Guides
PT Compliance Checklist: Key Operating Documents
A compliance checklist for new physical therapy clinic owners. We focus on the key operating documents you need for patient intake, billing, staff management.
Opening a physical therapy practice involves two distinct compliance streams: structural and operational. Structural compliance covers the foundational steps like forming an entity, getting state board approval, and enrolling with payers. These tasks take months and set your opening date.
Operational compliance means the essential documents, policies, and workflows you must create and test before your first patient arrives. These are the rules that will govern your daily work, from patient intake and scheduling to billing and staff supervision.
Months-Out Opening Tasks
- Months outVerify clinician licenses with state board
- Months outObtain supervision and delegation rules
- Months outGet no-referral treatment position in writing
- Months outForm entity, tax registrations, bank account
- Months outSubmit payer credentialing applications
- Months outRead payer authorization and documentation policies
- Months outResolve premises and accessibility questions
Patient Care & Billing Documents
In the weeks before opening, you translate external rules from payers and regulators into internal procedures. These documents ensure you get paid for your work and manage clinical risk from day one.
Weeks-Out Operating Rules
- Complete privacy and security risk assessment
- Build payer-compliant documentation template
- Write cancellation and no-show policy
- Add eligibility and authorization check to booking
- Add supervision rules to schedule template
- Confirm employment policies and notices
- Verify hire credentials and references
- Check marketing claims against board rules
HIPAA Privacy and Security Policies
HIPAA compliance is more than just using secure software. You must perform and document a security risk assessment for your specific practice. This process identifies how Protected Health Information (PHI) is stored, used, and transmitted, and where potential vulnerabilities exist.
Your operational documents must include:
- Notice of Privacy Practices (NPP):The document you give to all patients explaining their privacy rights.
- Patient Consent and Authorization Forms:For using or disclosing their PHI for treatment, payment, and operations.
- Business Associate Agreements (BAAs):Signed agreements with any vendor that handles PHI on your behalf, such as your scheduling software provider or a third-party billing service. A review of physical therapy software often highlights which vendors provide BAAs.
- Internal Policies:Written procedures for staff on accessing PHI, securing workstations, and responding to a potential data breach.
Clinical Documentation Template
Your documentation is your primary evidence of medical necessity. Create a standardized template that meets the requirements of your strictest payer. This template should be built into your EMR to ensure consistency.
Key elements include:
- Subjective, Objective, Assessment, and Plan (SOAP) format.
- Specific, measurable, and time-bound functional goals.
- Timed CPT codes for all direct-timed services.
- Clear justification for the skills and services provided.
For Medicare patients, documentation must strongly support care, especially when total costs approach certain thresholds. According to Medicare policy, these amounts are no longer a hard cap, but exceeding them requires using a KX modifier to attest that services remain medically necessary. For 2023, the KX modifier thresholds were $2,230 for PT and SLP services combined.
Scheduling and Financial Policies
These policies prevent revenue loss from scheduling errors and billing denials. They must be written down and scripted for your front desk.
- Eligibility and Authorization Procedure:This is a step-by-step workflow that must be completed before a patient's first visit. It involves checking insurance eligibility, confirming physical therapy benefits, identifying authorization requirements, and tracking visits against any approved limits. A solid process here is key to scheduling appointments without delays and unpaid claims.
- Cancellation and No-Show Policy:Write a clear policy stating the required notice period and any associated fees. More importantly, create the exact script your staff will use to explain this policy to every new patient during intake.
- Supervision Rules in the Schedule:Your state board defines the level of supervision a Physical Therapist (PT) must provide for a Physical Therapist Assistant (PTA) or aide. Build these rules into your scheduling template. For example, the software should prevent a PTA from being scheduled when no supervising PT is on-site, if that is your state's rule.
Staff and Workplace Compliance
Your obligations as an employer begin before you hire your first employee. These policies ensure a safe and lawful working environment.
Employment Policies and Notices
Work with a payroll provider or HR consultant to ensure you have the correct documents and postings in place. These typically include:
- Posted Notices:Your clinic must display federal and state labor law posters covering topics like the minimum wage (Fair Labor Standards Act, or FLSA), job safety (OSHA), and equal opportunity employment.
- Employee Handbook:This centralizes your workplace policies, including code of conduct, timekeeping procedures, paid time off, and disciplinary actions.
- Job Descriptions with Scope of Practice:For each role (PT, PTA, front desk), create a job description that clearly defines responsibilities and limitations based on the state practice act. This is a key training tool, as detailed in the hiring and training guide.
Workplace Safety and Accessibility
Compliance here involves both federal and state rules for creating a safe environment for staff and patients.
- OSHA Requirements:Develop an Emergency Action Plan and, if applicable, a Bloodborne Pathogens Exposure Control Plan. Keep a log of any work-related injuries (OSHA Form 300).
- Accessibility:Your clinic must be accessible. The Department of Justice's 2010 ADA Standards for Accessible Design set minimum requirements for facilities. This goes beyond the initial construction and includes maintaining clear pathways and ensuring equipment is usable for people with disabilities.
The Final Pre-Launch Compliance Check
In the week before opening, stress-test your operational documents by running a full simulation. This dry run exposes weaknesses in your workflows before they affect real patients and revenue.
Opening Week Walkthrough
- Walk premises with inspection reports
- Run fictitious patient through full workflow
- Confirm license and payer effective dates
- Brief front desk on three scripts
- File everything before opening day
- Walk the Premises:Use your safety and accessibility checklists to do a final walkthrough.
- Run a Mock Patient:Take a fictional patient from initial call to a final, coded claim. Follow every step in your intake, scheduling, documentation, and billing procedures. Does the authorization workflow catch the missing pre-auth? Does the documentation template capture all required data?
- Confirm Dates:Double-check that no patients are scheduled before a clinician's license is active or before a payer's credentialing effective date.
- Role-Play Scripts:Practice key conversations with your front desk staff using the scripts you developed for cancellations, payment collection, and direct access questions.
- Assemble the Compliance Binder:Organize all policies, risk assessments, BAA's, staff credentials, and safety plans into a single physical or digital binder. This is your evidence file.
The Monthly Compliance Review
Compliance is not a one-time task. It is a continuous cycle of review and improvement.
- Chart Audit:Each month, review a sample of patient notes against your documentation service standards and payer policies.
- Scheduling Audit:Review a sample of bookings to ensure the eligibility/authorization process was followed and that supervision rules were met.
- Review Updates:Check for new guidance from the state board and major payers. Update your operating documents as needed.
- Log Reviews:Check that safety inspections and other required logs are up to date.
Common Questions
What is the one operational item most new owners miss?
The documented HIPAA security risk assessment. Many owners assume having HIPAA-compliant software is enough, but the rule requires you to analyze, document, and mitigate risks specific to your own practice's workflows.
Is this checklist shorter for a cash-only practice?
Yes, but only partly. The payer-driven items fall away: authorization procedures, complex coding justification, and credentialing. However, compliance with the state practice act, HIPAA privacy, employee law (FLSA, OSHA), and premises safety (ADA) remains mandatory.
Who should own the compliance file?
In a small practice, the owner must be the designated compliance officer. This doesn't mean knowing every rule by heart. It means owning the calendar for monthly reviews and ensuring that every policy is documented, reviewed, and followed by the team.
