A medical assistant changes a post-op dressing on a Tuesday morning, the provider signs a two-line note, and six weeks later the claim returns denied as included in another service. If your practice bills wound care, the wound dressing CPT code question is really three questions: what was performed, who documented it, and who else touched the record on the way to the payer. This guide walks the operational mechanics — documentation elements, role assignments, global-period traps — and then makes the privacy and vendor implications explicit, because wound care generates photographs, and photographs are protected health information.

Nothing here is clinical guidance. Code selection belongs to the treating provider and your coding staff, working from the documentation and the payer's published policy. Your job as administrator is to make sure the documentation exists, the workflow is repeatable, and the images and records that fall out of it are handled under your privacy policies.

There Is No Single Wound Dressing CPT Code

Practices searching for one code number are usually looking for something that does not exist. Wound dressing work is distributed across several CPT and HCPCS families, and which family applies depends entirely on what the provider performed and documented:

  • Evaluation and management codes — when the encounter is an assessment and the dressing application is part of that service.
  • Active wound care management (97597, 97598, 97602) — selective and non-selective debridement descriptors that include wound assessment, topical application, and instruction for ongoing care, reported per session.
  • Surgical debridement (11042–11047) — reported by depth of tissue removed and by surface area, not by dressing type.
  • Compression and strapping (29580, 29581) — Unna boot and multi-layer compression system application.
  • Burn treatment codes (16020–16030) — dressings and debridement for burns, differentiated by body surface area.
  • Dressing change under anesthesia (15852) — a narrow code that requires anesthesia other than local.
  • HCPCS Level II A-codes — the dressing supplies themselves, which in the outpatient world are usually billed by the supplier under DME rules rather than by your clinic.

That last bullet causes the most confusion. Gauze, foam, alginate, and hydrocolloid products carry their own HCPCS identifiers, but many payers treat dressings applied during an office visit as part of the service you already billed. Your coders should confirm status and coverage rather than assume, using the CMS Medicare Coverage Database for local coverage determinations and the Physician Fee Schedule Look-Up Tool to check whether a code is separately payable or carries a bundled status indicator.

How Your Practice Determines and Documents a Wound Dressing CPT Code

Denials in this area are almost always documentation failures, not coding failures. The note either does not describe the work or does not distinguish it from work already paid for.

The Elements Your Coders Need in the Note

Build these into your template so the provider is not reconstructing them later:

  1. Wound identification — anatomic site, laterality, and a stable identifier when a patient has multiple wounds. "Left lateral malleolus, wound #2" beats "leg ulcer."
  2. Measurements — length, width, depth, and total surface area, recorded the same way each visit so progress is demonstrable.
  3. Tissue type and what was removed — the distinction between selective and non-selective removal, and the deepest tissue level involved, drives which family applies.
  4. Instrument or method used, and whether anesthesia beyond topical or local was involved.
  5. Dressing applied — product category, quantity, and who applied it.
  6. Instructions given for ongoing care, since several descriptors include patient instruction.
  7. Relationship to any recent procedure — a single sentence stating whether the wound care relates to a prior surgery saves your billers an hour of research.

Who Owns Which Step

Assign these in writing. Undocumented ownership is why the same denial recurs monthly.

  • Front desk: confirms insurance and captures whether the visit is post-operative follow-up, which flags global-period review downstream.
  • Clinical staff: records measurements and dressing products in the structured fields, not free text buried in a narrative.
  • Provider: documents the work performed and attests to supervision when staff assist.
  • Coder or biller: selects codes from the documentation and queries the provider when the note is silent, rather than inferring.
  • Privacy officer: owns where wound photographs live, who can retrieve them, and which vendors receive them.

Global Periods and Bundling: Where the Rework Comes From

Dressing changes furnished as routine post-operative care during a surgical global period are generally not separately reportable. Practices that bill them anyway generate denials, and practices that reflexively write off every post-op dressing change sometimes leave legitimately separate services unbilled.

The operational fix is a global-period flag visible to whoever codes the encounter, plus a standing rule that any claim for wound care within a global window gets a second read before submission. Document your internal policy on modifier use and keep it current with payer bulletins. When your staff cannot resolve a bundling question from published policy, log the question and the payer's answer — that log is your defense during a post-payment review.

One more operational note: some active wound care descriptors are session-based rather than per-wound. Your coders need to know how each payer counts sessions, wounds, and surface areas, because the same documentation can support different claim structures across contracts.

Wound Photographs Are PHI, and a Camera Roll Is Not a Chart

Serial photography is standard in wound care and it is where most practices quietly break their own policies. A photo of a sacral ulcer with a patient sticker in frame is protected health information the moment it exists. The questions that matter are where the image is stored, who can see it, and whether it ever leaves your control.

Common failure patterns we see during risk assessments:

  • Staff use personal phones because the clinic tablet is charging, and the image stays in a consumer cloud backup indefinitely.
  • An imaging app writes to the device gallery in addition to the chart, so deletion from the record leaves a copy on the handset.
  • Photos are texted to a provider's personal number for a second opinion.
  • Images live in a shared network folder with no access controls, named by patient last name.
  • A departing employee's phone is never wiped because no one inventoried it as a device that held PHI.

Fix this with three controls. First, a device inventory that names every phone, tablet, and camera used for wound imaging, with encryption and screen-lock enforced. Second, a written rule that images are captured only through an application that writes directly into the designated record set and does not retain a local copy. Third, an offboarding step that verifies removal.

Adding a wound imaging tool is a change to your environment, which means your security risk analysis needs to reflect it. If your last risk analysis predates the imaging app your clinical staff started using, you can generate an updated HIPAA risk analysis and the supporting policy set rather than trying to retrofit a spreadsheet from three years ago. HHS also publishes a free Security Risk Assessment Tool if you prefer to work the questions manually.

The Vendor List Behind One Dressing Change

Trace a single wound visit and count the outside parties. A typical outpatient wound encounter touches a billing company, a clearinghouse, an EHR host, a photo or measurement application, a cloud storage layer, a supplier, and sometimes a wound-care management company that staffs and runs your program.

Who Needs a Business Associate Agreement

Your billing company, clearinghouse, EHR vendor, imaging application vendor, and any cloud storage provider holding wound photographs are business associates. They create, receive, maintain, or transmit PHI on your behalf, and each needs an executed agreement on file with current contacts and breach-notification timelines you can actually enforce. A wound-care management company that handles scheduling, documentation, or billing functions for your program is almost always a business associate too.

If you find a gap during this exercise — and most practices find at least one — you can produce a signature-ready Business Associate Agreement in a single sitting instead of waiting on the vendor's redlined template.

Who Does Not

Sending wound documentation to a DME supplier so the patient receives the correct dressings is a disclosure for treatment purposes. That supplier is generally a covered entity in its own right, and a BAA is not the instrument that governs the exchange. Minimum necessary still applies: send the order and the supporting documentation the supplier needs, not the entire chart. The same logic covers referrals to a wound center, home health agency, or hyperbaric program.

Where practices get sloppy is faxing a full record because it is faster than pulling the relevant notes. Build a records-release template for wound care referrals that specifies exactly which documents go out.

When the Payer Asks for the Wound Notes

Wound care draws prepayment review and additional documentation requests more often than most service lines, because payment frequently turns on measurements and tissue descriptions. Disclosures to a health plan for payment purposes do not require patient authorization, and payment disclosures are excluded from the accounting of disclosures you must provide on request.

That does not make the request casual. Assign one person to own ADR responses, send only the encounters and dates identified in the request, and keep a log with the request date, what was sent, the transmission method, and who approved it. If the reviewer asks for photographs, treat them as part of the record and send them through the same secure channel as the notes — not as email attachments from a staff account.

When the Patient Asks for the Wound Photographs

Photographs maintained in the designated record set are subject to the individual right of access. A patient who asks for their wound images is entitled to them, in the form and format requested when readily producible, generally within 30 days, with one 30-day extension available if you notify them in writing of the reason and the new date. Your fee must be limited to the permitted cost-based amounts. HHS's right of access guidance is the reference to keep on your intranet.

Practical wrinkle: if images live in an application that is not fully integrated with your EHR, your records staff may not know they exist. Add a line to your release-of-information checklist that asks whether the encounter included photography, and identify who retrieves those files.

A Two-Week Cleanup Plan

  1. Days 1–2: Pull 20 recent wound encounters and check each against your documentation checklist. Count how many are missing measurements or tissue descriptions.
  2. Days 3–4: Confirm current payer policy and payment status for every wound code your practice bills. Note where a wound dressing CPT code your team uses is designated bundled.
  3. Days 5–7: Inventory every device and application used to photograph wounds. Identify local copies and stop them.
  4. Days 8–10: Reconcile your vendor list against executed BAAs. Flag treatment-disclosure relationships separately so nobody chases an unnecessary agreement.
  5. Days 11–12: Update the records-request checklist to include photographs and assign an owner.
  6. Days 13–14: Update your risk analysis to reflect the imaging tools and vendors you just documented, and train clinical staff on the capture rule in a 15-minute huddle.

Two weeks of this work removes the most common source of wound care denials and closes the imaging gap that shows up in almost every practice that added photography without adding policy.

Next Step

Coding accuracy and privacy discipline share the same root cause here: a workflow that was never written down. Once you know which vendors hold your wound images and which codes your payers actually pay, put the documentation behind it. If your risk analysis, policies, and vendor tracking need to catch up to how your practice actually delivers wound care, build the full compliance document set and get it dated, signed, and filed before your next audit request arrives.