Skip to content
ITAS Health
Field notes
Audit riskJanuary 27, 2026 · 5 min read

Consent for APCM and RPM: the requirements, and the four ways practices fail them

Consent is the cheapest compliance artifact to get right and one of the most common to get wrong. What must be disclosed, why an inherited CCM consent doesn't work, and the sequencing that determines whether your program survives month two.

Two pairs of hands at a clinic counter across a single sheet of paper, one offering a pen

Consent is the least glamorous requirement in care management and one of the most consequential. It costs almost nothing to do correctly. Done poorly, it produces both an unbillable month and an unhappy patient — and those two failures usually arrive together.

What APCM consent has to cover

Consent must be obtained once, before services begin, and documented in the medical record. Verbal is acceptable; written is acceptable. What matters is that it happened, that it is dated, and that it can be produced.

Three things must be communicated:

  1. Only one practitioner can bill APCM for this patient in a given calendar month. This is not a formality. It is the disclosure that protects the patient from being enrolled twice and protects you from filing a duplicate claim.
  2. The patient may stop at any time. Offering the exit at the start is what makes the program durable. A patient who knows they can leave rarely wants to.
  3. Cost-sharing may apply. APCM is a Part B service, so after the deductible most beneficiaries owe 20% coinsurance — roughly $11 a month at G0557 national rates. Qualified Medicare Beneficiaries are the exception: they cannot be billed Medicare cost-sharing at all.

There is also an initiating visit requirement for new patients or anyone not seen within three years, which can occur during an E/M visit, an annual wellness visit, or an IPPE.

What RPM consent adds

RPM requires consent as well, plus two things APCM does not:

  • An established-patient relationship — a face-to-face service by the billing practitioner, or someone in the same billing group, within the prior year.
  • A valid practitioner order for every enrollment, attributable to a named clinician with a date.

RPM also has its own cost-sharing implications, and its own single-biller constraint: only one practitioner may bill RPM for a patient in a given 30-day period.

The four ways practices fail this

1. Reusing a CCM consent for APCM

APCM consent is program-specific and does not carry over. A care-management consent signed for CCM two years ago does not satisfy APCM, and neither does a general consent-to-treat. This is among the most common findings in care-management reviews, and it is entirely avoidable.

If you are transitioning patients from CCM to APCM, every one of them needs a new consent conversation. Not a form in an envelope — a conversation.

2. Burying it in the new-patient packet

A line in a stack of paperwork signed at intake does not disclose anything. The patient did not read it, cannot recall it, and will react to the first statement as a surprise. It also reads badly in a review, because the artifact demonstrates a signature rather than an understanding.

The disclosure has to be delivered as speech, by a person, in a moment where the patient can ask a question.

3. Getting the sequence backwards

This is the failure that kills programs.

Practices that abandon care management almost always abandon it in month two, after the first statement generates calls to the front desk. The clinical work was fine. The billing was fine. The sequencing was wrong: the patient learned about the charge from a statement instead of from you.

The fix is to raise the cost first, at the wellness visit, in the same breath as the benefit. Something close to:

Medicare has a monthly program for patients managing more than one ongoing condition — we check in between visits, keep an eye on things, and coordinate with your other doctors. Most patients pay about eleven dollars a month, and for some patients it's nothing at all. You can stop any time. Would you like me to look up which applies to you?

Two things are doing the work in that script. The number arrives before the statement does. And the exit is offered unprompted, which is what makes accepting feel safe.

4. Not knowing the patient's tier before you speak

The most common objection to care management is that patients will not accept a monthly copay. For Qualified Medicare Beneficiaries there is no copay to accept — and that tier reimburses the practice the most.

You can only use that fact if you have verified QMB status from eligibility data before the conversation. Guessing from appearance or address is both unreliable and a bad look. Checking takes seconds if it is part of the workflow and never happens if it is not.

The front-desk half nobody scripts

Even done perfectly, some patients will call about the first statement. Your front desk needs one good answer, and it should include the exit:

That's the monthly care-management program you enrolled in at your wellness visit — the check-in calls and the coordination between appointments. Would you like me to go over what it includes, or would you rather stop it?

Offering to cancel is counterintuitive and it is the right move. Most patients decline. The ones who accept were going to disenroll anyway, and they will do it without filing a complaint about a charge they did not understand.

Why we made consent a hard gate

In our product, a patient cannot be enrolled and a month cannot be billed without documented, program-specific, dated consent. It is a condition in the workflow, not a reminder someone can dismiss — the month presents as held with the reason named until the consent exists.

That is occasionally frustrating for a practice that knows perfectly well the conversation happened. It is also the difference between "we always get consent" and being able to prove it for a specific patient in a specific month, two years later, to someone who was not there.

Consent is the cheapest artifact in the evidence file. It is also the one whose absence invalidates everything else in it.

Related: what a defensible month contains, and the copay conversation, scripted.

Written by ITAS Health. Everything here is general information about published rules, not legal, regulatory, coding, or billing advice, and rules change. Verify against current CMS guidance and your own compliance counsel before acting. Corrections are genuinely welcome — tell us what we got wrong.

See what's already sitting in your panel

A 30-minute scan on your own numbers: who qualifies today, and what the monthly line looks like next to our fee.

No EHR change. No commitment.