healthcare background checks are essential for every medical employer. These healthcare background checks ensure patient safety and regulatory compliance.
Background checks for healthcare workers are among the most legally complex and consequential healthcare background checks screening decisions any healthcare employer can make. Patients depend on healthcare providers for their safety and wellbeing, and regulators have responded with a dense web of federal and state healthcare background checks requirements that go well beyond what FCRA-governed employment background checks require. Here is what healthcare employers need to know about the legal requirements governing background checks in 2026.
Why Healthcare Background Checks Are Different
Healthcare workers interact with patients who are often vulnerable, dependent, or unable to advocate for themselves. They have access to medications with significant abuse potential, sensitive medical information, and in many cases, the physical bodies of patients who cannot protect themselves. This combination of access and vulnerability means that the consequences of a bad hire in healthcare — patient harm, financial fraud, privacy breaches, or abuse — are more severe than in most other employment contexts.
The regulatory framework reflects this reality. Healthcare employers are not just governed by the FCRA and applicable state background check laws — they are also subject to federal program exclusion requirements, state licensing mandates, abuse registry check requirements, and facility accreditation standards. Compliance with the FCRA alone does not satisfy a healthcare employer’s background check obligations. Failing to meet any one of these separate requirements can result in federal program exclusions, civil monetary penalties, loss of accreditation, or personal liability for the facility.
The key distinction between healthcare background checks and standard employment background checks is that many healthcare background check requirements are not discretionary. They are legal mandates — and failure to comply is itself a violation, independent of whether any actual patient harm results. Healthcare employers should approach background check compliance as a legal obligation comparable in weight to HIPAA and Medicare conditions of participation.
OIG Exclusion List: The Federal Starting Point
The Office of Inspector General (OIG) of the U.S. Department of Health and Human Services maintains the List of Excluded Individuals and Entities (LEIE) — a federal database of individuals and organizations that are excluded from participation in federal healthcare programs including Medicare, Medicaid, CHIP, and other federally funded health programs. An excluded individual cannot be employed in any capacity — directly or through a contractor or agency — by an entity that receives federal healthcare program reimbursement.
Employing an excluded individual — even unknowingly — exposes the healthcare facility to civil monetary penalties of up to $20,000 per item or service provided, and potential exclusion of the facility itself from federal programs. The OIG has made clear that the obligation to screen against the LEIE is ongoing, not just at the time of hire. HHS guidance recommends monthly screening of all employees, contractors, and vendors against the LEIE. The LEIE is publicly searchable at oig.hhs.gov and is available for download for bulk screening.
Mandatory exclusion from the LEIE applies to individuals convicted of certain offenses related to Medicare or Medicaid fraud, patient abuse or neglect, felony convictions relating to health care fraud, and felony convictions relating to the manufacture, distribution, or dispensing of controlled substances. Permissive exclusion applies to a broader range of offenses at the OIG’s discretion. Both mandatory and permissive exclusions prohibit employment in federally funded healthcare settings.
SAM Exclusions and State Medicaid Exclusion Lists
The System for Award Management (SAM.gov), maintained by the General Services Administration, contains additional exclusion records relevant to healthcare entities that receive federal funding. While the SAM database has broader application across all federal contracting, healthcare organizations should screen against both the OIG LEIE and SAM.gov to ensure complete coverage of federal exclusion records.
In addition to federal exclusion lists, most states maintain their own Medicaid exclusion or sanction lists for individuals excluded from participation in the state’s Medicaid program. These state lists may contain individuals not yet on the federal LEIE, and a complete exclusion screening program should include the state Medicaid exclusion list for every state in which the facility operates. State lists vary in their update frequency and search interface; some states update monthly, others more or less frequently.
State Abuse and Neglect Registry Checks
All states maintain registries of healthcare workers — typically nursing aides and direct care workers — who have been substantiated for abuse, neglect, or misappropriation of resident property while working in a licensed healthcare facility. Federal law under the Nursing Home Reform Act requires nursing homes and long-term care facilities to check the state nurse aide registry before hiring any certified nurse aide. Many states have extended similar registry check requirements to other direct care workers, including home health aides and personal care attendants.
The challenge with state abuse and neglect registries is that they are not unified — each state maintains its own registry, and there is no single national abuse registry that covers all states. A healthcare worker who was substantiated for abuse in one state can relocate and obtain employment in another state if the new employer only checks the hiring state’s registry. Best practice for healthcare employers is to check the abuse registry in every state where the prospective employee has worked in a healthcare setting, not just the state where the position is located.
Some states have extended registry check requirements beyond certified nursing aides to include any direct care position. Texas, California, and several other states maintain broader direct care worker registries. Healthcare employers should work with legal counsel to identify which state registry checks are legally required for each position category in each state where they operate.
License Verification Requirements
Any healthcare worker who holds a professional license — physician, nurse, pharmacist, physical therapist, social worker, and dozens of other categories — must have their license verified before they begin providing services. License verification is not just a best practice; it is a legal requirement for accreditation under The Joint Commission, Centers for Medicare and Medicaid Services (CMS) conditions of participation, and many state healthcare facility licensing laws.
License verification means confirming with the licensing board that the license is current, active, in good standing, and has no pending disciplinary actions, restrictions, or previous revocations. Checking the license number on the credential alone is insufficient — the verification must be primary source verification with the issuing board. State licensing boards typically have online verification systems; the National Practitioner Data Bank (NPDB) provides an additional source for practitioners covered under its reporting requirements.
The National Practitioner Data Bank contains information on adverse actions taken against physicians, nurses, dentists, and other licensed healthcare practitioners, as well as malpractice payments. Healthcare entities eligible to query the NPDB — which includes hospitals and other entities defined by the Health Care Quality Improvement Act — are required to query the NPDB at the time of credentialing and every two years for ongoing monitoring. NPDB queries are separate from and in addition to state licensing board verification.
State-Mandated Healthcare Background Check Laws
Most states have enacted laws requiring criminal background checks for specific categories of healthcare workers, with many mandating fingerprint-based checks rather than standard commercial background checks. Fingerprint-based checks are more accurate than name-based searches because they are tied to biometrics rather than identifying information that can be falsified. States that require fingerprint-based background checks for healthcare workers typically process those checks through the state police or state department of health services.
California requires background checks for most healthcare worker categories, including home health aides, personal care aides, and long-term care facility employees. New York requires criminal history checks for all employees of nursing homes and home care agencies. Texas requires criminal history record checks through the Department of Public Safety for a wide range of healthcare worker categories. Florida’s Agency for Health Care Administration coordinates background screening for a broad array of healthcare and childcare workers through a centralized system.
In addition to criminal history requirements, many states specify the disqualifying offenses for healthcare positions — meaning that certain convictions automatically disqualify a candidate from working in a healthcare setting regardless of individual assessment. These per-se disqualifications typically include convictions for patient abuse, neglect, exploitation, healthcare fraud, and certain violent and sexual offenses. Healthcare employers must know which offenses are categorically disqualifying under applicable state law for each position category.
Building a Complete Healthcare Background Check Program
A comprehensive healthcare background check program must include at minimum: criminal history searches (county, state, and federal), OIG LEIE exclusion screening, SAM exclusion screening, applicable state Medicaid exclusion list screening, state abuse and neglect registry checks for all states of prior healthcare employment, professional license verification through primary sources and the NPDB where applicable, and sex offender registry screening. For direct patient care positions and positions with access to controlled substances, additional DEA registration checks and state prescription drug monitoring program checks may also be warranted.
Exclusion screening should be conducted at hire and repeated monthly for all employees, contractors, and vendors. License verification should be conducted at hire and at each credentialing renewal cycle — typically every two years. Criminal history checks should be conducted at hire; some states and accreditation bodies also require periodic re-screening during employment.
Document every step of your background check process for every employee. Healthcare accreditation surveys and regulatory audits examine background check documentation in detail, and missing documentation is treated as non-compliance regardless of whether the underlying screening was actually conducted. A background check vendor that maintains audit-ready records for every transaction — including timestamps and search results — is a critical compliance asset for healthcare employers.
Frequently Asked Questions
Is checking the OIG exclusion list required for all healthcare employers?
Any healthcare entity that receives reimbursement from Medicare, Medicaid, or other federal healthcare programs is required to ensure it does not employ excluded individuals. This obligation covers hospitals, nursing homes, home health agencies, physician practices, and any other entity billing federal programs. HHS guidance recommends monthly screening of all employees, contractors, and vendors. Failure to screen is not a defense — employing an excluded individual exposes the facility to civil monetary penalties regardless of whether the facility knew of the exclusion.
What is the difference between the OIG exclusion list and state Medicaid exclusion lists?
The covers exclusions from all federal healthcare programs nationwide. State Medicaid exclusion lists cover exclusions from each state’s Medicaid program specifically. An individual can be on a state list without being on the OIG LEIE if the basis for exclusion was a state-level action rather than a federal one. A comprehensive exclusion screening program checks both the OIG LEIE and the state exclusion list for every state in which the facility operates.
Do I need to check abuse registries in states other than the state where I’m hiring?
Best practice requires checking the abuse and neglect registry in every state where a prospective employee has previously worked in a healthcare setting. Many states only legally require a check of their own state registry, but a candidate can have a substantiated abuse finding in a prior state that would not appear in the hiring state’s registry. For positions involving direct patient care, checking prior-state registries is a risk management imperative even where not legally required.
Are fingerprint-based background checks required for all healthcare positions?
Requirements vary by state and position type. Many states require fingerprint-based criminal background checks for certified nursing aides, home health aides, and direct care workers. Some states extend fingerprint requirements to all licensed healthcare workers. Check the laws of your specific state for each position category you are filling. Where fingerprint-based checks are required, name-based commercial background checks do not satisfy the legal requirement.
Can a healthcare worker with a felony conviction ever be employed?
It depends on the conviction and the position. Some convictions are categorically disqualifying under state healthcare worker screening laws — typically patient abuse, fraud, and certain violent and sexual offenses. Others require individualized assessment under applicable state law and EEOC guidance. Federal OIG exclusion is also a separate consideration — an individual excluded from federal programs cannot work in any capacity at an entity receiving federal healthcare reimbursement, regardless of state individualized assessment results.
How Vertical Identity Helps
Healthcare background screening requires a vendor who understands the full compliance landscape — not just FCRA-compliant commercial background checks. Vertical Identity’s healthcare screening services cover criminal history, OIG and SAM exclusion checks, state abuse registry searches, and license verification, so your program meets the layered requirements that protect your patients and your organization.
Get started with Vertical Identity and learn how our healthcare background screening services help you build a compliant, defensible hiring process for every position that touches your patients.