Medicare Program Integrity Manual (Pub. 100-08), Ch. 3 § 3.3.2.4
Signature Requirements
Length: 1,512 wordsOfficial source
3.3.2.4 - Signature Requirements
(Rev.: 13008; Issued: 12-18-24; Effective: 01-17-25; Implementation: 01-17-25)
This section is applicable for Medicare Administrative Contractors (MACs), Unified
Program Integrity Contractors (UPICs), Supplemental Medical Review Contractors
(SMRC), Comprehensive Error Rate Testing (CERT), and Recovery Audit Contractors
(RACs), as indicated.
For medical review purposes, Medicare requires that the person(s) responsible for the
care of the beneficiary, including providing/ordering/certifying items/services for the
beneficiary, be identifiable as such in accordance with Medicare billing and coverage
policies, such as the Social Security Act §1815(a) and §1833(e). Medicare contractors
shall consider the totality of the medical record when reviewing for compliance with the
above.
Signatures are required upon medical review for two distinct purposes:
1. To satisfy specific signature requirements in statute, regulation, national coverage
determination (NCD) or local coverage determination (LCD); and
2. To resolve authenticity concerns related to legitimacy or falsity of the
documentation.
If a signature is required per statute, regulation, NCD or LCD:
-
Contractors shall use the totality of the record to determine if the
signature requirement, as outlined in statute, regulation, NCD, LCD is
met.
-
If the signature requirement is not met, and it is not an instance in
which the statute, regulation or NCD/LCD policy indicate that a
signature must be in place prior to a given event or a given date, the
attestation process may be used to try and resolve the issue. If the
attestation process does not resolve the issue, the contractor may pursue
a denial and/or any other appropriate corrective actions.
-
If the signature requirement is not met because the signature is illegible,
the signature log process may be used to try and resolve the issue.
If signature is not required per statute, regulation, NCD, or LCD:
-
Contractors shall determine if the signature is necessary to identify the
author of the record for the purposes of authenticity.
o If not, the contractor shall disregard the missing or illegible
signature and continue their review of all medical
documentation to determine if the claim meets coverage,
coding, and billing requirements.
o If there is not an explicit signature requirement, but in the
Contractor’s review of the totality of the record they have
authenticity concerns related to the legitimacy or falsity of the
documentation, they shall pursue the attestation, signature log,
denial, and/or fraud referral process, as appropriate.
NOTE: If review contractors find reasons for denial unrelated to signature requirements,
the reviewer need not proceed to signature authentication.
NOTE: When a scribe is used by a provider in documenting medical record entries (e.g.,
progress notes), CMS does not require the scribe to sign/date the documentation. The
treating physician/non-physician practitioner’s (NPP’s) signature on a note indicates that
the physician/NPP affirms the note adequately documents the care provided. We note this
type of practitioner concurrence is also required when using Artificial Intelligence (AI)
technology to capture the transcription of medical record entries.
NOTE: Conditions of participation (COP) are not conditions of payment.
A. Handwritten Signature
A handwritten signature is a mark or sign by an individual on a document signifying
knowledge, approval, acceptance, or obligation.
NOTE: Stamped signatures are not typically acceptable. CMS permits use of a rubber
stamp for signature in accordance with the Rehabilitation Act of 1973 in the case of an
author with a physical disability that can provide proof to a CMS contractor of his/her
inability to sign their signature due to their disability. By affixing the rubber stamp, the
provider is certifying that they have reviewed the document.
B.
Electronic Signatures
Providers using electronic systems shall recognize there is a potential for misuse or abuse
with alternate signature methods. For example, providers need a system and software
products that are protected against modification, etc., and should apply adequate
administrative procedures that correspond to recognized standards and laws. The
individual whose name is on the alternate signature method and the provider bear the
responsibility for the authenticity of the information for which an attestation has been
provided. Physicians are encouraged to check with their attorneys and malpractice
insurers concerning the use of alternative signature methods.
C. Signature Log
Providers will sometimes include a signature log in the documentation they submit that
lists the typed or printed name of the author associated with initials or illegible signature.
The signature log might be included on the actual page where the initials or illegible
signature are used or might be a separate document. Reviewers should encourage
providers to list their credentials in the log. However, reviewers shall not deny a claim for
a signature log that is missing credentials. Reviewers shall consider all submitted
signature logs regardless of the date they were created. Reviewers are encouraged to file
signature logs in an easily accessible manner to minimize the cost of future reviews
where the signature log may be needed again.
D. Signature Attestation Statement
Providers will sometimes include an attestation statement in the documentation they
submit. To be considered valid for Medicare medical review purposes, an attestation
statement must be signed and dated by the author of the medical record entry and must
contain sufficient information to identify the beneficiary.
Should a provider choose to submit an attestation statement, they may choose to use the
following statement:
“I, [print full name of the physician/practitioner], hereby attest that the medical record
entry for [date of service] accurately reflects signatures/notations that I made in my
capacity as [insert provider credentials, e.g., M.D.] when I treated/diagnosed the above
listed Medicare beneficiary. I do hereby attest that this information is true, accurate and
complete to the best of my knowledge and I understand that any falsification, omission,
or concealment of material fact may subject me to administrative, civil, or criminal
liability.”
Although this format is acceptable, the CMS currently neither requires nor instructs
providers to use a certain form or format. A general request for signature attestation shall
be considered a non-standardized follow-up question from the contractors to the
providers.
In situations where the contractor identifies the need for an attestation (to fulfill
a requirement or for authenticity purposes), the contractor shall ask if the
billing entity would like to submit an attestation statement or signature log
within 20-calendar days. (We note that this timeframe does not apply to the
CERT contractor(s)). The 20-calendar day timeframe begins on the date of the
telephone contact with the provider or on the date the request letter is received
by the provider. Note: if sent via a mail courier without receipt notification, the
contractor shall use the sent date plus anticipated mail processing timeframes to
calculate. If the biller submits a signature log or attestation that resolves the
signature issue, the reviewer shall consider the contents of the medical record
entry.
In cases where a reviewer has requested a signature attestation or log, the time
for completing the review is extended by 15-calendar days. (We note that this
timeframe does not apply to the CERT contractor(s)). This extension starts upon
receipt of the signature attestation or log.
The review contractors shall document all contacts with the provider and/or other
efforts to authenticate the signature.
Note: Contractors shall NOT consider attestation statements where there is no associated
medical record entry. Reviewers shall NOT consider attestation statements from someone
other than the author of the medical record entry in question (even in cases where two
individuals are in the same group, one should not sign for the other in medical record
entries or attestation statements). Reviewers shall consider all attestations that meet the
above requirements regardless of the date the attestation was created, except in those
cases where the regulations or policy indicate that a signature must be in place prior to a
given event or a given date. For example, if a statute, regulation, NCD or LCD states the
physician must sign the plan of care before therapy begins, an attestation can be used to
clarify the identity associated with an illegible signature. However, such attestation
cannot be used to “backdate” the plan of care.
E.
Signature Dating Requirements
For medical review purposes, if the relevant statute, regulation, NCD, and LCD are silent
on whether the signature must be dated, the review contractors shall ensure that the
documentation contains enough information for the reviewer to determine the date on
which the service was performed/ordered.
Example:
The claim selected for review is for a hospital visit on October 4th. The ADR
response is one page in length and comes from the hospital medical record
containing three (3) entries. The first entry is a physical therapy note dated October
4th. The second entry is a physician visit note that is undated and the third entry is a
nursing note dated October 4th. The reviewer should conclude that the physician visit
was conducted on October 4th.
F.
Potential Fraud Referrals
At any time, suspected fraud shall result in a referral to the UPIC for development. If
MAC, RAC, SMRC or CERT reviewers identify missing/illegible signature(s) that raise
legitimacy or falsity concerns, the reviewer shall consider referring to the appropriate
UPIC for further development and may consider referring to the Regional Office and
State Agency.