CMS Proposes Sweeping Reforms to Remote Patient Monitoring Amid Fraud Crackdown

The Centers for Medicare & Medicaid Services (CMS) has unveiled its proposed 2027 Medicare Physician Fee Schedule, a document that signals a fundamental shift in how the federal government views, regulates, and reimburses remote patient monitoring (RPM). As the healthcare industry has increasingly embraced digital health tools to manage chronic conditions, the rapid proliferation of monitoring services has drawn significant scrutiny from federal watchdogs.

With this new proposal, CMS is moving to decouple the lucrative, often outsourced, remote monitoring market from the direct physician-patient relationship. By tightening billing requirements and signaling potential code consolidation, the agency is aiming to curb the "wild west" era of RPM, shifting the focus from volume-driven billing to clinical necessity and accountability.


Main Facts: The Proposed Regulatory Overhaul

The 2027 proposed rule is not merely a technical adjustment; it represents a strategic pivot in Medicare policy. For years, the RPM space has functioned as a high-growth sector for third-party vendors who partner with practices to provide monitoring services. CMS’s latest proposal seeks to fundamentally dismantle this business model.

Key Proposed Changes Include:

  • The End of Third-Party Outsourcing: CMS is proposing to prohibit billing for RPM services performed by third-party contractors. Under the new rule, only clinical staff directly employed by the billing practice will be eligible for reimbursement.
  • The "Initial Visit" Mandate: To ensure that monitoring is part of a holistic care plan, CMS is requiring a separate, billable clinical visit to initiate any remote patient monitoring episode.
  • Code Consolidation: In a move that could significantly alter revenue projections for digital health companies, CMS is soliciting feedback on collapsing the existing suite of RPM billing codes into four streamlined, comprehensive codes.
  • Stricter RTM Eligibility: Remote Therapeutic Monitoring (RTM)—which tracks non-physiologic data like therapy adherence or pain—will be restricted to patients who have a pre-existing, established relationship with the billing practice.

Chronology: The Road to Regulatory Intervention

The path to these stringent proposals was paved by years of escalating concern regarding the integrity of the remote monitoring program.

  • 2019–2021 (The Growth Phase): During the Covid-19 pandemic, CMS rapidly expanded access to telehealth and remote monitoring to ensure continuity of care. Usage surged, and the market for third-party RPM vendors exploded.
  • 2022–2023 (The Red Flags): Reports began to emerge of "tele-health mills" and aggressive marketing campaigns targeting Medicare beneficiaries. Patients reported receiving devices they didn’t request or being signed up for services they never authorized.
  • 2024 (The OIG Investigation): The Department of Health and Human Services (HHS) Office of Inspector General (OIG) released a landmark report detailing widespread abuse. The OIG found that nearly 43% of enrollees were not receiving the full suite of required services, including setup, device provision, and treatment management.
  • 2026 (The Policy Response): Building on the OIG’s findings, CMS finalized the regulatory framework that culminated in the 2027 proposed rule released this week.

Supporting Data: Why CMS is Acting

The OIG’s 2024 review serves as the primary evidence base for the agency’s aggressive stance. The data paints a troubling picture of a system exploited for financial gain rather than patient health outcomes.

The Findings of the OIG Report

The OIG highlighted three specific areas of systemic failure:

  1. Inadequate Delivery of Care: The report found that 43% of patients enrolled in RPM programs were not receiving the three core components of the service: professional education/setup, device supply, and active treatment management.
  2. Lack of Oversight: Medicare lacked basic billing information, such as the identity of the ordering physician, making it nearly impossible to conduct meaningful audits or oversight.
  3. Fraudulent Enrollment: Investigators discovered instances where vendors performed unsolicited outreach, enrolling beneficiaries without medical necessity. In some cases, devices were never delivered, or the equipment failed to meet FDA standards for medical-grade monitoring.

CMS justified these new rules by noting that the cost of monitoring technology has plummeted. In their view, the original reimbursement rates—which were established when devices were significantly more expensive—no longer reflect the current market reality. By tightening the rules, CMS hopes to align payment with the actual cost of care delivery rather than the profit margins of third-party middlemen.


Official Responses and Industry Implications

The healthcare industry has reacted with a mix of resignation and alarm. While reputable providers support the move to eliminate fraud, many in the digital health sector worry that the administrative burden of the new rule could stifle innovation and reduce patient access to vital care tools.

The Provider Perspective

For small-to-mid-sized physician practices, the prohibition on third-party services creates a significant operational hurdle. Many practices currently rely on external vendors to manage the "data deluge" that comes with monitoring hundreds of patients. By requiring that only internal staff perform these duties, CMS is forcing a massive increase in overhead for clinics that lack the manpower to monitor patient data 24/7.

The Vendor Perspective

Companies that specialize in RPM-as-a-service are facing an existential crisis. If they are no longer able to bill on behalf of the practices they serve, their business models must shift entirely toward software-only platforms, or they will be forced to pivot their services away from the Medicare population.

The Regulatory Rationale

CMS maintains that its priority is to ensure that remote monitoring is not a standalone "service line" but rather an extension of the physician-patient relationship. "Our goal is to ensure that remote monitoring is deeply integrated into the patient’s care plan," a CMS spokesperson noted. "It should be a tool in the physician’s toolkit, not a product sold to patients by an outside entity."


Implications: A New Era for Digital Health

The implications of the 2027 proposed rule will ripple across the healthcare ecosystem, affecting everything from hospital revenue cycles to the types of devices manufactured by med-tech companies.

1. Market Consolidation

The move toward four consolidated billing codes will likely reduce the complexity of the Medicare fee schedule, but it may also reduce the total reimbursement available for complex monitoring cases. Smaller, less efficient vendors are likely to be forced out of the market, leading to a period of aggressive mergers and acquisitions.

2. Focus on "High-Touch" Care

By mandating an initial, billable visit, CMS is effectively saying that "passive" monitoring—where a device simply sends data to a cloud server without active clinical intervention—is no longer worth the taxpayer’s investment. Future success for digital health companies will depend on their ability to demonstrate clinical outcomes, not just data throughput.

3. The Future of RTM

The restriction of Remote Therapeutic Monitoring to existing patient relationships is a clear signal that CMS wants to end the "cold calling" of seniors for therapy compliance apps. Practices will now have to prove they have a legitimate, ongoing clinical relationship with a patient before billing for non-physiologic monitoring, effectively closing a loophole that many digital health startups had utilized to reach new users.

4. Patient Impact

For the average Medicare beneficiary, the changes may be subtle at first but could lead to a reduction in the number of unsolicited calls and mailers regarding "free" health devices. However, there is also the risk that physicians, overwhelmed by the new requirements for internal staffing, may stop offering remote monitoring services altogether, potentially impacting patients who truly rely on these tools for chronic disease management.


Conclusion: The Path Forward

The 2027 proposed rule is currently in a 60-day public comment period. During this time, the agency expects to hear from stakeholders ranging from the American Medical Association (AMA) to private equity-backed digital health firms.

The final rule, expected to be released later this year, will set the stage for a new, more regulated era of digital medicine. Whether this results in a healthier Medicare population or a stifled innovation ecosystem remains to be seen. What is clear, however, is that the era of "RPM-as-a-commodity" is coming to an abrupt end. For the industry, the message from CMS is unequivocal: prove the clinical necessity of your services, or lose your place in the Medicare fee schedule.

More From Author

The Anatomy of Growth: How Wesley Vissers’ Sissy Squat Technique is Redefining Leg Training

Federal Scrutiny Intensifies: ICE Halts Vehicle Stops Following String of Fatal Encounters