Use this guide as a structured review companion while working with your current ICD-10-CM, CPT, and HCPCS Level II code books. Concepts move from diagnosis coding foundations through E/M leveling, surgical and procedural CPT, modifiers, and compliance, ordered so earlier material supports later application. Each concept pairs a rule with a worked decision and a common error. Treat the examples as hypothetical practice, verify every code in your books, and confirm details against current official publications.
ICD-10-CM Conventions and Code Structure
1. Follow mandatory see references, but see also only when needed
Diagnosis coding begins in the Alphabetic Index: locate the main term and follow every mandatory see instruction, because the referenced term must be used to locate the code. A see also instruction merely points to another main term that may provide additional entries; it does not have to be followed when the original main term already provides the necessary code. Verify the candidate code in the Tabular List, where required characters and instructional notes are added.
Example: A note documents a pigmented lesion of the lip. The coder locates the main term, follows its see references to the entry that supplies the code, and verifies the full code in the Tabular List. A see also note pointing to a related main term is skipped because the original entry already yielded the code.
Mistake to avoid: Treating every see also note as mandatory and searching terms the original entry never required.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
2. Use the placeholder X to complete short codes needing a 7th character
When a code that requires a seventh character has fewer than six characters, the placeholder X must fill each empty position. Without the X, the code is invalid for reporting. The placeholder exists to reserve room for future expansion of the classification and applies wherever the Tabular List instructs.
Example: An injury code that requires a seventh character but has only five characters must be reported with the placeholder X filling the empty position so the code is valid for the claim.
Mistake to avoid: Omitting the X placeholder and submitting an invalid five-character code.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
3. Apply required 7th characters for the episode of care
Certain categories require a seventh character for every code within them, and the seventh character must always occupy the seventh position of the data field. For injuries, the seventh character typically identifies the episode of care, so coders must confirm which encounter episode the documentation represents before assigning the code.
Example: An open wound of the nose is coded with a seventh character identifying the initial episode of care, such as the episode character appended to the nose wound code in the practice case.
Mistake to avoid: Reporting an injury code without the required episode-of-care seventh character.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
4. Distinguish NOS from NEC in dermatology diagnosis coding
NOS, meaning not otherwise specified, is the equivalent of unspecified and is chosen when documentation lacks the detail for a more specific code. NEC, meaning not elsewhere classifiable, points to an other specified code and is chosen when specific information exists but no unique code for it exists in the classification.
Example: A provider documents a specific dermatitis variant with no dedicated code, so the other specified dermatitis code is assigned rather than the unspecified dermatitis code used when detail is missing.
Mistake to avoid: Selecting an other specified code when the documentation simply lacks detail.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
5. Tell Excludes1 from Excludes2 before combining codes
An Excludes1 note means the excluded code is never reported with the code above it, because the two conditions cannot coexist, such as congenital versus acquired forms. An Excludes2 note means the excluded condition is not part of the code but the patient may have both, so both codes may be reported together when documented.
Example: A code carries an Excludes2 note for a co-occurring skin condition. Because the patient has both, the coder reports the code and the excluded code together on the same encounter.
Mistake to avoid: Treating an Excludes2 note as a prohibition and dropping a documented coexisting condition.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
6. Interpret with as a presumed link and and as or
The word with in a title, index entry, or instructional note is interpreted as associated with or due to, and the classification presumes a causal relationship even without explicit provider linkage, unless documentation clearly states the conditions are unrelated. The word and in a title means and or or, so either presentation qualifies for the code.
Example: The classification links a skin ulcer with a documented related condition through the term with, so the coder reports the pair as related even though the provider did not explicitly connect them in the note.
Mistake to avoid: Requiring explicit provider linkage for conditions the classification already presumes related.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
Dermatology Diagnosis Selection and Sequencing
7. Code nevi by type through the Alphabetic Index
Nevus is not coded from a single family. The coder must start in the Alphabetic Index under the nevus main term and follow the subtype: a malignant nevus reference directs to melanoma, while a dysplastic nevus reference directs to benign neoplasm of skin. The documented nevus type determines the path, and the Tabular List confirms the final code.
Example: Documentation of a dysplastic nevus directs the coder to the benign skin neoplasm entry, while a malignant nevus reference redirects to melanoma, producing entirely different code assignments.
Mistake to avoid: Assigning one generic nevus code regardless of the documented subtype.
Reference: AAPC CPCD study guide sample
8. Do not code uncertain diagnoses in outpatient reporting
For outpatient encounters, diagnoses documented as probable, possible, suspected, likely, rule out, consistent with, or similar uncertainty terms are not coded. Code instead to the highest level of certainty known, such as documented signs, symptoms, or abnormal findings, and report the confirmed diagnosis only once the provider establishes it. This outpatient rule differs from inpatient discharge coding, where an uncertain diagnosis qualified at discharge is coded as if it existed.
Example: A provider suspects melanoma on examination but pathology is pending. For this office encounter the coder reports the documented pigmented lesion, not melanoma, and switches to the cancer code only after pathologic confirmation.
Mistake to avoid: Reporting suspected skin cancer before pathology confirms the diagnosis — or assuming the outpatient rule also governs inpatient discharge coding.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
9. Drop integral symptoms, keep nonintegral ones, once a diagnosis is confirmed
When no definitive diagnosis has been established, sign and symptom codes are appropriate. Once a definitive diagnosis is known, symptoms routinely associated with that disease process are integral and not reported separately. Additional signs and symptoms that are not routinely associated with the confirmed condition are still coded when documented, such as when the provider documents reason to believe a symptom stems from a separate problem.
Example: A patient presents with spreading redness and warmth and the provider diagnoses cellulitis; only cellulitis is reported because those findings are integral to it. The same note documents painful oral ulcerations the provider believes are unrelated to the cellulitis, so that symptom is reported in addition.
Mistake to avoid: Stacking integral symptom codes alongside the confirmed diagnosis — or dropping a documented nonintegral symptom because a diagnosis exists.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
10. Report the postoperative diagnosis when it differs from preoperative
When both a preoperative and a postoperative diagnosis are documented and they differ, the postoperative diagnosis is always the one reported. The postoperative diagnosis reflects what was actually found and treated, so it is the most accurate reflection of the encounter and the correct basis for demonstrating medical necessity of the procedure.
Example: The preoperative diagnosis reads skin lesion while the postoperative diagnosis reads basal cell carcinoma. The coder reports the carcinoma diagnosis because it reflects the final finding.
Mistake to avoid: Coding the preoperative diagnosis when the postoperative finding is different.
Reference: AAPC CPCD study guide sample
11. Sequence the first-listed diagnosis as chiefly responsible for the services
The first-listed outpatient diagnosis is the condition shown in the record to be chiefly responsible for the services provided, which usually reflects the chief complaint but is settled after reviewing the whole encounter. Coexisting chronic conditions are reported as secondary diagnoses when they are treated or become an active factor in care, including conditions that affect treatment or management without a separate intervention. Conditions that no longer exist or do not pertain to the visit are not reported, though history codes may be used as secondary codes when the historical condition impacts current care.
Example: A patient presents for an acne flare that is evaluated and treated; acne is first-listed. The provider also adjusts the patient's stable psoriasis regimen at the same visit, so psoriasis is reported secondary because it affected management. A resolved childhood eczema with no bearing on the encounter is omitted.
Mistake to avoid: Listing historical or resolved conditions that do not pertain to the encounter — or dropping a chronic condition that actively shaped treatment decisions.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
12. Sequence acute before chronic only when separate subentries exist
When the same condition is documented as both acute or subacute and chronic, first check the Alphabetic Index: both codes are assigned, acute first, only when separate acute and chronic subentries exist at the same indentation level. When the classification provides a single code that captures the documented combination, that code alone is assigned. The coder never assumes an exacerbation requires two codes without confirming the index structure.
Example: A note documents dermatitis in both an acute flare and a chronic phase. The coder checks the Index: where separate acute and chronic subentries exist at the same indentation level, both codes are reported with the acute code first; where one code describes the combined condition, only that code is assigned.
Mistake to avoid: Automatically reporting two codes for an acute-on-chronic presentation without confirming separate index subentries.
Reference: AAPC CPCD study guide sample; CDC ICD-10-CM Official Guidelines, FY 2027
E/M Leveling Foundations and MDM
13. Apply the current E/M guidelines, not the retired 1995 and 1997 rules
In 2021 the AMA revised the office and other outpatient code descriptors and added guidelines specific to those codes. In 2023 the revised framework expanded to other E/M categories, eliminating the 1995 and 1997 documentation guidelines. Current leveling therefore rests on the CPT E/M guidelines printed in the current code book, not the retired key-component systems.
Example: A coder trained under the old rules counts exam elements to level a visit. Under current guidance, the level comes from medical decision making or total time instead.
Mistake to avoid: Leveling visits with the retired 1995 or 1997 documentation guidelines.
Reference: AAPC CPCD study guide sample
14. Level office and other outpatient visits by MDM or total time
For office and other outpatient E/M services, the level is selected based on either the level of medical decision making or the total time for services performed on the date of the encounter, chosen case by case. Whichever method is used, documentation must support the medical necessity of the visit, and payers may have regulations on when MDM or total time is used. The coder applies one method consistently for a given visit rather than blending elements of both.
Example: An office visit qualifies as moderate by medical decision making, and the note also documents sufficient total time. The coder selects the code using one of the two methods for that visit, not a blend of MDM elements and time.
Mistake to avoid: Mixing MDM elements and time elements to build a single code level.
Reference: AAPC CPCD study guide sample
15. Document history and exam, but do not level by them
For most E/M services the provider performs history, exam, and medical decision making, and the guidelines describe a medically appropriate history and/or physical examination, when performed, as included in the service. History and exam should still be documented, but they are not used in determining the level of the code, which depends on MDM or time.
Example: A note contains a brief, focused exam but moderate-complexity decision making. The visit is leveled moderate, because the exam extent does not raise or lower the code.
Mistake to avoid: Selecting a higher code because the documented exam was extensive.
Reference: AAPC CPCD study guide sample
16. Weigh the three MDM components using CPT definitions
Medical decision making is determined from three components: the number and complexity of problems addressed at the encounter, the amount and complexity of data reviewed and analyzed, and the risk of complications or morbidity or mortality of patient management. The CPT code book definitions for each component must be understood and applied using the documented facts of the visit.
Example: A dermatology note addresses several stable problems, reviews outside pathology slides, and selects prescription drug management. The coder weighs all three elements to pick the level.
Mistake to avoid: Leveling from the chief complaint without reading the entire note.
Reference: AAPC CPCD study guide sample
17. Count only problems actually addressed at the encounter
A problem counts toward the number and complexity of problems only when it is addressed within that encounter. When documentation merely states a condition exists and is being treated by another provider, it does not count. It counts only if additional documentation shows assessment or care coordination regarding that diagnosis beyond the statement of outside management.
Example: A note lists diabetes managed by the patient's internist with no further comment. That condition is not counted toward the problems addressed, unlike a condition the dermatologist assesses directly.
Mistake to avoid: Counting every chronic condition listed in the history toward the level.
Reference: AAPC CPCD study guide sample
18. Do not let the final diagnosis alone drive the level
Comorbidities and underlying diseases are not considered in leveling unless they are addressed and increase the amount or complexity of data reviewed or the risk of management. The final diagnosis alone does not determine complexity or risk, because extensive evaluation may be needed to conclude that symptoms do not represent a highly morbid condition. Multiple low-severity problems may aggregate into higher risk.
Example: A lesion proves benign after extensive evaluation of concerning features. The coder resists assigning a high level based on the feared diagnosis, since the final diagnosis alone does not set complexity.
Mistake to avoid: Automatically assigning a high level because the final diagnosis sounds serious.
Reference: AAPC CPCD study guide sample
E/M Special Rules and Visit Types
19. Recognize that MDM does not apply to the minimal office visit code
The minimal established patient office code is reported for services that typically do not require the presence of a provider. Because no provider decision making is inherent in such services, the concept of medical decision making does not apply to this code, and coders should not attempt to attach an MDM level when selecting it.
Example: A medical assistant removes sutures per an established protocol without any provider involvement. The service maps to the minimal code, and no MDM level is assigned to it.
Mistake to avoid: Trying to assign a straightforward or higher MDM level to the minimal code.
Reference: AAPC CPCD study guide sample
20. Measure management risk, not the risk of the condition itself
Risk of complications and morbidity or mortality of patient management is distinct from the risk of the condition itself. Risk is measured from the management decisions made by the reporting provider, considering the patient's probability of illness, complications, or death between this encounter and the next planned one. Minor surgery without identified patient or procedure risk factors, or over-the-counter medication, is low risk.
Example: A healthy patient undergoes lesion excision with no identified risk factors, and over-the-counter wound care is recommended. The risk component is low despite the surgical setting.
Mistake to avoid: Equating the severity of the diagnosis with the risk component.
Reference: AAPC CPCD study guide sample
21. Confirm all three consultation requirements before coding one
CPT permits a consultation code only when three conditions are met: a request for opinion or advice about a specific problem comes from a physician, other qualified health care professional, or appropriate source; the consulting provider may initiate diagnostic or therapeutic services; and a written report is sent back to the requesting provider. Missing any element, such as the written report, disqualifies the consult code.
Example: A primary care physician requests a dermatologist's opinion on a puzzling eruption, the dermatologist evaluates and treats, and a written report goes back to the requester. All three elements support a consult code.
Mistake to avoid: Coding a consultation when no written report was sent to the requester.
Reference: AAPC CPCD study guide sample
22. Remember who may not request a consultation
Patients, family members, attorneys, insurance companies, and social workers cannot request a consultation under CPT rules. Encounters arising from these sources must be reported with non-consultation E/M codes, typically office or outpatient visit codes. The requester's identity is therefore a threshold question before any consultation code is considered.
Example: A patient schedules a dermatology visit on her own to have moles checked. The encounter is reported with a standard office visit code, not a consultation code.
Mistake to avoid: Coding a self-referred patient visit as a consultation.
Reference: AAPC CPCD study guide sample
23. Report a same-day E/M only when significant and separately identifiable
An E/M reported with a minor procedure on the same day must be significant and separately identifiable beyond the usual pre- and post-procedure work. A patient arriving for a planned minor procedure typically generates only the procedure code, and examining the surgical site alone never justifies a separate E/M. The separate E/M does not have to involve a different diagnosis: when the same condition requires evaluation and management beyond the procedure's global work, such as initiating prescription therapy, the E/M is reportable with modifier 25 appended to the E/M code.
Example: A patient with actinic keratoses has two hypertrophic lesions destroyed by cryosurgery, and the provider also prescribes a topical chemotherapy regimen for the remaining lesions on the face. The destruction and a significant, separately identifiable E/M are both reported, with modifier 25 appended to the E/M code, even though the diagnosis code is the same for both services.
Mistake to avoid: Billing an E/M for routine pre- and post-procedure work — or withholding a legitimate E/M because it shares the procedure's diagnosis.
Reference: AAPC CPCD study guide sample; American Academy of Dermatology: Modifier 25 educational tool
24. Map MDM levels across new and established patient code families
Office visit codes pair by MDM level across the new and established patient families: straightforward, low, moderate, and high map to corresponding codes in each family. The same MDM level therefore yields different code numbers depending on whether the patient is new or established, so patient status must be settled before code selection.
Example: Moderate MDM supports the mid-level new patient code for a first visit and the corresponding mid-level established patient code at a follow-up, because the MDM level is identical.
Mistake to avoid: Selecting an established patient code for a new patient with the same MDM.
Reference: AAPC CPCD study guide sample
Physician, Staff, and Medicare Billing Rules
25. Exclude bundled pre- and post-procedure elements before leveling a same-day E/M
The minor procedure global package includes review of relevant past medical history, assessment of the lesion or problem area, formulation and explanation of the clinical diagnosis, review and explanation of the procedure, discussion of alternative treatments, informed consent, postoperative care instructions, and discussion of further treatment and follow-up. Obtaining history, examining the treatment site, and deciding to perform the minor surgery are likewise not separately reportable. When a same-day E/M qualifies as significant and separately identifiable, these bundled elements are excluded before determining the level of the reportable E/M.
Example: A note for a lesion destruction also documents evaluation of a separate eruption with a new prescription. Leveling the E/M, the coder counts only the eruption evaluation — the lesion history, site exam, consent, and procedure discussion belong to the destruction's global package and are struck.
Mistake to avoid: Leveling the same-day E/M using history, site exam, and consent elements that the procedure's global package already includes.
Reference: American Academy of Dermatology: Modifier 25 educational tool
26. Track modifier 25 utilization against peers to manage audit exposure
Appropriate modifier 25 use varies with patient mix and practice patterns, so some physicians legitimately use it more often than others. However, a provider whose usage significantly differentiates them from their peers may be treated as an outlier by payers and targeted for audits even when the use is appropriate. Practices should monitor their modifier 25 patterns and ensure every appended modifier is backed by documentation of a significant, separately identifiable service.
Example: A dermatologist's rate of same-day E/M services reported with minor procedures runs far above the peer average. A sample review shows each note documents distinct evaluation and management beyond the procedures' global work, and the practice retains that documentation to defend the pattern if a payer audits.
Mistake to avoid: Ignoring utilization patterns because each individual claim appears compliant.
Reference: American Academy of Dermatology: Modifier 25 educational tool
27. Report physician evaluation separately when phototherapy codes carry no physician work
Phototherapy codes have no embedded physician work, and their global package includes evaluation by a nurse. Any significant physician evaluation of the patient — whether related to the disease being treated with phototherapy or to another disease process — is not included in the phototherapy codes and is separately reportable. The coder therefore reads for who performed the evaluation: nurse-only checks stay bundled, while documented physician assessment supports a separate E/M.
Example: A patient receiving ultraviolet phototherapy for psoriasis is evaluated by the physician at set intervals per protocol; the physician assesses response, adjusts the treatment dose, and reviews the topical regimen. The physician evaluation is reported as an E/M alongside the phototherapy code, because the phototherapy code's package covers only nursing evaluation.
Mistake to avoid: Treating the phototherapy code's global package as covering the physician's interval assessments.
Reference: American Academy of Dermatology: Modifier 25 educational tool
28. Confirm MAC and payer policy before appending modifier 25
Private insurers and specific Medicare carriers may apply more or less restrictive modifier 25 guidelines than the CPT and CMS baseline, and individual Medicare Administrative Contractors may or may not require appending modifier 25 to new patient E/M codes. Before submitting a same-day E/M with a minor procedure, the coder confirms the specific payer's or MAC's convention rather than assuming one approach applies everywhere.
Example: A new patient E/M is reported with a same-day minor procedure. Before submission the coder verifies the MAC's published policy: where the MAC requires modifier 25 on new patient E/M codes it is appended, and where a private payer's guidelines differ the claim follows that payer's rule.
Mistake to avoid: Applying one payer's modifier 25 convention to every claim regardless of the payer.
Reference: American Academy of Dermatology: Modifier 25 educational tool
29. Use an ABN before potentially non-covered Medicare services
An Advance Beneficiary Notice is used with Medicare beneficiaries when a service may not be covered, so the patient is informed in advance and accepts potential financial responsibility. Proper ABN use is a tested competency: the notice must be appropriately delivered before the service, not retroactively, for the practice to shift liability to the patient.
Example: A Medicare patient seeks removal of a lesion judged cosmetic. The practice has the patient sign an ABN beforehand so the patient accepts financial responsibility if coverage is denied.
Mistake to avoid: Providing a possibly non-covered service without a prior ABN and then billing the patient.
Reference: AAPC CPCD study guide sample
30. Do not assume Medicare coverage from the patient's age
For the certification exam, individual payer rules are not considered unless the case or question specifically states the patient has Medicare. Absent that statement, follow CPT guidelines. This matters because CMS no longer reimburses consultation codes, so Medicare cases are reported with office or hospital care codes instead, while non-Medicare cases follow CPT.
Example: A question describes a 70-year-old with commercial coverage. The coder applies CPT consultation rules rather than assuming the CMS non-payment policy applies to her.
Mistake to avoid: Applying the CMS consultation payment rule to a patient not stated to have Medicare.
Reference: AAPC CPCD study guide sample
CPT Surgical Foundations in Dermatology
31. Sequence the highest-valued procedure first, with add-ons following their primary
When multiple procedures are performed, the most complex or labor-intensive procedure — the code carrying the highest relative value units — is listed first. Add-on codes, such as those used for additional biopsy techniques in the same encounter, are not sequenced as independent procedures: they are reported in addition to their primary code. Reading the note to identify the major service, then attaching add-ons to their primaries, produces the correct claim order.
Example: A provider performs a large excision on the back and a separate biopsy of a lesion on the arm. The higher-valued excision code is listed first, and any add-on codes reported for the session follow their primary codes rather than being sequenced by value.
Mistake to avoid: Sequencing procedure codes chronologically — or listing an add-on code as a standalone primary procedure.
Reference: AAPC CPCD study guide sample
32. Anchor code selection in documented skin layer depth
Dermatology procedure codes are built around skin anatomy, with procedures classified by the layers involved, from epidermis and dermis to subcutaneous tissue and deeper structures. The coder must read the operative note for the documented depth of tissue removal or repair, because depth drives code selection across biopsies, debridements, and excisions.
Example: A debridement note specifies involvement down to the subcutaneous tissue. The coder selects the depth-appropriate code only after confirming which layers the documentation actually supports.
Mistake to avoid: Choosing a depth-based code without confirming the documented tissue layer.
Reference: AAPC CPCD study guide sample
33. Support complicated I&D with documented drains, packing, or surgical closure
The distinction between simple or single incision and drainage and complex or multiple I&D rests on the documentation, and payers vary in how that documentation should be expressed. Documentation that can support the complicated code includes placement of a drain, gauze strip packing to allow continued drainage, or a requirement for surgical closure. The coder reads the note for these features rather than assuming a diagnosis like abscess implies complexity.
Example: An abscess note describes the cavity packed with gauze strip to maintain drainage; the documented packing supports the complicated I&D code. A companion note describing simple incision, expression of pus, and warm compresses without packing, drain, or closure supports the simple code.
Mistake to avoid: Defaulting to the simple I&D code despite documented packing or drain placement — or selecting the complicated code from the diagnosis alone.
Reference: AAPC CPCD study guide sample
34. Sum same-depth debridement wounds and separate different depths
Debridement codes are selected by the size and depth documented. When multiple wounds are debrided, the surface areas of wounds debrided to the same depth are added together and reported as one code for the combined size. Wounds debrided to different depths are reported separately, with the deeper debridement listed first and a distinct-service modifier distinguishing the additional depth.
Example: Two wounds on the left thigh, measuring 3 and 8 square centimeters, are both debrided through the dermis and subcutaneous tissue; the documented debrided areas are summed to 11 square centimeters and one code is reported for that depth. If instead the 8 square centimeter wound had extended to muscle, the deeper debridement code would be listed first with the subcutaneous-level code distinguished by a modifier.
Mistake to avoid: Reporting each same-depth wound as its own debridement code — or summing wounds debrided to different depths.
Reference: AAPC CPCD study guide sample
35. Report one primary biopsy code plus add-ons for other techniques
When more than one biopsy is performed using different techniques during the same encounter, only one primary biopsy code is reported, and the additional techniques are reported with their add-on codes. The coder must consult the CPT biopsy guidelines to see how each technique combination is reported rather than billing two full primary codes for one session.
Example: A provider performs a punch biopsy and a shave biopsy during one encounter. One primary biopsy code is reported with the add-on code for the second technique.
Mistake to avoid: Reporting two full primary biopsy codes for different techniques in one encounter.
Reference: AAPC CPCD study guide sample
36. Choose shaving codes for tangential lesion removal, not excision
Shaving of epidermal or dermal lesions is a distinct CPT family from lesion excision. Shaving removes the lesion without the full-thickness removal that defines excision, so the documented technique determines the family. Reading the operative description of how the lesion was removed is the deciding step before selecting between these code sets.
Example: A note describes tangential removal of an epidermal lesion without full-thickness cutting. The coder selects the shaving code family rather than an excision code.
Mistake to avoid: Coding a tangential shave removal as a full-thickness excision.
Reference: AAPC CPCD study guide sample
Excision, Repair, and Grafting
37. Let pathology determine benign versus malignant excision coding
Lesion excision codes are divided into benign and malignant families, and the correct family depends on the documented diagnosis, typically established by pathology. The coder must wait for the pathologic or provider-documented characterization before choosing between the families, since the same surgical act codes differently depending on the lesion's nature.
Example: An excised lesion's pathology returns basal cell carcinoma. The coder assigns the malignant excision family rather than the benign family used before pathology was known.
Mistake to avoid: Finalizing a benign excision code before pathology characterizes the lesion.
Reference: AAPC CPCD study guide sample
38. Skin Excision: Simple Closure Versus Additional Repair
Simple closure is included in the skin-lesion excision service. When the documented repair is intermediate or complex, a separate repair code may also be reported. Do not infer that every closure of an excision defect is bundled. Select the repair using its documented classification, anatomic site and repaired length; the lesion diameter used for the excision is a different measurement.
Example: A benign lesion is excised from the forearm and the record documents a medically necessary intermediate repair measuring 4.2 cm. The coder evaluates both the excision and the intermediate repair for reporting. If the same excision instead requires only a simple closure, that closure is included in the excision service.
Mistake to avoid: Bundling all closure work into an excision regardless of repair classification, or using the lesion diameter in place of the documented repair length.
Reference: AAPC CPCD study guide sample; AAFP: Skin excision and separate repair coding
39. Separate adjacent tissue transfer from skin graft reconstruction
Adjacent tissue transfer and flap codes describe rearrangement of local tissue to close a defect, while skin graft codes describe tissue harvested from a distant donor site and transplanted. The operative note's reconstructive method determines the family, and the surgeon's reasoning about tissue availability often clarifies which approach was actually taken.
Example: A nasal defect lacks adequate surrounding tissue for a local flap, so the surgeon performs a skin graft instead. The coder selects graft codes, not adjacent tissue transfer codes.
Mistake to avoid: Coding a flap when the note documents grafting from a donor site.
Reference: AAPC CPCD study guide sample
40. Code full-thickness grafts by recipient site and size, with donor closure included
Full-thickness free skin grafts are coded by the recipient site and the size of the defect repaired, not by where the skin was harvested. The graft code includes direct closure of the donor site, so the donor closure is not separately reported when the graft code is assigned. The coder identifies the recipient site and the documented defect size, then selects the graft code for that site and size family.
Example: A 2.4 square centimeter full-thickness graft harvested from the postauricular area is inset into a cheek defect. The coder selects the full-thickness graft code for the cheek recipient site at that size, and the direct closure of the postauricular donor site is not reported separately.
Mistake to avoid: Selecting the graft code by donor site — or separately reporting the donor site closure the graft code includes.
Reference: AAPC CPCD study guide sample
41. Distinguish split-thickness from full-thickness graft harvesting
Skin grafts are classified as split-thickness or full-thickness depending on how much of the dermis is harvested. The operative description of the harvest determines the family, and details such as defatting a full-thickness graft before inset are consistent with that family. The coder must read the harvest technique rather than assume the graft type.
Example: A graft is harvested and deliberately defatted before inset, consistent with full-thickness harvesting. The coder selects the full-thickness family rather than a split-thickness code.
Mistake to avoid: Selecting a split-thickness code when the note describes full-thickness harvest.
Reference: AAPC CPCD study guide sample
42. Report the linear repair after Mohs by closure complexity, site, and length
When Mohs excision is completed and the defect is closed with a linear repair, both the Mohs code and the repair code are reported for the encounter. The repair is selected from the repair family using the documented closure complexity, the site, and the total suture line length. The consultative discussion of the disease and the informed consent are included in the procedures' global work, so only the procedures are reported.
Example: After a single-stage Mohs excision of a carcinoma on the forehead, the surgeon closes the defect with a layered linear closure measuring 5 centimeters. Both the Mohs code and the intermediate repair code for that site and length appear on the claim; the extensive preoperative discussion supports no separate E/M.
Mistake to avoid: Bundling the linear closure into the Mohs code — or selecting the repair without the documented suture line length.
Reference: American Academy of Dermatology: Modifier 25 educational tool
Advanced Dermatology Procedures
43. Report Mohs surgery separately from the reconstruction
Mohs micrographic surgery is a staged, margin-controlled excision technique reported separately from reconstruction. When one physician performs the Mohs excision and another performs the closure, each physician reports only the work they performed, as the practice case shows with a graft coded by the reconstructive surgeon after another surgeon's Mohs excision.
Example: One surgeon performs Mohs excision of a nasal carcinoma and another surgeon closes the defect with a graft the same morning. Each reports the work that surgeon personally performed.
Mistake to avoid: Bundling the reconstructive closure into the Mohs surgeon's claim.
Reference: AAPC CPCD study guide sample
44. Let the documented technique choose destruction versus excision
Destruction codes describe eliminating the lesion in place with a destructive modality, such as liquid nitrogen or electrodesiccation and curettage. Excision codes describe cutting the lesion out with a full-thickness removal. The family is chosen from the technique the note describes, not from whether a specimen happens to be sent: an excision documented as cut out remains an excision even when no pathology is submitted, and an in-place destruction is a destruction even if curettings are discarded.
Example: A verrucous lesion on the hand is destroyed with liquid nitrogen; the destruction code family applies. A separate note describes a lesion on the back cut out with a scalpel in an ellipse with margins; the excision family applies regardless of whether the specimen goes to pathology.
Mistake to avoid: Coding an excision as destruction because no specimen was sent — or coding a destruction as an excision because curettings were obtained.
Reference: AAPC CPCD study guide sample; American Academy of Dermatology: Modifier 25 educational tool
45. Report acne cryotherapy and chemical exfoliation by modality performed
Cryotherapy and chemical exfoliation for acne are modalities with their own CPT reporting, distinct from surgical acne procedures. The coder must identify which modality the note describes, because the technique performed, not the diagnosis alone, determines whether the exfoliation or cryotherapy reporting applies to that acne encounter.
Example: A patient undergoes a chemical exfoliation procedure for acne scarring. The coder selects the exfoliation-appropriate code family rather than an excisional acne surgery code.
Mistake to avoid: Forcing excisional or unlisted codes for a chemical exfoliation service.
Reference: AAPC CPCD study guide sample
46. Report additional destroyed lesions with the add-on destruction code
When multiple lesions of the same type are destroyed in one session, the first lesion is reported with the primary destruction code and each additional lesion is reported with the add-on code, billed per additional lesion. The coder counts the lesions the note actually documents as destroyed and reports the primary code plus the correct number of add-on units.
Example: Four actinic keratoses on the forehead are all destroyed with cryosurgery in one session. The claim reports the primary actinic keratosis destruction code for the first lesion and the add-on destruction code with three units for the remaining lesions.
Mistake to avoid: Reporting each destroyed lesion as a separate primary code — or billing add-on units for lesions the note does not document as destroyed.
Reference: American Academy of Dermatology: Modifier 25 educational tool
47. Bundle scheduled injection-visit evaluation into the injection global package
The global package for intralesional injections includes evaluation of previously treated areas and creation of the treatment regimen for the day. At scheduled injection visits, the provider's assessment of response, atrophy, and new lesions and the customization of volume, concentration, and injection pattern are all part of the injection service, so only the injection code — with the drug code — is reported, without a separate E/M.
Example: A patient with keloids receives scheduled intralesional steroid injections. At each visit the provider checks the treated areas for response and flattening, decides the volume and concentration, and performs the injections; only the injection code and the drug code are reported for that encounter.
Mistake to avoid: Appending an E/M to every scheduled injection visit for the treatment-area evaluation the injection's global package already includes.
Reference: American Academy of Dermatology: Modifier 25 educational tool
48. Bundle same-day Unna boot application with debridement
Unna boot application is reported with its compression dressing code, but when the boot is applied on the same date of service as the debridement, only the debridement is reported and the boot application is included. When the boot is applied on a different date of service, it can be reported — but separate reporting still requires documentation of the service and support for its medical necessity, so the coder verifies the note for that date before billing it.
Example: Debridement is performed on Monday and the Unna boot is applied Wednesday. Because the dates differ, the boot application is separately reportable, and the coder confirms the Wednesday note documents the application and the reason it was needed before submitting the claim.
Mistake to avoid: Billing the Unna boot on the same date as the debridement — or reporting a different-date application whose note does not document the service.
Reference: AAPC CPCD study guide sample
Modifiers and Multiple-Procedure Reporting
49. Use the distinct procedural service modifier for same-code excisions at different sites
When multiple excisions are reported with the same CPT code, the claim cannot by itself show that separate lesions were treated, so the distinct procedural service modifier is appended to identify procedures performed at different sites. The modifier asserts that the repeated code represents genuinely distinct procedures, so the documentation must establish separate lesions before it is appended. Some payers require this modifier instead of the multiple-procedure modifier wherever the latter would otherwise apply.
Example: Two excisions at different sites are reported with the same excision code. The coder confirms the note documents two separate lesions, then appends the distinct procedural service modifier so the repeat code is read as two sites rather than a duplicate charge.
Mistake to avoid: Appending the multiple-procedure modifier to repeated identical excision codes — or appending the distinct service modifier without documentation of separate lesions.
Reference: AAPC CPCD study guide sample
50. Apply the multiple-procedure modifier to different-code excisions without bundling conflicts
When multiple excisions are reported with different CPT codes, the codes themselves already distinguish the lesions by site and size, so the multiple-procedure modifier is the appropriate flag for multiple-procedure payment adjustment — provided no bundling conflict exists between the codes. Add-on codes are instead reported in addition to their primary code and are not treated as a second procedure for this purpose. Because some payers require the distinct service modifier instead, the coder verifies the payer's preference before submission.
Example: Excisions of different sizes at different sites are reported with two different excision codes and no bundling edit between them. The multiple-procedure modifier is appended to the second procedure; an add-on code from the same encounter is simply reported in addition to its primary.
Mistake to avoid: Using the distinct service modifier where different codes already separate the lesions — or appending the multiple-procedure modifier where a bundling conflict calls for the distinct service modifier.
Reference: AAPC CPCD study guide sample
51. Adjust modifier choice when payer policy overrides the general rule
Some payers require the distinct procedural service modifier instead of the multiple-procedure modifier for additional procedures. The coder should know both the general rule and this payer variation, applying the exam rule of thumb when payer policy is not specified: the distinct service modifier when procedures are bundled or the same code repeats, and the multiple-procedure modifier when different codes are reported without bundling conflicts.
Example: A payer policy requires the distinct service modifier wherever the multiple-procedure modifier would otherwise apply. The coder follows that payer's preference on that claim while retaining the general rule.
Mistake to avoid: Applying one payer's modifier preference universally across all claims.
Reference: AAPC CPCD study guide sample
52. Support the increased procedural service modifier with documentation
The increased procedural services modifier reports work that is substantially greater than usually required for the code, and the documentation must support the increased work. The coder must find specific evidence in the note of the additional effort before appending it, since the modifier is a documentation-driven claim, not a routine add-on for difficult-feeling cases.
Example: A closure takes substantially longer and requires materially more work than the code's usual service, and the note details why. The coder appends the increased service modifier with that support.
Mistake to avoid: Appending the increased service modifier for routine procedural difficulty.
Reference: AAPC CPCD study guide sample
53. Never report magnifying loupes separately
Magnifying loupes are never separately reported. CPT instructs not to use the operating microscope code for visualization with loupes or corrected vision, and loupes do not justify the increased service modifier because procedures using them are already characterized at that level of work. Loupe use therefore leaves the claim unchanged.
Example: A skin graft is performed using magnifying loupes. The coder reports no separate visualization code and no modifier, because loupes do not change reimbursement.
Mistake to avoid: Reporting the microscope code or an increased-service modifier for loupes.
Reference: AAPC CPCD study guide sample
54. Use HCPCS Level II for supplies and services outside CPT
HCPCS Level II codes report products, supplies, and services that fall outside CPT, and Level II has its own modifiers. The certification tests both CPT and HCPCS Level II modifier usage, so the coder must work both code sets and choose the correct system for the item being reported rather than stretching a CPT code to cover a non-CPT supply.
Example: A topical agent or supply used during a dermatology procedure has no CPT code. The coder locates the correct HCPCS Level II code rather than forcing a CPT option.
Mistake to avoid: Forcing a CPT code to report a supply that belongs in HCPCS Level II.
Reference: AAPC CPCD study guide sample
HIPAA Privacy and Professional Compliance
55. Define protected health information across every medium
Protected health information is individually identifiable health information held or transmitted by a covered entity or its business associate in any form, whether electronic, paper, or oral. It includes demographic data and common identifiers relating to the individual's health, care, or payment for care. The Privacy Rule's protections therefore reach spoken disclosures, not just records.
Example: A staff member discusses a patient's biopsy results aloud in a waiting area. Because the conversation identifies the patient and reveals health information, it involves protected health information.
Mistake to avoid: Believing oral disclosures of patient information fall outside the Privacy Rule.
Reference: HHS Summary of the HIPAA Privacy Rule
56. Limit routine disclosures to the minimum necessary
Covered entities must make reasonable efforts to use, disclose, and request only the minimum protected health information needed for the intended purpose, and must implement policies supporting that limit. The standard does not apply to disclosures for treatment, to the individual, pursuant to an authorization, to HHS for enforcement, or when required by law, but routine billing and operations disclosures remain subject to it.
Example: A payer requests records to adjudicate a claim. The practice sends only the encounter documentation needed for that purpose rather than the entire chart.
Mistake to avoid: Sending an entire medical record when only the encounter documentation is needed.
Reference: HHS Summary of the HIPAA Privacy Rule
57. Permit treatment, payment, and operations uses without authorization
A covered entity may use and disclose protected health information without individual authorization for its own treatment, payment, and health care operations. Treatment includes consultation and referral between providers; payment includes obtaining premiums and reimbursement; operations include quality assessment, credentialing, audits, and compliance. Written consent for these purposes is optional under the Rule.
Example: A dermatology practice submits a claim with diagnosis codes to the payer for payment. No patient authorization is needed because the disclosure falls within payment activities.
Mistake to avoid: Obtaining patient authorization for routine claims submission.
Reference: HHS Summary of the HIPAA Privacy Rule
58. Require business associate agreements before sharing PHI with vendors
A business associate is a person or organization outside the covered entity's workforce that performs functions or services on its behalf involving protected health information, such as claims processing, billing, or data analysis. The covered entity must impose written safeguards through a business associate agreement and may not authorize any use or disclosure that would violate the Rule.
Example: A practice hires an outside billing service that processes claims containing patient information. A business associate agreement with required safeguards is executed before the work begins.
Mistake to avoid: Sharing patient information with a billing vendor before a business associate agreement exists.
Reference: HHS Summary of the HIPAA Privacy Rule
59. De-identify properly before unrestricted use of data
De-identified health information carries no restrictions under the Privacy Rule. De-identification occurs either through a formal determination by a qualified statistician or by removing the specified identifiers of the individual and of relatives, household members, and employers, which is adequate only if the entity has no actual knowledge that the remaining information could identify the individual.
Example: A practice strips names, geographic detail, dates, and the other listed identifiers from a procedure dataset. With no actual knowledge of re-identifiability, the data is used freely for internal analysis.
Mistake to avoid: Assuming that removing only the patient's name de-identifies a dataset.
Reference: HHS Summary of the HIPAA Privacy Rule
60. Obtain authorization before marketing uses of patient information
Marketing communications that encourage purchase or use of a product or service require written authorization, with an exception only for face-to-face communications and promotional gifts of nominal value. Communications for treatment, case management, or describing the entity's own health-related services are not marketing. When the entity receives remuneration for the marketing, the authorization must reveal that fact.
Example: A practice discloses patient information to a product company so it can send promotional communications, receiving payment in return. A valid authorization disclosing the remuneration is required first.
Mistake to avoid: Disclosing patient information to a marketing partner without a valid authorization.
Reference: HHS Summary of the HIPAA Privacy Rule
References and further reading
Source links checked on Oct 2, 2026.