Group Visit Documentation in Telehealth Settings

Group visit documentation in telehealth settings runs on five overlapping requirements at once: individual consent, location tracking, modality specification, standalone clinical notes, and the right billing code. Miss any single layer and a claim can get denied or clawed back months later, even if the clinical care itself was fine. That's the whole premise of this piece: the layers stack, they don't average out, and providers who treat a group telehealth visit like a copy-paste of an individual encounter are setting themselves up for exactly the kind of audit finding nobody wants to explain to a compliance officer.

Virtual shared medical appointments, sometimes called VSMAs, bring several patients with similar conditions into one telehealth session. The idea is efficiency (one provider, several patients, shared education) plus something harder to quantify: peer support. That peer dimension carries real clinical value alongside the shared education. But the paperwork behind it does not get to borrow shortcuts from either in-person group visits or solo telehealth encounters. It's its own animal, with its own rulebook, and that rulebook has been shifting under everyone's feet.

The current Medicare telehealth policy environment every group visit provider must understand

Start here, because everything downstream depends on it. Recent legislation extended a wide set of Medicare telehealth flexibilities through December 31, 2027, according to telehealth.HHS.gov and a CMS FAQ updated February 26, 2026. For non-behavioral health services, patients can receive care at home, there's no geographic originating site restriction, and audio-only visits are permitted, all through that same end date.

Then the calendar flips. Starting January 1, 2028, non-behavioral telehealth patients will generally need to be sitting in a medical facility located in a rural area, full stop. Physical therapists, occupational therapists, speech-language pathologists, and audiologists lose their Medicare telehealth billing eligibility entirely on that date. So for anyone running general medical shared appointments, 2027 isn't some distant planning horizon. It's a cliff edge, and it's worth marking on the calendar now rather than scrambling in the fourth quarter of 2027.

Behavioral health got a better deal, and a permanent one. No geographic restriction on originating site, patients can receive care at home through at least December 31, 2027, audio-only stays permitted when a practitioner has video capability but the patient can't or won't use it, and marriage and family therapists along with mental health counselors have gained expanded eligibility as distant site providers. That's a genuinely different regulatory universe from general medicine telehealth, and mixing up the two rule sets is an easy way to bill something incorrectly without realizing it.

The in-person visit requirement for behavioral health telehealth is the part that trips people up most, mostly because it keeps getting delayed. Under the standard rule, a new mental health telehealth patient needs an in-person visit within six months before that first telehealth session, then annually after that. But per the CMS FAQ update from February 2026, that requirement's current implementation timeline has been subject to ongoing legislative and regulatory changes. Given how often Congress has adjusted these deadlines, providers should verify the current effective dates against the latest CMS guidance before assuming any particular date is final. Given how often Congress has extended these deadlines already, it's worth checking the current CY2026 Physician Fee Schedule implementation status before assuming any date is final.

One more wrinkle that group settings make sharper than solo visits: state licensure requirements typically apply based on where the patient is located, not just where the provider practices. In a group session with participants scattered across three states, that can mean multiple separate licensure considerations, not one. Rural Health Clinics and Federally Qualified Health Centers can keep billing non-behavioral telehealth under HCPCS code G2025 through December 31, 2027, while behavioral health services at those facilities have been paid under the All-Inclusive Rate or PPS since January 1, 2022.

The five documentation elements required in every telehealth encounter, and how group settings complicate each one

Healthcare Practice Advisor's 2025 guidance lays out five elements that belong in every telehealth record, group or individual: informed consent, patient location, provider location, equipment and modality type, and total time spent. None of these are optional extras. They're baseline.

Consent has to be documented at every single visit, not just once at intake, and nearly every payer has a consent documentation requirement as of 2025. In a group session, that means five patients means five separate documented consents. A general "the group agreed to participate" note doesn't cut it, because informed consent is inherently individual. Somebody consenting to being observed by strangers over video is a different act than somebody consenting to have their blood pressure discussed.

Patient location gets genuinely messy in group settings. If one participant is joining from home in Ohio and another from a clinic in Kentucky, those are two different originating site situations, potentially two different licensure requirements, and two lines of documentation, not one shared note that says "patients joined remotely." Provider location matters too since it affects the billing address and the place of service code on the claim.

Modality documentation is where the AAPC's audit guidance gets specific: writing "telehealth" in a note is not sufficient by itself. The record needs to say synchronous or asynchronous, audio-video or audio-only, and name the platform. And if a video connection drops mid-session for one participant and the visit continues by phone, that switch needs to be noted for that specific patient, because it can change which billing code applies to them individually. One dropped Wi-Fi connection, one modifier change, tracked one patient at a time. It's not glamorous work, but it's the difference between a clean claim and a denial letter three months later.

Individual note requirements for shared medical appointments and why generic documentation fails audit

Here's the rule that decides whether a shared medical appointment survives an audit: when billing E/M codes for patients seen in a group setting, each patient's chart needs its own individualized documentation of the services provided to that patient. Not a shared narrative. Not a paragraph describing what the group talked about. A standalone note, per patient, that could be pulled out of the chart and read on its own with zero context from the group session around it.

A sound documentation standard for shared medical appointments requires that the visit record separately capture what was done individually for that patient and what happened in the group setting. CMS, per guidance summarized by the American Academy of Family Physicians (AAFP), holds that a physician can furnish a medically necessary face-to-face E/M visit to a patient even while other patients are present and observing, and the group counseling piece doesn't change the code level for that individual patient. But that only holds up if the individual portion of the visit is documented well enough to support whatever code gets billed. The group activity doesn't do any of the documentation heavy lifting.

The single most common trigger for denial and recoupment in group visit billing is a generic note that reads like meeting minutes: what the group discussed, who said what, general themes. That kind of note has no patient-specific medical justification in it, and auditors know exactly what that looks like because they've seen it a thousand times. The fix is structural, not stylistic. Document group elements (shared education, peer discussion, the stuff that actually happened as a group) as context. Then document individual assessment, plan, and medical decision-making separately, per patient, as if that patient had walked into the room alone.

One more detail worth flagging for anyone using AI scribing tools in these sessions: Blue Cross NC's documentation standard requires that any AI-generated content, recordings, or transcripts used to build the note also get included in the medical record itself. If the AI tool generated a summary that informed the note, that summary is now part of the record, not a scratch pad that gets deleted after the visit.

Billing codes for non-behavioral health shared medical appointments and the absence of a national standard

Here's the part that surprises people: no nationally accepted billing code exists for a standard shared medical appointment. There's no special "group visit" CPT code that Medicare and every commercial payer recognize the same way. What's acceptable varies by state, by carrier, sometimes by the specific plan.

The dominant workaround is billing each patient individually with the appropriate established-patient E/M code, CPT 99211 through 99215, based on the complexity documented in that specific patient's chart. The American College of Physicians has noted that many private insurers accept this approach, and CMS has confirmed there's no prohibition against it for Medicare either. So the individual-billing method isn't a workaround so much as the closest thing the industry has to a default.

CPT 99078, for physician educational services in a group setting, shows up sometimes, but payer coverage on it is inconsistent enough to be risky. Kaiser Permanente, for instance, doesn't separately reimburse it at all, and instead expects an E/M code if the visit included an individual exam. Betting a billing strategy on 99078 without checking the specific payer first is a bit like ordering the mystery special at a diner: sometimes it's great, sometimes you're not sure what you got.

For telehealth delivery specifically, Medicare wants 99202 through 99215 billed with place of service 10 (patient's home) or 02, plus modifier 95 for audio-video or modifier 93 for audio-only. FQHCs and RHCs billing audio-only services should verify the applicable modifier requirements with CMS guidance, as modifier FQ and modifier 93 apply under specific circumstances. Critical access hospitals billing under Method II use modifier GT instead of 95, which is one of those small distinctions that's easy to miss and expensive to get wrong across a full patient panel.

The new AMA codes 98000 through 98015, rolled out for 2025 and 2026, create a parallel synchronous audio-video E/M series that mirrors the familiar 99202 to 99215 structure. Most commercial payers accept them. Medicare does not: it assigns them status indicator "I," which means outright denial. So for Medicare group telehealth billing, those new codes are a dead end, at least for now. When a carrier has no stated policy at all on group visit billing, the practical move is proposing an individual-billing methodology in advance and getting the carrier to sign off before claims start going out the door. Better to ask forgiveness never and permission always, especially when the alternative is a recoupment notice six months later.

Billing and documentation for group psychotherapy via telehealth, where the rules are more defined but still payer-dependent

Group psychotherapy has an actual dedicated code, which puts it a step ahead of general medical shared visits. CPT 90853 covers group psychotherapy with unrelated patients, delivered by a qualified mental health provider to several patients at once, and it generally carries over to telehealth with the appropriate modifier attached, though specifics should be checked against each payer's own policy.

Medicare reimbursed 90853 at roughly $27.18 per patient per session as of 2024. Current 2025 and 2026 rates should be checked against the CMS Physician Fee Schedule lookup tool directly, since fee schedule updates happen annually and that figure won't hold indefinitely.

The code isn't strictly time-based, but documenting session length still matters for medical necessity and for surviving an audit down the line. Sessions typically run 45 to 60 minutes. Each patient's individual note should record their actual participation window rather than the group's total session time, and medical necessity documentation should reflect what that patient actually received.

The scope limits on 90853 matter just as much as what it covers. It cannot be used for support groups or purely educational sessions, it doesn't cover individual, family, or multiple-family therapy, which are billed under separate CPT codes, and it doesn't cover medication management or diagnostic evaluation, which get billed separately. Add-on codes may apply in certain sessions depending on payer policy, and it's worth checking rather than assuming. As of 2025, billing 90853 requires documented proof of medical necessity plus compliance with whatever payer-specific rules apply, and the participant list for each telehealth session needs to be part of the record, along with confirmation that the platform met telehealth security and privacy standards.

Confidentiality and HIPAA obligations that are unique to group telehealth settings

HIPAA doesn't relax for group telehealth. Encryption, access control, and audit logging on the platform are baseline requirements, the same as they'd be for a solo visit. What's different is a problem that simply doesn't exist in one-on-one telehealth: every participant in a group session can hear or see what every other participant discloses. That's not a HIPAA violation by itself, since group treatment settings have always involved some degree of shared disclosure, but it is a distinct privacy exposure that needs its own documentation trail.

The practical fix, modeled in feasibility research conducted at a Baylor and Houston community clinic setting, is a written, signed group visit confidentiality form obtained from each participant individually, separate from the general clinical consent. That form does two things at once: it documents that each person understood and accepted the shared-disclosure nature of the group format, and it creates an audit trail that's distinct from, and additional to, the standard telehealth consent already being collected.

Substance use disorder group telehealth raises the stakes further. Records here fall under 42 CFR Part 2, which layers extra protection on top of standard HIPAA and requires written patient consent before disclosure, though a single consent can cover a range of future uses and disclosures once it's properly documented. This has gotten more relevant, not less, since a DEA rule published January 17, 2025, with an effective date ultimately set for December 31, 2025, now permits Schedule III through V opioid use disorder medication to be prescribed via telemedicine without requiring a prior in-person visit. That opens the door to more group SUD telehealth, which carries the most complicated consent documentation burden of any format discussed here. Platforms used for any of this need to be encrypted, require strong authentication, and come with a signed Business Associate Agreement between the practice and the vendor. No BAA, no session, regardless of how good the video quality is.

Pulling the layers together into a documentation workflow that holds up on audit

None of this works as a checklist completed once and forgotten. It's a sequence, split into before-the-visit and during-the-visit phases, and skipping a step in either phase creates a gap that shows up later, usually at the worst possible time.

Before the session starts: confirm provider licensure covers every state a participant is joining from, collect and document individual informed consent from each person, obtain the signed group confidentiality agreement separately from that consent, and confirm the platform meets HIPAA encryption standards with a BAA already in place. For Medicare behavioral health patients specifically, check in-person visit status against the current timeline, since that requirement is suspended through December 31, 2027 and reverts to the established-versus-new-patient split after that.

During the session: document each participant's location at the start, note the provider's location, record the platform and modality being used, and flag any modality change mid-session for the specific patient it affects. Track start time and, where relevant, individual participation windows for anyone joining late or leaving early. None of these steps take more than a minute or two per patient. But skip two or three of them across a busy group session, and the resulting note reads exactly like the kind of generic documentation that auditors flag first. The layers exist because the visit itself has layers. Documentation that ignores that structure isn't really documenting the visit that happened.