NPI and Provider Taxonomy Codes: NPPES Explained

A National Provider Identifier (NPI) is a 10-digit number that identifies a health care provider in HIPAA transactions. It carries no information about the provider's state, provider type or specialty (CMS). Type and specialty are recorded separately with NUCC taxonomy codes in the National Plan and Provider Enumeration System (NPPES).

Where the data comes from

CMS releases FOIA-disclosable NPPES data in two ways (CMS):

• NPI Registry: a free, query-only database updated daily.
• Download files: a full monthly replacement file, weekly incremental files and an NPI deactivation file. A separate file lists non-primary practice locations for Type 1 and Type 2 NPIs.

Entity types

A sole proprietor may get only one NPI, like any other individual. An NPI does not change when the provider's name, address or taxonomy changes (CMS).

Taxonomy codes

The National Uniform Claim Committee (NUCC) maintains the Health Care Provider Taxonomy code set (NUCC). Each code is 10 alphanumeric characters with three levels: grouping, classification and area of specialization.

Examples from version 26.1, all in the "Allopathic & Osteopathic Physicians" grouping:

As of November 2026, NUCC lists version 26.1, effective July 1, 2026, as current. Past versions took effect on January 1 or July 1 (NUCC).

Each NPPES record holds up to 15 taxonomy codes, with a switch marking the primary one (NPPES readme).

Practice location vs mailing address

Each record has separate business mailing address and business practice location address fields (NPPES readme). For access maps, geocode the practice location. Add sites from the non-primary practice location file, without counting one clinician twice.

Why NPI counts overstate active clinicians

• Stale records stay active. Covered providers must report changes within 30 days (45 CFR 162.410). Yet out-of-date information does not deactivate an NPI, and no explicit penalty applies (Bindman 2013).
• Specialty is self-reported. CMS does not verify the specialty a provider reports.
• Organizations mixed in. Counting Type 2 records adds facilities and groups to clinician totals.
• Multiple taxonomies. Counting every taxonomy slot counts one person several times.
• Deactivated NPIs. The files disclose only the deactivated NPI and its date (CMS). Remove them before counting.
• Headcount, not FTE. A part-time clinician counts the same as a full-time one.

Using NPI data in access-gap work

1. Keep Type 1 records for clinician counts and Type 2 records for facility counts.
2. Select clinicians by primary taxonomy code.
3. Drop deactivated NPIs.
4. Geocode practice locations, then build provider-to-population ratios or drive-time measures.
5. Label results "NPI-registered providers," not "active clinicians."

GeoChat AI uses the NPPES registry as a data source. It counts each clinician under their primary taxonomy code, by county and ZIP code.