Two business days. That is the entire window your staff has to make interactive contact with a discharged patient if your practice intends to bill transitional care management. Miss it, and the highest-value option on the menu of choices for the cpt code for hospital follow up is off the table for that patient — permanently, for that discharge.

This guide is for the person who owns that window: the practice administrator, the billing lead, the compliance officer who has to explain the call log to an auditor eighteen months later. It covers the operational mechanics of post-discharge follow-up coding, then makes the records-handling and vendor exposure explicit. It is administrative guidance. Nobody here is telling you which code fits a given patient — that is a clinician's determination, documented in the chart.

"Hospital Follow Up" Describes Two Different Code Families

When a coder, a hospitalist, and a front-desk scheduler each say "hospital follow up," they usually mean three different things. Sort this out before you build any workflow.

Follow-up while the patient is still admitted

Subsequent inpatient or observation care visits — the daily rounding note — sit in the 99231–99233 range. Same-day admission and discharge falls in 99234–99236. Discharge day management is 99238 or 99239, split on time spent. If your employed hospitalists or your physicians with admitting privileges are generating these, your billing team is working from hospital-side documentation and a different fee schedule conversation entirely.

Follow-up after the patient goes home

This is what most administrators mean. The patient shows up in your office seven days after a heart-failure admission. Depending on what the visit involves and how the clinician documents it, that encounter may be reported as an established-patient office visit (99212–99215) or, when the full set of transitional care management requirements is met and documented, as 99495 or 99496.

Follow-up that is really care coordination

Phone calls, medication reconciliation, records chasing, and scheduling performed by clinical staff under supervision are the non-face-to-face component of TCM. They are not separately reported as visits during the TCM service period. They are also where most practices lose money — the work happens and nobody logs it.

The CPT Code for Hospital Follow Up: How Practices Actually Narrow the Choice

Here is the short version your billing staff can post next to their monitor.

  • Was the patient discharged from an inpatient, observation, or SNF setting? If no, TCM is not in scope and you are in ordinary office-visit territory.
  • Did someone make interactive contact within two business days of discharge? Phone, secure message, or in person. Document attempts, not just successes.
  • When did the face-to-face visit occur? 99496 requires the visit within 7 days of discharge; 99495 within 14 days.
  • What level of medical decision making did the clinician document? 99496 is tied to high-complexity MDM, 99495 to at least moderate. The clinician makes that call; your job is making sure the note supports whatever was selected.
  • Is another practitioner already billing TCM for this discharge? Only one TCM service is reportable per patient per 30-day period.

The 30-day service period begins on the date of discharge. Medicare permits reporting on the date of the face-to-face visit rather than waiting out the full period. Verify current requirements against the CMS Transitional Care Management Services MLN booklet before you finalize internal policy, and check payer-specific rules — commercial plans do not always mirror Medicare.

One more caution on telehealth. The rules governing whether a post-discharge visit can be furnished remotely have moved repeatedly through short-term legislative extensions since 2023. Do not hard-code a telehealth assumption into your scheduling template. Assign someone to check the current Medicare telehealth services list each quarter and date-stamp the answer.

Build the Calendar Before You Build the Coding Rule

The choice of cpt code for hospital follow up is decided by dates, and dates are an operations problem.

Day 0 — discharge notification

Somebody has to know the patient left the hospital. If you are relying on the patient's spouse to call your front desk, you do not have a TCM program. You have luck.

Days 1–2 — interactive contact

Assign this to a named clinical staff role, not "whoever's free." Contact attempts get logged with date, time, method, and outcome. Two failed attempts with documentation is a defensible record; zero documentation is not.

Days 1–7 — medication reconciliation and scheduling

Reconciliation must occur no later than the date of the face-to-face visit. Your MA or pharmacist needs the discharge medication list by then, which means the records request went out on day 0 or day 1.

Days 7–14 — the face-to-face visit

Hold post-discharge slots. Practices that try to squeeze these into ordinary open scheduling routinely land on day 16 and lose the option entirely.

Days 15–30 — remaining service period

Additional E/M services furnished in this window are generally separately reportable, but concurrent-billing restrictions with other care-management codes apply and have changed over successive fee schedules. Put the current rule in writing and re-verify annually.

Getting the Discharge Summary Does Not Require a Patient Authorization

Your staff will hit a hospital release-of-information desk that demands a signed authorization before it will send a discharge summary. That is the hospital's internal policy choice, not a HIPAA requirement. Disclosures for treatment purposes between covered entities are permitted without authorization under the Privacy Rule, and HHS says so plainly in its guidance on permitted uses and disclosures for treatment, payment, and health care operations.

Practical response: give your staff a one-paragraph script citing treatment purpose, escalate to the hospital's HIM manager on day two, and log every request. The log matters twice — once when you are proving timeliness for TCM, once when a patient complains that nobody had their records.

Note also that inbound faxed discharge summaries remain one of the most reliable sources of misdirected-PHI incidents in small practices. Confirm the fax number on your outbound request forms quarterly. If you receive someone else's discharge summary, that is an incident to log and assess, not a shredding decision made at the front desk.

ADT Notification Feeds Put a Vendor Between You and Your Patient List

Most practices that run a functioning post-discharge program get their day-0 signal from electronic admission, discharge, and transfer notifications — routed through a regional health information exchange, a notification vendor, or the EHR's own network integration. CMS conditions of participation have required hospitals to send electronic patient event notifications since 2021, which is why these feeds exist at all.

Now look at what that arrangement actually is. A third party receives a stream of your patients' names, dates of birth, admission facts, and discharge dates, and performs a function on your behalf. That is a business associate relationship, and it needs a signed agreement before the first record moves.

Check your files for these specifically:

  • The HIE or notification service delivering ADT alerts
  • Any SMS or automated-call platform used for the two-day outreach
  • Third-party care-management or nurse-triage staffing that logs non-face-to-face time
  • Your clearinghouse and RCM vendor, who will see the TCM claims
  • Remote scribes or transcription touching the follow-up note

If any of those relationships is running on a handshake, an emailed "we're HIPAA compliant" assurance, or a contract you cannot locate, close that gap this week. You can generate a signature-ready Business Associate Agreement through a six-step wizard and export it as PDF or DOCX — one-time purchase, no subscription — which is faster than waiting three weeks for a vendor to surface their own template.

Documentation That Survives a Payer Audit

TCM claims draw review because the required elements are discrete and easy to test. An auditor asks for four things, in this order:

  1. Date of discharge, and the source document establishing it
  2. Date, time, method, and staff member for the interactive contact
  3. Date of the face-to-face visit and the note supporting the reported level of medical decision making
  4. Evidence of medication reconciliation on or before the visit date

Build a template that captures all four in structured fields, not free text scattered across three note types. Free text is where audit findings come from.

When the audit request arrives, disclosing records to the payer is a payment-purpose disclosure and does not require patient authorization. It does require minimum necessary discipline. Send the TCM documentation for the dates at issue — not the patient's full chart, not unrelated behavioral health notes. Assign one person to scope audit responses. Front-desk staff should never assemble a payer record production unsupervised.

A Worked Example of the Handoff

An internal medicine practice with four physicians and 1,900 Medicare patients set this up as follows.

The ADT feed drops discharge alerts into a shared work queue each morning at 7:00. A designated LPN owns the queue and has until end of business the following day to make contact. Every attempt is logged in a structured TCM flowsheet with method and outcome. The same LPN faxes the records request to the discharging facility the same morning and sets a 24-hour tickler.

Two appointment slots per physician per day are held for post-discharge visits until 48 hours out, then released. The billing lead pulls a weekly report of all discharges in the queue with no scheduled visit by day 8 and escalates to the physician.

The clinician selects the code and documents the basis. Billing verifies the four audit elements before the claim drops. Nobody in billing changes a code selection — they return the encounter to the clinician with a query. That boundary is not optional; it is the difference between clean claims and an upcoding pattern.

Records Requests and the Designated Record Set

Everything you just built becomes part of the designated record set. When a patient asks for their chart, the TCM flowsheet, the contact log, and the reconciliation note go with it. So does the discharge summary you obtained from the hospital, once it lands in your record.

Your practice has 30 days to respond, with one 30-day extension available on written notice. Fees are limited to a reasonable, cost-based amount. HHS's individual right of access guidance is worth re-reading with your front desk annually, because access failures remain among the most commonly resolved complaints OCR handles.

One specific trap: if a third-party care-management vendor holds the contact logs in their own platform rather than writing back to your EHR, you still owe the patient those records. Confirm your BAA includes a return-of-PHI and access-support obligation, and test the export before you need it under a 30-day clock.

Your Ten-Minute Vendor Inventory

Sit down with your vendor list and answer three questions for each entity touching post-discharge data: what PHI do they receive, do we have an executed BAA, and where is it stored. If that exercise takes longer than ten minutes because you cannot find the agreements, your risk analysis is out of date too — and the same inventory feeds directly into automated risk analysis and policy documentation for the rest of your program.

Deciding the cpt code for hospital follow up is a clinical and documentation judgment. Protecting the data trail that makes the claim payable is entirely yours. Start with the agreements — build the BAAs your ADT feed and outreach vendors are missing before your next audit letter arrives.