Remote patient monitoring CMS rule targets outsourced programs
The CY 2027 Medicare physician fee schedule proposal would end payment for outsourced RPM, lower device reimbursement and consolidate codes, forcing health systems into a fast build-versus-buy decision.
The remote patient monitoring CMS rule buried in the CY 2027 Medicare Physician Fee Schedule proposal is the most consequential digital health payment change in years, and it is aimed squarely at how most programs were actually built. Health systems and medical groups that scaled RPM by renting devices, onboarding and monthly management time from a vendor have roughly 18 months to bring that work in-house or watch the revenue disappear. The comment window is open now, which makes this a decision quarter rather than a wait-and-see one.
What the CY 2027 proposal actually changes
Healthcare Finance News reported on July 17, 2026 that CMS proposes ending Medicare payment for outsourced remote monitoring services. That single sentence has driven most of the coverage, but the proposal is not one change. Benesch, writing on July 30, 2026, described three moving parts: an outsourcing ban, a reimbursement revaluation and potential code consolidation. Each has a different effect on program economics, and each could survive or fall separately in the final rule.
The second piece is the one finance teams keep underweighting. DLA Piper flagged on July 17 that Medicare is also proposing lower device reimbursement for both remote physiologic monitoring and remote therapeutic monitoring. So the staffing cost may shift onto the health system's own payroll at the same moment the device payment that helped underwrite the program shrinks. Law firm alerts have continued stacking since, including Nixon Peabody on July 22 and Bass, Berry & Sims on August 4, which is usually a reliable signal that clients are asking urgent contractual questions.
The work does not disappear if CMS finalizes the rule. It moves onto your payroll at the same moment device payment drops.
Why CMS is moving now: audit pressure, not budget drift
This is not a routine revaluation. McDermott+ framed the proposal as sweeping changes in response to OIG scrutiny, following the HHS Office of Inspector General report on billing for remote patient monitoring in Medicare published August 28, 2025. When a payment change is traceable to an audit finding rather than a budget-neutrality adjustment, the odds of it being softened by volume of comment letters alone go down.
The softer flank CMS is pressing on is evidence. Medical Economics asked in April 2026 whether RPM's growth in use and spending has been matched by demonstrated effectiveness, a question the sector has answered unevenly. Programs with clean outcomes data on defined cohorts, such as uncontrolled hypertension or post-discharge heart failure, are in a very different comment-letter position than programs that scaled on billing opportunity.
The build-versus-buy math moves onto your own P&L
Most vendor-run RPM arrangements work the same way. The partner handles device logistics, patient onboarding and the 20-minute monthly management time, billing incident to the physician. If CMS finalizes the outsourcing restriction, that structure stops paying. The work does not go away; it moves to internal FTEs, with recruiting, training, licensure and turnover attached.
CFOs need a program-by-program margin re-forecast rather than a blended one. Model the fully loaded cost of internal monitoring staff at realistic panel sizes, apply the proposed device payment, and identify the enrollment volume at which each cohort turns negative. CMOs and chronic care leaders then need to answer a harder question: which cohorts are worth running even if the margin thins, because they demonstrably reduce admissions or tighten control of a costly condition. Some programs will be worth subsidizing. Others were only ever viable as billed services.
The contract and documentation audit to start this quarter
Digital health officers should pull every RPM and RTM vendor agreement and answer one question in writing: who actually performs and documents the monitoring time. Contracts drafted loosely, where the vendor's clinical staff act under a broad supervision clause, are the most exposed. Also review termination rights, minimum-volume commitments and device ownership, because an unfavorable final rule in 2027 against a three-year contract signed in 2026 is an avoidable problem.
CIOs and their teams should confirm the operational plumbing would hold if the work came inside. That means device data flowing into the EHR without vendor middleware that leaves on contract termination, time-tracking that produces defensible documentation for the monthly management threshold, and audit trails that survive an OIG-style look-back. Health tech leaders told Fierce Healthcare that a third-party vendor block would upend RPM services, and vendors are lobbying accordingly. Do not let their timeline substitute for your own contingency plan.
Virtual care policy is not tightening across the board
It would be a mistake to read this as a general retreat from virtual care. Medicare telehealth coverage was renewed for two years, per the AMA in February 2026, with flexibilities extended through 2027. The pattern is narrower than a policy reversal: CMS appears willing to keep paying for virtual encounters between clinicians and patients while cracking down on service models where the billing clinician is furthest from the actual work.
That distinction is the most useful frame for comment letters filed during the open window. Arguments that defend outsourcing as a business model will land poorly against an OIG-driven rule. Arguments that show specific clinical outcomes, describe how monitoring time is supervised and documented, and quantify the access loss in rural or small-practice settings if programs shut down have a better chance. Comment letters remain the cheapest lever available, and the window closes well before the operational one does.
