Skip to main content

The CMS Rule That Finally Targets the Paperwork Nobody Fixed

March 23, 2026
Image: [image credit]
Photo 260384678 © Timon Schneider | Dreamstime.com

Victoria Morain, Contributing Editor

The latest move from the Centers for Medicare & Medicaid Services will be easy to underestimate because it sounds so administrative. The newly finalized health care claims attachments rule deals with documentation, transaction standards, and electronic signatures, not a flashy care model or a breakthrough therapy. Yet it may prove to be one of the more important healthcare modernization actions in years precisely because it aims at a part of the system that has remained stubbornly primitive long after the industry declared itself digital.

For all the investment in electronic health records, analytics platforms, and artificial intelligence, a remarkable amount of claims-related documentation still moves through channels better suited to another era. In its final rule materials, CMS says the policy establishes the first HIPAA-adopted standards for health care claims attachments and formal requirements for electronic signatures, replacing manual processes such as faxing and mailing with a more secure electronic framework. That is not cosmetic. It is an overdue attempt to connect clinical documentation and administrative transactions in a way that should have been standard years ago.

Why this matters now

The significance of the rule is not just that it promises efficiency. It is that it addresses one of the most persistent contradictions in healthcare operations. The industry digitized records, but it never fully digitized the proof needed to support the business of reimbursement. On its longstanding electronic claims attachments page, CMS notes that claim attachments are supplemental documents such as certificates of medical necessity, discharge summaries, and operative reports that provide medical information a claim format cannot accommodate on its own. Those documents sit at the intersection of clinical care and payment. When the handoff fails, care teams feel it, billing staff feel it, and patients eventually feel it.

That is why the projected savings figure in the CMS press release matters, but not for the usual talking-point reason. CMS says the rule could save the industry roughly $781.98 million a year. The more meaningful implication is what that number represents: not just waste removed from the system, but friction that has been normalized for so long that many organizations stopped treating it as fixable.

The back office has been a blind spot

The healthcare technology conversation often centers on patient access, data liquidity, and digital front doors. Those priorities matter, but they have sometimes obscured the reality that the back office remains one of the biggest sources of delay and waste in American healthcare. On its attachments overview page, CAQH describes attachments as the bridge between clinical and administrative data and says the workflow remains primarily manual and immensely burdensome. In a separate implementation brief, CAQH reported that electronic attachments had reached only 32 percent adoption in the medical industry.

That figure should be read as an indictment of the industry’s modernization priorities. A sector that can talk confidently about generative AI and predictive risk models should not still be relying on fax, mail, and disconnected portals for routine supporting documentation. The problem has never been a lack of awareness that the process is inefficient. The problem has been the absence of a mandatory, widely adopted standard that made investment in better workflows feel necessary rather than optional.

The burden is not abstract. In its strategy on reducing regulatory and administrative burden, the Office of the National Coordinator for Health Information Technology documented the broader way administrative requirements and poorly aligned health IT workflows pull clinical documentation away from care delivery and add friction to practice operations. Claims attachments are only one piece of that burden, but they are a revealing one because they expose how often clinicians and staff are still forced to repackage information the system already has.

What CMS got right

The strongest feature of the final rule may be its discipline. Rather than stretching to solve every related problem at once, CMS finalized standards for health care claims attachments only, adopted Version 6020 of the X12N 275 and 277 transactions, incorporated key HL7 implementation guides for the attachment content, and retained electronic signature requirements. That narrower scope gives payers, providers, clearinghouses, and vendors an achievable target.

The decision also reflects a sober recognition that healthcare administrative reform has a history of collapsing under its own ambition. The agency explicitly declined to finalize prior authorization attachment standards in this rule, citing concern about misalignment with the existing transaction standard and interaction with the separate CMS Interoperability and Prior Authorization Final Rule. That restraint may frustrate organizations hoping for a larger one-step fix, but it was probably the right call. A clean claims-attachments standard is more useful than a sprawling rule that confuses the market.

What still remains unfinished

Still, the exclusion of prior authorization attachments is not a small omission. Prior authorization is where many providers most acutely experience administrative drag, and the documentation burden there is inseparable from the broader story about fragmented workflows and payer-provider friction. The CMS prior authorization rule page already points toward more automated exchange through APIs and tighter process expectations, but the supporting documentation side remains less settled than many providers would like.

That means the claims attachments rule should be viewed as meaningful progress, not finished reform. It creates a standard for one crucial transaction layer, but it does not by itself eliminate the duplicative documentation loops that still frustrate clinicians, delay revenue, and complicate patient access. The practical risk is that organizations celebrate the end of fax-based attachments while leaving adjacent manual burdens largely intact.

Execution will matter more than the announcement

The real test begins after the policy announcement cycle ends. According to the CMS press release, the rule takes effect on May 26, 2026, with compliance required by May 26, 2028. That gives the industry time, but not a reason for complacency. Vendors will need to update products. Health plans will need to standardize intake and response workflows. Providers will need implementation support that fits actual clinical and revenue-cycle operations rather than theoretical use cases.

The compliance date is generous enough to permit thoughtful rollout, but it is also distant enough to invite delay. That would be a mistake. Healthcare has already spent too many years tolerating an administrative gap that everyone recognized and too few organizations truly prioritized. If implementation becomes a minimum-compliance exercise instead of a workflow redesign effort, the industry will digitize old pain rather than remove it.

The most important measure of success will not be whether fax volume drops. It will be whether attachment requests become more predictable, whether claims move faster, whether staff spend less time hunting documents, and whether patients encounter fewer avoidable billing and adjudication delays. A standard only matters when it changes behavior.

The quiet reforms are often the real ones

Healthcare policy often rewards visible change over foundational change. Consumer apps, new payment demonstrations, and AI pilots attract attention because they look like progress. Rules about claims attachments do not. But administrative simplification is not secondary to care delivery anymore. It shapes cost, workforce pressure, patient experience, and the credibility of every other interoperability promise the industry makes.

That is why this rule deserves to be taken seriously. Not because it is glamorous, and not because it solves everything, but because it targets a stubborn operational weakness that has outlived every excuse for leaving it in place. If the industry uses the next two years to treat claims attachments as core infrastructure rather than clerical residue, this rule could mark the point when healthcare finally started modernizing the paperwork that has been slowing everything else down.