Eleven full months. That is the interval your scheduler has to verify before a wellness visit gets on the calendar, and it is the single most common reason these claims come back denied. The Medicare annual wellness visit requirements are not clinically complicated, but they are administratively unforgiving — eligibility windows, element checklists, supervision rules, and a written plan the patient is entitled to receive and later request again in writing.

This guide is for the person who owns that workflow: the practice administrator, the billing lead, the privacy officer who signs off on the vendor that runs your health risk assessments. It covers the operational mechanics first, then the records-handling and vendor exposure those mechanics create.

What the Medicare annual wellness visit requirements actually include

Medicare defines the annual wellness visit (AWV) as a preventive service built around a health risk assessment and a personalized prevention plan. It is not a physical exam, and Medicare does not cover routine physicals. CMS specifies the elements that must be performed and documented:

  • Administration or update of a health risk assessment (HRA) completed by the beneficiary or a caregiver
  • Medical and family history, established or updated
  • A current list of the beneficiary's providers and suppliers
  • Routine measurements — height, weight, body mass index, blood pressure, and other measures deemed appropriate
  • Detection of any cognitive impairment
  • Review of potential risk factors for depression and other mood disorders
  • Review of functional ability and level of safety
  • A written screening schedule covering the next five to ten years
  • A list of risk factors and conditions with recommended interventions
  • Personalized health advice and referrals to health education or preventive counseling
  • Review of the beneficiary's current opioid prescriptions and screening for potential substance use disorders
  • Voluntary advance care planning, at the beneficiary's discretion

Subsequent visits update rather than establish: update the HRA, the history, the provider list, the screening schedule, and the risk-factor list, and repeat the measurements, cognitive detection, and personalized advice.

Initial versus subsequent, and where the IPPE fits

CMS maintains separate HCPCS codes for the initial AWV and each subsequent AWV, and a third code set for the Initial Preventive Physical Examination — the "Welcome to Medicare" visit available only during the first twelve months of Part B enrollment. Your coding staff selects among them based on the beneficiary's enrollment date and claims history, documented against the payer's published guidance, not against what the schedule template happens to say.

Two rules drive nearly every denial. A beneficiary cannot receive an initial AWV within twelve months of an IPPE. And subsequent AWVs are payable once per twelve-month period, meaning eleven full months must elapse after the month of the last visit.

The eligibility check your front desk owns before the appointment is booked

Build the check into scheduling, not into check-in. By check-in the patient is standing in your lobby and the visit is happening regardless.

Assign it explicitly. One named role — usually the scheduler or a pre-visit coordinator — queries the Medicare eligibility system for the last AWV and IPPE dates, records the result in the appointment note, and flags any patient inside the eleven-month window. Keep a dated log. When a payer audits, "we always check" is not evidence; a timestamped eligibility query is.

Part C plan members complicate this. Plans administer the benefit under their own operational rules, and some contract with outside vendors to perform in-home assessments that may or may not satisfy the Medicare annual wellness visit requirements for your billing purposes. Verify with the plan before you schedule, and document who you spoke to.

Who may perform the visit, and what supervision means for staffing

CMS permits the AWV to be furnished by a physician, a qualified non-physician practitioner (nurse practitioner, physician assistant, or clinical nurse specialist), or by a medical professional — including a health educator, registered dietitian, nutrition professional, or other licensed practitioner — or a team of such professionals working under the direct supervision of a physician.

Direct supervision has an operational meaning: the supervising physician must be present in the office suite and immediately available. It does not mean available by phone from another building. If your model routes AWVs to a nurse or health coach, your schedule must guarantee a supervising physician on site for every one of those slots, and your daily huddle should confirm it.

Write the supervision arrangement into a standing policy with named roles. When staff turns over, the policy survives; the informal understanding does not.

The health risk assessment is a data product, and it needs a vendor review

Here is where the compliance work actually lives. The HRA is a structured collection of self-reported health, functional, behavioral, and increasingly social-needs data. Most practices do not collect it on paper anymore. They push it through a portal, a texted link, a lobby tablet, or a third-party questionnaire platform that scores responses and drops a summary into the chart.

Every one of those paths creates or uses protected health information on your behalf. The questionnaire vendor is a business associate. So is the texting platform that delivers the link, the kiosk software on the lobby tablet, and the analytics service that reports your AWV completion rates by provider.

Pull your vendor inventory and answer three questions for each HRA-adjacent tool:

  1. Is there a signed business associate agreement covering the specific service being used today, not the service you bought in 2019?
  2. What does the vendor retain, and for how long? HRA responses about mood, falls, memory, alcohol use, and housing stability are exactly the data you do not want sitting in an indefinite vendor archive.
  3. Who at the vendor can read individual responses, and does the contract restrict use to your instructions — including a prohibition on using response data to train or improve the vendor's own models?

If you find a tool in production without a current agreement, close that gap before the next scheduling cycle. You can generate a signature-ready business associate agreement through a six-step wizard with PDF and DOCX export, which is faster than routing a redline through counsel for a low-risk questionnaire vendor. HHS also publishes sample business associate agreement provisions if you are building your own template from scratch.

Turnkey AWV vendors deserve extra scrutiny

Companies that run your entire wellness visit program — outreach, HRA, documentation template, sometimes the clinician — typically require broad read-write access to your EHR. That is a business associate with the widest possible data footprint in your practice.

Ask for their most recent risk analysis summary, their subcontractor list, their breach notification timeline in days, and their process for terminating individual user accounts when their staff leaves. Get the answers in writing before go-live, and revisit them annually alongside your own risk analysis and policy documentation.

Documentation your billing staff needs when the audit letter arrives

AWV claims draw attention because they are high volume, have no cost-sharing, and are frequently performed by non-physician staff. Assume review.

The record for each visit should show, on its face: the completed HRA and who completed it, each required element addressed with a result rather than a checkbox, the written screening schedule and risk-factor list, evidence the personalized prevention plan was provided to the patient, and the supervising physician's identity when the visit was performed by supervised staff.

Templates help and templates hurt. A template that auto-populates "no cognitive impairment detected" without a documented screening method is an audit finding waiting to happen. Have your compliance lead pull ten AWV notes per quarter and read them as an auditor would.

Producing those records to a Medicare contractor is a permitted disclosure for payment purposes — you do not need patient authorization. You do need to log the disclosure appropriately, send only what was requested, and use a transmission method your policy actually approves. CMS keeps its educational material current through the Medicare Learning Network; assign someone to check it before each annual coding update.

Cost-sharing, modifiers, and the same-day visit problem

The AWV carries no coinsurance and no deductible when billed correctly. Your front desk must not collect money for it. Train that explicitly, because collecting and refunding creates its own paperwork.

The friction appears when a patient raises a new problem during the visit. Practices handle this by determining whether a significant, separately identifiable evaluation and management service occurred, documenting it distinctly from the AWV elements, and appending the appropriate modifier per payer guidance. That separate service may carry patient cost-sharing — which means your front desk needs a script explaining why a "free" visit generated a bill. Write the script. Post it at the desk.

Voluntary advance care planning furnished on the same day follows its own CMS billing rules regarding cost-sharing. Confirm current-year guidance rather than relying on last year's cheat sheet, and check the current CMS telehealth service list before scheduling any AWV remotely — the statutory flexibilities have been extended in short increments and the list changes.

The prevention plan is a record the patient can demand back

You hand the personalized prevention plan to the patient at the visit. Eight months later, an adult child calls asking for a copy, or the patient submits a portal message requesting "everything from my wellness visit."

That is a right-of-access request. Your practice generally has thirty days to respond, with one thirty-day extension available if you notify the individual in writing of the reason and the new date. Fees must be limited to a reasonable, cost-based amount, and you cannot condition access on the patient explaining why they want it. OCR's guidance on individuals' right to access health information is the reference to keep bookmarked at the front desk.

Two practical points. If the plan lives only inside a vendor's platform and not in your chart, your thirty-day clock now depends on a vendor's response time — put a turnaround commitment in the agreement. And if the patient asks for delivery by unencrypted email, you may honor it after warning them of the risk; document the warning and the request.

Outreach campaigns and the marketing line

Most practices drive AWV volume with recall lists, texts, and automated calls. Communications to patients about preventive services they are due for generally fall within treatment and care coordination rather than HIPAA's marketing definition — but the analysis changes fast if a third party pays you to include their content, or if the message steers patients toward a product.

Separately, the platform sending those texts and calls is a business associate, and telephone consumer protection rules apply independently of HIPAA. Keep your opt-out handling clean and auditable.

A 30-day cleanup checklist

  • Week 1: Move the eligibility check from check-in to scheduling; name the owner in writing.
  • Week 2: Inventory every tool touching HRA data — portal, texting, kiosk, questionnaire platform, analytics — and confirm a current signed agreement for each.
  • Week 3: Audit ten AWV notes against the required element list; fix templates that auto-populate findings.
  • Week 4: Confirm supervising-physician coverage for every non-physician AWV slot on the template, and script the front desk on same-day billing questions.

The Medicare annual wellness visit requirements reward practices that treat the visit as a documented process rather than an appointment type. Start with the vendor list — if an HRA tool is collecting patient responses today without an executed agreement behind it, generate the business associate agreement and get it signed this week. One-time purchase, no subscription, and it closes a gap auditors ask about first.