Cardiology Compliance: Imaging Safety + Stress Testing Documentation

Cardiology practices operate under the CMS hospital outpatient Conditions of Participation at 42 CFR § 482.26 (for hospital-based imaging), the MIPPA accreditation framework for advanced diagnostic imaging, IDTF performance standards at 42 CFR § 410.33, MAC-published Local Coverage Determinations (LCDs) for cardiac stress testing, and state radiation-control program rules for fluoroscopy and nuclear medicine. (CMS paused PAMA AUC effective January 1, 2024 and rescinded 42 CFR § 414.94; AUC consultation is no longer required on Medicare FFS claims, though some commercial payers may still require it by contract.) Compliance turns on accreditation maintenance, imaging-order documentation, supervision requirements, and stress-test medical necessity.

What CMS and state regulators actually require for cardiology

For hospital-based cardiology imaging the Conditions of Participation at 42 CFR § 482.26 require radiologic services that are provided in accordance with acceptable standards of practice, equipment maintained per manufacturer specifications, safety procedures for patients and personnel, and licensed operators. Cardiac imaging modalities (echocardiography, nuclear cardiology, cardiac CT, cardiac MR) fall under this standard.

For freestanding cardiology practices operating advanced imaging, MIPPA accreditation under section 135(a) of the Medicare Improvements for Patients and Providers Act is effectively required for Medicare payment of advanced diagnostic imaging services (MR, CT, nuclear medicine, PET). Approved accrediting organizations are ACR (American College of Radiology), IAC (Intersocietal Accreditation Commission), and The Joint Commission. For echocardiography, IAC accreditation (formerly ICAEL) is required by many commercial payers and increasingly cited in audits even where not required by Medicare.

IDTFs operate under 42 CFR § 410.33 performance standards including supervising-physician requirements per modality, technologist qualifications, and quality-assurance program. A cardiology practice that operates an IDTF (separate enrolled entity for imaging) has stricter supervision and documentation requirements than a cardiology practice operating imaging under the group practice billing structure.

MAC-published Local Coverage Determinations govern medical necessity for cardiac stress testing, including stress echocardiography (CPT 93350, 93351), SPECT myocardial perfusion imaging (78451-78454), PET MPI (78491-78492), and cardiac MR. LCD documentation requirements generally include: symptoms or risk factors meeting Appropriate Use Criteria, pre-test probability assessment, justification for the modality chosen, and documented integration of the result into the patient's treatment plan.

PAMA AUC (section 218(b)) is currently paused. CMS halted implementation effective January 1, 2024 and rescinded 42 CFR § 414.94 (see the CMS Appropriate Use Criteria Program page). Ordering professionals are not required to consult a qualified Clinical Decision Support Mechanism (CDSM) for Medicare FFS imaging orders, and CMS does not deny FFS claims for missing AUC information. Treat CDSM consultation as voluntary or payer-specific until CMS lifts the pause; continue documenting AUC-aligned clinical rationale in the chart for medical necessity, and verify commercial-payer requirements.

State radiation-control programs license nuclear medicine pharmacies, certify radiation safety officers, and inspect fluoroscopy and nuclear medicine facilities. Each state has a distinct cadence and inspection scope.

The documents you must maintain

The cardiology compliance binder should hold:

• MIPPA accreditation certificate for every advanced imaging modality (MR, CT, nuclear, PET) with renewal alerts at 90 days
• IAC accreditation certificate for echocardiography if maintained, with most-recent reaccreditation site visit documentation
• State radiation-control license for nuclear medicine and fluoroscopy with annual inspection records
• Radiation Safety Officer (RSO) designation for nuclear medicine if applicable, with current credentials
• Dose-tracking logs where state rule requires, particularly for fluoroscopy
• Equipment QA, calibration, and preventive maintenance logs per device on the manufacturer's recommended cadence
• Operator credentialing files with RT/RDCS/RVT/CNMT credentials, state licensure, and annual competency assessment
• Contrast-reaction protocol with reversal-agent inventory, expiration tracking, and reaction-response training records
• IDTF performance-standard documentation if operating as an IDTF, including supervising physician designation per modality
• Voluntary/payer-specific CDSM consultation log if a commercial payer still contractually requires AUC consultation (PAMA AUC is paused for Medicare FFS effective Jan. 1, 2024)
• LCD compliance reference per MAC for stress testing and the medical-necessity documentation template
• Pre-test probability assessment template integrated into the EHR for stress test orders
• Modifier 26/TC arrangement documentation if technical and professional components are split, with anti-markup rule compliance evidence
• Quality reporting submissions (MIPS, IRIS or other registry submissions if MIPS-eligible)
• Telecardiology BAA and policy if remote interpretation is used, including identity verification and location verification

In nuclear-medicine audits we have responded to, the most common documentation finding is missing or incomplete pre-test probability assessment in the stress test order. The order says "rule out CAD" without the symptom description, the risk-factor profile, or the Diamond-Forrester or similar AUC scoring that supports moderate or high pre-test probability.

How audits actually work in cardiology

MAC TPE audits in cardiology routinely target stress testing — particularly stress echo, SPECT MPI, and PET MPI. The MAC pulls a probe of 20-40 claims with chart documentation. Scoring against the LCD focuses on: documented symptoms or risk factors, pre-test probability assessment, AUC consultation, the interpretation that integrates the result into the treatment plan (not just a normal/abnormal designation), and the management decision flowing from the result.

RAC audits review prior payments. Stress testing on consecutive intervals without documented clinical change is a recurring RAC target. Echocardiography for routine follow-up of stable cardiomyopathy without documented change in clinical status is another. RAC sampling can extrapolate; an extrapolated finding can multiply a sample-level overpayment substantially.

UPIC audits in cardiology often target self-referral patterns, technical/professional split arrangements that may violate Stark Law or Anti-Kickback Statute, and high-volume nuclear or stress testing relative to peer norms.

State radiation-control program inspections vary by state. In California (Department of Public Health Radiologic Health Branch), Texas (Department of State Health Services Radiation Control), New York (DOH Bureau of Radiologic Health), and Florida (Bureau of Radiation Control), the inspection focuses on registration, equipment QA, operator credentials, RSO presence for nuclear, and dose-tracking where applicable.

What cardiology practices most often miss in audits is the documented integration of imaging results into the treatment plan. A stress echo report that says "negative for ischemia" is not a complete documentation. The chart needs to show what clinical question was being answered, the result, and what management changed (or did not change, with reason) based on the result.

Common gaps unique to cardiology practice

In cardiology RAC and TPE audits we have responded to, the recurring patterns:

• Stress testing ordered without documented symptom or risk profile — "chest pain" without character, duration, exertional relationship, or risk factors.
• Repeat stress test within 1-2 years without documented clinical change — LCDs typically require new symptoms or significant change in clinical status.
• AUC-aligned clinical rationale missing from the imaging order — even though PAMA AUC is paused for Medicare FFS (CMS rescinded 42 CFR § 414.94 effective Jan. 1, 2024), missing AUC-style clinical reasoning still undermines medical-necessity defense at MAC/RAC review, and a still-applicable commercial-payer contract may require CDSM consultation.
• SPECT MPI billed when stress echo would have been the AUC-preferred modality — high pre-test probability low-radiation-exposure imaging preference under recent AUC updates.
• TTE (transthoracic echo) ordered as routine follow-up without documented indication — CPT 93306 and 93308 require medical-necessity documentation.
• Modifier 26/TC split with an arrangement that triggers anti-markup — the practice pays a contracting physician less than the Medicare-allowed professional component but bills at the full allowed amount.
• Nuclear medicine waste documentation gaps — radiopharmaceutical waste must be logged per state radiation-control rules.
• Holter and event monitor interpretation without documented physician review — both technical and professional components require completion before billing.

Maintenance cadence

• Daily: equipment-of-day QA checks, fluoroscopy machine pre-use checks where applicable, contrast-reaction kit inventory
• Weekly: nuclear-medicine area survey for contamination if applicable
• Monthly: imaging order documentation audit (sample of 5-10 orders per provider for AUC-aligned clinical reasoning and pre-test probability)
• Quarterly: stress-test chart audit against the MAC LCD; echo report quality review; commercial-payer CDSM consultation reconciliation (if any payer still requires it); QA program review
• Annually: MIPPA accreditation status check; IAC reaccreditation cycle planning; state radiation-control license renewal; RSO recertification if applicable; equipment full QA and dose calibration; HIPAA risk analysis; MIPS measure selection
• On every staff onboard: operator competency before independent imaging; contrast-reaction training; ALARA/radiation-safety training; emergency-protocol training

State preemption: where state law adds materially

California — California Department of Public Health Radiologic Health Branch registers fluoroscopy and nuclear medicine equipment under Title 17 CCR. CA additionally has stricter shielding inspection cycles. Business and Professions Code Section 805 requires reporting of certain disciplinary actions to the medical board.

Texas — Texas Department of State Health Services Radiation Control oversees registration under 25 TAC Chapter 289. Texas additionally requires Medical Radiologic Technologist certification for non-physician imaging operators under Occupations Code Chapter 601.

New York — DOH Bureau of Radiologic Health under 10 NYCRR Part 16. New York requires a Radiation Safety Officer for nuclear medicine sites with specific credentialing requirements. I-STOP applies to any controlled-substance use in cardiology procedural sedation.

Florida — Bureau of Radiation Control under F.A.C. 64E-5. Florida requires equipment registration, operator credentialing, and inspection on the state cycle. Florida additionally regulates office-based surgery and procedural sedation under separate Department of Health rules.

How d3rx fits

The d3rx specialty compliance binder maintains the cardiology module: MIPPA and IAC accreditation tracker, state radiation-control license tracker, equipment QA log, operator competency tracker, payer-specific CDSM consultation log (PAMA AUC paused for Medicare FFS), LCD compliance template for stress testing, IDTF performance-standard documentation, and modifier 26/TC arrangement disclosure. It is a source-grounded administrative documentation aid. It does not certify compliance, provide legal advice, or replace counsel. See compliance binder for the binder structure or audit defense for RAC/TPE response support.

D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.