2023 E/M Updates for Consultation Services

The American Medical Association (AMA) published many changes impacting CPT® E/M codes and guidelines, which became effective Jan. 1, 2023. There are 25 deleted codes and many revisions to codes and guidelines in five code categories.

Overview

One of the most positive changes was the deletion of the observation E/M codes. CPT codes 99221-99223 and 99231-99239 will be used to report E/M services for both inpatient and observation status visits.

The guidelines for 2023 are essentially an expansion of the guidelines for 2021. When selecting the appropriate E/M level of service, medical decision making (MDM) or time will determine the overall complexity.

However, there is one exception to this rule that began January 1, 2023:  All emergency department E/M codes will be leveled by MDM. Time-based billing is not permitted for emergency department codes (99281-99285).

If you are familiar with the MDM table for the 2021 guidelines, you will find that the revised MDM table for 2023 is basically identical, with a few modifications to make it more suitable for inpatient E/M services.

In the column under “number and complexity of problems addressed,” CMS included a few more bullets, including one stable acute sickness and one acute uncomplicated illness or injury requiring hospital inpatient or observation level care.

  • Stable acute illness is defined as “a new or recent problem for which treatment has been initiated.” The patient has improved and, while the condition has not been completely resolved, is stable.”
  • Acute, uncomplicated illness or injury requiring hospital inpatient or observation level care is defined as “a recent or new short-term problem with low risk of morbidity that requires treatment.” There is little to no risk of mortality with treatment, and full recovery with no functional impairment is expected. In the “risk of complications and/or morbidity or mortality of patient management” column, they added parenteral controlled substances under the High MDM category.

Inpatient and observation care services

  • Deletion of observation CPT codes (99217-99220, 99224-99226) and merged into the existing hospital care CPT codes (99221, 99222, 99223, 99221-99233, 99238-99239).
  • Editorial revisions to the code descriptors to reflect the structure of total time on the date of the encounter or level of medical decision-making when selecting code level.
  • Retention of revised Observation or Inpatient Care Services (Including Admission and Discharge Services) (99234-99236).

Based on the chart below, we can see that our moderate level observation example should be coded as 99222 in 2023. Furthermore, if the moderate level MDM patient is admitted to inpatient status the code should also be 99222.

The consultation codes were also revamped. Just as they did with the 2021 changes, CMS removed the first level codes (99241 and 99251) to line up the four MDM levels (straightforward, low, moderate and high).

Consultations

  • Retention of the consultation codes, with minor, editorial revision to the code descriptors.
  • Deletion of confusing guidelines, including the definition of “transfer of care.”
  • Deletion of lowest level office (99241) and inpatient (99251) consultation codes to align with four levels of MDM.

CPT Code 99281 for Emergency Department services were deleted and revised to an E/M code that does not require the presence of a physician or other qualified health care provider.

Emergency department services

  • Maintained the existing principle that time cannot be used as a key criterion for code level selection.
  • Editorial revisions to the code descriptors to reflect the code structure approved in the office visit revisions.
  • Modified MDM levels to align with office visits and maintain unique MDM levels for each visit.
  • Existing CPT code numbers maintained (analogous to office visit revisions).
  • Articulated current practice that was not explicit in the CPT code set.
    • May be used by physicians and QHPs other than just the ED staff.
  • Critical care may be reported in addition to ED service for clinical change.

Nursing facility services

  • Editorial revisions to the code descriptors to reflect the new standard E/M code structure.
  • Revision to nursing facility guidelines with new “problem addressed” definition of “multiple morbidities requiring intensive management,” to be considered at the high level for initial nursing facility care.
  • Deletion of code 99318 (annual nursing facility assessment). This existing service will be reported through the subsequent nursing facility care services (99307-99310) or Medicare G codes.
  • Not all “initial care” codes are the mandated comprehensive “admission assessment” and may be used by consultants.
  • Use subsequent visit when the principal physician’s team member performs care before the required comprehensive assessment.

Home and residence services

  • Editorial revisions to the code descriptors to reflect the new standard E/M code structure.
  • The domiciliary or rest home CPT codes (99334-99340) were deleted and merged with the existing home visit CPT codes (99341-99350).
  • Elimination of duplicate MDM Level New Patient code (99343).

Prolonged services

  • Deletion of direct patient contact prolonged service codes (99354-99357). These services are now reported through either the code created in 2021, office prolonged service code (99417), or the new inpatient, or observation or nursing facility service code (993X0).
    • 99417 is also used for Home or Residence prolonged services.
  • Creation of a new code (993X0) to be analogous to the office visit prolonged services code (99417). This new code should be used with the inpatient or observation or nursing facility services.
  • Retention of 99358, 99359 for use on dates other than the date of any reported ‘total time on the date of the encounter” service.

Conclusion

Keep these four points in mind to adapt to these changes:

  1. Medical decision making (MDM) tables are revised in which acuity or chronicity rather than quantity of disease/illness is addressed as complexity.
  2. Time-based coding is updated on many codes.
  3. Update the EHR to reflect deletions and revisions.
  4. Pay close attention to amended guidelines noted in the E/M section of the CPT® manual.

 

Click here for the AMA’s full overview of these changes.

 

Disclaimer: Accurate coding is the responsibility of the provider. This summary is intended only to serve as a resource to assist in the billing process.

 

Candice Chandler CPC, CEMC

Coding Services Manager

StreamlineMD

Share the Post:

Related Posts

Notice

Cyber Incident Update – 9/28/25 at 6:00 pm EST:

StreamlineMD applications are up and live!

Access Client Portal Here

We are pleased to inform you that, following clearance from our cybersecurity experts, client access to our system has been restored. You may begin accessing the system starting at 6:00 PM EST today, Sunday, September 28, 2025.

Please note that while core functionality is fully restored, the following features are currently unavailable as we continue working to bring all components back online:

1. SMD Mobile App (viewing PDF chart)
2. Patient Portal
3. RxPhoto (inside the EHR)

We are working to restore these remaining services as quickly and securely as possible.

We will continue to monitor system performance closely and will provide updates as additional components become available.

If you experience any issues or require support, please contact our support team directly at 330-564-2641.

Thank you once again for your continued patience, understanding, and trust.

Cyber Incident Update – 9/28/25 at 2:00 pm EST:

Following our scheduled call with the cybersecurity team earlier today, we have been advised that additional security measures must be implemented before client access can be restored. Specifically, changes to our VPN configuration are required to ensure a more secure connection environment.

Our internal teams are actively working on these adjustments and will move as quickly and carefully as possible to complete the necessary changes.

Our next update will be at 4:00 PM EST.

Cyber Incident Update – 9/28/25 at 12:00 pm EST:

We are pleased to share that our internal teams currently have access to the system environment. In the interim, if needed, we are able to assist by running your patient appointment schedules for the week. Please contact our support team or email at smdhelpdesk@prcmedicalllc.zohosupport.com if you require this service.

We are scheduled to meet with our cybersecurity team at 1:00 PM EST today to review final clearance for restoring client access. We will provide another update following that discussion.

We appreciate your continued patience and partnership as we work to bring services back online safely and securely.

Cyber Incident Update – 9/27/25 at 10:00 pm EST:

We are pleased to report that our routine nightly processes have completed successfully, and the system environment remains stable and fully operational.

At this stage, we are awaiting final clearance from our cybersecurity partner before restoring client access.

However, our partner informed us that they need more time and so this clearance will not be available until after 1:00 PM EST tomorrow, Sunday, September 28, 2025.

Thank you for your patience while we maintain the highest standards of security and system integrity. 

Cyber Incident Update – 9/27/25 at 7:00 pm EST:

We are continuing to move forward with final preparations for restoring system access. Our internal teams have completed their validation processes, and the environment remains fully operational.

At this time, we are running our routine nightly processes to further confirm system stability and readiness. We continue to await final clearance from our cybersecurity experts to bring services fully back online.

We remain optimistic that systems will be accessible to clients by tomorrow morning, Sunday, September 29, 2025, at 7:00 AM EST.

As always, we are taking every measure to ensure a secure and controlled restoration.

Thank you again for your continued patience and support. Our next update will be provided by 10:00 PM EST.

Cyber Incident Update – 9/27/25 at 11:00 am EST:

We are pleased to share that our team has gained access to the system environment and is actively conducting testing—an important step toward the full restoration of services.

As part of this process, we have completed testing of the Practice Management (PM) and Coding software and are pleased to report that no issues have been identified with the software. Testing will continue across all system components to ensure overall stability and reliability.

Our teams will continue working throughout the day to validate all aspects of the system before bringing it back online.

We are deeply grateful for your continued patience, support, and trust as we proceed with restoration in a safe and controlled manner.

We will provide another update at 2:00 pm EST.

Cyber Incident Update – 9/26/25 at 7:00 pm EST:

We are pleased to share that our team is now gaining access to the system environment and actively conducting testing. This is an important step toward full restoration of services.

We again want to reassure you that there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

Our teams will continue to work throughout the evening and into the weekend to validate all aspects of the system before bringing it back online.

Thank you for your continued patience, support, and trust as we move forward with restoration in a safe and controlled manner.

We will provide another update at 10:00 am EST on Saturday, September 27, 2025.

Cyber Incident Update – 9/26/25 at 3:00 pm EST:

We continue to make steady progress in our restoration efforts. At this time, 95% of servers have been cleared; however, they remain behind protective firewalls as we work closely with our team of experts toward full restoration.

The StreamlineMD systems will remain unavailable for the rest of today, Friday, September 26, 2025. Our teams will begin comprehensive testing of all aspects of the system as soon as possible, likely this evening and over the weekend.

Importantly, there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

We truly appreciate your support and understanding during this process. You are important to us, and we remain committed to restoring services safely and securely.

We will provide another update at 6:00 pm EST.

Cyber Incident Update – 9/26/25 at 2:00 pm EST:

We continue to work diligently this afternoon with our cybersecurity team and are making steady progress.   

We anticipate the StreamlineMD systems will remain inaccessible for the remainder of today, Friday, September 26, 2025.  

We will provide another update at 6:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 11:00 am EST:

We continue to work throughout the day with our cybersecurity team and continue to make progress.  

We anticipate the StreamlineMD systems will not be accessible before 3:00 pm EST on Friday, September 26, 2025

We will provide another update at 2:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 09:00 am EST:

We continue to work this morning with our cybersecurity team and continue to make progress.   

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.  

We will provide another update at 12:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 07:00 am EST:

We have continued to work through the night with our cybersecurity team and continue to make progress.  

We will continue restoring servers to service and testing internally. 

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025. 

We will provide another update at 9:00 am EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/25/25 at 11:00 pm EST:

So far, we are making great progress, and our systems are internally coming back online. At this time, there is no evidence of system damage or PHI compromise.

Throughout the night, we will continue restoring servers to service and testing internally.

We don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.

We will provide another update on Friday, September 26, at 6:00 am EST


Cyber Incident Update –9/25/25 at 7:00 pm EST:

We are currently in the process of restoring our servers and anticipate determining a timeline for resuming full operations by 10:00 PM EST this evening, September 25, 2025.

Our team continues to work diligently and in close coordination with our security partners in response to the cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precaution, our systems remain offline to prevent any potential data compromise. We continue to follow our established cybersecurity protocols to ensure the protection and integrity of your data.

We will provide our next update by 10:00 PM EST today.

We appreciate your continued patience and understanding as we work to bring our systems back online safely.

Incident Update – 9/25/25 at 12:00 pm EST:

StreamlineMD is currently working closely with our security team to address a cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precautionary measure, we proactively shut down our systems to prevent any potential data compromise.

Our team is actively following established cybersecurity protocols to ensure the continued protection of your data. At this time, the software will remain inaccessible for the remainder of the day, September 25, 2025.

We understand the impact this may have on your operations and sincerely appreciate your patience and understanding. We are committed to providing updates as frequently as possible and will keep you informed of our progress.

StreamlineMD is experiencing a cyber incident

Our security software detected malicious behavior and our team of internal and external experts are working to resolve the issue. The security team has made it clear that we need to shut down our services altogether, pending a more detailed analysis.