Three months ago, CMS made telehealth supervision permanent. Your templates, POS defaults, and supervisory documentation standards were supposed to change with it. For most behavioral health organizations, they didn’t. The rule isn’t the problem. The gap between the rule and your operating infrastructure is where the audit findings live.
With the release of CMS-1832-F, the CY 2026 Medicare Physician Fee Schedule Final Rule, and the updated telehealth FAQ published February 26, 2026, CMS closed the last open question about virtual presence and direct supervision. A supervising practitioner connected via real-time audio/video now satisfies the requirement for most services. Permanent policy. No sunset clause.
What CMS settled, your organization still has to operationalize.
What CMS Actually Settled
Under CMS-1832-F, CMS permanently redefined “immediate availability” to include virtual presence for incident-to services, diagnostic tests, and behavioral health supervision. The long-standing expectation that a supervising physician be physically present, or on-site and reachable, gave way to a standard that recognizes real-time audio/video as equivalent for most covered services (CMS-1832-F Fact Sheet, 2025). Citing the rule number in your internal policy documentation signals that your organization has actually read it. That matters more than it should.
There are deliberate limits. Services with a global surgery indicator of 010 or 090 are explicitly excluded from virtual supervision, a detail relevant for integrated care settings where minor procedures occur alongside behavioral health services. For those services, physical presence remains the standard. The carve-out is specific and non-negotiable.
The updated CMS telehealth FAQ confirms that behavioral health services delivered in patients’ homes may be provided via audio-only when the patient cannot use or does not consent to video technology, provided the practitioner is technically capable of video (CMS Telehealth FAQ, 2026). This is a permanent accommodation. Organizations need written protocols that define when audio-only applies, who makes that determination, and how it’s documented at the note level. Clinician judgment under time pressure is not a protocol.
CMS also expanded the service menu. Multiple-family group psychotherapy (CPT 90849) joined the permanent telehealth services list in 2026. It’s a high-value behavioral health service, and one that carries strict supervision requirements and documentation standards. If your organization delivers this service, your supervisory workflow needs to reflect the full compliance weight it now carries.
The relevant question for every behavioral health executive is no longer whether the policy permits virtual supervision. It’s whether your operational infrastructure reflects a rule that took effect three months ago.
Where Hybrid Operations Still Break Down
The most common compliance exposure in 2026 isn’t a misreading of the rule. It’s a mismatch between what the rule requires and what the EHR template records by default.
Place of Service coding is the clearest example. CMS distinguishes POS 10 (Telehealth Provided in Patient’s Home) from POS 02 (Telehealth Provided Other than in Patient’s Home) (CMS Place of Service Code Set). They are not interchangeable. POS 10 carries the non-facility payment rate. Each code reflects a materially different service context, one that affects reimbursement accuracy, audit exposure, and the reliability of your claims data.
Most EHR templates default to one code or the other, and clinicians working in hybrid delivery environments rarely stop to verify the selection. When that default is wrong at scale, it creates exactly the pattern that OIG’s data analytics are designed to surface. OIG has developed explicit methodologies for identifying statistical outliers in telehealth billing, and an organization whose POS codes don’t reflect actual service locations will register as one (OIG Telehealth Program Integrity Toolkit, 2023). The cause won’t be intent. It will be a template no one updated after the pandemic rules hardened into permanent policy.
Supervisor availability carries the same risk. Virtual direct supervision means real-time availability. Scheduled availability doesn’t satisfy the standard. Available-when-paged doesn’t satisfy the standard. That distinction needs to be captured in documentation, not assumed from scheduling. Organizations delivering services across multiple time zones need explicit written standards for how supervisory coverage is arranged, confirmed, and recorded at session start.
For organizations running medical education programs, 2026 also permanently adopted the teaching physician three-way model, with patient, resident, and teaching physician each in a separate location. Many behavioral health organizations with residency affiliations have never had to operationalize that scenario, and most EHR configurations aren’t built to capture it correctly by default.
Compliance in 2026 demands accurate description of every service in the claims data. Modality alone is no longer the question.
This Is a Governance Decision, Not an IT Ticket
The gaps above share a common cause. They require policy decisions that only leadership can make, routed through systems that only IT can configure, executed by clinicians who need clear written guidance to act on.
Three decisions require direct executive ownership. First: what are your organization’s written standards for supervisor availability in virtual delivery, including how availability is defined, confirmed, and logged per session? Second: what are your explicit criteria for audio-only service delivery, including who makes the eligibility determination and how it’s documented? Third: has a current review confirmed that your EHR templates accurately capture place of service for every delivery mode your organization uses?
These questions don’t belong in a ticket to your compliance coordinator or a support call to your EHR vendor. They belong in policy, get implemented in system configuration, and are validated through leadership-owned audit processes. When they live only in institutional memory, they become audit exposure.
CMS-1832-F is one of the more readable final rules behavioral health executives will encounter. The supervision provisions don’t require a lawyer. What they require is an executive willing to read the FAQ, recognize the operational implications, and assign someone the authority and deadline to close the gaps.
The organizations with the least exposure in 2026 will be the ones where leadership translated a regulatory update into updated operating standards, before an auditor made the translation for them.
Has your organization formally reviewed its supervision workflows, place-of-service templates, and audio-only documentation protocols since the CY 2026 PFS final rule took effect, or are your operations still running on configurations built for a temporary flexibility that no longer exists? If you’re not sure where the gaps are, Xpio Health can help you find them before an auditor does. Reach out for a consultation.
#BehavioralHealth #PeopleFirst #XpioHealth #Telehealth #VirtualSupervision #CMSCompliance #BehavioralHealthLeadership
References
- Centers for Medicare & Medicaid Services. Calendar Year (CY) 2026 Medicare Physician Fee Schedule Final Rule (CMS-1832-F), Fact Sheet. CMS.gov. 2025. https://www.cms.gov/newsroom/fact-sheets/calendar-year-cy-2026-medicare-physician-fee-schedule-final-rule-cms-1832-f
- Centers for Medicare & Medicaid Services. Telehealth Frequently Asked Questions, Updated 02/26/2026. CMS.gov. 2026. https://www.cms.gov/files/document/telehealth-faq-updated-02-26-2026.pdf
- Centers for Medicare & Medicaid Services. Place of Service Code Set. CMS.gov. https://www.cms.gov/medicare/coding-billing/place-of-service-codes/code-sets
- U.S. Department of Health and Human Services, Office of Inspector General. Toolkit: Analyzing Telehealth Claims to Assess Program Integrity Risks. OIG.HHS.gov. 2023. https://oig.hhs.gov/reports/all/2023/toolkit-analyzing-telehealth-claims-to-assess-program-integrity-risks/
