A physician in your internal medicine group spends 34 minutes with a 78-year-old patient and her daughter discussing a healthcare proxy form. The note runs four paragraphs. Your biller sees the encounter, sees no procedure, and drops it as a level-4 office visit. You just lost revenue, and you also created a compliance problem: the chart now contains a detailed end-of-life conversation with no time documentation, no record of who consented to the daughter's presence, and no indication of whether the scanned directive went anywhere else. This guide walks through the advance care plan CPT code mechanics — what gets documented, who reports it, how cost-sharing works — and then makes the privacy, records-handling, and vendor consequences explicit, because an advance care planning program touches more of your infrastructure than most administrators expect.

What the Advance Care Plan CPT Code Family Covers

Two CPT codes describe advance care planning as a discrete, time-based service:

  • 99497 — advance care planning including the explanation and discussion of advance directives such as standard forms (with completion of such forms, when performed), by the physician or other qualified health professional; first 30 minutes, face-to-face with the patient, family member(s), and/or surrogate.
  • 99498 — each additional 30 minutes.

Three operational facts follow from that language. The service is time-based, so time must be documented. The service is a discussion, so completing a form is optional — no signed directive is required for the encounter to have occurred. And the patient does not have to be present: the code contemplates face-to-face time with a family member or surrogate, which is exactly where the privacy questions start.

CMS covers these codes under Part B. Before you build any workflow, have your compliance lead read the agency's own summary — the CMS MLN booklet on Advance Care Planning — and then confirm the current year's payment and edit rules with your MAC, because bundling and telehealth policy shift.

Time Is the Unit of Measure, So Time Is What Auditors Pull

CPT reports the first 30 minutes and each additional 30 minutes. Practices commonly apply CPT's midpoint convention when deciding whether enough time elapsed to report a unit, and payers commonly deny units that the note cannot support. Your job as an administrator is not to decide the threshold; it is to guarantee the note captures start time, stop time or total minutes, and the fact that the time was spent in discussion rather than in unrelated evaluation and management work.

Build the time field into the template. A free-text "we discussed goals of care" paragraph with no minutes is an unbillable note and, in an audit, an indefensible one.

The Chart Elements Your Payer Audit Will Ask For

Assemble these before the first claim, not after the first denial:

  1. Total time spent in the advance care planning discussion, separated from any other service performed the same day.
  2. Who participated — patient, family member, surrogate, agent named in a healthcare power of attorney — and by name or relationship.
  3. What was explained — the directive forms or planning instruments discussed, described at a level that shows explanation and discussion occurred.
  4. Voluntariness — that the patient was told the service is voluntary and agreed to proceed.
  5. Outcome — a form completed, a form declined, a follow-up planned, or a decision deferred. All are legitimate outcomes.
  6. The rendering practitioner, with supervision documented if your state and payer rules require it.

Keep the note's clinical narrative out of your billing worksheet. The claim needs a code, units, a date, and a diagnosis; it does not need a paragraph about the patient's wishes regarding intubation. That separation is your minimum necessary obligation applied to a real workflow.

Modifier 33 and the Annual Wellness Visit Overlap

Under CMS policy, when advance care planning is furnished on the same day as the Medicare Annual Wellness Visit and reported with modifier 33, the Part B deductible and coinsurance are waived. Furnished outside that pairing, the service is subject to normal cost-sharing.

That single rule creates two front-office duties. First, your charge capture logic must recognize the AWV pairing and append the modifier — a manual step that gets missed and produces patient balances that generate complaint calls. Second, when the pairing does not apply, someone must tell the patient before the discussion that cost-sharing may apply. Do not let that conversation happen at checkout after a 40-minute discussion about resuscitation preferences.

Also check bundling. CMS has identified services that cannot be reported with advance care planning on the same date — critical care among them — and NCCI edits change. Assign one person to review edits quarterly and to log the review date.

Who Reports the Advance Care Plan CPT Code, and How Your Practice Decides

Physicians and qualified nonphysician practitioners report these codes within their scope of practice and their state's rules. Billing staff never select the code; the rendering practitioner does, based on the service performed and the time documented. Your role is to make that decision auditable.

Write it into a one-page internal policy: the practitioner documents time and participants, the practitioner attests to the code and units, the coder reviews for completeness and modifier logic, and unresolved questions route to the compliance lead rather than to a coder's judgment call. Record who holds each role by name. When a payer asks how your practice determined that an advance care plan CPT code applied to a given encounter, you want a process answer, not an improvised one.

Three Privacy Problems These Notes Create That Ordinary Visit Notes Don't

1. Family Members in the Room Are a Disclosure Decision

The code explicitly permits time with family members and surrogates. HIPAA permits disclosure to persons involved in a patient's care when the patient does not object, or when the provider reasonably infers agreement from the circumstances. That is a defensible position — but only if the chart reflects it. Add a checkbox: patient agreed to family presence / patient asked that discussion continue without family. Two seconds of documentation, and it resolves the complaint you get eight months later from a sibling who was excluded.

2. A Healthcare Agent May Become a Personal Representative

When a patient designates a healthcare agent, that agent may qualify as a personal representative under HIPAA — with the same access rights as the patient — but typically only when state law grants the agent authority, which usually depends on the patient's capacity. Your records staff cannot make that determination from a scanned form alone.

Give the release-of-information desk a written verification script: what document establishes authority, what triggers it under your state's law, who in the practice confirms capacity language, and what gets logged. Without it, someone will hand a full chart to a person who is not yet authorized, and that is a disclosure you will be reporting.

3. The Narrative Is More Sensitive Than the Diagnosis Code

Advance care planning notes contain values, family conflict, prognosis discussions, and religious considerations. Everything in your EHR that widens access — broad role permissions, print-to-PDF habits, shared scanning queues, an unrestricted patient-portal release rule — widens access to that. Review who in your organization can read a full ACP note today. If the answer is "everyone with a clinical login," that is a finding for your next risk analysis, not a shrug.

The Vendor List an Advance Care Planning Program Quietly Expands

Launch this service and you will typically add or activate several business associates within a quarter:

  • Advance directive form platforms that host, version, and store completed documents.
  • E-signature vendors capturing patient and witness signatures.
  • Document imaging or scanning services that process paper directives into the chart.
  • Ambient documentation or transcription vendors that capture a 40-minute end-of-life conversation as audio. Ask where the audio lives, how long it is retained, whether it is used to improve models, and whether you can order deletion.
  • State POLST or directive registries, where submission is governed by state law — confirm the legal basis for each transmission before you enable it.
  • Care coordination, hospice, and facility partners receiving copies by fax, portal, or direct message.
  • Billing and audit-support vendors who will see the codes and, if you are careless with attachments, the narrative.

Each of those needs a signed Business Associate Agreement in place before PHI moves, with the required provisions HHS describes in its sample BAA guidance. If a vendor hands you a two-page PDF with no breach-notification timeline or no subcontractor flow-down, don't sign it — send your own. You can generate a signature-ready Business Associate Agreement through a six-step wizard and export it as PDF or DOCX, one-time purchase, which is faster than routing a redline to counsel for a scanning vendor you onboard on Tuesday.

Then put every one of those vendors on your written BA inventory with a contract date, a renewal date, and a named owner. Breaches involving business associates continue to appear regularly on the OCR breach reporting portal, and the practice — not the vendor — fields the patient calls.

Records Requests Involving Advance Directives

Advance directives are among the most requested single documents in a chart, and requests often arrive from people who are not the patient. Three rules govern your desk.

Patient requests run on the access clock. A patient asking for their own directive or ACP note is exercising the HIPAA right of access — generally 30 days, with one 30-day extension and written notice. Review the HHS right of access guidance and confirm your fee schedule is reasonable and cost-based.

Third-party requests require verification. Nursing facilities, EMS agencies, and hospitals often need the directive urgently for treatment purposes, which HIPAA permits — but log the request, the requester, and the destination, and verify the fax number or portal address before sending. Misdirected faxes remain one of the most common self-inflicted breaches in small practices.

Decedent PHI stays protected. A patient's information remains protected for 50 years after death. Family members involved in care before death may receive relevant information unless doing so conflicts with a preference the patient expressed. Write that rule down; do not leave it to whoever answers the phone in July.

A 60-Day Rollout Sequence

Days 1–15. Compliance lead and lead clinician build the note template with time, participants, voluntariness, and outcome fields. Revenue cycle documents the modifier 33 logic and the non-AWV cost-sharing script.

Days 16–30. Inventory every vendor that will touch directives, audio, or scanned forms. Confirm or execute BAAs. Restrict EHR access to full ACP notes by role and document the decision.

Days 31–45. Train three groups separately: clinicians on documentation and time, front desk on the voluntariness and cost script, records staff on personal-representative verification and decedent requests.

Days 46–60. Audit the first 20 encounters. Check that time is present, modifier logic fired correctly, participant consent is recorded, and no narrative text traveled with a claim attachment. Update your risk analysis to reflect the new data flows — if you maintain that documentation manually, automated risk analysis and policy generation shortens the update cycle considerably.

Close the Vendor Gap Before the First Form Is Scanned

Advance care planning is one of the few services where the billing mechanics and the privacy exposure land on the same desk — yours. Get the time documentation right, get the modifier right, and get the paperwork right with every vendor that will handle these documents. If you are missing an agreement for a scanning service, an e-signature tool, or an ambient documentation vendor, draft and export a signature-ready BAA this week and add it to your inventory before the next request for records arrives.