Updated for 2026. Chronic Care Management (CCM) documentation is receiving increased compliance attention. In March 2026, the HHS Office of Inspector General announced an active audit of Medicare Part B CCM payments that may be at risk of noncompliance with Medicare's multiple-chronic-condition requirement.
That does not mean every CCM practice is being audited. It does mean practices should be able to demonstrate clearly why each patient qualifies for CCM and how every billed service is supported by the medical record.
This practical checklist can help your organization perform an internal CCM documentation review before a Medicare, Medicare Administrative Contractor, payer, or compliance review.
Why CCM Audit Readiness Matters in 2026
HHS OIG reports that Medicare Part B payments for CCM services increased substantially from 2019 through 2024. Its current audit is reviewing payments that may be at risk of noncompliance with the requirement that CCM patients have multiple qualifying chronic conditions.
For practices, the lesson is straightforward: enrollment in a CCM program should be supported by patient-specific eligibility and service documentation rather than by enrollment status alone.
CCM Audit Checklist at a Glance
- Verify at least two qualifying chronic conditions.
- Document expected duration and clinical risk.
- Confirm an initiating visit when required.
- Verify patient consent.
- Maintain a comprehensive patient-centered care plan.
- Document actual CCM services furnished each month.
- Identify the staff member or practitioner performing each activity.
- Validate qualifying monthly time.
- Match the documentation to the CPT code billed.
- Review supervision requirements.
- Document care coordination and care-plan updates.
- Avoid duplicate time across separately billed services.
- Confirm only one practitioner bills CCM for the applicable patient and month.
- Maintain supporting records in an accessible format.
1. Verify That the Patient Actually Qualifies for CCM
CMS defines CCM eligibility around patients with two or more chronic conditions that are expected to last at least 12 months, or until the patient's death, and that place the patient at significant risk of death, acute exacerbation or decompensation, or functional decline.
Your internal review should therefore answer:
- Are at least two chronic conditions clearly documented?
- Are the conditions expected to meet the required duration?
- Does the record support the required level of clinical risk?
- Are the conditions actively relevant to the patient's ongoing care-management needs?
Potential Audit Risk
A CCM claim supported only by a generic problem list may be more difficult to defend if the record does not clearly establish why the patient meets Medicare's eligibility criteria.
Better Documentation
Example: Patient has type 2 diabetes and chronic heart failure, both expected to require long-term management. Conditions create ongoing risk of acute exacerbation and functional decline and require medication management, specialist coordination, and continued monitoring.
2. Check the Initiating Visit
CMS requires an initiating visit before CCM starts for a new patient or a patient who has not been seen by the billing practitioner within the previous year.
Your review should confirm:
- Whether an initiating visit was required
- Date of the qualifying visit
- Type of qualifying visit
- Practitioner who performed the visit
CMS identifies an appropriate face-to-face Evaluation and Management visit, Annual Wellness Visit, or Initial Preventive Physical Examination as possible initiating visits.
3. Verify Patient Consent
Medicare requires informed consent before CCM is furnished and billed.
CMS permits either verbal or written consent, but the consent should be documented in the medical record.
Confirm that documentation reflects that the patient was informed about:
- The availability and nature of CCM services
- Possible cost sharing
- The fact that only one practitioner may furnish and bill CCM during a calendar month
- The patient's ability to discontinue CCM services
Potential Audit Risk
Consent documented only as patient enrolled in CCM may not clearly show that required information was discussed.
Stronger Entry
Patient informed of CCM service, possible Medicare cost sharing, one-practitioner monthly billing limitation, and right to discontinue. Patient verbalized understanding and provided verbal consent.
4. Review the Comprehensive Care Plan
CMS describes creation, revision, and monitoring of a patient-centered electronic comprehensive care plan as a core component of CCM.
A care plan may include:
- Problem list
- Expected outcomes and prognosis
- Measurable treatment goals
- Cognitive and functional assessment
- Symptom-management strategy
- Planned interventions
- Medication management
- Environmental evaluation
- Caregiver assessment
- Coordination with outside practitioners and resources
- Periodic review and revision
Audit Review Questions
- Is there a comprehensive care plan?
- Is it specific to this patient?
- Does it address the chronic conditions supporting CCM?
- Are goals and interventions meaningful?
- Has the plan been updated when the patient's circumstances changed?
5. Look for Evidence of Actual Monthly CCM Services
Being enrolled in CCM does not automatically support a claim every month. The record should demonstrate qualifying care-management work performed during the billing period.
Examples may include:
- Medication management
- Care-plan monitoring and revision
- Patient or caregiver communication
- Specialist coordination
- Referral management
- Transition-of-care follow-up
- Chronic-condition monitoring
- Coordination with community resources
- Addressing barriers affecting the treatment plan
Weak Entry
CCM completed — 10 minutes.
Stronger Entry
10 minutes: Reviewed patient's reported home blood-pressure trend, discussed medication adherence by phone, identified missed doses, reinforced established care-plan instructions, and escalated persistent elevated readings to the supervising practitioner.
6. Audit Your Time Tracking
Many CCM codes are time based. Your records should make it possible to recreate the monthly qualifying total.
CodeGeneral ServiceTime99490Clinical staff CCMFirst 20 minutes99439Additional clinical staff CCMEach additional 20 minutes99491Personally provided by physician/QHPFirst 30 minutes99437Additional physician/QHP CCMEach additional 30 minutes99487Complex CCMFirst 60 minutes99489Additional complex CCMEach additional 30 minutes
For each monthly total, confirm:
- The underlying activities are documented.
- Only qualifying activities were included.
- The same activity was not counted twice.
- The person performing the service is identified.
- The documented time supports the code billed.
7. Identify Who Performed Each Activity
The medical record should distinguish clinical-staff services from services personally furnished by the physician or other qualified healthcare professional.
This is important because different CCM codes have different personnel requirements.
For example, CPT 99491 is based on qualifying services personally performed by the physician or other qualified healthcare professional, while CPT 99490 generally describes clinical-staff services directed by the billing practitioner.
8. Review General Supervision
CMS permits qualifying clinical-staff CCM services under general supervision. The practitioner does not need to be physically present while every CCM activity occurs, but the service cannot simply operate independently of the billing practitioner.
Review whether your workflow demonstrates appropriate:
- Practitioner direction
- Clinical escalation
- Oversight
- Reassessment
- Integration with the patient's overall treatment
9. Review Outsourced CCM Arrangements
If your organization uses contracted CCM staff, make sure the documentation and operational workflow demonstrate meaningful integration with the billing practice.
Review:
- Contractual relationship
- Practitioner oversight
- Access to relevant patient information
- Care-plan integration
- Escalation procedures
- Time documentation
- Communication with the billing practitioner
- HIPAA and security controls
Outsourcing operational work does not outsource the billing practitioner's responsibility for compliant CCM services.
10. Check for Duplicate Time
One of the most important internal controls is making sure a staff member's same minutes are not used to support multiple separately billed services when the applicable rules do not permit that duplication.
Review encounters involving combinations such as:
- CCM and RPM
- CCM and PCM
- CCM and behavioral-health care management
- CCM and other time-based care-management services
Different services may sometimes be furnished to the same patient when their individual requirements are met, but the same work or time should not simply be counted twice.
11. Confirm One CCM Billing Practitioner
CMS informs patients that only one practitioner can furnish and bill CCM during a calendar month.
Your billing review should therefore look for situations where:
- The patient recently changed practices.
- A specialist may also be furnishing CCM.
- Another provider's claim could overlap the same month.
- The patient's previous CCM arrangement was not properly closed.
12. Review Medication Management Documentation
Medication-management activities should be documented with enough detail to demonstrate the clinical purpose.
Instead of:
Reviewed medications.
Consider documenting the actual care-management work:
Reviewed medication list following cardiology visit, confirmed new dosage with patient, identified dizziness after medication change, updated care plan, and routed concern to primary practitioner.
13. Review Care Coordination
CMS includes coordination with outside resources and practitioners among the potential components of the comprehensive care plan.
Look for meaningful documentation involving:
- Specialists
- Hospitals
- Skilled nursing facilities
- Home-health agencies
- Pharmacies
- Therapists
- Community services
- Caregivers
The record should explain what coordination occurred and why it was relevant to the patient's chronic-condition management.
14. Review Hospital and Care-Transition Follow-Up
Hospital admissions, emergency visits, and post-acute transitions often result in important CCM activity.
Review whether the record reflects clinically relevant actions such as:
- Medication reconciliation
- Care-plan updates
- Patient or caregiver communication
- Specialist coordination
- Follow-up scheduling related to the care plan
- Identification of new risks or needs
15. Check for Copy-and-Paste Documentation
Identical documentation repeated every month may make it difficult to demonstrate individualized CCM services.
Templates can improve consistency, but monthly entries should reflect what actually happened with that patient during that billing period.
Look for:
- Identical notes across multiple months
- Identical goals across unrelated patients
- Activities documented without patient-specific outcomes
- Automatically generated time without corresponding care-management activity
16. Validate the CPT Code Before Billing
Perform a final comparison between the medical record and the claim.
Ask:
- Does the patient meet eligibility requirements?
- Does the documented staff type support this code?
- Does documented time meet the applicable threshold?
- If complex CCM is billed, are its additional requirements supported?
- Are add-on codes supported by sufficient qualifying time?
- Is another incompatible or duplicative service being billed?
17. Sample Monthly CCM Audit
Review ItemExample Result2+ qualifying chronic conditionsPassConsent documentedPassInitiating visit required/completedPassComprehensive care planPassMonthly qualifying activitiesPassClinical staff identifiedPassQualifying time23 minutesDuplicate time identifiedNoCode supportedReview supports evaluation of 99490
18. Perform Periodic Internal CCM Audits
Do not wait for an external request before reviewing your CCM program.
A practical internal review can sample records and compare:
- Patient eligibility
- Consent
- Initiating visits
- Care plans
- Monthly activities
- Time records
- Staff identity
- Code selection
- Claims submitted
If recurring documentation problems appear, use the findings to improve training and workflows rather than correcting only the sampled records.
2026 CCM Audit-Readiness Checklist
- Two or more qualifying chronic conditions clearly documented
- Required duration and clinical risk supported
- Initiating visit completed when required
- Patient consent documented
- Individualized comprehensive care plan available
- Monthly CCM activities clearly documented
- Staff/practitioner identity recorded
- Qualifying time supported by individual entries
- Medication-management work documented when applicable
- Care coordination documented when applicable
- Care-plan changes updated
- General supervision supported
- External CCM staff appropriately integrated when used
- No obvious duplicate time
- Only one CCM billing practitioner for the applicable month
- CPT code supported by staff type and time
- Supporting documentation retrievable for review
How ChronicSync Can Help
Audit readiness becomes harder when consent, care plans, staff activity, care coordination, and monthly time are spread across spreadsheets and disconnected systems.
ChronicSync helps practices organize chronic-care workflows, maintain structured patient records, track care-management activities, and improve visibility into monthly CCM work.
A structured workflow can make internal reviews easier by helping teams understand what happened, who performed it, and how the activity relates to each patient's ongoing care plan.
Start your ChronicSync Free Pilot and explore a more organized approach to Chronic Care Management.
Frequently Asked Questions
Is HHS OIG auditing Chronic Care Management in 2026?
HHS OIG announced an active audit in March 2026 focused on Medicare Part B CCM payments that may be at risk of noncompliance with Medicare's multiple-chronic-condition requirement. The project focuses on potentially at-risk payments rather than establishing that all CCM claims are noncompliant.
What is the biggest CCM eligibility requirement?
Medicare CCM generally requires at least two chronic conditions expected to last at least 12 months or until death and that place the patient at significant risk of death, acute exacerbation or decompensation, or functional decline.
What should a CCM audit file contain?
Supporting documentation commonly includes evidence of eligibility, consent, an initiating visit when required, the comprehensive care plan, monthly CCM activities, staff identity, time records, care coordination, and documentation supporting the billed code.
Does 20 minutes automatically support CPT 99490?
No. Reaching a time threshold alone does not establish that all CCM requirements are satisfied. The patient must qualify and the documented activities must represent qualifying CCM services.
Should practices audit their own CCM program?
Periodic internal review can help practices identify documentation, eligibility, time-tracking, coding, and workflow problems before they become recurring billing issues.
Sources
- HHS OIG: Audit of Medicare Payments for Chronic Care Management Services at Risk of Noncompliance
- CMS: Chronic Care Management Provider Checklist
- CMS: Chronic Care Management for Complex Conditions
This checklist is provided for educational purposes only and is not legal, compliance, coding, reimbursement, or billing advice. An internal checklist does not guarantee compliance or payment. Medicare, CPT, MAC, and commercial-payer requirements can change. Verify current requirements and consult qualified compliance or legal professionals when appropriate.