11 KiB
New Compliance Sectors — Detectable Signals + Contact Channels
Companion to the FCC RMD and FMCSA/trucking playbooks. The winning pattern is: a public government registry + a per-record recurring obligation + an automated deficiency check + outreach to the operator. This doc covers the three best next sectors and, critically, how to reach the license holders besides postal mail.
Honesty note on email: unlike FCC RMD (
contact_email) and FMCSA (carrier email), these three registries are address/phone-rich but email-poor. The deficiency engine still works; the channel is the hard part. Section 4 solves that.
1. NPPES / Healthcare Providers (NPI)
Source: CMS NPPES monthly full-replacement dissemination file (free bulk CSV,
~10M rows). Verified live against npidata_pfile_20050523-20260510.csv
(download.cms.gov/nppes/). Cross-joinable with OIG LEIE (exclusions) and the
CMS revalidation list, both free.
Email in file: ❌ VERIFIED — no email field exists (file has 104 columns; none is email). Contact info available: mailing + practice TELEPHONE (cols 27, 35), mailing + practice FAX (cols 28, 36), full mailing + practice addresses, and Authorized Official telephone (col 47). So channel = fax, phone, mail, or email-append. Not email-native.
Verified columns we care about (104-col file)
| Col # | Field (exact) |
|---|---|
| 1, 2 | NPI, Entity Type Code (1=individual, 2=org) |
| 5–11 | Org legal name / provider name + credential |
| 21–28 | Mailing address, mailing telephone (27), mailing fax (28) |
| 29–36 | Practice location address, practice telephone (35), practice fax (36) |
| 37 | Provider Enumeration Date |
| 38 | Last Update Date |
| 39, 40, 41 | NPI Deactivation Reason Code, Deactivation Date, Reactivation Date |
| 43–47 | Authorized Official name/title + telephone (47) |
| 48–103 | Up to 15× {Taxonomy Code, License Number, License State Code, Primary Taxonomy Switch} |
Note: the public file does NOT contain a "Is Sole Proprietor" or EIN-validated field in a usable way (EIN col 4 is usually masked). Earlier guess corrected.
Detectable from the file (verified)
| Signal | Field(s) | Obligation | Service |
|---|---|---|---|
Stale Last Update Date (>1–2 yrs) |
col 38 | NPPES update within 30 days of any change | NPPES refresh/attestation |
| Deactivated NPI | cols 39–41 | Deactivated NPI can't bill | NPI reactivation |
| Old enumeration + never updated | col 37 vs 38 | Likely overdue Medicare revalidation (5-yr) | PECOS revalidation |
| Taxonomy w/ license but no license-state | taxonomy/license/state sets | License/specialty inconsistency | License/taxonomy reconcile |
| No primary taxonomy flagged (switch all N) | Primary Taxonomy Switch_n | Billing/credentialing errors | Taxonomy cleanup |
| Org (Type 2) missing Authorized Official | cols 2, 43–47 | Incomplete org NPI | Org NPI correction |
Inferable only (not in file): exact revalidation due date (PECOS), HIPAA posture, active billing, sanctions (use OIG LEIE join), email.
Best cross-join hook: NPPES ⨝ OIG LEIE ⨝ CMS revalidation list.
2. FMC Ocean Transportation Intermediaries (OTI: NVOCC + freight forwarders)
Source: FMC OTI lookup (per-record web lookup; a few thousand licensees). Closest analog to FCC RMD in size and clock.
Email in record: Inconsistent — sometimes present, often not. Partial coverage.
Detectable from the record
| Signal | Field(s) | Obligation | Service |
|---|---|---|---|
| License issue ≥ ~3 yrs ago | issue/license date | Triennial renewal (every 3 yrs) | OTI renewal filing |
| Bond below current minimum | financial responsibility | $75k NVOCC / $50k forwarder bond | Bond placement/review |
| Missing proof of bond | financial responsibility status | Required to operate | Bond compliance |
| QI stale/absent | qualifying individual | OTI must have a qualified QI | QI / Form FMC-18 update |
| NVOCC w/o tariff indicator | cross-ref tariff systems | NVOCCs must publish tariffs / SARs | Tariff publication setup |
| Status inactive/revoked/surrendered | license status | Operating lapsed = penalties | Reinstatement |
Inferable only: exact renewal due date, whether tariff actually published (separate tariff registry), email when absent.
3. EPA RCRA Hazardous Waste Handlers (via ECHO / RCRAInfo / FRS)
Source: ECHO bulk files (echo.epa.gov/files/echodownloads/) — verified live.
Two relevant downloads:
ECHO_EXPORTER(137 cols) — one row per facility across all programs, holds the compliance signals. Column dict:echo_exporter_columns_*.xlsx.rcra_downloads.zip— 6 RCRA-specific CSVs:RCRA_FACILITIES.csv(15 cols),RCRA_VIOLATIONS.csv,RCRA_EVALUATIONS.csv,RCRA_ENFORCEMENTS.csv,RCRA_NAICS.csv,RCRA_VIOSNC_HISTORY.csv.
Email in file: ❌ VERIFIED — no email anywhere in ECHO bulk.
RCRA_FACILITIES.csv has only: ID_NUMBER, FACILITY_NAME, ACTIVITY_LOCATION, FULL_ENFORCEMENT, HREPORT_UNIVERSE_RECORD, STREET_ADDRESS, CITY_NAME, STATE_CODE, ZIP_CODE, LATITUDE83, LONGITUDE83, FED_WASTE_GENERATOR, TRANSPORTER, ACTIVE_SITE, OPERATING_TSDF. No contact name, no phone, no email in ECHO RCRA. Owner/
operator contact NAME + PHONE (still no email) exists only in the deeper RCRAInfo
handler download (rcrapublic.epa.gov), where a PHONE field is present.
So channel = phone (from RCRAInfo) + mail + email-append. Not email-native.
Verified ECHO_EXPORTER RCRA signal columns
RCRA_FLAG, RCRA_IDS, RCRA_PERMIT_TYPES, RCRA_NAICS,
RCRA_INSPECTION_COUNT, RCRA_DAYS_LAST_EVALUATION, RCRA_INFORMAL_COUNT,
RCRA_FORMAL_ACTION_COUNT, RCRA_DATE_LAST_FORMAL_ACTION, RCRA_PENALTIES,
RCRA_LAST_PENALTY_DATE, RCRA_LAST_PENALTY_AMT, RCRA_QTRS_WITH_NC,
RCRA_COMPLIANCE_STATUS, RCRA_SNC_FLAG, RCRA_3YR_COMPL_QTRS_HISTORY. Plus
facility-level: FAC_DATE_LAST_INSPECTION, FAC_SNC_FLG, FAC_COMPLIANCE_STATUS.
Detectable from the data (verified)
| Signal | Field(s) | Obligation | Service |
|---|---|---|---|
| Generator status (LQG/SQG/VSQG) | FED_WASTE_GENERATOR (1/2/3/N), RCRA_PERMIT_TYPES |
Biennial report + manifest + training | Generator program |
| Open/current violation | RCRA_COMPLIANCE_STATUS, RCRA_QTRS_WITH_NC |
Return-to-compliance | Violation remediation |
| SNC flag | RCRA_SNC_FLAG, FAC_SNC_FLG |
High enforcement priority | Audit prep + corrective |
| Old/never evaluated + LQG | RCRA_DAYS_LAST_EVALUATION, FAC_DATE_LAST_INSPECTION |
Overdue inspection risk | Self-audit |
| Recent penalty / formal action | RCRA_PENALTIES, RCRA_DATE_LAST_FORMAL_ACTION |
Active enforcement | Remediation/defense |
| TSDF without active permit | OPERATING_TSDF, RCRA_PERMIT_TYPES |
TSDF permit renewal | Permit renewal |
| NAICS implies waste, no RCRA ID | RCRA_NAICS / FRS NAICS w/o RCRA_FLAG |
Should be registered as generator | Generator registration |
| Cross-program: RCRA + TRI reporter | RCRA_FLAG + TRI_FLAG |
EPCRA/Tier II overlap | Tier II / SPCC filing |
Inferable only (not in file): biennial-report-not-filed status (need RCRAInfo BR module, not in ECHO bulk), SPCC plan existence, actual chemical inventory, contact email. (Earlier "biennial flag" claim corrected — ECHO bulk does not expose a clean biennial-filed flag.)
Cross-join opportunity: ECHO_EXPORTER RCRA_FLAG + TRI_FLAG + FAC_NAICS_CODES
to find facilities that should be reporting but aren't.
4. How to Contact License Holders (Besides Postal Mail)
The registries above give us name + entity + address + phone (+ sometimes fax). Ranked options to reach them on cheaper/faster channels:
A. Email append (turn address/phone into email)
- B2B email-append vendors (e.g. data providers that match company name + address → business email): bulk match files, pay per match. Best for NPPES org records and EPA facilities (real businesses).
- Domain inference + verification: derive likely domain from business name /
website, generate
info@,first.last@, etc., then run an email-verification API (SMTP/MX validation) to keep only deliverable addresses. Cheap, scalable, works well where the entity has a website. - Website-scrape enrichment: for each entity, find the website (search by
name+city), scrape contact/
mailto:and/contactpages for published business email. High accuracy when a site exists. - People/B2B data APIs keyed on the Authorized Official / Qualifying Individual / facility contact name we already have from the registry.
B. Phone (we already have it in all three)
- Cold call the listed phone — these registries reliably include phone.
- Ringless voicemail / voicemail drop to the listed number.
- SMS to numbers that resolve to mobile (carrier-lookup the phone first; honor TCPA/DNC — we already run DNC compliance services, so scrub against the NDNC and keep consent records). This is the channel we must be most careful on.
C. Fax (underrated for NPPES + EPA)
- NPPES and many EPA records include fax. Compliance/medical/industrial audiences still read fax. Cheap blast, low competition, novelty cut-through.
D. Web / digital, no contact info needed
- Free public lookup tool (like
/tools/dot-compliance-check): e.g./tools/npi-compliance-check,/tools/oti-renewal-check,/tools/rcra-compliance-check. Drives inbound; the provider searches their own NPI/license/EPA ID and self-identifies. Pair with SEO + paid search on "NPI revalidation", "FMC license renewal", "RCRA biennial report". - Retargeting / lookalike audiences: upload the matched-email or hashed contact list to ad platforms for display/social retargeting even without reaching the inbox.
- LinkedIn / Sales Navigator outreach keyed on the Authorized Official / QI name (especially good for FMC OTIs and EPA facility EHS managers).
E. Channel-fit by sector
| Sector | Phone | Fax | Email-append quality | Web/SEO inbound |
|---|---|---|---|---|
| NPPES (NPI) | ✅ strong | ✅ good | Medium (org > individual) | ✅ "NPI revalidation" |
| FMC OTI | ✅ strong | ⚠️ some | Medium-high (have websites) | ✅ "FMC license renewal" |
| EPA RCRA | ✅ strong | ⚠️ some | High (real businesses + EHS contact) | ✅ "RCRA biennial report" |
Compliance guardrails for these channels
- TCPA/DNC: scrub all phone/SMS against DNC, prefer manual-dial or established business relationship, keep consent/records. (We already sell DNC compliance — practice what we preach.)
- CAN-SPAM: appended emails must carry unsubscribe + physical address (our Listmonk templates already do).
- State telemarketing & fax (TCPA/JFPA): fax blasting has its own rules; treat as opt-out-respecting and B2B-only.
Recommendation / Sequencing
- FMC OTI first — cleanest RMD analog (small set, 3-yr clock, bond math), some email already present, businesses with websites = easy email-append.
- EPA RCRA — best deficiency richness + highest fine fear = best conversion; reach via email-append + phone + free lookup tool.
- NPPES — biggest volume, but email-poor and individual-heavy; lead with a free NPI revalidation lookup tool + fax + org-targeted email-append.
If email-native outreach (like FCC RMD) is the hard requirement, the better targets are state license boards (contractors/CSLB, insurance producers, NMLS, cannabis/ABC) that publish licensee email directly. Worth a separate survey.