Chronic Care Management has been billable since 2015, but the rules have never stopped moving. The 2026 updates are less about new codes and more about how CMS expects time, consent, and medical decision-making to be documented. For teams running CCM at scale, the difference between a clean claim and a denial increasingly comes down to what your software captured automatically — not what a care manager remembered to write down.
The core codes haven't gone away
The CCM family you already know remains the backbone of the program. What's changed is the scrutiny applied to each one, and how the new APCM bundle sits alongside them.
- 99490 — first 20 minutes of clinical staff time, per calendar month, directed by a physician or other qualified health professional.
- 99439 — each additional 20 minutes of clinical staff time (bill up to twice per month).
- 99491 — first 30 minutes provided personally by the billing practitioner.
- 99437 — each additional 30 minutes of practitioner time.
- G0556–G0558 — the Advanced Primary Care Management (APCM) bundle, billed by patient complexity tier instead of by accumulated minutes.
What actually changed for 2026
The headline shift is the continued move toward APCM. Where classic CCM ties revenue to stopwatch minutes, APCM pays a monthly per-patient rate based on the number of chronic conditions and the patient's risk tier. That removes the time-threshold cliff — but it raises the bar on documenting the scope of services delivered each month, since you can no longer point to a minute count as proof of work.
Consent rules were also clarified: a single documented consent covers the patient until revoked, and it must record that the patient was told only one practitioner can bill CCM for them in a given month and that cost-sharing may apply. Auditors are increasingly asking to see the consent timestamp and the staff member who obtained it.
Where denials come from
- Time that can't be substantiated — totals entered after the fact, with no per-interaction trail.
- Overlapping programs — billing CCM and another care-management service for the same month without the required distinction.
- Missing or stale consent — no recorded consent, or consent that predates a change in the billing practitioner.
- Care plan drift — a care plan that was never updated despite documented changes in the patient's condition.
What to put in place now
The teams that handle these changes without disruption share a pattern: they capture time per interaction with an explicit timer, keep consent and care-plan history as first-class records, and generate the audit trail as a byproduct of the work rather than a monthly scramble. If you're evaluating whether you're ready for 2026, start by asking whether you could hand an auditor a per-patient, per-month report today — without anyone manually assembling it.