A patient of yours is discharged from the hospital at 4:40 p.m. on a Friday. Under the TCM CPT codes, your clock for interactive contact runs two business days — so you have Monday and Tuesday, and if Monday is a holiday, Wednesday. Miss it and the entire 30-day service period is unbillable, no matter how much coordination your nurses actually did.

This is a practice-operations guide to transitional care management: the deadlines that decide billability, the documentation your MAC will ask for, and the privacy exposure that comes with pulling discharge data, running outbound patient contact, and hiring anyone to help you do it. It is administrative guidance. Your clinicians decide clinical complexity; your job is to build the workflow that captures it.

Quick Answer: What Are the TCM CPT Codes?

Transitional care management is reported with two CPT codes:

  • 99495 — TCM services requiring interactive contact within 2 business days of discharge, medical decision making of at least moderate complexity during the service period, and a face-to-face visit within 14 days of discharge.
  • 99496 — TCM services requiring interactive contact within 2 business days of discharge, medical decision making of high complexity during the service period, and a face-to-face visit within 7 days of discharge.

The 30-day service period begins on the date of discharge. Only one practitioner may report TCM per patient per 30-day period. Which of the two TCM CPT codes applies turns on the treating practitioner's documented complexity of medical decision making and on when the visit occurred — not on a front-office judgment call.

The Three Deadlines That Decide Whether You Can Bill

Deadline one: interactive contact within two business days

"Interactive" means a real two-way exchange with the patient or caregiver — telephone, secure email, or a face-to-face encounter. A voicemail is not contact. A mailed letter is not contact.

Medicare expects at least two documented attempts in the two-business-day window if the first fails, and permits the service to be reported when attempts were timely and continued even if successful contact came later. Your workflow needs to log every attempt with date, time, method, and the staff member who made it. Build that field into your EHR now, not after your first audit.

Deadline two: the face-to-face visit

The required visit is part of the TCM service. You do not bill an office visit code for it on top of 99495 or 99496. Other reasonable and necessary services during the 30 days can still be reported separately, and the discharging practitioner's discharge day management service is separately reportable.

Whether the required visit can be furnished by telehealth depends on the Medicare telehealth policy in effect for that date of service. Confirm the current rules on the CMS Physician Fee Schedule pages before you hard-code a telehealth pathway into your scheduling template.

Deadline three: medication reconciliation and review

Medication reconciliation and review must occur no later than the date of the face-to-face visit. In practice this is the step that fails quietly — the nurse reconciles against the last office med list instead of the discharge summary, because the discharge summary hasn't arrived.

That single gap is why your discharge data feed is a compliance issue and not just an IT project.

Assigning the Roles Before the First Discharge

A TCM program that runs on "whoever notices" does not survive contact with a full waiting room. Write the roles down:

  1. Discharge intake owner. One named person checks the event-notification queue every business morning and creates the TCM task. Backup named for PTO.
  2. Interactive contact owner. Clinical staff under general supervision may make the contact. Name them, and cap the queue so no one is holding forty open TCM tasks.
  3. Scheduler with override authority. TCM visits need to jump the schedule. If your scheduler can't open a slot inside 7 or 14 days without asking permission, you will lose 99496 cases to the calendar.
  4. Billing reviewer. Confirms the three deadlines are documented, confirms no other practice has reported TCM for the same period, and holds the claim if anything is thin.
  5. Privacy officer sign-off. Reviews the data sources and vendors before the program goes live, then re-reviews annually.

Building a Discharge Feed Without Building a Privacy Problem

You cannot hit a two-business-day window if you learn about discharges from patients calling you. Practices typically get discharge notice through one or more of these channels, and each has a different privacy posture.

Hospital electronic event notifications

Under the CMS interoperability Conditions of Participation, hospitals with electronic systems are required to send electronic patient event notifications for admission, discharge, and transfer to applicable post-acute providers and to practitioners identified as responsible for the patient's care. This is a treatment disclosure under the Privacy Rule and needs no patient authorization — see HHS guidance on disclosures for treatment, payment, and health care operations.

Your operational task is to make sure the hospital has the right contact endpoint for your practice — a monitored secure inbox or interface, not a fax machine behind the copier.

HIEs and national exchange networks

Many practices receive ADT feeds through a regional health information exchange or a network operating under the Trusted Exchange Framework and Common Agreement. Read your participation agreement to see what you have agreed to about permitted purposes, redisclosure, and audit logging. Then confirm whether the HIE is acting as your business associate or as a separate covered entity's participant — the answer changes what agreement paper you need on file.

Third-party notification and outreach services

If a vendor monitors discharges for you, staffs your two-day calls, or runs a post-discharge outreach platform, that vendor is creating, receiving, maintaining, or transmitting PHI on your behalf. It is a business associate. No exception applies because the work is "just scheduling" or "just a reminder call."

This is the point in most TCM launches where someone discovers the outreach vendor has been live for three weeks with no signed agreement. If you need one now, you can produce a signature-ready document with the six-step Business Associate Agreement generator at baa.hipaa.app — PDF and DOCX export, one-time purchase, no subscription — and get it in front of the vendor the same afternoon. Compare the terms against the HHS sample business associate agreement provisions so you know what your paper does and does not cover.

Requesting Records: Minimum Necessary and the Discharge Summary

Your staff will call hospital medical records asking for discharge summaries, med lists, and pending test results. Two things worth knowing before someone on your team over-explains or under-asks.

First, the minimum necessary standard does not apply to disclosures to a provider for treatment purposes, and it does not restrict a treating provider's request for the information needed to treat. Asking for the full discharge packet for a patient you are about to see is defensible. HHS explains the boundaries in its minimum necessary guidance.

Second, minimum necessary does govern internal access. If your TCM program gives every front-desk workstation a view of inpatient discharge summaries, you have widened your role-based access without deciding to. Scope the view to the staff who work the TCM queue.

Interactive Contact Is a Communications Compliance Problem

Two-day contact means outbound phone calls, and increasingly texts and portal messages. Three operational rules keep this clean.

Confirm the number and the consent to use it. Post-discharge numbers change. If a caregiver's cell is on file, document who authorized contact through it and what may be discussed. Train staff to verify identity before disclosing anything on a callback.

Decide your text-message policy in writing. Patients may request communication by unsecured channels, and you may honor that request after warning them of the risk. What you cannot do is default the whole panel into SMS because it lifts your contact rate. Document the warning and the request in the chart.

Leave sparse voicemails. Practice name, callback number, request to call back. No diagnosis, no discharge reference, no medication names. Script it and post the script at the phones.

A Worked Timeline

Discharge date: Monday, March 2. The 30-day service period runs March 2 through March 31.

  • Tuesday, March 3, 8:15 a.m. Discharge intake owner sees the event notification, opens the TCM task, requests the discharge summary.
  • Tuesday, March 3, 2:40 p.m. First contact attempt — no answer, no voicemail box. Logged with time and staff initials.
  • Wednesday, March 4, 9:05 a.m. Second attempt — caregiver reaches the RN, 11-minute call. Symptoms reviewed, transportation barrier identified, visit scheduled.
  • Monday, March 9. Face-to-face visit. Medication reconciliation completed and documented against the discharge summary, not the prior office list.
  • Tuesday, March 10. Billing reviewer confirms deadlines, complexity documentation, and that no other practice reported TCM for this period.

Note what the billing reviewer does not do: decide whether the encounter was moderate or high complexity. That determination lives in the practitioner's documentation. The reviewer's job is to hold the claim when the note doesn't support what was selected and to route it back for clarification.

On timing of submission, Medicare has permitted practices to file the claim once the face-to-face visit is complete, using the visit date as the date of service, rather than waiting out the full 30 days. Confirm your MAC's current instruction before you change your billing calendar.

Five Failure Modes Worth Auditing Quarterly

  1. Duplicate TCM claims. Only one practitioner reports TCM per 30-day period. If a specialist in your group and the primary care physician both open a case, one claim gets denied and the other becomes an overpayment question. Enforce a single TCM queue per patient.
  2. Readmission inside the period. If the patient goes back to the hospital before the period ends, your ability to report TCM for that period changes, and a new period may begin after the second discharge. Verify against current MAC guidance rather than assuming.
  3. Contact attempts logged as free text. Narrative notes get lost. Structured fields survive an audit.
  4. Vendor drift. The outreach platform adds an analytics module, or the answering service subcontracts overflow. Neither triggers a new contract unless someone asks. Put a vendor re-review on the same annual cycle as your risk analysis.
  5. Website and portal tracking on TCM landing pages. If you built a "recently discharged?" page with third-party marketing tags on it, treat that as a privacy review item before your next campaign, not after.

What to Put in Your Policy Binder

A TCM program touches your risk analysis, your workforce training, your access-control policy, and your vendor inventory. If your documentation set is a folder of one-off Word files from three administrators ago, that's the real project — and automating the risk analysis and policy set gets you a baseline you can actually maintain alongside the billing workflow.

Then write the short version and hand it to staff: who checks the discharge queue, what counts as interactive contact, what goes in a voicemail, who can see a discharge summary, and who signs off before a new vendor touches patient data.

Before your next TCM go-live, pull the vendor list and check for a signed, current agreement on every name that touches discharge data or patient outreach. If one is missing, generate the BAA, send it, and log the date. That's a fifteen-minute task today and a very expensive one after a breach notification.