By Sergiu Rata, AVP, Product Management

The CMS-0053-F Final Rule is a regulation over 30 years in the making that establishes a new baseline for electronic exchange of clinical documentation in support of healthcare claims. The industry should not stop at compliance, and here we’ll share why (outcomes and tangible benefits from modernization beyond compliance) and how payers and providers can use this opportunity to proactively streamline workflows while mitigating or avoiding inherent challenges. We’ll start with financial ramifications of CMS 53-F.

Projected savings

Potential cost savings from baseline compliance are significant when you consider that historically, attachments have the lowest rate of electronic adoption among transactions. Providers stand to benefit most as CMS estimates that clinician and physician practices will accrue over $600 million of the $780 million in projected savings enabled by CMS 53-F.*

Industry stakeholders will realize a portion of the benefits enumerated by CMS by phasing out manual attachments like mail and fax, but real transformation requires full electronic transmission of clinical data that not only speeds up delivery time but expedites processing.

Interoperability makes it more efficient to move information but unlocking the full value of the data being transmitted requires bridging technology and standards gaps between payers and providers, redesigning legacy workflows and authoring a long-term vision to make the most of interoperability investments across the enterprise. This paper shows how organizations can overcome obstacles by standing between “check the box” compliance and transformation while implementing a modern healthcare claims attachment solution.

*Note: CMS provides industry-level estimates in its Regulatory Impact Analysis. Realized plan-level savings will vary with attachment volumes, current manual effort, and how broadly the capability is reused.

Achieving compliance versus fully electronic data exchange

As of May 26, 2026, plans and providers have two years to implement technology upgrades to meet first-ever HIPAA standards for electronic claims attachment (version 6020 of the X12N 275 with HL7 C-CDA content and 277 transactions) and electronic signature requirements.

Specifically, impacted stakeholders must check these boxes:

  • Have the capability to ingest and validate 275 transactions. Used to send supplemental clinical documentation to a payer.
  • Support 277 RFAI workflows. Generate and send compliant 277 RFAI transactions to request additional information and manage the attachment-response workflow.
  • Support for digital signatures. Receiving systems must validate signatures when used with claim attachments. These systems must be able to route signatures to downstream systems while preserving document integrity.
  • Process CDA attachments. HL7 C-CDA is adopted as the standard for clinical data content in healthcare claims attachment transactions.

In 2024, the US spent $5.3T on healthcare, including over $1T on non-clinical administrative spending. — CMS and McKinsey

CMS 53-F is an important milestone, but compliance alone should not be mistaken for transformation. The rule standardizes how claims are electronically transmitted, helping the industry move beyond disconnected, manual workflows. However, it doesn’t stipulate that the data being exchanged is structured, computable, or automation ready. Today, providers constrained by legacy technology not aligned to modern interoperability standards are left with no choice but to transmit unstructured information, e.g., converting data from EHRs into PDFs and transmitting those documents as attachments. This practice will likely continue, but as compliant with electronic transactions. The real strategic opportunity lies not just in how attachments are sent, but in the quality and structure of the data inside them.

Two paths to electronic attachment exchange

Compliant electronic transmission

Strategic, computable data exchange

The attachment is transmitted electronically using the required X12 275 transaction and an HL7 C-CDA package.

The attachment is transmitted through the same electronic pathway, but the payload contains structured, coded clinical data.

The payload may still contain an unstructured document, such as a scanned PDF or image, wrapped inside a standards-based envelope.

Clinical elements such as diagnoses, procedures, lab values, and medications are captured as discrete data using standard terminologies.

Result: The exchange meets the rule, but the content often still requires manual interpretation, OCR, or downstream review.

Result: Payer systems can automatically ingest, validate, and route the information, reducing manual touchpoints and enabling faster, more scalable processing.

While compliance creates a baseline for electronic exchange, progress depends on improving data quality and usability. True transformation happens when healthcare ecosystem stakeholders shift to a structured, standards-based exchange that enables interoperability and automation.

Streamlining workflows

On the path to transformation and fully electronic data exchange, there are opportunities for modernization and streamlining workflows that can deliver tangible benefits.

An investment in 53-F compliance opens the door to strategic optimization, namely streamlining claims processing to improve first-pass approval rates and limit follow-up requests. Unsolicited attachments are an excellent tool for providers to proactively submit supporting documentation (e.g., certificate of medical necessity for a claim). When the necessary medical documentation arrives with the claim, payers often can expedite those claims, reducing delays and denials.

Each side of the provider-payer equation stands to gain efficiency. Providers get faster payments and fewer rework requests, and payers see improved first-pass payment rates, lowering administrative overhead. To fully realize the benefit of unsolicited attachments, technology must efficiently match and link incoming documents to the correct claim.

Providers report spending the equivalent of more than 100,000 full-time RNs on prior authorization annually. — Health Affairs Scholar

Manual attachment-to-claim processes are inefficient and error-prone. Consider the following priorities as prime opportunities to modernize claims attachments workflows as part of any strategic 53-F initiative:

  • Lifecycle visibility: Provide operational dashboards that track attachment status, dependencies, exceptions, and timelines end-to-end. Visibility enables proactive management of SLA clocks and reduces avoidable provider abrasion.
    Collaboration: Enable seamless integration with provider-facing portals and workflows so that submission is straightforward, validation feedback is immediate, and resubmission loops are minimized.
  • Automation: Automate acknowledgements (for example, 824), route work items for clinical review, and minimize administrative handoffs through rules-based triage and exception handling.

These capabilities can be implemented on the same standards-based backbone required for CMS 53-F compliance, while enabling electronic submission that measurably reduces touches and cycle time. For those able to do so, a parallel approach to building a reusable workflow is ideal, but a staggered approach is better than a siloed plan.

With unsolicited attachments, there are ample opportunities for efficiency gains and improved payer-provider collaboration, but solicited attachments are at very real risk of workflow disruption due to CMS 53-F compliance requirements. Next, we’ll review two cases where overcoming barriers will be prerequisite to long-term progress.

Barriers to progress

Both payers and providers are likely to encounter challenges that must be addressed for both compliance and streamlined workflow achievement.

Compliance safety net for low- and no-tech providers

Provider readiness for FHIR-based interoperability varies significantly across the network but overall is lagging compared to payers. As we noted earlier, delayed standards of adoption on the provider vendor side compounds the prevalence of unstructured data. A recent WEDI survey found that 33% of providers have not started implementation and testing, and 67% polled were unsure of their implementation and testing progress.

There are two competing realities in play when supporting a provider’s compliance obligations. High-tech providers with mature EHR integrations and EDI capabilities continue to experience portal fatigue and are likely aligned with the aim of 53-F to replace provider portals with standardized 277 RFAI and 275 electronic transactions.

Low- or no-tech providers who currently submit claims on paper may face challenges with the new electronic attachment requirement, and payers can support them by offering provider portals in addition to electronic attachment transaction processing capabilities mandated by CMS. Payers that offer a modern, standards-based portal for this group create goodwill and support readiness by meeting providers where they are technologically

Look for a provider portal that communicates with a payer’s EDI infrastructure using standard 277 RFAI and 275 transactions. This type of next-generation portal offers a significant architectural advantage over traditional portals such as those accessible via clearinghouses as it requires new back-end payer system integrations and uses existing transaction-based workflows.

LOINC code adoption and workflow implications

A solicited attachment is a payer-initiated request for clinical documentation to support claim adjudication. Historically, payer-provider information asymmetry bloated these workflows. The mechanism for requesting additional information to support a claim and definition of what information was required was defined by payers, leaving providers to parse the intricacies of any request. When in doubt, providers would sometimes respond with hundreds of documents to ensure the request was properly fulfilled. As a result, clinical review time as part of the response increased.

The introduction of LOINC-coded attachment requests as part of CMS 53-F moves industry toward greater standardization by more precisely defining the category of clinical information being requested and exchanged in both requests and responses.

Rather than leveraging the full LOINC catalog, the rule references a defined subset of LOINC codes specific to HIPAA attachments used within the X12 277 RFAI transaction to identify the category of clinical information required, creating a more consistent and structured request framework across payers and providers.

While this standardization improves clarity, it also introduces new considerations for all stakeholders. Payers must translate existing internal request logic into standardized attachment categories, while providers must interpret and respond to more explicitly defined requests. Even with scope limited to the LOINC subset specific to HIPAA attachments, aligning internal codes, documentation practices, and attachment-response workflows to standardized LOINC-based definitions may require increased coordination.

This shift from flexible, loosely defined document requests to more explicitly categorized, LOINC-coded request and response types defined can create friction during adoption. Organizations that previously relied on broad or loosely defined documentation requests may need to refine how requests are generated, communicated, and fulfilled to ensure alignment with standardized code sets.

Organizations should consider newer, innovative mapping strategies enabled by AI as a way to shorten the timeline for analysis and mapping from custom internal claim pending reason codes to standardized LOINC codes.

Admin savings potential: $15B over 10 years, with total addressable savings of $265B. — McKinsey

Maximize long-term success

CMS 53-F Final Rule compliance alone brings short-term benefits for health plans. Adoption of FHIR for electronic attachments is not mandated as part of CMS 53-F, but it does represent a strategic opportunity aligned with the industry’s broader push to advance interoperability. 53-F aligns directly with the spirit of 57-F and other interoperability mandates as both are pushing the industry to a standardized, real-time data exchange.

FHIR is no longer an optional opportunity to get ahead. It’s a necessary step to fully realize the value of modernization.

Electronic attachments (utilizing HL7 FHIR standards at scale) offer a maximum long-term benefit “lever” for the future minded. By ingesting clinical attachment content into a FHIR data repository, health plans have the potential to unlock new enterprise use cases and cut back on the growing volume of record requests overburdening the system.

However, we expect many participating providers will transmit unstructured attachments for the foreseeable future. Payers that harness new technologies like AI-assisted conversion of unstructured to structured clinical information can realize the benefits prior to widespread industry adoption.

Examples of potential benefits

  • Payment Accuracy: Structured attachment data lowers a large barrier to payers' ability to deploy AI solutions to detect fraud, waste, and abuse (FWA) patterns as well as coding errors by comparing claim details to the attached clinical details.

  • Quality and Risk Adjustment: Attachments often contain rich clinical details that are ultimately hidden behind silos. If converted to FHIR, these clinical details can feed quality programs.
  • Care Coordination and Utilization Management: Attachment data stored in a FHIR repository can be shared across plan departments with consistent privacy controls.

A practical path to modernized claims operations

The CMS 53-F Final Rule gives health plans a rare combination: a clear deadline, a defined standards path, and a problem area where modernization can pay for itself. Payers should treat CMS 53-F as a catalyst for modernizing claims operations and advancing strategic interoperability beyond minimal compliance.

There’s tremendous opportunity to reduce administrative burden and burnout, especially on the provider side, with potential cost savings beyond CMS estimates when you consider the hundreds of thousands, if not millions of attachments still processed manually.

Recommended next steps

  1. Assess current workflows and volume to identify gaps and inefficiencies.

  2. Work with vendors to deploy X12 275/277 and HL7 C-CDA capabilities and test linking attachments to claims in advance.

  3. Educate network providers on CMS 53-F benefits (less burden, faster processing and payments) and provide training on how to submit attachments.

  4. Train internal claims and clinical teams on the new processes, including any changes to adjudication and audit workflows. Prepare staff for initial parallel scenarios (both manual and electronic) during the transition period.

  5. Track key metrics like attachment adoption rate and claim cycle time.

The journey from CMS 53-F compliance to maximum long-term benefit can be viewed (and achieved) in three stages:

  1. Achieve compliance with infrastructure in place for electronic transactions by May 26, 2028.
  2. Leverage capabilities for operational excellence with automatic linking of 837 claims and 275 attachments (unsolicited) and streamline workflows.
  3. Integrate and innovate using FHIR and advanced data strategies to unlock more value from clinical attachment data.

With a long history supporting high-volume, standards-based exchange, Cotiviti is positioned to help health plans implement the required attachment transactions and evolve beyond baseline compliance—especially where correlation, visibility, and workflow automation determine whether modernization is real or just theoretical.

To learn how Cotiviti can help you modernize and streamline workflows while supporting your compliance efforts, you can read our solution fact sheet, contact your primary representative, call 866.292.6971, or share your questions at answers@cotiviti.com.

About the author

Sergiu Headshot_200x200

 

Sergiu Rata serves as associate vice president of product management at Cotiviti, where he leads the strategy, development, and delivery of healthcare technology solutions. With more than 30 years of experience spanning software engineering, product management, implementation, and business leadership, he has a proven track record of bringing innovative products to market and building high-performing teams. Sergiu works closely with commercial health plans, Blue Cross Blue Shield organizations, state Medicaid agencies, and CMS to help advance healthcare modernization and operational efficiency.