> ## Documentation Index
> Fetch the complete documentation index at: https://www.practiceownersguide.com/llms.txt
> Use this file to discover all available pages before exploring further.

# The compliance calendar

> Everything that recurs: license renewals, attestations, trainings, and inspections, on one calendar someone owns.

Compliance failures at small practices are rarely ignorance. They're expired
things nobody was watching. The fix is one shared calendar with an owner, not
a memory.

## What goes on it

| Cadence                | Items                                                                                                                                                                                                                                                                                        |
| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Every 120 days         | [CAQH re-attestation](/guides/caqh-setup)                                                                                                                                                                                                                                                    |
| Annual                 | HIPAA risk assessment + training ([program](/guides/hipaa-in-one-week)), OSHA training (bloodborne pathogens, hazard comm), business license, X-ray registration, malpractice renewal + COI refresh in CAQH, fee schedule review ([contracting](/guides/payer-contracting)), W-2/1099 season |
| Every 2-3 years        | CLIA certificate (2), DEA registration (3), state controlled-substance registrations (varies)                                                                                                                                                                                                |
| Every 5 years (varies) | Medicare revalidation ([PECOS](/guides/medicare-pecos-enrollment)), Medicaid revalidation per state                                                                                                                                                                                          |
| Per state's cycle      | Clinician license renewals + CE hours                                                                                                                                                                                                                                                        |
| Ongoing                | BAA review when vendors change, new-hire training within 30 days                                                                                                                                                                                                                             |

## Running it

Put every item in a shared calendar with reminders at 90/30/7 days, assign
one accountable person per item (owner, office manager, or your MSO's ops
team), and attach the renewal confirmations to the event so the audit trail
builds itself. Multi-state practices track per state,
[each state added](/guides/expand-out-of-state) clones the license and
Medicaid rows.

The failure mode to design against: renewals tied to one person's personal
email. People leave; the DEA renewal notice shouldn't leave with them.

## Related

* [Licenses and permits](/guides/licenses-and-permits)
* [Your HIPAA program in one week](/guides/hipaa-in-one-week)
* [Bookkeeping and the tax calendar](/guides/bookkeeping-and-tax-calendar)
* [The Owner's Task Repo](/reference/owners-task-repo)
* [Checklists](/reference/checklists)