Work through these ten groups in order, because later topics assume the registration, privacy, and payer foundations built earlier. Each concept pairs a rule with a resolved example and a common error, so read the explanation, decide the example yourself before reading its outcome, and note the mistake line for review. Use the concepts as a self-check against official study materials rather than a substitute for them, and revisit any concept whose example you resolved differently.
Healthcare Industry and Regulatory Foundations
1. Covered Entity Scope
A covered entity under HIPAA is a health plan, a healthcare clearinghouse, or any provider that transmits health information electronically in connection with standard transactions such as claims or eligibility inquiries. Merely using email does not make a provider covered; the electronic activity must connect to a standard transaction.
Example: A small counseling practice mails paper claims only and uses email for scheduling; because it does not transmit standard transactions electronically, it is not a covered entity on those facts.
Mistake to avoid: Assuming any provider using email or computers automatically qualifies as a HIPAA covered entity.
Reference: HHS Summary of the HIPAA Privacy Rule
2. Business Associate vs Workforce Member
A business associate sits outside the covered entity's workforce and performs functions like claims processing, billing, data analysis, or utilization review involving identifiable health information, which requires a written agreement imposing safeguards. Staff employees are workforce members, not business associates, and need no such contract.
Example: A practice hires an outside billing company to submit claims; a business associate agreement with written safeguards must be signed before the company touches records, while the in-house biller needs none.
Mistake to avoid: Sending claims to an outside billing service without a signed business associate agreement in place.
Reference: HHS Summary of the HIPAA Privacy Rule; AAPC CPB study guide sample
3. Fraud vs Abuse
Fraud requires making false statements or misrepresenting facts to obtain payment or a benefit not deserved; abuse describes practices that create unnecessary costs to a program without necessarily proving intent. Intent to deceive separates the two, and the compliance response differs accordingly.
Example: Billing for drugs received free of charge is fraud because payment is claimed for something that carried no cost; routinely scheduling unnecessary follow-ups that inflate costs without false statements is abuse.
Mistake to avoid: Using fraud and abuse interchangeably when documenting a compliance concern or escalation.
Reference: AAPC CPB study guide sample
4. Reverse False Claims Liability
Under the False Claims Act, liability arises not only from submitting false claims for payment but also from acting improperly to avoid paying money owed to the government, such as knowingly retaining an overpayment that should be returned. Both directions of dishonesty carry consequences.
Example: A clinic identifies a Medicare overpayment from duplicate claims but delays repaying it and spends the funds; reverse false claims exposure arises even though no false claim was ever filed.
Mistake to avoid: Treating identified government overpayments as retained revenue rather than obligations to repay.
Reference: AAPC CPB study guide sample
5. Standardized Code Sets for Electronic Transactions
HIPAA adopted standard code sets for electronic transactions: CPT, HCPCS, ICD-10-CM, ICD-10-PCS, NDC, and CDT. Entities conducting covered transactions electronically must use these sets and the ASC X12 Version 5010 format, with NCPDP used for certain pharmacy transactions.
Example: A biller submits an electronic professional claim using local in-house service labels instead of HCPCS or CPT; the transaction fails standards and must be recoded before transmission.
Mistake to avoid: Sending electronic claims with proprietary or payer-local code labels in place of adopted standard code sets.
Reference: AAPC CPB study guide sample
6. Truth in Lending Act in Collections
The Truth in Lending Act protects consumers in dealings with lenders or creditors. A medical practice that charges finance charges on outstanding patient balances acts as a creditor and falls under the act's disclosure requirements, unlike practices that simply bill balances without adding finance charges.
Example: A clinic adds monthly finance charges to unpaid balances; because it functions as a creditor, required lending disclosures must be given to the patient before those charges begin.
Mistake to avoid: Imposing finance charges on past-due accounts without providing the consumer disclosures the act requires.
Reference: AAPC CPB study guide sample
Insurance Plan Models and Cost Sharing
7. HMO vs PPO Access Rules
An HMO typically requires members to maintain a primary care physician and obtain referrals before seeing specialists, controlling costs through gatekeeping. A PPO builds a network of doctors and hospitals with negotiated predetermined fees but lets members see network specialists without referrals and without maintaining a primary care gatekeeper.
Example: A member wants a dermatologist directly; under a PPO the visit proceeds without referral, while under an HMO the plan likely denies payment absent a primary care referral.
Mistake to avoid: Billing a specialist visit without checking whether the plan type requires a referral on file.
Reference: AAPC CPB study guide sample
8. Group Model HMO Payment Structure
In a group model HMO, the HMO contracts with a multi-specialty group and pays an established rate that is distributed to individual physicians as salary. The group may work solely with the HMO or also treat other patients, which affects how claims route and who is reimbursed.
Example: A physician employed by a multi-specialty group paid a set rate by an HMO is not paid per claim like a fee-for-service doctor; billing staff verify the arrangement before submitting.
Mistake to avoid: Assuming every physician encounter is reimbursed per claim rather than confirming the HMO payment model.
Reference: AAPC CPB study guide sample
9. MCO Combined Functions
A managed care organization combines the functions of health insurance, delivery of care, and administration in a single entity. Recognizing this matters because eligibility, authorization, and payment questions all route through one organization rather than to separate insurer and administrator contacts.
Example: Staff call one MCO line to confirm both eligibility and prior authorization for an imaging study, because the insurer and the administrative functions are the same entity.
Mistake to avoid: Searching for a separate administrator phone number when the MCO already handles eligibility and authorization.
Reference: AAPC CPB study guide sample
10. FSA Year-End Forfeiture
A flexible spending account is funded by an individual's contributions to pay certain out-of-pocket healthcare costs, but money not used during the plan year is generally forfeited. Staff should not treat FSA balances as carryover funds when estimating what a patient can apply to upcoming responsibility.
Example: A patient with money left in an FSA in December schedules a needed filling before year end; using it now avoids forfeiture since the balance does not roll over.
Mistake to avoid: Telling patients their FSA balance will carry into next year's plan.
Reference: AAPC CPB study guide sample
11. HSA Features and Portability
A health savings account combines high-deductible insurance with a tax-advantaged savings account that can pay the deductible, earns interest on remaining funds, can be funded by employers or employees, and is portable between jobs. These features distinguish it from employer-tied spending accounts.
Example: A patient changes employers; the HSA funds travel with the patient and can still pay qualified costs, unlike an FSA tied to the old employer's plan year.
Mistake to avoid: Confusing HSA portability with FSA year-end forfeiture when advising patients on balances.
Reference: AAPC CPB study guide sample
12. Participating vs Non-Participating Providers
A participating provider accepts Medicare assignment and writes off the difference between the submitted charge and the approved amount, collecting only the patient's coinsurance. A non-participating provider does not accept assignment and may balance bill the patient only within a limiting charge set above the fee schedule amount.
Example: A participating physician bills a service, Medicare approves less than the charge, and the physician writes off the difference and bills the patient only the coinsurance percentage.
Mistake to avoid: Balance billing a Medicare patient beyond the allowed amount when the provider accepts assignment.
Reference: AAPC CPB study guide sample
Government Payers: Medicare and Medicaid
13. Part A vs Part B Coverage Split
Medicare Part A covers hospital care, skilled nursing facility care, hospice, and home health services. Part B covers medically necessary services such as physician visits, ambulance, durable medical equipment, and mental health, plus expanded preventive services. Billing the correct part depends on the service category.
Example: A physician office visit is billed to Part B, while the subsequent inpatient hospital stay bills under Part A; sending the office claim to Part A misroutes it.
Mistake to avoid: Routing physician services to Part A because the patient was recently hospitalized.
Reference: AAPC CPB study guide sample
14. Preventive Service Diagnosis Requirements
Medicare screening and preventive services often carry specific diagnosis requirements in policy. A preventive claim submitted with a diagnosis that does not support screening coverage can be denied even when the service itself is a covered benefit, so the billed diagnosis must match the preventive indication.
Example: A screening mammogram claim carries a diagnostic complaint diagnosis instead of the screening indication; the payer denies it because policy ties coverage to the screening reason.
Mistake to avoid: Attaching a problem-visit diagnosis to a preventive service claim without checking the policy.
Reference: AAPC CPB study guide sample
15. Assignment, Write-Offs, and Coinsurance
When a provider accepts assignment, Medicare pays its approved amount minus the patient's coinsurance percentage, and the provider takes a contractual write-off of any charge above the approved amount. The patient owes only the coinsurance portion of the approved amount, never the original charge.
Example: An office service is approved at a set amount with the deductible met; Medicare pays the majority share and the patient is billed only the coinsurance percentage of the approved figure.
Mistake to avoid: Billing the patient the difference between the full charge and Medicare's payment when assignment is accepted.
Reference: AAPC CPB study guide sample
16. Medicare Eligibility Before Age 65
Part A coverage before age sixty-five is available to individuals who have received Social Security or Railroad Retirement disability benefits for twenty-four months, or who have end-stage renal disease and meet certain requirements. Age alone does not control Medicare eligibility.
Example: A forty-eight-year-old on disability benefits for the required duration presents for care; staff verify Medicare eligibility rather than assuming coverage starts at sixty-five.
Mistake to avoid: Denying or skipping Medicare verification for patients under sixty-five.
Reference: AAPC CPB study guide sample
17. Medigap Supplement Role
Medigap policies were designed by the federal government but are marketed by private commercial insurers to supplement Medicare and fill gaps in deductibles, copayments, and coinsurance costs. They supplement rather than replace Medicare, so original Medicare claims process first.
Example: A patient with Medicare plus a Medigap plan has the coinsurance balance crossed to the supplement after Medicare pays, rather than billed directly to the patient.
Mistake to avoid: Billing the patient the Medicare coinsurance without checking for a Medigap supplement on file.
Reference: AAPC CPB study guide sample
18. Medicaid and CHIP Distinction
Medicaid is state-administered under federal oversight for low-income individuals, with mandatory service categories required to receive federal matching funds. CHIP offers free or low-cost coverage to children whose families earn too much for Medicaid but cannot afford private insurance, jointly funded by federal and state governments.
Example: A family earns just above the state Medicaid limit for a child; staff direct them to CHIP eligibility instead, since that program targets exactly this gap.
Mistake to avoid: Telling a near-threshold family no coverage option exists without screening for CHIP.
Reference: AAPC CPB study guide sample
Patient Registration and Data Capture
19. Copying Front and Back of Insurance Cards
Practices should photocopy or scan the front and back of every insurance card and file the copy in the patient's financial record, along with the registration form and photo identification. The card back carries the payer's claims submission address and contact numbers needed later.
Example: A claim address question arises months after a visit; staff pull the scanned card back showing the payer's submission address instead of guessing where to send.
Mistake to avoid: Recording only the card front and losing the payer contact and claims address details.
Reference: AAPC CPB study guide sample
20. Reading Insurance Card Fields
Insurance cards show the identification or policy number, policyholder name, covered benefit types, deductible, copayments by service type, and pharmacy copays. The patient and subscriber may differ, and relationship codes like employee, child, or spouse may appear without listing every covered family member's name.
Example: A card lists the subscriber as the father with the patient marked as a child; registration records the patient under the subscriber's policy number rather than inventing an individual ID.
Mistake to avoid: Entering the patient as policyholder when the card identifies a different subscriber.
Reference: AAPC CPB study guide sample
21. Consent for Payment Form
The signed consent authorizes payment of medical benefits to the provider, documents all listed health plans, and makes the patient responsible for copayments, coinsurance, deductibles, and noncovered services. It also authorizes use and disclosure of health information for treatment, payment, and healthcare operations.
Example: A patient declines to sign the payment consent; the practice may decline treatment under its stated policy, and staff document the refusal rather than proceed informally.
Mistake to avoid: Providing services with no signed payment consent on file when policy requires one.
Reference: AAPC CPB study guide sample
22. Responsible Party and Guarantor Capture
Registration distinguishes the patient from the responsible party, recording the guarantor's name, birth date, relationship to the patient, contact numbers, and employer. Guarantor data drives statement routing and follow-up, especially for minors or patients whose care is financially managed by someone else.
Example: A twelve-year-old is treated with a parent present; the parent is entered as responsible party so statements and balances route to the adult, not the child.
Mistake to avoid: Leaving the guarantor field blank or defaulting it to the minor patient.
Reference: AAPC CPB study guide sample
23. Encounter Form vs Chargemaster
An encounter form, or superbill, captures the services for a single patient visit in an office setting. A chargemaster is the hospital-specific master list of all procedures, services, supplies, and medications billed to payers, organized by item number, code, and set charge.
Example: A hospital ultrasound charge is located on the chargemaster by item entry with its assigned code and set charge, not on a physician office superbill.
Mistake to avoid: Treating superbill and chargemaster as synonyms when locating facility charge data.
Reference: AAPC CPB study guide sample
24. Collecting at Time of Service
The signed consent commits patients to pay copayments, coinsurance, and deductibles at the time services are rendered. Front-desk collection at check-out, supported by verified benefit details, prevents small fixed balances from aging into accounts receivable and statement cycles.
Example: Verification shows a specialist copay due; the check-out clerk collects it before the patient leaves rather than mailing a statement for a small fixed amount.
Mistake to avoid: Waiving routine point-of-service copays and pushing small fixed amounts into statement cycles.
Reference: AAPC CPB study guide sample
Insurance Verification and Coordination of Benefits
25. Eligibility Verification Before Service
Coverage should be verified by phone or an electronic eligibility verification tool before the visit, using the patient's demographics and insurance information. Verification confirms eligibility effective dates, patient coinsurance, copay, and deductible amounts, and plan benefits as they pertain to specialty and place of service.
Example: Verification shows a plan terminated last month; staff contact the patient before the appointment to update insurance instead of discovering it on a denial.
Mistake to avoid: Skipping pre-visit verification and learning of inactive coverage from a returned claim.
Reference: AAPC CPB study guide sample
26. When Eligibility Fails
If the payer reports the patient ineligible, contact the patient for updated insurance information. If the patient believes coverage is valid, the patient must contact the insurer to have eligibility files updated, then chooses whether to reschedule or be treated as self-pay for the visit.
Example: An insurer's file lags a recent enrollment; the patient opts to keep the visit and pay out of pocket, then seek reimbursement after correcting the record with the payer.
Mistake to avoid: The practice editing payer eligibility records itself instead of directing the patient to the insurer.
Reference: AAPC CPB study guide sample
27. Subscriber Status Determines Primary
When a patient holds two plans, the plan on which the patient is the subscriber is primary; coverage carried as a dependent, such as through a spouse's employer, is secondary. Claim order follows subscriber status, not which card was presented first at the desk.
Example: A patient is the subscriber on her own employer plan and a dependent on her husband's; her employer plan pays first and the spouse plan is billed second.
Mistake to avoid: Billing the plan the patient hands over first without confirming subscriber status on each.
Reference: AAPC CPB study guide sample
28. Birthday Rule for Dependent Children
When a child is covered under both parents' plans, the birthday rule applies: the plan of the parent whose birthday comes first in the calendar year is designated primary. The year of birth is not a factor; only the month and day of the parents' birthdays count.
Example: The mother was born in 1979 with a birthday on September 5, and the father was born in 1986 with a birthday on March 28; the father's plan is primary for the child's claims because March 28 falls earlier in the calendar year, even though the mother is the older parent.
Mistake to avoid: Using the parents' ages or birth years instead of month and day to sequence dependent claims.
Reference: AAPC CPB study guide sample
29. Medicare Secondary Payer Screening
When a patient has Medicare and another insurance, providers use the Medicare Secondary Payer form to determine whether Medicare is primary or secondary for that patient. The form's determination, not the order in which cards were presented or an assumption that Medicare pays first, controls which plan is billed first.
Example: A Medicare patient presents an employer group plan card at registration; instead of defaulting Medicare to primary, staff complete the MSP form and submit the visit claim to whichever plan the form identifies as primary, billing the other plan second.
Mistake to avoid: Automatically billing Medicare first whenever a Medicare card is presented.
Reference: AAPC CPB study guide sample
30. Recording Effective and Termination Dates
Verification should capture coverage effective and termination dates in the practice management system so automated billing follows the correct plan by date of service. Stored dates prevent claims from routing to terminated plans, and benefit details prepare staff to collect accurately at the visit.
Example: A plan terminated the day before a Saturday visit; the system's stored termination date routes the claim to the successor plan instead of the expired one.
Mistake to avoid: Failing to store coverage end dates, causing claims to auto-route to terminated plans.
Reference: AAPC CPB study guide sample
HIPAA Privacy Foundations
31. PHI Across All Media
Protected health information is individually identifiable health information held or transmitted by a covered entity or its business associate in any form: electronic, paper, or oral. It includes demographic data relating to health, care, or payment for care that identifies the individual or reasonably could be used to identify them.
Example: A receptionist discusses a patient's outstanding surgery balance loudly enough for the lobby to hear; that oral disclosure involves protected health information just as a printed statement would.
Mistake to avoid: Treating privacy rules as applying only to electronic records or written documents.
Reference: HHS Summary of the HIPAA Privacy Rule
32. De-Identification Safe Harbor
De-identified information faces no use or disclosure restrictions. Safe harbor de-identification removes specified identifiers of the individual and of relatives, household members, and employers, including names, geographic subdivisions smaller than a state, dates directly related to the individual, and account, device, and biometric identifiers.
Example: A report keeps only state-level geography, year-only dates, and aggregate visit counts; with listed identifiers stripped and no knowledge of re-identification, it can be shared freely.
Mistake to avoid: Removing just the name and assuming a record is de-identified under safe harbor.
Reference: HHS Summary of the HIPAA Privacy Rule
33. Minimum Necessary Standard
Covered entities must make reasonable efforts to use, disclose, and request only the minimum amount of protected health information needed to accomplish the intended purpose. Sending an entire medical record when only specific dates of service were requested violates the standard unless the whole record is specifically justified.
Example: A payer requests notes for three visit dates; the biller sends only those three encounters rather than copying the complete chart, satisfying the minimum necessary rule.
Mistake to avoid: Releasing the entire medical record when a request covers only specific dates or services.
Reference: HHS Summary of the HIPAA Privacy Rule; AAPC CPB study guide sample
34. Treatment, Payment, and Operations Uses
A covered entity may use and disclose protected health information without authorization for its own treatment, payment, and healthcare operations. Payment encompasses obtaining premiums, determining or fulfilling coverage responsibilities, and furnishing or obtaining reimbursement for care delivered, which covers routine claim submission.
Example: Submitting a claim with diagnosis codes to the patient's insurer is a payment activity needing no signed authorization, because reimbursement processing is a permitted purpose.
Mistake to avoid: Delaying claim submission while waiting for a patient authorization the privacy rule does not require.
Reference: HHS Summary of the HIPAA Privacy Rule
35. The Only Required Disclosures
Only two disclosures are mandatory under the Privacy Rule: to individuals or their personal representatives who request access to or an accounting of their protected health information, and to HHS when it undertakes a compliance investigation, review, or enforcement action. Other permitted disclosures are optional judgments.
Example: A patient requests an accounting of disclosures; the entity must produce it, whereas disclosing to a public health authority, though permitted, remains a choice the entity weighs.
Mistake to avoid: Treating every permitted disclosure category as an obligation the entity must fulfill.
Reference: HHS Summary of the HIPAA Privacy Rule
36. Notice of Privacy Practices Distribution
Direct treatment providers must deliver the notice of privacy practices no later than the first service encounter, post it prominently at each delivery site, and make a good faith effort to obtain written acknowledgement, documenting any failure to obtain it. Emergency treatment allows furnishing the notice as soon as practicable afterward.
Example: A new patient arrives unconscious for emergency care; treatment proceeds and the notice plus acknowledgement attempt happens after the emergency abates rather than at intake.
Mistake to avoid: Skipping the acknowledgement attempt and leaving the failure undocumented in the record.
Reference: HHS Summary of the HIPAA Privacy Rule
Authorizations and Special Disclosures
37. When Written Authorization Is Required
Written authorization is required for any use or disclosure not for treatment, payment, healthcare operations, or otherwise permitted by the rule, such as disclosures to a life insurer for coverage, an employer for pre-employment physical results, or a pharmaceutical firm for its own marketing. Authorizations must be plain language with expiration and revocation terms.
Example: A life insurer requests exam results; the practice obtains the patient's written authorization before releasing anything, because coverage underwriting is not a permitted purpose.
Mistake to avoid: Releasing examination results to an insurer or employer without a valid signed authorization.
Reference: HHS Summary of the HIPAA Privacy Rule
38. Psychotherapy Notes Rules
Psychotherapy notes, a mental health professional's separated documentation of private counseling session contents, require authorization for most uses, including payment. They exclude medication prescription and monitoring, session times, treatment frequencies, and summaries of diagnosis or progress, which remain ordinary record content.
Example: A payer requests psychotherapy notes to process a claim; the request is refused absent authorization, while the visit's date and diagnosis are supplied as regular record information.
Mistake to avoid: Sending psychotherapy notes to a payer as claim support without specific authorization.
Reference: HHS Summary of the HIPAA Privacy Rule
39. Marketing and Remuneration Disclosure
Marketing is any communication encouraging purchase or use of a product or service, and it requires authorization. When the covered entity receives direct or indirect remuneration from a third party for the communication, the authorization must reveal that fact. Face-to-face communications and promotional gifts of nominal value are excepted.
Example: A practice is paid by a supplement company to send recommendation letters to patients; the authorization discloses the payment, because remuneration makes the arrangement transparent.
Mistake to avoid: Sending third-party promotional communications without an authorization that discloses the financial arrangement.
Reference: HHS Summary of the HIPAA Privacy Rule
40. Personal Representatives and Minors
A personal representative legally authorized to make healthcare decisions for an individual, including most parents of minor children, must be treated as the individual for uses, disclosures, and rights. An exception exists when the entity reasonably believes the representative may be abusing or neglecting the individual or endangering them.
Example: A mother requests her young son's records; she is his personal representative and receives them, unless facts suggest endangerment, in which case access is reconsidered.
Mistake to avoid: Refusing a parent's routine access to a minor child's record without a recognized exception.
Reference: HHS Summary of the HIPAA Privacy Rule
41. Workers' Compensation Disclosures
Protected health information may be disclosed as authorized by, and to comply with, workers' compensation laws and similar programs providing benefits for work-related injury or illness. The disclosure scope follows what the program's law authorizes, which is typically narrower than the whole record.
Example: An adjuster requests records for an accepted workplace back injury; the practice releases information the state workers' compensation law authorizes, not the entire unrelated history.
Mistake to avoid: Releasing complete medical histories to an adjuster when the comp law authorizes only injury-related information.
Reference: HHS Summary of the HIPAA Privacy Rule; AAPC CPB study guide sample
42. Incidental Disclosures and Safeguards
Incidental uses or disclosures that occur as a byproduct of an otherwise permitted activity are allowed when the covered entity has adopted reasonable safeguards and has limited the shared information to the minimum necessary. The rule does not demand elimination of every conceivable risk of accidental exposure.
Example: A visitor glimpses a name on a sign-in sheet during normal check-in; with reasonable safeguards in place this incidental exposure is permitted, unlike a deliberate chart handout.
Mistake to avoid: Believing any accidental exposure is a violation even where safeguards and minimum necessary were applied.
Reference: HHS Summary of the HIPAA Privacy Rule
Diagnosis Coding Fundamentals
43. Screening Pap Frequency Rule
A screening Pap smear and related medically necessary services are covered under Medicare Part B, when ordered by a physician or authorized practitioner, if the woman has not had such a test during the preceding two years or is a woman of childbearing age. The interval since the last test is the coverage fact that separates a covered routine screening from one billed too soon.
Example: A sixty-eight-year-old patient's last screening Pap was fourteen months ago and she is past childbearing age; neither routine condition is met, so staff check for a documented high-risk exception before billing rather than submitting the screening as routinely covered.
Mistake to avoid: Billing a routine screening Pap without checking the two-year interval against the date of the last test.
Reference: AAPC CPB study guide sample
44. Ordering Provider for Screening Coverage
The screening Pap smear and related services are covered under Part B when ordered by a physician or authorized practitioner under the coverage conditions. The order is a coverage element the biller verifies, not paperwork formality, because a qualifying service without a documented order does not meet the stated coverage conditions.
Example: A patient stops at a draw station for her routine screening Pap with no ordering provider recorded; staff obtain the physician's order before submitting the claim, because coverage depends on it, rather than assuming the collection alone qualifies.
Mistake to avoid: Submitting screening claims with no documented ordering physician or authorized practitioner.
Reference: AAPC CPB study guide sample
45. Part B Covered Preventive Services
Medicare Part B has greatly expanded coverage for preventive services. Covered items include the Annual Wellness Visit, the Initial Preventive Physical Exam, screenings (abdominal aortic aneurysm, alcohol misuse, cardiovascular disease, cervical and vaginal cancer, colorectal cancer, depression, diabetes, glaucoma, hepatitis B and C, HIV, lung cancer, mammograms, obesity, prostate cancer, and sexually transmitted infections), bone densitometry, blood-based biomarker tests, nutrition therapy, diabetes self-management training, flu, hepatitis B, pneumococcal, and COVID-19 vaccines, and tobacco use cessation counseling.
Example: A patient asks to pay out of pocket for a pneumococcal shot, assuming vaccines are not insured; the account technician recognizes pneumococcal shots on the Part B covered preventive list and bills Part B under the preventive policy instead of quoting a self-pay price.
Mistake to avoid: Quoting self-pay, or billing as problem services, for items on the Part B covered preventive list.
Reference: AAPC CPB study guide sample
46. Screening vs Diagnostic Linkage
Screening services performed on a patient without signs or symptoms link to screening-type diagnoses, while diagnostic services performed because of a complaint link to the symptom or confirmed condition. Mismatched linkage between the service and its supporting diagnosis invites medical-necessity denials.
Example: An asymptomatic patient's routine screening test is billed with the screening indication; a different patient's test ordered for a specific complaint carries the symptom diagnosis instead.
Mistake to avoid: Using a screening diagnosis to support a test ordered to investigate an active symptom.
Reference: AAPC CPB study guide sample
47. Components of the Covered Screening Pap
The covered screening Pap smear includes collection of the sample of cells and a physician's interpretation of the test results, and the related pelvic examination includes the clinical breast examination, when the coverage conditions are met. Knowing what the benefit includes prevents both omitting covered components and carving them into other visit types.
Example: A screening-eligible woman's encounter includes the Pap collection, the physician's interpretation, and a pelvic examination with clinical breast examination; the account technician bills these as components of the covered screening service rather than splitting the pelvic examination off as a separate problem visit.
Mistake to avoid: Carving the pelvic examination out of the screening claim as an unrelated service when it is part of the covered screening benefit.
Reference: AAPC CPB study guide sample
48. High-Risk Exception for Screening Frequency
More frequent screening Pap coverage is available when evidence in the medical history or other findings shows the woman is at high risk of developing cervical cancer and her physician recommends testing more frequently than every two years. Listed high-risk factors include early onset of sexual activity (under 16), five or more sexual partners in a lifetime, history of sexually transmitted disease including HIV infection, fewer than three negative Pap smears within the previous seven years, and DES-exposed daughters of women who took DES during pregnancy.
Example: A DES-exposed daughter had a normal screening Pap fifteen months ago, and her physician recommends annual screening; the high-risk exception supports coverage despite the prior test falling inside two years, so the claim relies on the documented factor and the recommendation rather than the routine interval.
Mistake to avoid: Applying the two-year routine interval to a patient with a documented high-risk factor and a physician recommendation for more frequent screening.
Reference: AAPC CPB study guide sample
Claims Submission and Billing Workflow
49. Clean Claim Definition
A clean claim is one submitted with all the information necessary for the payer to process it. Missing subscriber identifiers, invalid codes, or absent authorization numbers make a claim unclean, delaying payment regardless of the merit of the services billed.
Example: A claim includes complete subscriber data, valid codes, and required authorization; it processes as a clean claim, while an identical claim lacking the subscriber ID is returned.
Mistake to avoid: Submitting claims with known missing fields and expecting the payer to fix them.
Reference: AAPC CPB study guide sample
50. Clearinghouse Role
A clearinghouse is an entity that processes or facilitates the processing of claims for providers and healthcare plans, translating between standard and nonstandard formats. It is the transmission intermediary, not the payer and not the decision-maker on benefits, so adjudication questions route elsewhere.
Example: A practice sends claims through a clearinghouse that translates them into the standard format; benefit decisions still come from the payer, so denial questions go to the insurer.
Mistake to avoid: Appealing to the clearinghouse as if it adjudicated or paid the claim.
Reference: AAPC CPB study guide sample
51. Handling EDI Rejections
An electronic claim report distinguishes acknowledged claims, which have been forwarded to the payer, from rejected claims that must be corrected and rebilled. A rejection for a missing or invalid subscriber ID is resolved by checking the insurance card information against what is entered in the system.
Example: A daily report shows one claim rejected for an invalid subscriber ID; the biller pulls the scanned card, corrects the field, and rebills rather than waiting for a payer decision.
Mistake to avoid: Treating a rejected claim as pending with the payer instead of correcting and resubmitting it.
Reference: AAPC CPB study guide sample
52. Chargemaster Structure and Revenue Codes
The hospital chargemaster lists each billable item with department, item number, description, code, revenue code, general ledger number, charge, and any modifier. Revenue codes are four-digit numeric codes established by the National Uniform Billing Committee that classify each line item billed to payers.
Example: A thyroid sonogram line on the chargemaster shows its assigned charge and revenue code; the biller reads that entry rather than estimating a price from a similar service.
Mistake to avoid: Guessing a facility charge instead of reading the chargemaster entry with its code and set price.
Reference: AAPC CPB study guide sample
53. Inpatient vs Outpatient Payment Basis
Billing an inpatient stay as an outpatient, or the reverse, changes the payment basis: inpatient facility payment is generally driven by the diagnoses reported, while outpatient payment follows the procedures reported. A status error therefore alters the entire claim's reimbursement logic, not just one line.
Example: An observation stay is mistakenly submitted as inpatient; payment would be driven by diagnoses rather than the performed procedures, so the status is corrected before rebilling.
Mistake to avoid: Assuming payer reimbursement is identical whether the encounter is billed inpatient or outpatient.
Reference: AAPC CPB study guide sample
54. NPI Requirement on Transactions
A National Provider Identifier is a unique ten-digit identification number required by HIPAA and used on electronic compliant transactions. Every billing and rendering provider entry on a claim needs a valid NPI for the transaction to process correctly through the standard format.
Example: A claim lists the clinic's NPI but omits the individual rendering provider's; the electronic transaction is incomplete until the rendering NPI is added.
Mistake to avoid: Submitting electronic claims with only an organizational identifier and no individual provider NPI.
Reference: AAPC CPB study guide sample
Denials, Appeals, and Receivables
55. Rejection vs Denial Workflow
A rejection occurs before adjudication, usually for formatting or missing data, and is corrected and rebilled as a fresh submission. A denial is an adjudicated decision refusing payment, which is addressed through the payer's appeal process with documentation rather than by simple rebilling.
Example: A claim rejected for an invalid subscriber ID is fixed and resubmitted; a claim denied for lack of medical necessity instead needs documentation support on appeal.
Mistake to avoid: Rebilling a denied claim unchanged instead of appealing it with supporting documentation.
Reference: AAPC CPB study guide sample
56. Skilled Nursing Coinsurance Days
Under Medicare Part A, skilled nursing care carries no daily coinsurance before day 21 of a benefit period, and a fixed daily coinsurance applies for days 21-100 (shown as $204 per day in the referenced 2024 figures). Patient responsibility changes mid-stay, so the account balance must be recalculated when a stay passes day 20.
Example: A skilled nursing patient's stay reaches day 21; the first twenty days posted no daily coinsurance, and from day 21 the fixed daily amount begins accruing on the account, so the technician updates the balance estimate and informs the patient before the next statement goes out.
Mistake to avoid: Treating an entire skilled nursing stay as fully covered, or applying the daily coinsurance from day one.
Reference: AAPC CPB study guide sample
57. Subrogation With Liability Coverage
When an injury involves liability or automobile insurance, the health plan is billed first; through the process of subrogation it is later determined whether a liability payer should have been considered primary. The health claim is not held pending that liability outcome.
Example: A patient injured in a car crash receives care; the group health plan is billed immediately, and any recovery from the auto insurer is sorted through subrogation afterward.
Mistake to avoid: Holding claims unpaid while waiting for a liability or auto carrier to accept responsibility.
Reference: AAPC CPB study guide sample
58. Contractual Write-Off vs Patient Balance
A contractual write-off is the provider's adjustment between the submitted charge and the payer's allowed amount under participation terms, and it is never billed to the patient. The patient balance is limited to deductible, coinsurance, and copay amounts defined by the plan's cost sharing.
Example: After payment, the difference between the submitted charge and the allowed amount is adjusted as contractual; only the coinsurance remainder appears on the patient statement.
Mistake to avoid: Billing patients the contractual write-off portion as if it were their responsibility.
Reference: AAPC CPB study guide sample
59. Corrected Claim Rebilling
When a claim contains errors, the correct response is to fix the underlying data and rebill following the payer's corrected-claim procedure. Resubmitting without addressing the error guarantees the same failure and can create duplicate claim records that complicate the account.
Example: A claim bounces for a wrong plan code; the biller corrects the payer identifier and resubmits rather than sending the identical claim a second time.
Mistake to avoid: Resubmitting an erroneous claim unchanged, creating duplicates and repeated failures.
Reference: AAPC CPB study guide sample
60. Overpayment Refunds
Payment timelines and refund obligations govern receivables: money received in excess of the amount owed, including from government programs, must be returned. Retaining a known overpayment instead of refunding it creates reverse false claims exposure, so identified excess payments are worked promptly.
Example: Duplicate payments post for one encounter; the billing team identifies the excess and issues a refund to the payer promptly instead of applying it to future visits.
Mistake to avoid: Applying an identified overpayment to other dates of service instead of refunding it.
Reference: AAPC CPB study guide sample
References and further reading
Source links checked on Oct 2, 2026.