As of September 2026, the CY 2027 Medicare Physician Fee Schedule cycle has produced the most consequential overhaul of remote patient monitoring (RPM) reimbursement since the codes were introduced in 2019. CMS's proposed rule, published earlier in 2026, responded directly to years of Office of Inspector General (OIG) scrutiny of RPM billing practices, and the final rule that follows it is expected to carry most of those proposals forward with modest modifications. For clinics, health systems, and care networks running RPM programs, the changes touch nearly every operational assumption: device supply rules, time thresholds, treatment plan requirements, the relationship between RPM and remote therapeutic monitoring (RTM), and how care management services stack on top of monitoring revenue. This article walks through what changed, why CMS acted, what it means economically, and how practices should restructure their programs before the January 1, 2027 effective date.
Why CMS Overhauled RPM for 2027
Also worth reading: What Should a Clinic Look for in a Patient Monitoring Platform? · How Does AI Bias Affect Patient Monitoring Systems in 2026? · What Does Patient Pulse Monitoring Actually Involve in Clinical Care Coordination?
The driving force behind the 2027 changes was sustained OIG and congressional scrutiny of RPM billing integrity. OIG reports and industry investigations between 2022 and 2025 documented cases where third-party vendors enrolled Medicare patients en masse, shipped devices with minimal clinical engagement, and billed CPT 99453, 99454, and 99457/99458 with little or no physician involvement. CMS repeatedly flagged RPM as an area of concern in prior proposed rules, and the 2026 OIG portfolio work made clear that supply-driven billing models were the primary target. The CY 2027 proposed rule was CMS's answer: tighten the definition of who can bill, what counts as qualifying data, and how much genuine clinical management must occur.
The second driver was the rapid growth of remote therapeutic monitoring. RTM codes (98975, 98976, 98977, 98980) were introduced in 2022 for monitoring non-physiologic data such as medication adherence and musculoskeletal therapy compliance. CMS observed that RTM was being used in ways that blurred into RPM territory, and that the distinction between physiologic and non-physiologic data had become commercially distorted. The 2027 rulemaking attempts to draw cleaner lines between the two service families and to prevent RTM from becoming a workaround for RPM restrictions.
Third, CMS is aligning RPM with its broader care management architecture — Principal Care Management, Chronic Care Management, and the behavioral health integration services — so that monitoring, management, and treatment planning form a coherent clinical package rather than a set of independently billable silos. Practices that built RPM as a standalone revenue line will feel this change the most.
The Headline Changes in the 2027 Rule
The proposed and final rulemaking for CY 2027 concentrates on several specific requirements. First, CMS proposed that the initial setup and device supply codes (99452 and 99453/99454) only be payable when the monitoring is part of an established treatment plan tied to a covered clinical condition, and that the ordering practitioner — not a third-party vendor — maintain the treatment management relationship. Second, CMS revisited the time thresholds: the 16-minute minimum for 99457 and the 8-minute increment for 99458 remain, but CMS proposed stricter documentation expectations for how interactive time is accumulated and attested. Third, CMS proposed that device supply under 99454 require actual transmission of physiologic data on a recurring basis, with periods of non-transmission requiring affirmative clinical follow-up rather than automatic billing.
Fourth, the rule addresses the vendor problem directly: CMS signaled that billing may only be performed by the billing practitioner or their staff under a defined supervisory relationship, and it sought comment on whether third-party device companies should be prohibited from billing under a physician's NPI entirely. Fifth, CMS proposed changes to how RTM supply codes are valued and how RTM interacts with RPM when a patient is monitored for both physiologic and non-physiologic data in the same month. Finally, the CY 2027 fee schedule cycle includes the broader conversion factor pressure affecting all Medicare Part B services, which means even practices with compliant RPM programs face reimbursement headwinds.
RPM vs. RTM Under the 2027 Rules
Practices frequently conflate RPM and RTM, and the 2027 rulemaking makes the distinction more consequential than ever. The table below summarizes the key differences as they stand heading into 2027.
| Feature | RPM (CPT 99453/99454/99457/99458) | RTM (CPT 98975/98976/98977/98980) |
|---|---|---|
| Data type | Physiologic data (blood pressure, glucose, weight, SpO2, heart rate) | Non-physiologic data (medication adherence, therapy response, musculoskeletal metrics) |
| Ordering practitioner | Physician or qualified healthcare professional (QHP) within state scope-of-practice rules | Broader set of practitioners, including therapy-focused providers |
| Treatment plan requirement | Must be tied to an established, documented treatment plan for a covered condition (tightened in 2027 rulemaking) | Treatment plan required, with 2027 proposals clarifying therapy-plan linkage |
| Time thresholds | 99457 at 16+ minutes; 99458 at 8-minute increments | 98980 at 20+ minutes; supply codes without interactive time billing |
| Billing entity | Billing practitioner or staff under supervision; 2027 proposals restrict third-party vendor billing | Similar restrictions proposed; vendor-driven models under scrutiny |
| Primary OIG risk | Mass enrollment with no clinical engagement | Use as an RPM workaround for non-physiologic programs |
| Typical monthly revenue per patient | Roughly $120–$190 fully built out (setup amortized) | Roughly $90–$150 depending on code mix and specialty |
What the New Time and Documentation Requirements Mean in Practice
The interactive time codes are where most audits will be won or lost. Under the 2027 framework, 99457 requires at least 16 minutes of personal, interactive communication with the patient or caregiver during the calendar month, and 99458 bills in 8-minute increments for each additional block. CMS's 2027 proposals tighten what counts: time must be attributable to management of the patient's monitored condition, must be documented contemporaneously or near-contemporaneously, and cannot be aggregated from passive device review alone. Device-generated alerts reviewed without patient contact do not, by themselves, satisfy the interactive requirement.
For a typical hypertension or heart failure program, this means the monitoring staff member needs a defensible log: date, duration, modality (call, video, secure messaging exchange), and a clinical note describing what was discussed and what management decisions followed. Practices that relied on monthly attestation summaries without per-interaction detail should rebuild their documentation templates before January 2027. CMS also signaled interest in whether a mid-month minimum transmission standard should apply to 99454 — meaning devices must transmit data on a defined number of days per 30-day period — and final guidance on this point is the single most important operational detail for vendor contracts.
The economics matter here. At 2026 national rates, 99454 pays roughly $50–$60, 99457 roughly $50–$55, and each 99458 increment roughly $19–$21. A fully compliant patient monitored all month generates approximately $120–$190 in professional revenue. If a program loses even one month of supply billing per patient due to documentation failures, the annual revenue impact across a 500-patient program can exceed $250,000 — which is why documentation infrastructure deserves the same investment attention as the devices themselves.
The Vendor Problem and Third-Party Billing Restrictions
The most commercially disruptive element of the 2027 rulemaking is its treatment of third-party RPM vendors. The dominant market model of 2019–2025 — a device company that enrolls patients, ships hardware, performs nominal monitoring, and bills under a partner practice's NPI in exchange for a revenue split — is squarely in CMS's and the OIG's crosshairs. The 2027 proposals make clear that the billing practitioner must exercise genuine supervisory control over the monitoring services, that the treatment plan must originate with the clinical practice, and that arrangements where the vendor effectively owns the patient relationship raise both billing-integrity and anti-kickback concerns.
Practices using vendor-driven models should assume that 2027 audits will examine three things: who ordered the monitoring, who owns the treatment plan, and who actually performed and documented the interactive time. If the honest answers are "the vendor, the vendor, and the vendor," the program needs restructuring. Compliant alternatives include the practice employing its own monitoring staff (often the most defensible model), contracting vendors as business associates who perform discrete tasks under clinical direction, or joint arrangements where the vendor supplies devices and software but all billing and clinical decision-making remain in-house. Revenue-share arrangements tied to billing volume deserve particular scrutiny from compliance counsel, because they can implicate gainsharing and kickback statutes independent of the fee schedule rules.
How RPM Interacts with Care Management Services in 2027
The 2027 rulemaking also clarifies the stacking rules between RPM and the care management family — Chronic Care Management (99490, 99439, 99487, 99489), Principal Care Management (99491, 99492, 99493), and related services. Time billed toward RPM interactive codes cannot be double-counted toward CCM or PCM time in the same month, and CMS's 2027 proposals reinforce that the clinical activities must be separately documented and separately attributable. For a complex heart failure patient enrolled in both RPM and CCM, the practice needs a time-allocation methodology that assigns each staff minute to exactly one service.
This is where care-coordination platforms earn their keep. A practice running RPM, CCM, and PCM for overlapping panels without an integrated time-tracking and documentation system is structurally exposed to overbilling findings, even when the clinical care is genuine. The 2027 environment rewards organizations whose software can produce per-patient, per-service, per-minute audit trails on demand. Clinics evaluating platforms should treat audit-grade time attribution as a first-order selection criterion, not a nice-to-have — and should ask any vendor to demonstrate a real audit export, not a marketing screenshot.
Practical Steps to Prepare Before January 1, 2027
Preparation should follow a sequence. First, audit your current program against the 2027 requirements: pull a sample of 20–30 billed patient-months and verify that each has a documented treatment plan, an ordering practitioner within your practice, transmission logs supporting 99454, and time logs supporting 99457/99458. Second, remediate documentation gaps by updating templates, staff workflows, and EHR integrations so that time capture happens at the point of patient contact. Third, renegotiate vendor contracts to align with the new billing-entity rules — if your vendor bills under your NPI, either bring billing in-house or restructure the contract so the vendor's role is clearly subordinate and task-based.
Fourth, retrain staff on the interactive-time standard and the boundary between RPM and RTM, especially if your program monitors adherence or therapy data alongside vitals. Fifth, model the financial impact: build a revenue projection under the 2027 fee schedule assumptions, including the conversion factor pressure, and stress-test it against a 10–20% attrition in billable patient-months as documentation standards tighten. Sixth, if you have not already, implement or upgrade a care-coordination platform that unifies device data ingestion, transmission monitoring, time logging, and care management documentation in one auditable record. Organizations that complete this sequence by Q4 2026 will enter 2027 with a defensible program; those that wait for the final rule's exact text to be fully digested will spend the first quarter of 2027 in remediation mode.
Common Mistakes That Trigger Denials and Audits
The recurring failure patterns are predictable. The most common is billing 99454 for months in which the device transmitted little or no data — CMS expects affirmative clinical follow-up when transmissions lapse, not silent continued billing. The second is aggregating passive device review into the 16-minute interactive threshold for 99457; auditors routinely disallow these claims when time logs cannot tie minutes to patient contact. The third is missing or boilerplate treatment plans: a one-time order template that says "monitor for hypertension" without a genuine management plan is a known audit flag.
The fourth is double-counting time between RPM and CCM/PCM, which is easy to detect when the same staff member's notes show identical minute allocations across services. The fifth is the vendor-model exposure described above, where the practice cannot demonstrate control over its own billed services. The sixth is enrolling patients whose conditions are not plausibly amenable to physiologic monitoring — enrolling a stable low-risk panel purely to generate supply revenue is exactly the pattern OIG reports described. Each of these mistakes is avoidable with documentation discipline and honest program design, and each becomes materially more expensive once 2027 audit activity begins.
Cost, Pricing, and the Financial Outlook for RPM Programs
The direct reimbursement picture for 2027 is a mix of stability and pressure. The RPM and RTM code values themselves are not being slashed; the interactive time codes retain their approximate 2026 values, and supply codes remain in the $50–$60 range for 99454. However, the broader CY 2027 conversion factor environment — a persistent multi-year pressure on all Part B professional services — means the effective per-patient revenue will likely decline modestly even for fully compliant programs. Practices should budget for effective RPM revenue per monitored patient in the $110–$180 per month range for 2027, down slightly from 2026.
On the cost side, compliant operation requires investment: device costs typically run $30–$80 per patient per month depending on the modality (cellular-connected BP cuffs and glucometers sit at the higher end), cellular connectivity adds $5–$15 per patient per month, and staffing for genuine interactive monitoring generally requires one monitoring FTE per 250–400 active patients depending on acuity. Platform costs for care-coordination and RPM software typically range from $5–$25 per patient per month at clinic scale. When these costs are netted against compliant revenue, well-run programs remain profitable — but the margin is thin enough that sloppy documentation, device waste, or over-enrollment of low-engagement patients can flip a program negative. The 2027 rules effectively force programs to be clinically real to be financially viable, which is the policy intent.
When to Act and What to Watch
The effective date for the CY 2027 changes is January 1, 2027, which leaves practices in September 2026 roughly one quarter to complete preparation. The final rule is typically published in late October or early November 2026, and while CMS occasionally retreats from proposals in response to comment (as it did on some 2021 RPM restrictions), the core integrity provisions of the 2027 proposal — treatment plan linkage, billing-entity restrictions, and documentation tightening — align so closely with OIG findings that retreat is unlikely. Practices should build to the proposed requirements now and adjust only at the margins when the final text lands.
Three watch items deserve attention through year-end. First, whether the final rule adopts a specific minimum transmission frequency for 99454 (for example, data on 16 of 30 days), which would change device-selection and patient-onboarding criteria. Second, whether CMS finalizes an outright prohibition on third-party vendor billing under physician NPIs or settles for supervisory-control requirements. Third, the final conversion factor, which determines the across-the-board revenue pressure. Organizations that monitor these items, complete the preparation sequence above, and invest in audit-grade documentation infrastructure will find that the 2027 rules, while demanding, reward programs built on genuine clinical engagement — and quietly eliminate the competitors that were never doing the work.
For clinics and care networks evaluating their technology stack in this new environment, the selection criteria have shifted: the platform must handle device data ingestion, transmission-gap detection, per-minute time attribution across RPM/RTM/CCM/PCM, and audit export as a single integrated workflow. That is the standard against which 2027 programs will be judged, by CMS and by the OIG alike.