Your medical director wants to start billing behavioral health integration next quarter, and someone has handed you a single line of CPT language to build a program around. The 99484 CPT code description requires at least 20 minutes of clinical staff time per calendar month, directed by a physician or other qualified health care professional, with four specific service elements documented. That sentence sets off a chain of operational decisions: who tracks the minutes, where the rating scales live, who obtains and records consent, and which of your vendors now touches behavioral health data.

This guide is for the administrator, billing lead, or privacy officer who has to make that program run and survive an audit. It is administrative guidance on process and documentation, not clinical direction on code selection.

What the 99484 CPT Code Description Actually Says

CPT 99484 describes care management services for behavioral health conditions: at least 20 minutes of clinical staff time per calendar month, directed by a physician or other qualified health care professional, with all of these elements present in the record:

  • Initial assessment or follow-up monitoring, including use of applicable validated rating scales
  • Behavioral health care planning related to behavioral or psychiatric health problems, including revision when the patient is not progressing or the patient's status changes
  • Facilitating and coordinating treatment such as psychotherapy, pharmacotherapy, counseling, and/or psychiatric consultation
  • Continuity of care with a designated member of the care team

Practices generally refer to 99484 as "general BHI" to distinguish it from the Collaborative Care Model codes, which carry a different structure — a behavioral health care manager, a psychiatric consultant, and a patient registry. General BHI does not require that team configuration, which is exactly why smaller primary care practices ask about it first.

Whether the service your clinicians deliver meets the code's elements in any given month is a determination your clinicians and coders make from the documentation in front of them. Your job is to make sure the documentation exists, is time-stamped, and is retrievable.

Where administrators get the payer rules

Payment amounts, supervision requirements, and concurrent-billing rules change with each annual fee schedule cycle. Pull them from the source rather than from a webinar slide: CMS publishes the Physician Fee Schedule and its supporting materials, and your Medicare Administrative Contractor posts local guidance. Commercial payers vary — some cover general BHI, some do not, and some impose their own consent or documentation conditions in the provider manual.

Translating the Four Required Elements Into a Monthly Workflow

The code is billed per calendar month, not per encounter. That single fact reshapes your workflow, because nothing about it fits the visit-based rhythm your front desk already runs.

Assign a named owner and a named backup

"Continuity of care with a designated member of the care team" means a specific person, identified in the chart, whom the patient can reach. Write that assignment into the care plan template as a required field. When staffing turns over — and it will — the reassignment needs to be documented, not assumed.

Standardize the rating scales and where they are stored

Validated rating scales are part of the code's required elements, so the results must be findable in the record, not sitting in a spreadsheet on a shared drive. Decide as a practice which instruments you use, who administers them, whether they are collected on paper, on a tablet, or through the portal, and how the score lands in the chart. Every one of those channels is a records-handling decision with a downstream privacy consequence.

Build the calendar-month close

Set a recurring internal deadline — the third business day after month end works for most practices — when the care manager reviews each enrolled patient, confirms the time threshold was met, confirms the care plan was reviewed or revised, and releases the charge. Anything short of 20 documented minutes does not get released. Make that a hard stop in your billing workflow, not a judgment call at the keyboard.

Medicare care management services require patient consent, and general BHI is no exception. The consent conversation covers the nature of the service, that cost sharing may apply, that only one practitioner may furnish and bill the service in a given month, and that the patient may stop the service at any time. Consent may be obtained verbally under CMS policy, but it must be documented in the medical record.

Operationally, that means a scripted consent, a chart field that records the date and the staff member who obtained it, and a written summary the patient can take home. If your practice bills other care management services, decide in advance which service a co-managed patient is enrolled in for the month, because concurrent billing rules differ by service and by payer, and time counted toward one service cannot be counted toward another.

Two more items your billing lead should confirm before go-live: whether an initiating visit is required for patients new to the practice or not seen within the prior year, and how your practice handles patients who decline once they hear about coinsurance. Both scenarios need a documented path.

The Time Log Is the Audit Trail

A 20-minute threshold invites exactly one kind of audit question: show me the minutes. Practices that fail this question do not fail because staff did not do the work. They fail because the work was described narratively — "called patient, discussed medication" — with no start time, stop time, or duration.

Require four fields per entry: date, staff member, activity, and minutes. Aggregate them per patient per calendar month. If your EHR has a care management time-tracking module, use it and disable the free-text workaround. If it does not, and you adopt a separate tool, that tool is now holding protected health information about behavioral health conditions — see the vendor section below.

Retention follows your existing medical record retention schedule under state law, and HIPAA separately requires six-year retention for required documentation such as policies, authorizations, and accountings of disclosures. Time logs supporting a claim also sit inside your payer audit exposure window. Do not let a vendor's default 90-day log purge decide that for you.

Every Vendor That Touches a 99484 Program

Run this list against your vendor inventory before the first claim goes out. A general BHI program typically pulls in:

  • The EHR or care management module holding care plans and time logs
  • Any standalone registry, tracking spreadsheet host, or cloud storage service
  • Digital rating-scale or patient-questionnaire tools, including portal add-ons
  • Secure messaging, texting, or automated outreach platforms used for monthly check-ins
  • Contracted or remote care management staffing organizations
  • Your billing service, clearinghouse, and any coding audit consultant
  • Telephony or call-recording systems, if calls are recorded

Each of these is a business associate if it creates, receives, maintains, or transmits PHI on your behalf. The sensitivity of behavioral health data does not change the legal test, but it should change how carefully you read the security terms, the subcontractor clause, and the breach-notification timeline. HHS publishes sample business associate agreement provisions that show the required elements.

If you are adding two or three vendors to launch this program and do not want to wait on counsel for a boilerplate document, you can produce a signature-ready Business Associate Agreement through a six-step wizard with PDF and DOCX export — one-time purchase, no subscription. Get the agreement executed before the vendor receives a single patient name, not after the pilot is already running.

Behavioral Health Records Requests: What You Release and What You Don't

Once a BHI program is running, your records staff will start receiving requests for charts that now contain rating scale scores, care plans, and detailed notes about psychiatric symptoms. The right of access still applies, and the 30-day clock still runs. HHS guidance on the individual right of access is the reference your team should have bookmarked.

Two clarifications your front desk needs in writing. First, the psychotherapy notes exception is narrow: it covers notes recorded by a mental health professional documenting or analyzing the contents of a private counseling session and maintained separately from the rest of the record. BHI care management logs, care plans, and rating scale results are not psychotherapy notes simply because they concern mental health. Second, state law may impose additional restrictions on mental health record disclosures — build those into your release workflow rather than expecting staff to remember them.

For questions about sharing information with family members, other treating providers, or in safety situations, HHS maintains specific guidance on the Privacy Rule and information related to mental health. Print it and put it in the records-request binder.

The 42 CFR Part 2 Date on Your Calendar This Week

General BHI covers behavioral health conditions including substance use disorders, so coordination with SUD treatment programs is a realistic part of the workflow. Records you receive from a program covered by 42 CFR Part 2 carry confidentiality restrictions that travel with the information — restrictions that are more limiting than HIPAA and that your general release form does not satisfy.

The modified Part 2 rule, aligning much of the framework with HIPAA and adding notice and consent requirements, carries a compliance date of February 16, 2026. If your practice receives Part 2 records, or operates any component that meets the Part 2 definition of a program, that is a policy review and a staff training item this month, not next quarter. Have counsel or your privacy officer confirm which side of the line each part of your organization falls on.

A Two-Week Readiness Checklist Before the First Claim

  1. Billing lead: pull current payer policies for general BHI, including consent, initiating-visit, and concurrent-billing rules, and document them in a one-page internal policy.
  2. Clinical lead: select rating scales, define the care plan template fields, and name the designated care team member for each enrolled patient.
  3. Practice administrator: configure time tracking with date, staff, activity, and minutes; disable free-text substitutes.
  4. Front desk supervisor: script the consent conversation, including cost sharing and the right to stop; add a chart field for date and staff initials.
  5. Privacy officer: update the vendor inventory, execute missing BAAs, confirm log retention settings, and refresh your risk analysis to cover the new data flows.
  6. Records staff: add a behavioral health branch to the release workflow covering state-law restrictions and Part 2 records.
  7. Everyone: run one full month-end close on a handful of patients before scaling enrollment.

The 99484 CPT code description looks like a billing question and behaves like an operations project. The practices that struggle with it are almost never struggling with the code — they are struggling because minutes were not logged, consent was not recorded, or a care management app was in use for four months before anyone asked whether a BAA existed.

Handle the paperwork first. Put the business associate agreements in place for every vendor on the list above, and if your broader documentation set is out of date, automated risk analysis and policy generation will get you to a defensible baseline faster than rebuilding from a template folder. Then let your care managers start counting minutes.