Skip to main content

CCM Consent & PHI Authorization

Explanation of the differences between CCM consent and PHI Authorization and how to document them in Phamily

Toufique avatar
Written by Toufique
Updated over a year ago

There is a difference between PHI authorization and CCM consent. Phamily helps you document both! Some patients may consent to participate in CCM, but not wish to communicate Protected Health Information (PHI) via unencrypted text message. Others may agree to both participate in CCM and to communicate via texting.

This article will explain how to document both CCM consent and PHI authorization based on what information the patient has provided.


CCM Consent

The Center for Medicare & Medicaid Services (CMS) accepts either written or verbal consent as equivalent. Patients must be aware of the following in order to have provided informed consent:

  • CCM services are available to them.

  • There may be cost sharing responsibilities depending on insurance.

  • Only 1 practitioner can furnish and bill CCM services during a calendar month.

  • They have a right to stop CCM services at any time.

NOTE: CCM consent is different from PHI authorization.

Some patients may consent to CCM, but not wish to communicate PHI via texting.

For these patients, check out our article on How to Manage Patients Without Cell Phones in Phamily

TIP: Confirmation via texting is a valid form of written consent!

Here's what it looks like in Phamily when a patient has documented CCM consent and PHI consent.

Here's what it looks like in Phamily when a patient does not have CCM consent or and PHI consent documented.

How To: Document CCM consent

Whether the patient provided consent by texting, on the phone, during an office-visit, or signing the form, you can document that in Phamily using the following steps:

  1. Go to the patient profile

  2. Click on the 'No CCM Consent' badge

  3. Click 'Document Additional Consent'

  4. Click on the plus icon next to 'CCM Enrollment Agreement'

  5. Select the method by which Consent was recorded

  6. Click Confirm

Note: You can document more than one type of consent for the patient.

For example: The below image shows a patient that has consented to CCM verbally and via text.

To document another form of Consent; follow the steps listed above.


PHI (Protected Health Information) Consent

To discuss PHI over unencrypted text messaging (SMS), HIPAA requires patient authorization. PHI authorization means that patients are aware that text messages and phone calls are not encrypted and may be accessible to anyone that has access to their phone or medical records such as their phone company or family members.

TIP: PHI authorization can be obtained verbally (over the phone, in the office) or in writing (texting, using digital and physical forms)

How To: Document PHI authorization

Whether the patient provided authorization by texting, on the phone, during an office-visit, or signing the form, you can document that in Phamily using the following steps:

  1. Go to the patient profile

  2. Click on the 'No PHI Consent' badge

  3. Click 'Document Additional Consent'

  4. Click on the plus icon next to 'PHI Agreement Authorization'

  5. Select the method by which Consent was recorded

  6. Click Confirm

How To: Revoke Consent

Use the following steps to revoke Consent:

  1. Go to the patient profile

  2. Click on the clipboard icon

  3. Click the trash icon next to the Agreement you want to revoke

  4. Click Yes, I'm Sure

If you need to re-obtain Consent you can do so by following the steps above.

Note: Unenrolling a patient will automatically revoke their CCM Consent Agreement.

Need help?
Contact our Support Team at support@phamily.com, or click the question mark in Phamily, for assistance.

Did this answer your question?