business

RPM in New York: Medicaid, SHIELD Act Compliance & Value-Based Care

New York's 3.4 million seniors, SHIELD Act data security requirements, and sophisticated value-based care infrastructure create a distinctive RPM market. This guide covers Medicaid coverage, compliance requirements, and implementation strategies for New York practices.

C
CCN Health Editorial
February 15, 2025
12 min read
RPMNew YorkTelehealthMedicareMedicaidSHIELD ActValue-Based CareData Security
3.4M
Seniors 65+
17.5%
Senior Pop Percentage
SHIELD Act
Privacy Law
Yes
Telehealth Parity

Key Takeaways

  • 01New York has approximately 3.4 million residents aged 65+, representing roughly 17.5% of the state's population — a higher senior concentration than the national average
  • 02The NY SHIELD Act imposes data security requirements beyond HIPAA, including enhanced breach notification obligations and reasonable safeguard standards for private information
  • 03New York's sophisticated value-based care infrastructure — including DSRIP and managed care — creates integration points where RPM data supports quality metrics and shared savings models
  • 04New York does not participate in the Interstate Medical Licensure Compact, meaning providers delivering RPM services to NY patients must hold an active New York medical license
  • 05Major New York health systems including NewYork-Presbyterian, Northwell Health, Mount Sinai, NYU Langone, and Montefiore provide established referral pathways and integration partners for RPM programs
Quick Answer

New York supports RPM through both Medicare and NY Medicaid. Medicare RPM billing follows the standard federal framework (CPT codes 99453, 99454, 99457, 99458). New York has telehealth parity provisions and the NY SHIELD Act imposes additional data security requirements for RPM programs handling private information. New York has approximately 3.4 million residents aged 65+ (roughly 17.5% of the population). The state does not participate in the Interstate Medical Licensure Compact. Practices should consult their MAC and billing specialists for state-specific guidance.

Deep Dive

New York's RPM Landscape

New York presents one of the most sophisticated and densely concentrated RPM markets in the United States. With approximately 3.4 million residents aged 65 and older — roughly 17.5% of the state's population — and a healthcare infrastructure defined by world-class health systems, advanced value-based care models, and strong post-acute care networks, New York offers substantial RPM opportunity alongside unique regulatory and operational considerations.

This guide covers the regulatory, coverage, and implementation considerations for practices launching or expanding RPM programs in New York.

Important: State regulatory information in this article is informational only. Consult your MAC and billing specialist for guidance specific to your practice.

Medicare RPM Billing in New York

Federal Framework, Local Rates

Medicare RPM billing in New York follows the same federal CPT code structure as all states:

CPT Code Description Estimated National Rate
99453 Setup & Education ~$19 (one-time)
99454 Device Supply & Transmission ~$55/month
99457 Clinical Review (first 20 min) ~$48/month
99458 Additional Review (each 20 min) ~$38/month

Estimates based on CMS published fee schedules. Actual New York rates may vary based on GPCI locality adjustments.

New York has some of the highest GPCI adjustments in the country, particularly for localities within New York City and surrounding areas. Manhattan, Brooklyn, and other NYC boroughs typically receive higher reimbursement rates than upstate New York localities. This means RPM programs operating in the NYC metro area may see higher per-patient revenue than the national average estimates. Practices should verify their locality-specific rates through the CMS Physician Fee Schedule lookup tool.

Medicare Administrative Contractor

New York Medicare claims are processed by National Government Services (NGS), which serves as the MAC for Jurisdiction K (covering New York and Connecticut). NGS publishes Local Coverage Determinations (LCDs) and articles that may affect RPM billing — practices should monitor NGS communications for state-relevant guidance.

New York Medicare Population

New York has one of the largest Medicare populations in the country. Key demographic factors relevant to RPM:

  • High concentration of Medicare beneficiaries in the New York City metropolitan area, including Manhattan, Brooklyn, Queens, the Bronx, and Staten Island
  • Significant senior populations on Long Island (Nassau and Suffolk counties) and in Westchester County
  • Upstate population centers in Buffalo, Rochester, Syracuse, and Albany with distinct demographic profiles
  • Diverse patient populations requiring multilingual patient education and culturally competent care delivery

New York Medicaid and RPM Coverage

Current Coverage Status

New York operates one of the largest Medicaid programs in the nation, covering millions of enrollees through both managed care and fee-for-service arrangements. The state has expanded telehealth and remote monitoring provisions in recent years, reflecting a supportive approach to remote care delivery.

Managed Care and RPM

The majority of New York Medicaid beneficiaries are enrolled in managed care plans. RPM coverage and reimbursement may vary by managed care organization, and practices should verify coverage with each plan individually. Several New York managed care plans have incorporated RPM into their care management programs, particularly for members with complex chronic conditions.

Value-Based Care Integration

New York has been a national leader in value-based care transformation. The state's Delivery System Reform Incentive Payment (DSRIP) program and subsequent value-based payment initiatives have driven health systems and managed care organizations toward outcomes-based reimbursement models. RPM fits naturally into these models because:

  • Continuous monitoring data supports quality metrics and performance targets
  • RPM enables early intervention that can reduce hospital admissions and emergency department visits
  • Device data provides objective documentation of patient status and care plan adherence
  • Remote monitoring supports care coordination activities that are incentivized under value-based arrangements

Practices operating in value-based arrangements should explore how RPM data can support their quality reporting and shared savings calculations.

Dual-Eligible Patients

New York has a significant population of dual-eligible patients (eligible for both Medicare and Medicaid). For these patients, Medicare is typically the primary payer for RPM services. New York's managed care plans for dual-eligibles, including Fully Integrated Duals Advantage (FIDA) plans and D-SNPs, may include RPM as a covered supplemental benefit. Practices should understand their billing coordination requirements for dual-eligible patients.

The NY SHIELD Act and RPM Data Security

Overview

The New York SHIELD Act (Stop Hacks and Improve Electronic Data Security Act) imposes data security and breach notification requirements that go beyond federal HIPAA standards. For RPM programs handling the private information of New York residents, the SHIELD Act creates additional compliance obligations.

Key SHIELD Act Requirements for RPM Programs

Enhanced breach notification: The SHIELD Act expanded New York's data breach notification law to include a broader definition of private information and requires notification to affected individuals, the Attorney General, and other state agencies when a breach occurs.

Reasonable safeguard standards: Organizations handling private information of New York residents must implement reasonable administrative, technical, and physical safeguards. This includes:

  • Designating employees to coordinate security programs
  • Identifying reasonably foreseeable risks to data security
  • Assessing the sufficiency of safeguards in place to control identified risks
  • Training and managing employees in security practices
  • Selecting service providers capable of maintaining appropriate safeguards

Implications for RPM technology selection: When evaluating RPM platforms for use in New York, practices should verify that the platform vendor:

  • Maintains SHIELD Act-compliant data security practices
  • Has documented breach notification procedures that meet NY requirements
  • Can demonstrate reasonable safeguards for patient data at rest and in transit
  • Includes SHIELD Act compliance as part of their Business Associate Agreement

SHIELD Act vs. HIPAA

While HIPAA already provides a comprehensive framework for protecting healthcare data, the SHIELD Act adds state-level requirements in several areas:

  • Broader definition of covered information (beyond traditional PHI)
  • Specific technical, administrative, and physical safeguard requirements
  • Enhanced breach notification procedures and timelines
  • Applicability to any entity handling New York residents' data, regardless of where the entity is located

RPM programs should ensure their compliance frameworks address both HIPAA and SHIELD Act requirements.

Licensure and Interstate Considerations

No Interstate Compact Membership

Unlike many other states, New York does not participate in the Interstate Medical Licensure Compact (IMLC). This means physicians delivering RPM services to New York patients must hold an active New York medical license through the standard licensing process.

For multi-state RPM operations, this creates additional credentialing requirements. Practices and RPM companies serving New York patients should ensure all monitoring and reviewing physicians are properly licensed in the state.

Implications for RPM Programs

  • Providers reviewing RPM data and making clinical decisions for New York patients must hold a valid New York license
  • Multi-state RPM staffing models must account for New York's licensing requirements
  • Telemedicine providers working with RPM programs need New York credentials even if they are physically located in another state

New York Health System Landscape

Major Health Systems

New York's healthcare market is anchored by some of the most prominent health systems in the world:

  • NewYork-Presbyterian — One of the nation's most comprehensive academic health systems, affiliated with Columbia and Weill Cornell, with hospitals across the NYC metro area
  • Northwell Health — The largest health system in New York State, with 21 hospitals and extensive outpatient networks primarily across Long Island, NYC, and Westchester
  • Mount Sinai Health System — Major academic health system in NYC with hospitals in Manhattan, Brooklyn, and Queens
  • NYU Langone Health — Leading academic medical center with hospitals and outpatient facilities across Manhattan, Brooklyn, and Long Island
  • Montefiore Health System — Major health system serving the Bronx and surrounding communities, affiliated with Albert Einstein College of Medicine

These systems represent referral partners, integration points, and potential institutional RPM adoption opportunities. Many have invested heavily in value-based care infrastructure and may be particularly receptive to RPM programs that align with their quality and outcomes objectives.

Upstate Health Systems

Beyond the NYC metro area, significant health systems serve upstate New York:

  • University of Rochester Medical Center / Rochester Regional Health — Major health systems serving the Rochester area
  • Roswell Park Comprehensive Cancer Center — National Cancer Institute-designated center in Buffalo
  • Albany Medical Center — Major academic center serving the Capital Region

Skilled Nursing and Home Health

New York has a large skilled nursing facility (SNF) and home health infrastructure, particularly in the NYC metro area and Long Island. These post-acute care settings represent concentrated RPM enrollment opportunities where:

  • Residents and patients typically have multiple chronic conditions amenable to remote monitoring
  • Existing clinical staff can manage RPM workflows within established care routines
  • Integration with facility EHR systems streamlines data flow and documentation
  • RPM data supports readmission reduction initiatives that are financially incentivized under value-based arrangements

Regional Implementation Considerations

New York City Metro

The NYC metropolitan area offers the highest patient density but also the most complex operational environment:

  • Extremely high concentration of Medicare beneficiaries in a compact geographic area
  • Higher GPCI-adjusted reimbursement rates for NYC localities
  • Extensive health system and specialist networks
  • Diverse patient populations requiring multilingual support across dozens of languages
  • Multiple competing managed care organizations with varying RPM coverage policies
  • Strong home health and SNF infrastructure creating institutional RPM opportunities

Long Island and Westchester

Suburban communities in Nassau, Suffolk, and Westchester counties combine high patient density with established healthcare networks:

  • Large senior populations with high healthcare utilization
  • Strong primary care and specialty practice communities
  • Established senior living and assisted living markets
  • Generally excellent cellular connectivity supporting cellular-enabled devices
  • Proximity to NYC health systems for specialty referral coordination

Upstate New York

Upstate markets (Buffalo, Rochester, Syracuse, Albany, and surrounding communities) present different dynamics:

  • Smaller but concentrated senior populations in urban centers
  • More rural areas between cities with limited specialist access — making RPM clinically valuable
  • Distinct health system affiliations and referral networks
  • Generally lower cost structures than NYC, which may affect program economics
  • Growing interest in RPM among rural practices looking to extend care access

Getting Started with RPM in New York

Step 1: Assess Your Patient Population

Identify patients with chronic conditions amenable to RPM — hypertension, diabetes, heart failure, COPD, and chronic kidney disease are the most common qualifying conditions. Evaluate both your Medicare and Medicaid patient populations, as both pathways may support RPM reimbursement.

Step 2: Verify Payer Coverage and GPCI Rates

For each major payer in your practice, confirm RPM coverage and billing requirements:

  • Medicare: Standard federal RPM codes with GPCI-adjusted rates for your New York locality (NYC localities typically receive higher adjustments), processed through National Government Services
  • NY Medicaid: Verify coverage with the NYS Department of Health and your managed care plans
  • Commercial: Contact payer representatives to confirm RPM-specific coverage policies
  • Value-based contracts: Review your existing VBC arrangements for RPM-related quality metrics or incentives

Step 3: Ensure SHIELD Act Compliance

Before launching an RPM program, verify that your technology infrastructure meets SHIELD Act requirements:

  • Confirm your RPM platform vendor maintains SHIELD Act-compliant data security
  • Document your practice's security safeguards and breach notification procedures
  • Ensure Business Associate Agreements include SHIELD Act provisions
  • Train staff on both HIPAA and SHIELD Act requirements

Step 4: Select a Technology Partner

Choose an RPM platform that supports New York-specific requirements:

  • Cellular-enabled devices that work reliably across New York's diverse geography
  • Multilingual patient education materials appropriate for New York's diverse patient populations
  • EHR integration with systems common in your market (Epic, athenahealth, etc.)
  • SHIELD Act-compliant data security and breach notification capabilities
  • Automated 16-day reading threshold monitoring and patient engagement alerts

Step 5: Launch and Scale

Begin with a pilot cohort of your highest-acuity patients. Establish clinical workflows, billing processes, and compliance tracking. Monitor billing rates and patient engagement metrics, and scale enrollment systematically as workflows stabilize.

Conclusion

New York's RPM market is defined by density, sophistication, and regulatory rigor. The state's 3.4 million seniors, world-class health systems, advanced value-based care infrastructure, and strong post-acute care networks create substantial RPM opportunity. At the same time, the SHIELD Act's data security requirements and the state's non-participation in the Interstate Medical Licensure Compact add compliance considerations that practices must address proactively.

For practices that navigate these requirements — ensuring SHIELD Act compliance, verifying managed care coverage, and selecting technology partners that meet New York's regulatory standards — the RPM revenue opportunity and clinical impact potential are among the strongest in the nation. New York's embrace of value-based care creates additional financial incentives for RPM programs that can demonstrate improved outcomes and reduced total cost of care.


Disclaimer: This article is for informational purposes only and does not constitute medical, legal, or billing advice. CPT code reimbursement amounts are estimates based on CMS published fee schedules and may vary by region, payer, and clinical circumstances. State-specific regulatory information is subject to change. Always consult qualified healthcare and billing professionals for guidance specific to your practice.

Let's figure this out together

We work closely with every client to find the right approach for their practice. Think of us as your partner, not just a platform.

Topics

RPMNew YorkTelehealthMedicareMedicaidSHIELD ActValue-Based CareData Security

Why It Matters

Key Benefits

See how this approach drives measurable improvements across your organization.

Dense Market

New York's 3.4 million seniors concentrated in the NYC metro area, Long Island, and upstate cities create one of the most dense RPM-eligible populations in the nation.

Value-Based Integration

New York's advanced value-based care infrastructure creates financial incentives for RPM adoption through shared savings, quality metrics, and care coordination requirements.

Health System Depth

World-class health systems including NewYork-Presbyterian, Northwell, Mount Sinai, NYU Langone, and Montefiore operate extensive networks providing established RPM referral pathways.

Compliance Framework

The SHIELD Act and robust state regulatory framework, while adding compliance requirements, also establish clear expectations that protect both practices and patients.

We're Here to Help

Navigating This Doesn't Have to Be Complicated

We consider ourselves a partner, not just a software provider. Let us walk you through the details and help you find the right approach for your practice.

Common Questions

Frequently Asked Questions

Get answers to the most common questions about this topic.

The New York SHIELD Act (Stop Hacks and Improve Electronic Data Security Act) expands data security and breach notification requirements for organizations handling private information of New York residents. For RPM programs, this means enhanced obligations around data safeguards, including requirements for reasonable administrative, technical, and physical security measures. RPM platforms must also comply with expanded breach notification requirements. While HIPAA already governs healthcare data, the SHIELD Act adds state-level requirements that may affect how RPM programs handle, store, and report on patient data. Practices should ensure their RPM technology partners are SHIELD Act compliant.

New York Medicaid covers telehealth services and has expanded remote monitoring provisions, though specific RPM coverage details may vary by managed care plan. New York has one of the largest Medicaid programs in the country. Managed care organizations in New York may offer RPM as part of their value-based care and care management programs. Practices should verify current RPM coverage with the New York State Department of Health and their individual managed care plans, as coverage policies continue to evolve.

New York practices bill Medicare RPM using the same federal CPT codes as all other states: 99453 (setup, ~$19 one-time), 99454 (device supply, ~$55/month), 99457 (first 20 min clinical review, ~$48/month), and 99458 (additional 20 min, ~$38/month). Reimbursement rates are estimates based on CMS published fee schedules and may vary based on the Geographic Practice Cost Index (GPCI) for your New York locality. Urban New York localities (Manhattan, other NYC boroughs) typically have higher GPCI adjustments. The National Government Services MAC administers Medicare for New York providers.

New York has been a national leader in value-based care transformation, with programs like DSRIP (Delivery System Reform Incentive Payment) driving the transition from fee-for-service to value-based models. RPM data directly supports value-based care metrics by enabling continuous monitoring, early intervention, and documented clinical outcomes. Managed care organizations and Accountable Care Organizations (ACOs) operating in New York often incentivize remote monitoring because it can reduce hospitalizations, emergency visits, and total cost of care — all key performance metrics in value-based arrangements.

Still have questions? We love helping practices figure this out — no pressure, just real answers.

CCN Health

Your Partner in Chronic Care

We're Here to Guide You Every Step of the Way

RPM, CCM, and chronic care management can get complicated. We work closely with every client to figure out the best solutions for their practice.

Contact Us

Drop Us a Message

Have a question about RPM, CCM, or how CCN Health can help your organization? Send us a message and our team will respond within 24 hours.

Response within 24 hours
HIPAA-compliant communications
No commitment required

Send Us a Message

By submitting this form, you agree to our privacy policy. We'll never share your information.