Care Management is the most profitable - and most audited - frontier for small physician practices today. Chronic Care Management (CCM) and Remote Patient Monitoring (RPM) can fund a practice's operations, but vendors promise easy billing and leave the clinician holding the bag when an auditor asks for minute - level time logs. Across the seven Care Management codes we tracked, the primary failure point is not the care itself but the technical sufficiency of the monthly care plan as defined in the CMS MLN on Chronic Care Management Services.
The documentation requirements for 99490 and 99439 are rigid. A general note in the EHR does not satisfy the 20 - minute monthly requirement. For traditional RPM, 99454 still requires at least 16 days of qualifying device data per 30 days. The 2026 CPT update added 99445 and 99470 for short - duration monitoring (2 to 15 days of data, 10 minutes of management), but those are separate codes - you cannot collapse a 5 - day reading into a 99454 claim. Our review of CMS policy surfaces three distinct triggers that lead to immediate recoupment: missing patient consent, lack of a comprehensive care plan available to the patient, and time logs that overlap with another billable care management service in the same month. We built the Compliance Binder to solve exactly this problem.
Auditors specifically target cloned care plans that show no patient - specific updates. If your April care plan reads exactly like March, you are signaling that no meaningful management occurred. This is why we focus on defensible documentation, not just complete documentation. The stakes are too high to guess whether your 99457 or 99458 logs will survive scrutiny. Care management should be a predictable revenue stream, not a liability waiting to land in your inbox.
*By Akken Yakupitiyage, Founder of D3rx*