What are the best practices for tracking time in CCM and RPM programs?

The Direct Answer: Time Tracking Is the Compliance Backbone of CCM and RPM

Chronic Care Management (CCM) and Remote Patient Monitoring (RPM) are two of the few Medicare programs where reimbursement is directly tied to documented time. Under the 2025 CMS Physician Fee Schedule, CCM codes require a minimum of 20 minutes of clinical staff or practitioner time per calendar month for 99490, with add-on codes at each additional 20 minutes. RPM codes such as 99453, 99454, and 99457 carry their own thresholds: 99457 requires at least 20 minutes of interactive communication with the patient or caregiver within a calendar month, and 99458 covers each additional 20 minutes. If your time documentation does not hold up under audit, the revenue attached to those codes does not exist.

Also worth reading: What are the definitive care coordination best practices for 2026? · What is the definitive RPM vs CCM coding compliance guide for modern clinical practices? · How do clinics and care networks actually calculate the ROI of care coordination programs?

The best practices that separate durable programs from audit liabilities come down to five things: capturing time contemporaneously rather than reconstructing it later, attributing time to the correct billing practitioner, distinguishing between cumulative staff time and interactive communication, storing evidence in a way that survives a records request, and reconciling platform-reported data against your EHR before claims go out. Practices that treat time tracking as an afterthought typically discover the problem during a prepayment review, when recoupments arrive months after the money was spent.

This guide walks through how time tracking actually works in these programs, why it fails so often, what a defensible workflow looks like step by step, and where dedicated care-coordination platforms outperform manual methods. The goal is practical: help clinic administrators and care-network leaders build a time-tracking discipline that supports both compliance and sustainable margins.

Why Time Tracking Matters More Than Most Clinics Realize

CMS has been tightening scrutiny on CCM and RPM for several years, and the proposed changes to RPM and RTM requirements covered by firms like Wilson Sonsini signal continued pressure on device utilization, data transmission requirements, and time documentation. In practice, audits of CCM claims frequently fail not because care was not delivered but because the practice cannot prove who delivered it, when, and for how long. A monthly claim for 99490 built on a sticky note or a vague EHR note is functionally undocumented.

The financial stakes are real. A single enrolled patient generating one hour of qualifying CCM time per month can produce roughly $60 to $100 in combined code revenue depending on geography and payer mix, and a mid-sized primary care practice with 300 enrolled patients can generate five figures of monthly recurring revenue from these programs alone. Case studies published by vendors such as TimeDoc Health have reported tens of thousands of dollars in combined monthly revenue growth for partner practices when engagement and documentation workflows mature together. But that same volume multiplies audit exposure if time logs are inconsistent.

There is also a clinical argument that gets less attention: accurate time tracking tells you whether your program is actually viable. If your average patient consumes 45 minutes of staff time per month but your staffing model assumes 25, you are subsidizing the program out of margin without knowing it. Time data is both a compliance artifact and an operational dashboard, and clinics that only look at it during audits lose the second benefit entirely.

Understanding What Counts as Billable Time

Not all activity counts toward CCM and RPM thresholds, and misclassification is one of the most common sources of denied claims. For CCM, billable time includes care plan development and revision, medication reconciliation, coordination with specialists and home health agencies, transitions-of-care management, and structured communication with patients or caregivers about their chronic conditions. General scheduling calls, appointment reminders unrelated to the care plan, and billing inquiries do not count.

For RPM, the structure is different. Code 99454 pays for device supply and daily transmission over a 30-day period, requiring at least 16 days of readings. Code 99457 requires at least 20 minutes of interactive communication — live conversation with the patient or caregiver related to the monitoring data — within the month. Proposed and finalized rule changes have pushed toward requiring that monitored data be reviewed and that interactive time be tied to actual clinical decision-making, not passive check-ins. Time spent merely confirming a patient turned on their device generally does not qualify; time spent reviewing a blood pressure trend and adjusting a diuretic dose does.

Attribution rules matter too. CCM time must be billed under the practitioner or billing entity responsible for the care plan, and general supervision is permitted for much of the work, meaning clinical staff can perform it under a physician's oversight without the physician being physically present. RPM interactive time under 99457 historically required billing by the physician or qualified healthcare professional themselves, though recent rule cycles have adjusted supervisory flexibility. Your time-tracking system needs fields for both the performing individual and the supervising billing provider, or you will create attribution gaps that auditors find quickly.

Manual vs. Platform-Based Time Tracking: A Comparison

Most clinics start with manual tracking because it feels free. It usually costs more than it saves. The table below compares the two approaches across the dimensions that matter most in an audit and in day-to-day operations.

Manual tracking can work for a small pilot — say, 50 to 100 patients managed by one dedicated nurse — provided someone enforces a same-day logging rule. Beyond that scale, reconstruction error compounds. Platforms in this category, including tools used by endocrinology groups profiled by eClinicalWorks and healow, tie timers directly to care-plan tasks and patient communications, which means the log exists whether or not anyone remembers to write a narrative note. The trade-off is vendor cost and another system to integrate, which is why the decision should hinge on enrollment volume and staffing ratios rather than on price alone.

Practical Steps: Building a Defensible Time-Tracking Workflow

Start with policy, not software. Write a one-page internal standard that defines what counts as billable time for each code family, who may log time, what granularity is required (per-activity timestamps, not daily totals), and the deadline for logging — same business day is the standard worth enforcing. Without a written policy, every coordinator invents their own interpretation, and inconsistency is what auditors flag first.

Second, configure your systems so logging is easier than skipping. If you use a care-coordination platform, enable automatic timer starts on outbound patient calls and inbound message handling. If you rely on the EHR, build a templated time field into the CCM note with required sub-fields: date, start and stop times, performing staff member, supervising provider, activity type, and modality. Make the note impossible to sign with blanks.

Third, reconcile RPM device data against interaction logs monthly. Verify that each patient billed for 99454 had at least 16 days of transmissions in the cycle, and that any 99457 claim maps to a documented interactive session of sufficient length. Fourth, run a monthly internal audit sample — 10 percent of claims or a minimum of 20 charts — checking time totals, attribution, and supporting documentation. Fifth, train staff quarterly on rule changes, because CMS adjusts these requirements nearly every fee-schedule cycle, and the 2025–2026 period has seen some of the most active revisions to RPM and RTM in years.

Finally, keep evidence exportable. Store time logs in a format that can be produced for a specific date range and patient list within days, not weeks. Audit response speed materially affects outcomes in prepayment reviews.

Common Mistakes That Trigger Denials and Recoupments

The most frequent error is rounding up. Logging 22 minutes when the actual activity took 14 is falsification, not estimation, and CMS expects time to reflect genuine effort. Use exact timestamps and let the totals fall where they fall; if a patient generates 18 minutes, do not bill that month.

The second mistake is double-counting concurrent activities. Two coordinators working simultaneously on different patients is fine; one coordinator counting the same phone call toward both CCM time and Transitional Care Management time is not. Time cannot be counted twice across services billed in the same month, and overlapping service periods (for example, CCM and Principal Care Management for the same patient) require careful allocation.

Third, clinics frequently ignore consent and eligibility prerequisites, assuming time documentation carries the whole claim. CCM requires written patient consent, an eligible chronic condition inventory (two or more chronic conditions expected to last at least 12 months), and a comprehensive care plan in the record. RPM requires an established patient relationship and, under evolving rules, justification that the monitoring is medically necessary. Time logs on top of a broken foundation still produce denials.

Fourth, many practices let device non-adherence slide. Billing 99454 for a patient with 11 days of readings in a 30-day cycle is a straightforward recoupment. Build automated adherence flags at day 20 of each cycle so outreach happens before the threshold is missed, not after the claim is denied. Vendors report that structured engagement workflows — like those behind the 76 percent patient-engagement lift cited in the TimeDoc Health case study — exist precisely because human follow-up without systematic prompting misses too many patients.

Fifth, attribution drift: staff log time under whichever provider is convenient rather than the designated billing practitioner. This creates mismatches between the rendering provider on the claim and the supervising provider in the notes, a pattern MAC reviewers specifically look for.

When to Act: Timing Your Program and Your Process Upgrades

If you are launching CCM or RPM now, build the time-tracking workflow before enrolling your first patient, not after the first hundred. Retrofitting documentation habits onto an existing panel produces six months of questionable records that you either write off or defend uncomfortably. A reasonable launch sequence takes eight to twelve weeks: four weeks for policy, consent forms, and system configuration; two to four weeks for staff training and dry runs on a small cohort; then staged enrollment of 25 to 50 patients per month while monitoring documentation quality.

If you already operate a program, act on three triggers. First, any notice of additional documentation requests or prepayment review should prompt an immediate internal audit of the affected date range. Second, each November, when CMS releases the final Physician Fee Schedule, re-map your time definitions and code thresholds against the new rules before January 1. Third, if your denial rate on CCM or RPM codes exceeds roughly 5 percent, treat it as a documentation-process failure rather than a payer quirk and investigate within the quarter.

Practices considering a platform migration should time it for a natural boundary — a new calendar year or a new enrollment cohort — so that old and new records do not interleave within a single patient's audit trail.

Cost Considerations and Return on Documentation Discipline

The direct costs of good time tracking are modest relative to program revenue. Manual approaches consume coordinator hours — realistically 15 to 30 minutes per patient per month in administrative overhead at small scale, which at a $25-per-hour loaded rate adds $6 to $12 per patient in hidden labor cost. Dedicated platforms typically charge per-patient-per-month fees in the range of $10 to $40 depending on feature depth and integration scope, plus implementation fees that vary widely. Against CCM revenue of $60 to $100 per active patient per month and RPM revenue that can exceed $100 per adherent patient per month when both device and interactive codes are captured, the economics favor disciplined tracking even before counting avoided recoupments.

The larger financial risk is asymmetric. Recouped claims come back with interest in some cases, and patterns of improper payment can escalate to broader reviews affecting unrelated service lines. A practice billing 200 CCM patients at full compliance value faces potential exposure well into six figures annually if systemic documentation failures emerge. Spending a few thousand dollars a year on process rigor is cheap insurance by comparison.

Be skeptical of vendor ROI projections, though. Figures like "$33k in combined monthly revenue growth" from case studies reflect best-case implementations with engaged panels and clean payer mixes. Model your own numbers using your actual enrollment funnel, expected adherence rates (often 60 to 80 percent for RPM devices), and your local fee schedule before committing to any platform contract.

The Bottom Line for Clinic and Care-Network Leaders

Time tracking in CCM and RPM is not paperwork surrounding the clinical work; it is the evidentiary layer that converts clinical work into revenue and keeps it converted. The practices that sustain these programs share a pattern: written time policies, contemporaneous capture, clear attribution, monthly reconciliation against device and claim data, and routine internal sampling. Whether that discipline comes from a spreadsheet enforced by a diligent nurse or from a purpose-built care-coordination platform matters less than whether it exists consistently at scale. Small programs can succeed manually; growing networks almost always need automation. Either way, the audit standard is the same, and the clinics that meet it quietly collect the revenue that others forfeit.