OIG Adds CCM Audit to Work Plan: What Medicare's Review Means for Providers

The federal government is taking a closer look at how chronic care management (CCM) services are billed and reimbursed under Medicare. A newly added item to the Office of Inspector General's Work Plan outlines a multi-year audit focused on Medicare Part B payments for CCM services, with particular attention to whether billed patients meet the required criteria for multiple chronic conditions. The review will examine payment patterns over several recent years and is expected to continue through the latter part of the decade.

For healthcare organizations that have invested in care management programs or are evaluating CCM as part of a broader remote care strategy, this development is significant. It reflects growing federal scrutiny of care coordination services delivered outside traditional visits, even as these programs continue to expand in scale and importance. Note: If you are new to chronic care management, read this column.

Why Is the OIG Auditing CCM Now?

The timing of this audit reflects both growth and scrutiny. Medicare spending on chronic care management has increased significantly since the federal government began covering it more than a decade ago, and with that growth has come increased attention to whether services are consistently documented, appropriately billed, and aligned with program requirements.

The audit is expected to focus on a fundamental eligibility issue: whether patients receiving chronic care management services meet the requirement for multiple chronic conditions. In practice, this connects directly to documentation quality, coding accuracy, care plan development, and ongoing clinical validation.

Importantly, meeting the "multiple chronic conditions" requirement involves more than listing diagnoses. The medical record must demonstrate that each condition is clinically relevant, actively managed, and contributes to the patient's overall risk profile. For providers, this is about reinforcement of existing expectations.

How This Builds on Prior OIG Oversight of CCM and RPM

This is not the first time chronic care management or adjacent services have come under review. In recent years, federal oversight efforts have increasingly examined remote and longitudinal care models, including remote patient monitoring (RPM) and chronic care management itself. Prior audits and reports have highlighted areas such as billing patterns, documentation gaps, and opportunities for improved oversight.

These efforts show that as care delivery expands beyond in-person visits, regulators are working to ensure that payment integrity keeps pace. This latest Work Plan addition builds on that trajectory, reinforcing the importance of demonstrating that remote care services billed are medically necessary, properly documented, and delivered in accordance with program requirements.

At the same time, CMS has continued to expand coverage for remote and longitudinal care, supporting broader adoption of services like CCM, RPM, and advanced primary care management (APCM). As these programs scale, they are becoming a more central part of how providers manage patient populations between visits. This combination of growth and oversight is shaping the next phase of remote care, where expansion and accountability are expected to evolve together.

What Should CCM Providers Be Paying Attention To?

For organizations with active chronic care management programs, this is an opportunity to revisit core operational and compliance foundations. Providers should focus on a few key areas:

• Documentation clarity: Care plans, time tracking, and patient interactions must clearly support both CCM eligibility and services delivered.

• Eligibility validation: Ensure patients meet the two-or-more chronic conditions requirement and that conditions are clinically supported.

• Workflow consistency: Standardize how CCM is delivered and documented across teams.

• Cross-team alignment: Keep clinical, operational, and billing functions tightly coordinated.

Providers should also confirm that foundational CCM program requirements are consistently met, including appropriate initiating visits when required and clear documentation of patient consent prior to billing. Even small gaps can become more visible under audit conditions.

How to Build CCM Programs With Compliance in Mind

As oversight increases, the importance of building care management programs on a strong compliance foundation becomes more apparent. That includes structured workflows, clear documentation protocols, and systems that support accurate capture of time and services. It also means working with partners and platforms that are designed to reinforce compliance.

Even when care management activities are supported by external partners or technology platforms, the billing provider remains responsible for ensuring that services are properly documented, clinically appropriate, and compliant with Medicare requirements. This includes maintaining accurate records of time spent delivering CCM services and ensuring that all documented activities align with what is ultimately billed.

Organizations that take this approach are better positioned not only to withstand audit scrutiny but also to scale their programs with greater confidence.

What Comes Next for CCM Growth and Accountability?

The expansion of chronic care management reflects a broader shift toward proactive, continuous care for patients with chronic conditions, while the level of accountability tied to these services continues to evolve.

For providers, the takeaway from the new OIG chronic care management audit is not to step back from chronic care management or other remote care programs. Instead, ensure that growth is supported by strong operational discipline, clear documentation, and ongoing attention to regulatory expectations. When done well, CCM is a powerful tool for improving patient access and outcomes, strengthening engagement between visits, and supporting more sustainable care models.

How Prevounce Supports Compliant CCM Programs

Prevounce supports healthcare organizations nationwide in building and managing remote care management programs that align with both clinical goals and regulatory requirements.

By combining technology, connected devices, and outsourced care management services with structured workflows and documentation support, Prevounce helps providers maintain visibility into patient status while reinforcing the operational consistency needed for compliant billing.

As regulatory scrutiny evolves, having the right infrastructure in place can make the difference between programs that stall and those that scale.

Providers evaluating their current approach to chronic care management or planning to expand their remote care program can benefit from solutions that prioritize documentation integrity, workflow standardization, and ongoing compliance support. Prevounce's CCM software and services are designed to help organizations operationalize care management programs while maintaining alignment with Medicare requirements and audit expectations.

Chronic Care Management Audit FAQs: What Providers Need to Know

What is the OIG reviewing in its chronic care management audit?

The audit is expected to examine whether Medicare payments for chronic care management services meet program requirements, particularly whether patients qualify based on having multiple chronic conditions.

What documentation is most important for CCM compliance?

Providers should ensure the medical record clearly supports patient eligibility, including clinically relevant chronic conditions, care plans, time tracking, and records of ongoing care management activities.

Does the audit introduce new CCM billing requirements?

No. The audit reinforces existing Medicare requirements rather than introducing new rules, with a focus on how consistently those requirements are met in practice.

What is involved in CCM billing compliance?

CCM billing compliance requires accurate patient eligibility validation, proper documentation of care management activities, consistent time tracking, documented patient consent, and alignment between clinical services and submitted claims.

Are outsourced or technology-supported CCM programs compliant?

They can be, but the billing provider remains responsible for oversight, documentation, and ensuring services meet Medicare standards regardless of who performs the work.

What are common areas of risk in chronic care management programs?

Typical risk areas include insufficient documentation of multiple chronic conditions, inconsistent workflows, gaps in consent or initiating visit requirements, and misalignment between clinical and billing processes.

Should providers delay or scale back CCM programs due to increased scrutiny?

No. Providers can continue to grow chronic care management programs, but should ensure they are built on strong documentation, standardized workflows, and clear compliance processes.

* Disclaimer: The above information is for informational purposes only and does not constitute legal or other professional advice. Billing and coding requirements — especially in the telehealth space — can change and be reinterpreted often. You should always consult an attorney and/or medical billing professional prior to submitting claims for services to ensure that all requirements are met.