Every January, your front desk gets a wave of calls from Medicare patients asking to schedule "my annual physical." What most of them are eligible for is a medicare annual wellness visit — a preventive service with no cost-sharing, a defined element list, and a documentation trail that looks nothing like a physical exam. If your staff books it wrong, you get denied claims, surprise patient balances, and an angry phone call your compliance lead has to unwind.

This guide is for the administrator, biller, or privacy officer who owns that workflow. It covers what the visit requires operationally, how practices decide and document code selection, and — the part most AWV rollouts skip — the health risk assessment data, portal disclosures, and vendor agreements the program creates the moment you turn it on.

What Lands on Your Schedule Is Not a Physical

Medicare does not cover a routine annual physical exam. It covers an Initial Preventive Physical Examination (the "Welcome to Medicare" visit) once in a beneficiary's lifetime, and then a wellness visit that repeats annually. The wellness visit is built around risk assessment, screening schedules, and prevention planning — not a head-to-toe exam.

That distinction drives three operational facts. First, much of the visit can be performed by clinical staff under the required supervision rules, not exclusively by the physician. Second, the deliverable is a document — a written personalized prevention plan the patient leaves with. Third, because it is a preventive service, coinsurance and the Part B deductible are waived when the visit is billed as the wellness visit and nothing else is added.

Train your scheduling script around that. "Wellness visit" and "physical" are not synonyms, and the patient who expects a full exam will complain about the one they got.

What Are the Required Elements of a Medicare Annual Wellness Visit?

CMS defines the components your documentation must reflect. A compliant subsequent visit generally addresses:

  • Health risk assessment (HRA) completed by or with the patient
  • Medical and family history, updated
  • Current providers and suppliers list, including all prescribers
  • Routine measurements: height, weight, body mass index, blood pressure
  • Cognitive impairment detection through direct observation and reported concerns
  • Depression risk screening and review of mood
  • Functional ability and safety review, including fall risk, hearing, and activities of daily living
  • List of risk factors and conditions with interventions in place or recommended
  • A written screening schedule — the personalized prevention plan — furnished to the patient
  • Advance care planning, offered at the patient's discretion

The initial wellness visit adds a fuller baseline history and a review of the patient's potential risk factors for depression. CMS publishes the element list and frequency rules in its Annual Wellness Visit guidance, and your template should map field-by-field to it.

The Three Clocks Your Eligibility Check Has to Watch

Denials in this service line are almost always calendar problems, not clinical ones.

  1. The Welcome to Medicare visit is available only within the first 12 months of Part B enrollment, once per lifetime.
  2. The initial wellness visit requires that the patient have had Part B for more than 12 months, and it cannot be furnished within 12 months of the Welcome to Medicare visit.
  3. Subsequent wellness visits require that 11 full months have elapsed since the month of the last one. A patient seen on March 10 last year is eligible on or after March 1 this year — not March 10.

Assign eligibility verification to a named role before the appointment, not at check-in. Your billing staff should pull the beneficiary's preventive service eligibility from the payer portal during pre-visit prep and note the result in the encounter. That single step eliminates most of the rework.

How Practices Determine and Document Code Selection

There are distinct HCPCS codes for the Welcome to Medicare visit, the initial wellness visit, and subsequent wellness visits, and CMS has established separately payable add-on codes for services such as a social determinants of health risk assessment and advance care planning. Which one applies to a given encounter depends on the patient's history, the elements actually performed and documented, and the frequency clocks above.

Nothing in this article tells you which code fits a particular patient. What you can control is the process that produces defensible selection:

  • Template alignment. Your note template lists each required element with a discrete field. If a field is blank, the coder queries it before the claim goes out.
  • Eligibility evidence in the chart. The pre-visit eligibility check result is documented, so the reason a particular code was chosen is reconstructable a year later during an audit.
  • Coder review, not clinician guesswork. Certified coding staff or your billing vendor apply the code from the documentation; clinicians document, they don't pick.
  • Written internal policy. One page stating who verifies eligibility, who selects the code, who signs, and what happens on a mismatch. Date it and review it annually.

When a Problem Gets Addressed in the Same Appointment

Patients bring problems to wellness visits. If the clinician also evaluates and manages a distinct issue, the practice may report a separate problem-oriented service alongside the wellness visit under CMS's rules for significant, separately identifiable services — and cost-sharing then applies to that portion.

The operational risk is financial surprise. Build a front-desk script that says the wellness portion has no cost-sharing, and that discussing other conditions during the same visit may result in a copay or deductible amount. Document that the patient was told. Practices that skip this step spend the rest of the year writing off balances to keep the peace.

The Health Risk Assessment Is a Data Collection Program

Here is where the wellness visit stops being a billing topic and becomes a privacy one. The HRA collects mood screening responses, cognitive concerns, fall and home-safety details, alcohol and tobacco use, caregiver information, and increasingly food, housing, and transportation insecurity. That is a dense concentration of sensitive PHI generated at volume, often outside the exam room.

Ask four questions about your HRA pipeline before your next quarter of visits:

  • Where is it collected? Paper mailed to the patient's home, a portal questionnaire, a tablet in the lobby, a telephone outreach call, or a third-party platform?
  • Where does it rest? If a vendor hosts the questionnaire, the completed HRA sits on that vendor's infrastructure — sometimes indefinitely.
  • Who reads it besides the clinician? Care-gap analytics, quality reporting, and population health tooling frequently ingest HRA fields.
  • What gets shredded? Paper HRAs scanned into the chart create a paper original that has to be destroyed under your disposal policy, not dropped in a recycling bin.

Apply the minimum necessary standard to internal routing as deliberately as you apply it to outbound disclosures. HHS's minimum necessary guidance covers uses within your own workforce, which is exactly where HRA data tends to sprawl — a scheduler does not need the depression screening score to book a follow-up.

The Vendor List Your Wellness Visit Program Creates

A mature medicare annual wellness visit program almost always brings in outside parties. Typical additions to the vendor inventory:

  • HRA questionnaire and prevention-plan software
  • Outreach and scheduling call centers that contact eligible patients
  • Mailing and print services that send HRAs and prevention plans to homes
  • Document scanning services for returned paper forms
  • Contracted staffing agencies supplying nurses or health coaches to run the visits
  • Coding and billing companies reviewing the documentation
  • Quality reporting and analytics platforms consuming HRA fields

Each of those creates, receives, maintains, or transmits PHI on your behalf, which puts them squarely in business associate territory under the definition HHS lays out for business associates. A signed agreement has to exist before the first HRA moves. If you are onboarding an outreach vendor or a scanning service this quarter and the paperwork is the bottleneck, you can generate a signature-ready Business Associate Agreement through a six-step wizard and export it as PDF or DOCX — one-time purchase, no subscription — rather than waiting two weeks for a contract template to circulate.

Contracted Clinicians: Workforce or Business Associate?

Practices that staff wellness visits through an outside group get this wrong regularly. If the nurse practitioner works under your direct control — your schedule, your supervision, your policies — that person functions as workforce, and you cover them under your training, sanctions, and access provisioning. If the arrangement is a service the vendor performs using your PHI with its own systems and its own oversight, you need a BAA and a documented scope.

Write down which model you are using for each contracted clinician. Then check that access provisioning matches: workforce members get named accounts with role-based permissions and get deprovisioned the day the contract ends. Shared logins for "the AWV nurse" are an audit finding waiting to happen.

Disclosures to Part C Plans

If your panel includes patients in Medicare managed care plans, expect requests for wellness visit documentation to support the plan's own quality and risk adjustment work. These disclosures generally fall within payment or health care operations, but the specific request still has to be evaluated and limited to what was asked for. Do not send the whole chart because it is easier than pulling the encounter. Log what left, when, and to whom.

The Prevention Plan, the Portal, and the 30-Day Clock

The wellness visit produces a document you must hand to the patient. Decide operationally how: printed at checkout, mailed, or released to the portal. Whichever you choose, record that it was furnished — that is part of your documentation of the service.

Portal release raises a second issue. Cognitive screening observations and depression risk notes become visible to the patient, and in many cases to a proxy account holder such as an adult child. Confirm your proxy access policy is written and that staff know how to remove proxy access on request. Practices that block electronic access to these notes by default should read the ONC guidance on information blocking before assuming a delay is permissible.

When a patient or family member requests the wellness visit records directly, the individual right of access applies: generally within 30 days, in the form and format requested if readily producible, at a reasonable cost-based fee. HHS's right of access guidance is the reference your records staff should have bookmarked. If HRA responses live only in a vendor's platform and not in your designated record set as maintained, your 30 days can evaporate while you wait on a support ticket — a good reason to require export and retrieval timelines in the vendor contract.

A Two-Week Setup Checklist With Named Owners

  1. Practice administrator: confirm who verifies preventive service eligibility pre-visit, and where the result is documented.
  2. Front desk lead: rewrite the scheduling script to distinguish wellness visits from physicals and to disclose possible cost-sharing when other problems are addressed.
  3. Clinical lead: map the note template field-by-field to the CMS element list; flag blank required fields before signing.
  4. Billing manager: document the internal policy for who selects codes from documentation and how mismatches are resolved.
  5. Privacy officer: inventory every system and vendor touching HRA data; confirm a current BAA for each and a documented retention and disposal path for paper forms.
  6. Privacy officer: update the risk analysis to reflect the new data flows, and review portal and proxy access settings for wellness visit notes.

Run that list before your spring volume peaks. Wellness visits cluster early in the year, and a workflow gap that is annoying in January becomes a backlog in April.

Do the Paperwork Before the Data Moves

The clinical and billing mechanics of this service are well documented by CMS. The part your practice absorbs alone is the data trail: who collected the HRA, where it sits, who else reads it, and whether an agreement covers them. If your wellness visit program added vendors faster than your contract file kept up, close that gap first — build the missing Business Associate Agreements now, then update the risk analysis and policy set that documents how the data flows. If your broader compliance documentation needs the same attention, automated risk analysis and policy generation can carry the rest of the load.