Background checks for healthcare workers are more complex than standard employment screening — and the consequences of getting them wrong are more severe. Beyond criminal history, healthcare employers must screen against federal exclusion lists, state abuse and neglect registries, professional license databases, and sex offender registries. Failing to screen an excluded individual who then bills Medicare or Medicaid can result in civil monetary penalties of up to $25,595 per item billed, plus triple the claim amount. In 2024, the DOJ's nationwide healthcare fraud enforcement action charged 193 defendants — including 76 licensed medical professionals — for schemes totaling more than $2.75 billion in false claims, many involving individuals who would have been flagged by ongoing exclusion monitoring.
Standard employment screening covers criminal history, address history, and employment verification. Healthcare screening must cover all of that — plus a set of industry-specific databases and ongoing monitoring obligations that apply from the moment of hire through the duration of employment.
The components that overlap with standard employment screening are the starting point, not the finish line. An address history trace, national and county criminal searches, a federal criminal search, and employment verification are all required in healthcare — the same as in any professional screening package. What separates healthcare is everything that comes after.
Sex offender registry checks are required in most states for patient-facing roles — not merely recommended as they are in general employment screening. Professional license verification is required for every licensed clinical staff member, not just role-specific as it is elsewhere. The OIG exclusion list must be checked before hire and on an ongoing monthly basis — a standard that doesn't exist in any other industry context. SAM.gov exclusions apply to any organization with federal contracts or grants. State Medicaid exclusion lists must be checked in every state where the organization operates and bills Medicaid. State abuse and neglect registries are required for patient care roles. The nurse aide registry is a federal requirement for CNAs working in nursing homes and home health settings. And ongoing monitoring — monthly OIG exclusion checks at minimum — is a compliance obligation, not just a best practice.
The distinction between a one-time check and ongoing monitoring is where most healthcare compliance failures occur. A nurse who was clean at hire can have her license revoked in month seven. A physician's assistant added to the OIG exclusion list post-hire creates immediate federal billing liability — whether or not the employer knows. The screening program must catch this.
The HHS Office of Inspector General maintains the List of Excluded Individuals and Entities (LEIE) — a database of individuals and organizations barred from participating in federal healthcare programs including Medicare, Medicaid, and CHIP. As of 2026, the LEIE contains 82,229 entries and is updated monthly.
Healthcare organizations that employ excluded individuals and bill federal programs for their services face:
The OIG's 2013 Special Advisory Bulletin established monthly screening as the expected standard — not annual or quarterly. Annual or quarterly OIG screening is no longer defensible under current guidance. The liability rests with the facility where services are performed, not with any staffing agency that may have placed the individual.
The General Services Administration's System for Award Management consolidates several federal exclusion databases including debarred parties. Healthcare organizations with federal contracts or grants must screen against SAM.gov in addition to the OIG LEIE — the two lists are not duplicative and a complete exclusion screening program requires checking both.
CMS Conditions of Participation for Medicare and Medicaid-participating facilities require background screening as part of maintaining a safe environment. Home health agencies and skilled nursing facilities face the most specific requirements — including staff screening against the OIG exclusion list before hire and on a recurring basis.
Every background check conducted through a third-party Consumer Reporting Agency — including criminal searches, OIG exclusion checks coordinated through a screening provider, and employment verifications — is subject to the Fair Credit Reporting Act. Written disclosure, written consent, and the pre-adverse and adverse action process apply to healthcare workers the same way they apply to any other employee. For the full compliance process, see our FCRA compliance guide.
Most states maintain abuse and neglect registries — databases of individuals with substantiated findings of patient abuse, neglect, or misappropriation of patient property. Requirements to check these registries vary by state and role type, but direct patient care positions — nurses, aides, home health workers, caregivers — generally require a check.
A critical gap: many states only legally require checking their own registry. But a candidate can have a substantiated abuse finding in a prior state that won't appear in the hiring state's registry. Best practice for patient care roles is checking the abuse and neglect registry in every state where the candidate has previously worked in a healthcare setting — not just the hiring state.
The Nurse Aide Registry is a state-maintained database of certified nursing assistants, including any findings of abuse, neglect, or misappropriation. Checking the NAR is federally required for CNAs working in nursing homes and many home health settings. As with abuse registries, checking only the hiring state's NAR misses findings from prior states.
Every licensed clinical staff member — physicians, nurses, pharmacists, physical therapists, licensed counselors — must have their license verified as active and unencumbered before their first day of work. License verification must confirm:
License verification is a point-in-time check. For ongoing compliance, licenses must be re-verified at least annually — and more frequently for roles where mid-employment license actions create immediate patient safety and billing liability. Continuous monitoring programs that flag license status changes in real time are increasingly the standard for clinical staff.
For patient-facing roles — particularly those involving pediatric patients, elderly patients, or individuals with cognitive disabilities — sex offender registry checks are required in most states. The NSOPW national database plus state-level registries should both be searched. For facilities also implementing visitor management, ChexPass automates sex offender registry checks at the point of entry for vendors, contractors, and visitors.
Healthcare background check requirements vary significantly by state. The overview below covers key variations for ten major states — this is not exhaustive, requirements change frequently, and employers should verify current requirements with legal counsel for each state where they operate.
California requires DOJ Live Scan fingerprinting for most clinical roles and limits conviction reporting to seven years. Abuse registry checks are required. IHSS providers operate under separate requirements, and AB 506 imposes additional screening obligations for youth-serving roles.
New York requires fingerprinting for certain licensed roles and has no statutory conviction lookback limit. Abuse registry checks are required. Article 28 facilities have specific requirements, and the NYC Fair Chance Act applies to employers in the city.
Texas requires fingerprinting for certain roles through DPS and limits conviction reporting to seven years. Abuse registry checks are required, and HHSC sets specific requirements for Medicaid providers.
Florida requires FDLE and FBI fingerprinting for most direct care roles and has no statutory conviction lookback limit. The Abuse Registry Prevention Index (ARPI) is required. Level 2 background screening applies to many positions, and five-year rechecks are required.
Illinois requires fingerprinting for certain licensed roles and has no statutory conviction lookback limit. Abuse registry checks are required. The Healthcare Worker Background Check Act applies to most direct care settings.
Pennsylvania requires fingerprinting for most patient care roles and has no statutory conviction lookback limit. Abuse registry checks are required. The Child Protective Services Law imposes additional requirements for youth-serving healthcare settings.
Massachusetts requires fingerprinting for certain roles and limits conviction reporting to seven years, with misdemeanors capped at three years. Abuse registry checks are required, and CORI requirements apply with enhanced screening in certain settings.
Ohio requires BCI&I and FBI fingerprinting for many healthcare roles and has no statutory conviction lookback limit. Abuse registry checks are required.
Georgia requires GCIC fingerprinting for many direct care positions and has no statutory conviction lookback limit. Abuse registry checks are required.
Washington requires fingerprinting for most direct care roles and has no statutory conviction lookback limit. Abuse registry checks are required. Washington's updated Fair Chance Act, effective July 2026, also affects promotion decisions for existing employees — not just pre-hire screening.
Not all healthcare roles carry the same screening requirements. The appropriate package depends on whether the role involves direct patient care, access to controlled substances, billing authority, and licensure requirements.
Physicians and medical staff require county and federal criminal searches, monthly OIG exclusion screening, abuse registry checks in all prior states of healthcare employment, and primary source license verification. Fingerprint requirements are state-dependent.
Registered nurses and LPNs follow the same framework — county and federal criminal searches, monthly OIG monitoring, prior-state abuse registry checks, and primary source license verification. Fingerprint requirements vary by state.
CNAs and patient aides require county and federal criminal searches, monthly OIG exclusion screening, abuse registry checks in prior states plus a nurse aide registry (NAR) check, and fingerprinting in most states. License verification applies where certification is held. Monthly OIG monitoring is required ongoing.
Home health workers carry the same requirements as CNAs — county and federal criminal searches, monthly OIG screening, prior-state abuse registry and NAR checks, and fingerprinting in most states. These workers operate with significant unsupervised access and are among the highest-priority roles for ongoing monitoring.
Allied health professionals — physical therapists, occupational therapists, speech-language pathologists, and similar roles — require county and federal criminal searches, monthly OIG exclusion checks, prior-state abuse registry checks, and primary source license verification. Fingerprint requirements are state-dependent.
Pharmacists and pharmacy technicians require county and federal criminal searches, monthly OIG monitoring, prior-state abuse registry checks, and primary source license verification given the access these roles have to controlled substances. Fingerprint requirements vary by state.
Administrative and non-clinical staff require county and federal criminal searches and monthly OIG exclusion monitoring — even without direct patient contact, these roles exist in a federally billable environment and the OIG exclusion obligation applies. Abuse registry checks and fingerprinting are not typically required for purely administrative roles, though this varies by facility policy.
Vendors and contractors working in patient areas require county and federal criminal searches conducted prior to access, OIG exclusion list screening at each visit or engagement — not just at initial contract signing — and any facility-specific do-not-admit list screening. Abuse registry and fingerprint requirements are not typically applicable for vendors, but OIG exclusion must be current at every engagement.
A clean background check and OIG exclusion check at hire provides no protection against what happens after day one. The OIG updates its exclusion list monthly. State licensing boards revoke and suspend licenses mid-employment. Criminal convictions happen post-hire. Abuse registry findings from prior states can surface after hiring.
<cite index="17-1">At minimum, healthcare employers should check the OIG LEIE monthly for all employees and contractors, verify active licensure annually (or per accreditation requirements), and check state abuse and neglect registries per applicable state requirements. A one-time check at hire does not protect the organization from actions, exclusions, or license changes that occur after employment begins.</cite>
This is where Chex365 continuous monitoring fills a critical gap for healthcare employers — watching active employees in real time for new criminal activity and alerting administrators the moment something reportable appears. For more on how continuous monitoring works alongside periodic rescreening, see What Is Continuous Monitoring?
Bchex provides comprehensive healthcare background screening that covers the full compliance stack — criminal searches (county, state, and federal), OIG exclusion list checks, sex offender registry verification, professional license verification, and employment and education verification — through a single FCRA-compliant platform.
For healthcare employers managing multi-state workforces, Bchex's address history trace maps prior residential and employment history to the relevant jurisdictions for county criminal and abuse registry searches — ensuring the check covers where the candidate actually worked and lived, not just their current address.
For post-hire compliance, Chex365 provides ongoing criminal monitoring with real-time alerts, and Bchex's OIG exclusion monitoring supports the monthly screening cadence the OIG expects.
Bchex is PBSA-accredited with independently audited data quality, compliance processes, and accuracy standards — the foundation healthcare compliance officers need from any screening vendor handling their workforce data.
At minimum, healthcare workers in patient care roles should receive: county and federal criminal searches, OIG exclusion list screening (monthly ongoing), state abuse and neglect registry checks in all states where they have previously worked in healthcare, professional license verification (primary source), sex offender registry checks, and employment verification. State-specific requirements vary significantly by role type and facility setting.
Monthly — the OIG's 2013 Special Advisory Bulletin established monthly screening as the expected standard, and CMS, Joint Commission, and Medicare Advantage plan sponsors all expect or require monthly attestation. Annual or quarterly OIG screening is no longer considered defensible under current guidance. The OIG LEIE contains 82,229 entries as of 2026 and updates monthly.
Civil monetary penalties of up to $25,595 per item or service billed, plus triple the claim amount. The liability rests with the facility where services are performed — not with a staffing agency that placed the individual. There is no "we didn't know" defense once the standard of monthly screening is established as the expected practice. See the OIG's exclusion list guidance for the full penalty framework.
No — they serve different functions and are not substitutes. Fingerprint-based checks access FBI databases and state criminal history repositories using biometric identity matching. Standard criminal searches use address history and name-based matching to search county court records. Fingerprint checks are often required by state law for licensed healthcare roles. Standard criminal searches are required for comprehensive coverage of county-level records that may not be in fingerprint databases. Most comprehensive healthcare screening programs include both.
The nurse aide registry is a state-maintained database of certified nursing assistants with substantiated findings of abuse, neglect, or misappropriation of patient property. It is federally required for CNAs working in nursing homes and many home health settings. Best practice is to check the NAR in every state where the candidate has previously worked in a healthcare setting — not just the hiring state — as findings from prior states may not appear in the current state's registry.
Yes — fully. Every background check conducted through a third-party screening provider is subject to the FCRA regardless of industry. Written disclosure, written consent, and the complete pre-adverse and adverse action process are required for healthcare workers the same as any other employee. See our FCRA compliance guide for the full process.
Healthcare background checks are not a checkbox — they are an ongoing compliance function with federal penalty exposure, state-level variation, and post-hire monitoring obligations that most general screening programs aren't built to handle. The OIG exclusion list must be checked monthly. Abuse registries must be checked in every state where a candidate has previously worked. Licenses must be verified at hire and re-verified throughout employment. And ongoing monitoring must catch the post-hire criminal activity, license revocations, and exclusion list additions that point-in-time checks miss entirely. The employers who build this program correctly aren't just protecting patients — they're protecting their organization from the federal enforcement actions that are actively recovering billions in healthcare fraud annually.