2021 E&M Documentation & Coding Guidelines

Changes to Evaluation & Management Guidelines for 2021

Everyone has been talking about the changes coming to the E&M Guidelines for several years and now it is about to happen.  The AMA has put together guidelines related to how these changes will be applied to the Office E&M codes (99202-99215).

Here is a brief look at the changes coming.  For the complete version of the AMA guideline changes it is important that you read and understand this information here:

https://www.ama-assn.org/system/files/2019-06/cpt-office-prolonged-svs-code-changes.pdf

Summary

  • The concept for determination of new or established patients will still apply.  However, the scoring will now be blended into the medical decision making.
  • CPT Code 99201 will be deleted.
  • Use 99211 for office services if the physician’s or other qualified health care provider’s time is spent in the supervision of clinical staff who perform the face-to-face (F2F) services of the encounter.
  • The medical record will, of course, still include a medically appropriate history and exam by the treating provider. However, the extent of history and physical examination components will not be counted/scored as an element in selection of level of service.
  • The new guidelines have 2 choices for selecting the E&M level of service.
    1. Time, or;
    2. Medical Decision Making (MDM)

Note: The fee schedule will be increased for the new guidelines although the conversion factor will be lower for 2021.

Time

Time alone may be used to select the appropriate level for service for 99202-99215 whether counseling and/or coordination of care dominates the service. This time is cumulative for the date of service. Typical times have changed and are now ranges of time.

Using Time to determine the level of service requires a face-to-face encounter with the provider and does not include staff time.  Total time on the date of the encounter includes both face-to-face time and non-face-to-face time personally spent by the provider on the day of the encounter.

Examples of Physician/other qualified healthcare professional (Provider) time include the following:

  • preparing to see the patient (e.g., review of tests)
  • obtaining and/or reviewing patient history
  • performing medically appropriate examination and/or evaluation
  • counseling and educating patient/ family/caregiver
  • ordering medications, tests, or procedures
  • referring and communicating with other healthcare professionals
  • documenting clinical information in the electronic or other health record
  • independently interpreting results (not separately reported) and communicating to the patient/ family /caregiver
  • care coordination (not separately reported)

Not Included in Time:  Separate reported tests/procedures, Staff time, Slow charting, Any element performed on a different date.

New Patient

Established Patient

Code Time (minutes) Code Time (minutes)
99202 (15 – 29) 99212 (10 – 19)
99203 (30 – 44) 99213 (20 – 29)
99204 (45 – 59) 99214 (30 – 39)
99205 (60 – 74) 99215 (40 – 54)
< 15 minutes – No Code < 10 minutes – No Code
Document the total time; do not use the range

Medical Decision Making (MDM)

For the provider, there isn’t much that has changed in the way of documentation requirements.  The scoring process has the biggest changes. There are still 3 categories for MDM:

  • Number and Complexity of Problems Addressed during the encounter
  • Amount and/or Complexity of Data to be Reviewed and Analyzed. This data is divided into three categories:
    1. Tests, documents, orders, or independent historian(s). Each unique test, order or document is counted to meet a threshold number.
    2. Independent interpretation of tests.
    3. Discussion of management or test interpretation with external physician or other qualified healthcare professional or appropriate source.
  • Risk of Complications and/or Morbidity or Mortality of Patient Management.
    • Similar to the Table of Risk used previously
    • This includes the possible management options selected and those considered, but not selected, after shared medical decision making with the patient and/or family

Prolonged Service with or without direct patient contact on the date of an office or other outpatient Service.

  • Two new codes for reporting prolonged office visit time.  AMA-99417, CMS-G2212
  • These codes are used to report prolonged total time (combined time with and without direct patient contact) provided by the physician or other qualified healthcare professional on the date of the office or other outpatient services (99205, 99215) when the service has been selected using time alone and only after the total time of the highest-level service (i.e., 99205, 99215) has been exceeded.
  • This will be reported after 15 minutes of additional time has been attained.  Not reported for increments less than 15 minutes.

If you have any questions on this or other documentation/coding topics, please contact your StreamlineMD client rep or the StreamlineMD coding team at wblock@streamlinemd.com.

Share the Post:

Related Posts

Notice

Cyber Incident Update – 9/28/25 at 6:00 pm EST:

StreamlineMD applications are up and live!

Access Client Portal Here

We are pleased to inform you that, following clearance from our cybersecurity experts, client access to our system has been restored. You may begin accessing the system starting at 6:00 PM EST today, Sunday, September 28, 2025.

Please note that while core functionality is fully restored, the following features are currently unavailable as we continue working to bring all components back online:

1. SMD Mobile App (viewing PDF chart)
2. Patient Portal
3. RxPhoto (inside the EHR)

We are working to restore these remaining services as quickly and securely as possible.

We will continue to monitor system performance closely and will provide updates as additional components become available.

If you experience any issues or require support, please contact our support team directly at 330-564-2641.

Thank you once again for your continued patience, understanding, and trust.

Cyber Incident Update – 9/28/25 at 2:00 pm EST:

Following our scheduled call with the cybersecurity team earlier today, we have been advised that additional security measures must be implemented before client access can be restored. Specifically, changes to our VPN configuration are required to ensure a more secure connection environment.

Our internal teams are actively working on these adjustments and will move as quickly and carefully as possible to complete the necessary changes.

Our next update will be at 4:00 PM EST.

Cyber Incident Update – 9/28/25 at 12:00 pm EST:

We are pleased to share that our internal teams currently have access to the system environment. In the interim, if needed, we are able to assist by running your patient appointment schedules for the week. Please contact our support team or email at smdhelpdesk@prcmedicalllc.zohosupport.com if you require this service.

We are scheduled to meet with our cybersecurity team at 1:00 PM EST today to review final clearance for restoring client access. We will provide another update following that discussion.

We appreciate your continued patience and partnership as we work to bring services back online safely and securely.

Cyber Incident Update – 9/27/25 at 10:00 pm EST:

We are pleased to report that our routine nightly processes have completed successfully, and the system environment remains stable and fully operational.

At this stage, we are awaiting final clearance from our cybersecurity partner before restoring client access.

However, our partner informed us that they need more time and so this clearance will not be available until after 1:00 PM EST tomorrow, Sunday, September 28, 2025.

Thank you for your patience while we maintain the highest standards of security and system integrity. 

Cyber Incident Update – 9/27/25 at 7:00 pm EST:

We are continuing to move forward with final preparations for restoring system access. Our internal teams have completed their validation processes, and the environment remains fully operational.

At this time, we are running our routine nightly processes to further confirm system stability and readiness. We continue to await final clearance from our cybersecurity experts to bring services fully back online.

We remain optimistic that systems will be accessible to clients by tomorrow morning, Sunday, September 29, 2025, at 7:00 AM EST.

As always, we are taking every measure to ensure a secure and controlled restoration.

Thank you again for your continued patience and support. Our next update will be provided by 10:00 PM EST.

Cyber Incident Update – 9/27/25 at 11:00 am EST:

We are pleased to share that our team has gained access to the system environment and is actively conducting testing—an important step toward the full restoration of services.

As part of this process, we have completed testing of the Practice Management (PM) and Coding software and are pleased to report that no issues have been identified with the software. Testing will continue across all system components to ensure overall stability and reliability.

Our teams will continue working throughout the day to validate all aspects of the system before bringing it back online.

We are deeply grateful for your continued patience, support, and trust as we proceed with restoration in a safe and controlled manner.

We will provide another update at 2:00 pm EST.

Cyber Incident Update – 9/26/25 at 7:00 pm EST:

We are pleased to share that our team is now gaining access to the system environment and actively conducting testing. This is an important step toward full restoration of services.

We again want to reassure you that there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

Our teams will continue to work throughout the evening and into the weekend to validate all aspects of the system before bringing it back online.

Thank you for your continued patience, support, and trust as we move forward with restoration in a safe and controlled manner.

We will provide another update at 10:00 am EST on Saturday, September 27, 2025.

Cyber Incident Update – 9/26/25 at 3:00 pm EST:

We continue to make steady progress in our restoration efforts. At this time, 95% of servers have been cleared; however, they remain behind protective firewalls as we work closely with our team of experts toward full restoration.

The StreamlineMD systems will remain unavailable for the rest of today, Friday, September 26, 2025. Our teams will begin comprehensive testing of all aspects of the system as soon as possible, likely this evening and over the weekend.

Importantly, there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

We truly appreciate your support and understanding during this process. You are important to us, and we remain committed to restoring services safely and securely.

We will provide another update at 6:00 pm EST.

Cyber Incident Update – 9/26/25 at 2:00 pm EST:

We continue to work diligently this afternoon with our cybersecurity team and are making steady progress.   

We anticipate the StreamlineMD systems will remain inaccessible for the remainder of today, Friday, September 26, 2025.  

We will provide another update at 6:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 11:00 am EST:

We continue to work throughout the day with our cybersecurity team and continue to make progress.  

We anticipate the StreamlineMD systems will not be accessible before 3:00 pm EST on Friday, September 26, 2025

We will provide another update at 2:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 09:00 am EST:

We continue to work this morning with our cybersecurity team and continue to make progress.   

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.  

We will provide another update at 12:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 07:00 am EST:

We have continued to work through the night with our cybersecurity team and continue to make progress.  

We will continue restoring servers to service and testing internally. 

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025. 

We will provide another update at 9:00 am EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/25/25 at 11:00 pm EST:

So far, we are making great progress, and our systems are internally coming back online. At this time, there is no evidence of system damage or PHI compromise.

Throughout the night, we will continue restoring servers to service and testing internally.

We don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.

We will provide another update on Friday, September 26, at 6:00 am EST


Cyber Incident Update –9/25/25 at 7:00 pm EST:

We are currently in the process of restoring our servers and anticipate determining a timeline for resuming full operations by 10:00 PM EST this evening, September 25, 2025.

Our team continues to work diligently and in close coordination with our security partners in response to the cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precaution, our systems remain offline to prevent any potential data compromise. We continue to follow our established cybersecurity protocols to ensure the protection and integrity of your data.

We will provide our next update by 10:00 PM EST today.

We appreciate your continued patience and understanding as we work to bring our systems back online safely.

Incident Update – 9/25/25 at 12:00 pm EST:

StreamlineMD is currently working closely with our security team to address a cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precautionary measure, we proactively shut down our systems to prevent any potential data compromise.

Our team is actively following established cybersecurity protocols to ensure the continued protection of your data. At this time, the software will remain inaccessible for the remainder of the day, September 25, 2025.

We understand the impact this may have on your operations and sincerely appreciate your patience and understanding. We are committed to providing updates as frequently as possible and will keep you informed of our progress.

StreamlineMD is experiencing a cyber incident

Our security software detected malicious behavior and our team of internal and external experts are working to resolve the issue. The security team has made it clear that we need to shut down our services altogether, pending a more detailed analysis.