The attribution-of-record is the answer to a deceptively complex question: which provider does this member belong to for the purpose of Provider Access data sharing. CMS-0057-F leaves the attribution methodology to the payer, but the payer has to articulate the methodology and apply it consistently. The IG expects attribution exposed through the Group resource. Five attribution-of-record patterns have emerged as defensible in 2026 deployments. For broader context, Bulk Data and attribution coverage covers the surrounding architecture.
1. Member-Selected PCP Attribution
The simplest pattern. The member identified a primary care provider at enrollment (or updated their selection later), and that PCP is the attribution-of-record. The Group resource for each PCP contains the members who selected them.
This pattern works cleanly when the plan structure assumes PCP selection (most HMO plans, many Medicare Advantage plans). It does not work for plans without member-selected PCPs (most PPO plans, traditional Medicare).
2. Claims-Based Attribution With Look-Back Window
The most common pattern when PCP selection is absent. The payer analyzes member claims over a defined look-back window (typically 12 to 24 months) and identifies the provider the member sees most often or most recently for primary care. That provider becomes the attribution-of-record.
The pattern handles plans without explicit PCP selection. The trade-off is that attribution can shift over time as claims patterns change, and providers may dispute attribution when they see a member infrequently or only for specialty care.
3. Geographic Attribution as Fallback
A pattern that attributes members to providers based on geographic proximity when neither member selection nor recent claims provide a clear answer. The member's address is mapped to nearby in-network providers, and one is selected as the attribution-of-record (typically the nearest PCP).
The pattern is a last-resort fallback. Geographic attribution often produces friction because the geographically nearest provider may not be where the member actually receives care.
4. Specialty Carve-Out Attribution
A pattern that handles attribution differently for specialty care than primary care. Behavioral health, oncology, specialty pharmacy, and others may have distinct attribution: the specialty provider is attribution-of-record for the specialty-specific Provider Access requests, while the PCP is attribution-of-record for general Provider Access.
The pattern matters more for plans with carved-out specialty benefits. Implementations that hard-code single-attribution per member break when specialty carve-out arrangements exist.
5. Hierarchical Attribution With Multiple Records
A pattern that supports multiple attribution-of-record assignments per member, each scoped to a clinical context. Primary care attribution to the PCP. Behavioral health attribution to the BH provider. Specialty attribution to the relevant specialist. Provider Access requests are matched to the relevant attribution scope.
This pattern is the most operationally complete and the most implementationally complex. Plans with substantial specialty carve-outs or integrated primary plus behavioral health benefit from this pattern; plans with simpler structures may not need the complexity.
How Attribution Affects the Group Resource
Each attribution-of-record assignment maps to membership in a FHIR Group. A provider's Group resource lists the members attributed to them. Provider Access $export operations against a Group return data for those members.
The Group resource has to stay in sync with the underlying attribution data. Implementations that build Group resources statically and let them drift produce incorrect Provider Access output. Implementations that rebuild Group resources on a regular cadence (or expose attribution as a live query rather than a static resource) stay current.
For the Group resource patterns specifically, the Top 6 FHIR Group Resource patterns for provider panel management covers the implementation patterns.
The Audit Trail That Matters During Disputes
Attribution disputes happen. Providers query "why is this member in my panel" or "why is this member not in my panel." Payers need to answer with the attribution methodology, the data sources, and the timing. A defensible attribution implementation captures the audit trail at the time of each attribution decision: which methodology was applied, which data points drove the decision, and when the assignment was made.
For the comparative question of geographic versus claims-based attribution as the foundational methodology, the Geographic vs Claims-Based Attribution comparison covers the choice in depth.