A home health agency faxes a 485-style plan of care to your practice at 4:40 p.m. on a Friday. It sits in the fax queue over the weekend, gets scanned Monday, routes to a physician who signs it Wednesday, and goes back to the agency Thursday. Somewhere in that six-day loop, your practice either earned a certification payment or lost one — and moved a patient's diagnoses, functional status, and home address through at least four sets of hands.

The g0180 cpt code description is where that whole process gets memorialized. This guide is for the administrator, biller, or privacy officer who owns the workflow: what the code actually covers, how practices determine and document its use, and where the PHI exposure and vendor obligations sit.

The G0180 CPT Code Description — And Why It Isn't a CPT Code

First correction, because it matters when you're searching payer manuals: G0180 is a HCPCS Level II code, not a CPT code. CPT codes are maintained by the AMA; the G-series is maintained by CMS. Everyone in your billing department will still call it a CPT code, and every search engine will too, but when you go looking for authoritative guidance you need to search HCPCS.

The g0180 cpt code description, as CMS defines it, covers physician certification for Medicare-covered home health services under a home health plan of care — patient not present. It includes contacts with the home health agency and review of reports of patient status required by physicians to affirm the initial implementation of the plan of care that meets the patient's needs, per certification period.

Read the descriptor carefully and three operational facts fall out. The patient is not present. The work is review and coordination, not an encounter. And the unit of billing is the certification period, not the visit.

What Is G0180 Used For? The Short Answer

G0180 is used to report the certifying practitioner's work in reviewing and certifying a Medicare beneficiary's initial home health plan of care. It is billed once per 60-day certification period, is not a face-to-face service, and is reported separately from any evaluation and management service performed the same day. Payment under the Medicare Physician Fee Schedule is a modest, geographically adjusted amount — meaningful in volume, not per instance.

Under the CARES Act, nurse practitioners, clinical nurse specialists, and physician assistants may certify home health services within their state scope of practice, which means the certifying practitioner in your workflow may not be a physician at all. Your routing rules need to reflect that.

The 60-Day Boundary Your Billing Staff Gets Wrong

The single most common denial in this family of codes comes from confusing initial certification with recertification. Practices determine which code applies based on the patient's home health history, not on how the packet arrived.

G0180 versus G0179

G0180 describes initial certification. G0179 describes recertification for a subsequent period. The distinguishing factor documented in the record is whether the patient has been under a Medicare home health plan of care during the immediately preceding period — a patient discharged from home health more than 60 days ago and newly readmitted generally supports an initial certification, while a patient continuing services rolls into recertification.

Your billers should never make this call from the fax cover sheet alone. Build a field in your charge-entry workflow that requires the start-of-care date and the prior discharge date, sourced from the agency, before the charge drops.

G0181 is a different animal entirely

Care plan oversight — G0181 for home health, G0182 for hospice — requires a documented time threshold of physician supervision within a calendar month, tracked and totaled. Certification and oversight are separate services with separate documentation burdens. If your practice bills oversight, you need a time log, and that log is part of the designated record set.

What the Chart Has to Show

The certification itself is a regulatory attestation, not a coding artifact. Under 42 CFR 424.22, the certifying practitioner attests that the patient is confined to the home, needs intermittent skilled nursing or therapy, is under the care of the certifying practitioner, has a plan of care established and periodically reviewed, and had a qualifying face-to-face encounter.

The face-to-face encounter window

The encounter must occur within 90 days before the start of care or within 30 days after, and it must relate to the primary reason for home health. Your scheduling team is the control point here. If a patient is referred to home health after a visit, someone in your practice should be flagging the encounter date the same week, not reconstructing it two months later when the agency's documentation specialist calls.

Practical assignment: your referral coordinator owns the encounter date. Your billing lead owns the certification period dates. Your compliance officer owns the audit sample. Three roles, three artifacts, one chart.

A Certification Workflow That Survives an Audit

Here is the timeline most functional practices run. Adjust the owners to your staffing, but keep the clock.

  1. Day 0 — intake. The plan of care arrives by fax, secure portal, or agency courier. Front desk logs receipt date and time in a tracking sheet. Receipt date is the start of your internal clock, and it is the first thing an auditor asks for.
  2. Day 0–1 — indexing. The document is scanned into the chart under a consistent document type. Do not let it land in a generic "correspondence" bucket; you will never find it during a records request.
  3. Day 1–3 — clinical review. The certifying practitioner reviews the plan, the agency's status reports, and the encounter documentation. Any telephone contact with the agency gets a note.
  4. Day 3–5 — signature and return. Signed and dated by the certifying practitioner, returned through a channel you can prove was secure.
  5. Day 5–7 — charge capture. Billing verifies the certification period, confirms initial versus recertification from source dates, and enters the charge with a link to the signed document.

Set an internal service level of seven calendar days from receipt to return. Agencies cannot bill without your signature, and a slow signature loop generates repeated phone calls, repeated re-faxes, and repeated PHI transmissions — each one a chance to send a chart to the wrong number.

Every Certification Packet Moves PHI Through at Least Four Hands

Now the part most billing guides skip. A single home health certification touches: the home health agency, your fax or document-capture vendor, your EHR or scanning platform, your billing service or clearinghouse, and — if you outsource — your release-of-information vendor. That is five potential exposure points for one signature.

The disclosure between your practice and the home health agency is a treatment disclosure between two covered entities. It does not require a business associate agreement, and the minimum necessary standard does not apply to disclosures for treatment. HHS is explicit on that point in its minimum necessary guidance. That surprises people, and it is not a license to be sloppy — it just means your risk is operational, not authorization-based.

The vendors in the middle are a different story. Any entity that creates, receives, maintains, or transmits PHI on your behalf is a business associate, and that includes your inbound fax service, your document-management platform, your transcription vendor, your outsourced biller, and the courier that carries paper packets between your office and the agency.

The BAA gap most practices discover during an audit

Ask your privacy officer to pull the vendor list and match it against signed agreements. In practices I have reviewed, the missing agreement is almost always the least glamorous vendor — the electronic fax provider, the shredding service, the answering service that takes agency callbacks after hours.

HHS covers the scope of these relationships in its business associates guidance, and the required elements of a compliant agreement are not optional boilerplate. If you find a gap this week, you can generate a signature-ready Business Associate Agreement through a six-step wizard with PDF and DOCX export — one-time purchase, no subscription — rather than waiting on outside counsel to redline a template you already have. Close the gap, file the executed copy, and note the date in your vendor register.

One more vendor category deserves attention: agency-provided care coordination portals. Some home health agencies offer your practice a login to their platform to view and sign plans of care. When your practitioner signs inside the agency's system, the agency is acting as a covered entity in a treatment relationship — but confirm whether any portal-side analytics or document vendors are pulling your practice's data. Ask, in writing, and keep the answer.

Records Requests: The Certification Packet Is in the Designated Record Set

A signed home health certification, the plan of care, and any oversight time logs are part of the designated record set. When a patient requests their chart, those documents go with it unless a specific exclusion applies.

You have 30 days to respond, with one permitted 30-day extension and written notice of the delay. HHS's right of access guidance also constrains what you may charge and requires you to send the record in the form and format the patient requests, if you can readily produce it. Attorney and disability-determination requests for home health certifications are common; train your records staff to distinguish a patient-directed request from a third-party authorization, because the fee rules differ.

Amendment requests turn up here too. A patient who disputes a homebound attestation may request an amendment under 45 CFR 164.526. You are not required to grant it, but you are required to respond, in writing, within 60 days.

Retention, Audits, and What You Hand Over

Medicare contractors audit certification documentation. When a request arrives, you are producing the signed certification, the plan of care, the encounter note supporting the face-to-face requirement, and any contact logs. If your practice bills oversight codes, the time log comes too.

Store these so they are retrievable by patient, date, and certification period. CMS publishes the governing program instructions through its Internet-Only Manuals; your billing lead should have the relevant chapter bookmarked, not summarized from a webinar in 2021.

Separately, HIPAA requires six-year retention of your policies, risk analyses, BAAs, and documentation of required actions. That clock is independent of your state medical record retention period. If your risk analysis has not been updated since you added a new fax vendor or portal login, it is out of date — automated risk analysis and policy generation is one way to close that without a six-week consulting engagement.

A Checklist Before Your Next Certification Period

  • Confirm your billers can distinguish initial certification from recertification using source dates, not assumptions.
  • Log receipt date and return date for every plan of care.
  • Verify the face-to-face encounter date falls inside the 90-day-before or 30-day-after window before signature.
  • Index certification documents under a searchable, consistent document type.
  • Match every vendor touching the packet against a signed, current BAA.
  • Confirm your fax and portal transmission channels are configured and documented as secure.
  • Train records staff that certifications belong in the designated record set.
  • Sample ten certifications quarterly and check the chain end to end.

The g0180 cpt code description is short. The operational obligation behind it is not — it spans scheduling, clinical review, document handling, charge capture, and vendor management, and every one of those steps moves identifiable patient information.

Start with the vendor list, because it is the fastest gap to find and the fastest to close. Pull the names, match them to executed agreements, and where one is missing, build and export a compliant BAA in a single sitting. Then go back to the fax queue and see how long that Friday packet actually sat there.