E/M coding for rheumatology: time vs. MDM.
Rheumatology's documentation regularly does 99215-level work and regularly gets billed as 99213, because the visit's real complexity — independently reviewing toxicity labs, weighing infection risk against disease control, walking a patient through why their last DMARD failed — never makes it into a note built around exam findings instead of decision-making. This guide works through the full time-vs-MDM decision tree for 99202–99205 and 99212–99215 in a rheumatology context, with the specific documentation language that separates a defensible high-level visit from an undercoded one.
Key takeaways
- Time and MDM are two separate paths to the same code — pick whichever the visit actually satisfies, don't try to average them. A visit can hit 99215 on MDM alone even with a short face-to-face component, or on time alone with only moderate MDM.
- Biologic and methotrexate monitoring routinely supports moderate-to-high MDM through the data-review element alone, independent of the physical exam — and it's the single most under-documented source of complexity in the specialty.
- Prescription drug management with real toxicity potential is a risk-of-complications element on its own — initiating or titrating a biologic or DMARD typically clears at least moderate risk, often high, before anything else in the visit is even counted.
- Telehealth doesn't change the code or the leveling logic — it changes the exam component and the place-of-service reporting, and a data/management-heavy autoimmune follow-up can still hit a high level with no hands-on exam at all.
Two paths, one code — not added together
New-patient visits (99202–99205) and established-patient visits (99212–99215) are each billed by fully satisfying either total time on the date of the encounter or medical decision making — whichever pathway the visit actually supports, not a blend of partial credit from both. A visit with a short face-to-face component but genuinely high-complexity decision-making (a biologic switch with extensive lab review) can bill at a high level on MDM alone. A visit with straightforward decision-making but a long, legitimately necessary conversation — working through step-therapy history, addressing a patient's needle anxiety before a self-injectable biologic — can bill at a high level on time alone. Pick the pathway the note actually supports and document to that standard; don't reach for time because the MDM elements weren't captured, and don't reach for MDM language after the fact to justify a time total that wasn't tracked.
| Code | Total time (date of encounter) | MDM level required |
|---|---|---|
99212 | 10–19 minutes | Straightforward |
99213 | 20–29 minutes | Low |
99214 | 30–39 minutes | Moderate |
99215 | 40–54 minutes | High |
New-patient codes 99202–99205 follow the same either/or structure with their own time bands (roughly 15–29 minutes for 99203 up through 60–74 minutes for 99205) and the same MDM levels; the decision-making analysis below applies identically to new and established visits, since MDM complexity doesn't reset with patient status.
What actually drives high-complexity MDM in rheumatology
MDM level is set by the highest two of three elements: number and complexity of problems addressed, amount and complexity of data reviewed, and risk of complications and morbidity from management. Rheumatology visits routinely clear moderate or high on the second and third elements even when the first — the problem list itself — looks unremarkable on paper, because "stable RA, continue current therapy" undersells what the visit actually required.
| MDM element | What pushes it to moderate/high | Documentation that supports it |
|---|---|---|
| Data reviewed and analyzed | Independent review and interpretation of toxicity-monitoring labs (CBC, LFTs, renal function for methotrexate/leflunomide; TB and hepatitis screening before biologic initiation), not just ordering them | Note the specific values reviewed and the interpretation — "CBC and LFTs reviewed, stable, no dose adjustment needed" clears the bar; "labs reviewed" alone is thin |
| Risk of complications from management | Initiating, titrating, or continuing a biologic or DMARD with significant toxicity potential; deciding to proceed with or hold therapy around an infection risk | Document the specific risk weighed — infection risk against disease control, malignancy risk discussion, the reason a dose change was or wasn't made |
| Number/complexity of problems | Multiple active autoimmune diagnoses addressed the same visit, or a single diagnosis with an acute exacerbation or drug-related complication | List each problem addressed with its own assessment, not a single combined line for "autoimmune disease, stable" |
Worked example: an established RA patient (M06.9 RA without rheumatoid factor, unspecified — or, better, the laterality-and-site-specific code the chart actually supports) on adalimumab returns for a scheduled follow-up. The physician independently reviews that month's CBC and LFTs (normal), discusses a recent upper respiratory infection and decides to hold the next dose pending resolution, and documents the specific reasoning. That's moderate-to-high risk (a management decision balancing infection risk against disease control) plus moderate-to-high data complexity (independent lab review with interpretation) — enough for 99215 on MDM alone, even if the face-to-face time that day was closer to 99213 length. If the note instead reads "RA stable, continue adalimumab, recheck labs next visit," the same clinical judgment almost certainly happened in the physician's head, but it isn't on the chart, and the code that's actually supportable drops to 99213 or 99214.
Documenting step-therapy discussion time
Time spent discussing why a conventional DMARD failed, walking through the evidence for a biologic step-up, or addressing a patient's concerns before starting a self-injectable therapy all count toward total time on the date of the encounter, under the time-based pathway — but only the billing practitioner's own personal time, and only when it's documented specifically enough to be reconstructable, not asserted as a round number.
- 1Name what the time covered. "22 minutes total time: 12 minutes face-to-face reviewing methotrexate intolerance history and discussing biologic options; 10 minutes same-day chart review and documentation" supports the total. "45 minutes spent with patient" with no breakdown is weaker on audit even if it's accurate.
- 2Only count the billing practitioner's personal time. Time a medical assistant spends rooming the patient or a nurse spends on patient education doesn't count toward the practitioner's total, even though it's genuinely part of the visit's overall duration.
- 3Same-day non-face-to-face work counts. Reviewing outside records of a prior DMARD trial before the visit, or completing documentation and orders after the patient leaves but still on the same calendar date, both count toward the total — don't undercount by only tallying the time the patient was physically in the room.
Prolonged services add-on codes
When total time on the date of the encounter exceeds the maximum time for the highest-level code in the family (99205 for new patients, 99215 for established), prolonged services add-on codes report the additional time rather than trying to force the whole visit into the base code alone. CPT's prolonged-service add-on (99417) and Medicare's own version (G2212) both report additional 15-minute increments beyond the base code's time threshold, but they're not interchangeable on the claim — which one applies, and the exact minute threshold before the first unit is billable, depends on the payer, so confirm the current payer-specific rule rather than defaulting to whichever add-on code a different payer accepted last. A long new-biologic-initiation visit that runs well past 54 minutes for an established patient is exactly the scenario this code family exists for; document the total time clearly enough that the base code's threshold and the prolonged increment are both independently supportable.
Telehealth E/M for autoimmune follow-up
The E/M code itself doesn't change for a telehealth visit — the same 99202–99215 codes and the same time-or-MDM leveling logic apply. What changes is the physical exam component of MDM (largely unavailable or limited on a video visit) and the claim-level reporting: place-of-service code and/or modifier requirements vary by payer and change frequently, so confirm the current POS/modifier convention for each payer rather than assuming last year's rule still applies. A data- and management-heavy autoimmune follow-up — reviewing labs, discussing medication response, adjusting a DMARD dose — can fully support a high MDM level over telehealth with no hands-on exam at all, since the data-review and risk elements carry the complexity independent of physical findings. Where a visit genuinely depends on physical exam findings (new joint swelling that needs to be examined, a rash that needs direct visualization), that's a signal the encounter may need to be in-person rather than telehealth, independent of the coding question.
- Document the specific labs reviewed and interpreted, not just that labs were "reviewed."
- Name the management decision and the risk it weighed — infection risk, toxicity, disease control — whenever a DMARD or biologic dose is continued, changed, or held.
- Break total time into its components when billing on the time pathway.
- Pick the pathway (time or MDM) the note actually supports, and document fully to that standard.
- Don't write "labs reviewed, stable" as the entire data-review documentation for a biologic-monitoring visit.
- Don't default every established visit to 99214 out of habit without checking what the note actually supports.
- Don't assume telehealth caps the achievable E/M level — MDM-driven complexity doesn't require a physical exam.
- Don't bill prolonged services without a clearly documented total time that independently supports both the base code and the add-on increment.
Think your rheumatology visits are undercoded?
We'll review a sample of your E/M documentation against the time-vs-MDM standard and show exactly where the note supports a higher level than what's being billed.
Frequently asked questions
What makes rheumatology MDM high-complexity instead of moderate?
High-complexity MDM generally needs a chronic illness with severe exacerbation or side effects of treatment posing a threat to life or bodily function, paired with either extensive data review or a high-risk management decision. In rheumatology that's most often initiating or changing a biologic or targeted synthetic DMARD while independently reviewing labs that carry real toxicity risk — CBC, liver enzymes, renal function, TB and hepatitis screening — and weighing infection or malignancy risk against uncontrolled disease. A routine refill visit with stable labs and no therapy change is moderate at most, even if the underlying diagnosis is the same severe disease.
Can we count time spent discussing step-therapy failure toward the E/M level?
Yes, under the time-based pathway. Total time on the date of the encounter includes face-to-face time plus same-day non-face-to-face work performed personally by the billing practitioner — reviewing prior DMARD trial results, discussing why a conventional therapy failed or wasn't tolerated, and documenting that discussion all count. It has to be the practitioner's own time, not delegated staff work, and it has to be documented with enough specificity that the total is reconstructable from the note, not asserted as a round number with nothing behind it.
Does telehealth change how we code a rheumatology follow-up visit?
The E/M code itself doesn't change — the same 99212-99215 or 99202-99205 codes and the same time-or-MDM leveling logic apply to a telehealth visit as an in-person one. What changes is the physical exam component of MDM and the place-of-service/modifier reporting, plus payer-specific rules about whether audio-only counts and which POS code or modifier the claim needs. A telehealth autoimmune follow-up focused on medication response and lab review can fully support a high level on the MDM pathway even without a hands-on exam, since data review and management risk carry the complexity, not the physical exam.
Verify before billing. CPT is a registered trademark of the American Medical Association; codes here are paraphrased, not reproduced from the CPT Professional edition. CPT, HCPCS and ICD-10 codes, coverage policy, and bundling edits change, including annual code-set updates. This page reflects standard industry practice and is provided for general education — it is not a substitute for your own compliance review, your current payer contracts, or the current-year code sets. Confirm requirements against your specific payer mix before submitting claims.