Type 1 vs Type 2 NPI: What Your Practice and Each New Hire Need

An NPI is a 10-digit number, and nothing more.

CMS describes it as intelligence-free: the digits carry no information about the provider — not the state they practice in, not their specialty.

Being issued an NPI also establishes nothing about status.

NPPES states plainly that issuance of an NPI does not ensure or validate that the provider is licensed or credentialed.

The type describes who holds the number.

On the NPI application, Entity Type 1 is an individual who renders health care — a sole proprietorship is a Type 1 too, even though it is a business.

Entity Type 2 is an organization that renders health care or furnishes health care supplies, and CMS's examples include group practices.

Business structure decides which numbers exist.

A clinician who incorporates may obtain both: a type 1 NPI for themselves as a provider and a separate type 2 NPI for the corporation.

A sole proprietorship may obtain only one NPI, and it reports an SSN, not an EIN — even if it has an EIN.

On the individual side sits the rule hiring runs on: a person may obtain only one NPI, regardless of how many specialties, licenses or practice locations they carry.

A new hire does not register for a fresh number to join your group — they bring the one they already hold, and it stays theirs when they leave.

The NPI is also step one of the payer ramp, not the whole climb.

The sequence that follows — Medicare enrollment, CAQH profiles, panel applications and the timelines each carries — is laid out in our credentialing timeline guide, so this page stays on the NPI itself.

HIPAA attaches the requirement to electronic transactions, not to being a clinician.

A health care provider is a covered entity when it transmits health information electronically in connection with a HIPAA standard transaction — the everyday example is the electronic claim.

That status is what triggers the NPI duty: a covered health care provider must obtain an NPI for itself, and for any subpart that would be a covered provider if it were a separate legal entity.

A provider that never transmits a standard transaction — a cash-only practice, for example — is not required by HIPAA to have an NPI, though it may still apply for one.

And enrollment pulls the other way: Medicare enrollment runs through an existing NPI, and a practitioner uses the same NPI for Medicaid and Medicare enrollment.

One duty points outward, at your prescribers.

An organization covered provider that employs or contracts with a prescriber who is not a covered entity must require that prescriber to obtain an NPI.

In a behavioral health group this lands on your psychiatrists and psychiatric nurse practitioners — the prescribers on the roster.

Subparts are the organization-side wrinkle.

A subpart is a component of an organization provider — a different location, or a different type of care than the organization furnishes.

An organization may get a separate NPI for a subpart, and the NPI system assigns one on request when the subpart's identifying data are unique.

Whether to carve a second site or program out as its own NPI is a decision to make deliberately, with your biller at the table.

One rule protects your staff from paperwork creep: a health plan may not require a provider that has been assigned an NPI to obtain an additional one.

A payer cannot make a clinician mint a second number to join your group or to bill a different program — the one they hold is the one they use.

Applying for an NPI is also where classification happens: the applicant must select a primary taxonomy code — a 10-character code describing their type, classification and specialty — and may add others to describe additional work.

The codes come from the NUCC taxonomy; the behavioral health set below is from version 26.1.

Pick the code that matches the license title, not the job description.

The counselor family alone splits three ways — Professional Counselor, Mental Health Counselor and Addiction (Substance Use Disorder) Counselor each carry their own code — and CMS's Medicare provider-enrollment FAQ directs mental health counselors to 101YM0800X and marriage and family therapists to 106H00000X.

Organizations choose from a different set.

Version 26.1 includes 261QM0801X for a Mental Health Clinic/Center (including a Community Mental Health Center), 261QR0405X for a Substance Use Disorder Rehabilitation Clinic/Center and 251S00000X for a Community/Behavioral Health agency.

Which organization code a payer expects depends on the payer and, for Medicaid, on the state program — confirm with each payer rather than assuming one choice carries everywhere.

Two uses for this table in hiring: check that a new hire's NPPES record carries the taxonomy matching the license you hired them under, and check that your organization record's code matches what your payers expect.

Whether an RBT needs an NPI is a fair question to settle before staffing technicians, and the honest answer has three parts.

First, no federal rule requires an RBT to hold an NPI.

What exists is CMS guidance: the agency's August 2026 Medicaid ABA toolkit says all ABA providers should have their own NPI, even those billing under a supervisor — and the toolkit itself says it does not establish new federal requirements.

"Should" in CMS guidance is not "must" in regulation.

Second, the decision sits with the states.

CMS's toolkit tells state programs to set clear policy on whether the enrolling ABA provider is the individual, the agency or both, and whether technicians must enroll, register, or only be linked to a supervising provider — an acknowledgment that these rules differ by state.

The answer for your clinic is in your state Medicaid manual and your payer contracts, not in any federal text.

Third, the door is open if you need it: a health care provider that is not a HIPAA covered entity may still apply for an NPI.

A technician whose state program or plan requires one can get one, and having it ready at hire keeps enrollment from stalling later.

BCBAs are the cleaner case.

A behavior analyst who furnishes services is an individual provider holding one NPI of their own, and the table above gives 103K00000X as the taxonomy their record should carry.

For a hire joining your group, the question is not whether a BCBA needs a "group NPI" — it is whether their existing record is accurate for your practice.

The same reading covers other unlicensed roles — case aides, bachelor's-level assistants.

The NPI rules tie the requirement to billing status, not to job titles; whether a number is needed is decided by the state program and the payer, role by role.

If you are staffing the technician bench itself, our RBT hiring hub covers the role side — certification, screening and pay.

On a Medicare claim, the identifier is the NPI.

CMS's Medicare provider-enrollment FAQ is direct — the NPI, not the PTAN, must be used to bill Medicare, even though a practitioner enrolled in more than one state receives a separate PTAN for each state.

The ABA case shows how an individual's number relates to the practice's billing.

CMS's toolkit describes individual providers billing their services through the supervising provider or agency, while still saying all ABA providers should have their own NPI even when billing under a supervisor.

For a clinic owner the translation is simple: in CMS's guidance, billing through the practice does not replace the individual's own number.

Three consequences worth internalizing:

• The number is portable across programs. A practitioner may hold only one type 1 NPI and uses the same NPI for Medicaid and Medicare enrollment — there is no separate "Medicaid NPI" to chase.
• A payer cannot multiply numbers. A health plan may not require a provider that has been assigned an NPI to obtain an additional one — not to join your group, not to add a taxonomy, not to enroll with another plan.
• A number is not a status check. NPPES says issuance of an NPI does not ensure or validate that the provider is licensed or credentialed. Recording a hire's NPI is bookkeeping; the screen that clears someone is license verification and exclusion checking — its own discipline, covered in our hiring compliance guide.

The maintenance rule is short: a covered health care provider must communicate any changes in its required NPPES data elements to the NPI system within 30 days of the change.

The duty sits on each NPI holder — your clinicians carry it for their type 1 records, and the practice carries it for its type 2.

Onboarding is where most of the work sits.

Collect the hire's NPI at onboarding — one number per clinician, already issued — and check the record's taxonomy code and practice-location data against the job you actually hired them to do.

Anything out of date should be fixed in NPPES promptly — the 30 days run from the change itself, not from when you spot it — by the clinician or by your staff once the clinician grants them access.

That access mechanism is worth setting up on day one.

NPPES lets a provider give other people — practice staff, for example — access to help apply for or make changes to their NPI information through the CMS Identity & Access system.

A credentialing coordinator can then keep records current without holding anyone's login: each clinician grants the access, and the practice administers its own type 2 record directly.

Offboarding takes the number out the door with the person.

An individual holds one NPI regardless of practice locations, and a type 1 belongs to the individual — a departing clinician keeps theirs, and your next hire arrives with their own.

What stays behind is your type 2 record: update it within 30 days whenever the practice's own data changes, and when you open a new location or add a distinct type of care, decide whether it needs a subpart NPI of its own.

NPI housekeeping is a small slice of staffing a behavioral practice, but it is the slice every other credentialing step keys off.

The behavioral health hiring hub keeps the whole picture in one place — role guides, credentialing, pay and retention — as your roster grows.