CMS remote monitoring ban sparks industry pushback, new proposals

By mid-2026, CMS had grown increasingly concerned about the integrity of Medicare’s Remote Patient Monitoring (RPM) program, especially after a 2024 HHS Office of Inspector General report revealed that 43% of Medicare RPM users did not receive all required service components, highlighting widespread compliance failures. This alarming non-compliance rate, coupled with a rapid 31% surge in Medicare RPM payments to $536 million in 2024, underscored CMS’s fears of fraud, improper billing, and low-value care proliferating within the program.

To tighten oversight and curb potential abuse, CMS proposed a sweeping policy shift for 2027 that would ban Medicare payments for RPM and Remote Therapeutic Monitoring (RTM) services delivered by third-party vendors, mandating instead that these services be performed exclusively by clinical staff directly employed by the billing practice. This move reflects CMS’s rationale that third-party vendors often have only a loose association with treating practitioners, which can fragment care and undermine the longitudinal, patient-centered approach essential for appropriate billing and clinical integration.

CMS’s rationale also emphasizes enhancing program integrity through stricter documentation and patient engagement requirements, including mandating a separately billable initiating visit—either in person or via telehealth—conducted by the billing practitioner before RPM or RTM services commence. By restricting these services to established patients and requiring meaningful clinical integration, CMS aims to shift the focus from volume-based metrics like claims volume or clinical staff time to patient outcomes and value-based care, ensuring that RPM success is measured by tangible improvements such as better blood pressure control rather than mere service delivery.

Underlying CMS’s stringent policy approach is a broader concern about Medicare fraud, waste, and abuse, compounded by Medicare’s limited visibility into key aspects of RPM service delivery, such as who orders the monitoring and inconsistent documentation of service components. While some analysts question whether such a sweeping crackdown is the best solution, CMS’s proposals clearly prioritize program integrity and accountability, reflecting a determination to prevent RPM from becoming a detached, transactional service lacking meaningful clinical oversight.

The proposed CMS policy to ban Medicare payments for RPM and RTM services provided by third-party vendors threatens to operationally and financially strain smaller and rural providers who rely heavily on these vendors. Christopher Adamec, executive director of the Alliance for Connected Care, highlights that many primary care providers and health systems lack the infrastructure to deliver RPM in-house and depend on vendors as 'shovel-ready' solutions. This shift could force providers to either dismantle existing RPM programs or rapidly build costly internal capabilities, a challenge given the January 1, 2027 deadline.

The policy change risks significant disruptions to patient access and continuity of care, particularly for Medicare beneficiaries in smaller or rural practices. Adamec warns that many patients currently kept out of hospitals by RPM services may lose access if providers cannot meet the new staffing and billing requirements. The requirement that RPM services be delivered only by clinical staff employed by the billing practice, combined with the reinstated mandate for a separately reportable initiating visit, could limit availability and delay care initiation, especially for new patients who previously benefited from more flexible COVID-era rules.

CMS justifies the policy shift by citing high costs and quality concerns, referencing a 43% failure rate in compliance and over $500 million in payments by 2024. However, industry leaders contest CMS’s characterization of third-party vendors as loosely associated with treating practitioners, emphasizing that many vendors are tightly integrated with providers. Critics argue that while fraud and waste exist in Medicare RPM, a wholesale overhaul of reimbursement rules may not be the most effective solution and could inadvertently harm providers and patients reliant on these services.

The looming January 1, 2027 effective date compels providers and RPM/RTM vendors to urgently revisit care delivery and contracting models to comply with new staffing and billing restrictions. Small and rural practices, in particular, face financial and operational challenges adapting to the mandate that only clinical staff employed by the billing practitioner can perform billable monitoring activities, potentially limiting outsourcing options and increasing overhead. This transition period underscores the tension between CMS’s goals of program integrity and the practical realities of maintaining patient access and care continuity.

RPM vendors and industry coalitions have mounted a robust opposition to CMS’s proposed 2027 ban on third-party vendor involvement in remote patient monitoring (RPM), warning that such a sweeping policy threatens to disrupt care delivery and undermine patient outcomes. Christopher Adamec of the Alliance for Connected Care highlights that prohibiting vendors will force many providers—especially smaller and rural ones lacking resources to build in-house programs—to either terminate RPM services or incur prohibitive costs to develop internal capabilities. This concern is echoed by ChartSpan’s #SaveRemoteMonitoring campaign, which stresses that the policy’s broad strokes risk reducing access for vulnerable populations who depend on these integrated, vendor-supported care models.

Rather than an outright ban, industry coalitions advocate for nuanced oversight frameworks that preserve innovation and patient access while addressing compliance concerns. ChartSpan and allies propose a Registered RPM Organization (RRO) model featuring accreditation, claims identification, auditing, and standardized outcome reporting to ensure accountability without stifling the essential role of third-party vendors. This approach is grounded in clinical evidence demonstrating RPM’s benefits—such as improved hypertension control and heart failure management—and is positioned as a more targeted alternative to CMS’s broad restrictions, which critics argue are not supported by the 2024 HHS OIG report cited by CMS.

RPM vendors also highlight the operational complexity and labor intensity of RPM programs, which necessitate specialized third-party support to manage data tracking and clinical workflows efficiently. Mike McSherry, CEO of Xealth, likens CMS’s proposal to 'throwing the baby out with the bathwater,' criticizing the agency for choosing to eliminate a critical access pathway rather than tightening documentation controls. Meanwhile, Meryl Holt of Cadence points out that the policy’s blanket restriction on vendor involvement ignores the reality that many providers contract out these services to manage workload, a sentiment reinforced by health system CIOs concerned about overburdened primary care staff.

While opposing the CMS proposal, some RPM vendors see potential silver linings if clinical workflows shift in-house, anticipating new partnership opportunities with hospitals and health systems eager to license RPM technologies directly. Sam Liu of Vivalink notes this emerging trend could accelerate due to the policy change, suggesting that despite the immediate challenges, the evolving landscape may foster innovative collaborations that reshape RPM delivery models. However, this transition remains fraught with risk, as many providers currently rely heavily on third-party vendors to maintain patient access and care quality.

The proposed Medicare cuts to remote patient monitoring (RPM) risk upending care models that have already demonstrated significant improvements in patient outcomes, particularly for chronic disease management. Stakeholders, including RPM vendors like Cadence and Xealth, warn that these models often rely on complex partnerships combining clinical authority with specialized third-party infrastructure, which cannot be abruptly dismantled without jeopardizing patient care quality and ongoing innovation. As Meryl Holt, general counsel at Cadence, highlights, the CMS proposal imposes a 'blanket rule' requiring all RPM services to be delivered by in-house staff, ignoring the operational realities that have made RPM successful in reducing hospitalizations and improving metrics like blood pressure and A1c control.

Rather than imposing broad bans on third-party clinical monitoring, experts advocate for a shift toward outcome-focused policy adjustments that prioritize patient health improvements over simplistic metrics like clinical staff time or claims volume. The crux of the issue lies not in third-party involvement itself but in program design and execution quality; ineffective programs that fail to connect with treating providers or demonstrate patient benefit should be targeted, not entire staffing models. Proposals include CMS introducing modifier codes to collect detailed data on device types, staffing arrangements, and clinical outcomes, enabling evidence-based refinements that align with value-based care initiatives such as the ACCESS program.

Operationally, forcing RPM services back in-house threatens to overwhelm already overburdened primary care teams, as noted by a CIO from a large health system who emphasized the unsustainable burden of tracking and interpreting RPM data without third-party support. RPM vendors argue that more stringent documentation controls and authorization processes would more effectively address fraud concerns than the sweeping CMS proposal, which Xealth CEO Mike McSherry criticizes as 'throwing the baby out with the bathwater' by cutting off a critical access pathway for RPM services.

In response to CMS's 2027 RPM policy changes, the Save Remote Patient Monitoring Coalition advocates for a Registered RPM Organization (RRO) framework that emphasizes accreditation, claims identification, auditing, and standardized outcome reporting to safeguard program integrity without curtailing patient access. This approach aims to balance oversight with the practical needs of primary care and rural practices, where third-party RPM vendors play a critical role in delivering care. By instituting a regulated yet accessible vendor accreditation system, the coalition envisions maintaining the essential benefits of RPM, supported by robust clinical evidence from companies like ChartSpan that demonstrate improved hypertension control, glucose monitoring, and heart failure outcomes through remote monitoring.