Guide · Medical Practices

Accounting for medical practices – revenue cycle, insurance, and HIPAA.

Medical practice accounting is dominated by revenue cycle complexity: contractual adjustments, insurance aging, denial management, patient responsibility. Plus HIPAA compliance layered across everything. This guide covers what medical practice accounting requires beyond generic bookkeeping.

Revenue cycle

The revenue cycle: why medical accounting is different

Most businesses bill an amount and collect that amount (minus collections effort). Medical practices are different: services billed at full rates but collected at rates determined by payer contracts. The gap between billed and collected drives almost all medical practice accounting complexity.

Gross charges vs net collections

A practice that produces $2M in gross charges might collect $1.1M in net payments. The $900k gap breaks down as:

  • Contractual adjustments. Insurance pays per contract rates, not full charges. The difference is written off as contractual adjustment (not bad debt).
  • Denials. Claims denied for coding errors, eligibility issues, prior authorization missing, etc.
  • Patient responsibility write-offs. Copays and deductibles collected at varying rates.
  • Pure bad debt. Amounts that should have been collected but weren't.

Categorizing this gap correctly matters: contractual adjustments are not bad debt; denials are different from patient bad debt; miscategorizing creates false signals about revenue cycle health.

Net collection rate

Net collection rate = collections / (charges − contractual adjustments). Target 92–97% for well-run practices. Below 90% indicates revenue cycle problems. Above 98% usually impossible without aggressive practices.

Days in AR

AR in days = AR balance / (annual charges / 365). Target under 40 days. Over 60 days indicates collection or billing process problems. Over 90 days suggests systemic revenue cycle dysfunction.

Insurance AR

Insurance AR tracking and aging

Medical AR tracks differently from other industries because of payer mix complexity:

By payer category

  • Commercial insurance. Aetna, BCBS, United, Cigna, Humana, etc.
  • Medicare. Federal program, specific reimbursement rates.
  • Medicaid. State-specific, usually lowest reimbursement.
  • Patient responsibility. Copays, deductibles, coinsurance, self-pay.
  • Workers' compensation. Different billing requirements, often slower payment.

AR aging by payer

Different payers have different expected payment timelines:

  • Medicare: typically 14–21 days after clean claim submission
  • Commercial insurance: typically 14–45 days, varies by payer
  • Medicaid: typically 30–45 days, varies by state
  • Patient responsibility: 30–90+ days

AR aging buckets track each payer category separately. Insurance claims over 90 days old are usually denials that haven't been worked. Patient balances over 90 days typically need collection agency intervention.

Denial management

Denied claims need systematic rework: identify denial reason, correct issue (coding, eligibility, authorization), resubmit. Practices with strong denial management recover 60–75% of denials; practices without systematic denial management write off 40–60% of initial denials as revenue lost.

This work typically sits with revenue cycle staff (not accounting bookkeepers), but accounting needs to track denial volume, recovery rate, and aging of denied claims for management reporting.

HIPAA

HIPAA compliance in medical accounting

Medical practices are HIPAA covered entities. Anyone accessing patient-level data (including AR reports with patient names and balances) is subject to HIPAA rules.

Business Associate Agreement (BAA)

Any third-party accountant, bookkeeper, or accounting service handling data that identifies patients must sign a BAA. The BAA is not optional – it's required by HIPAA Privacy Rule for all Business Associate relationships. See our HIPAA BAA template.

What counts as PHI in accounting

  • Patient AR reports (names + balances + service dates)
  • Claims data in EHR/practice management systems
  • Patient payment records with dates of service
  • Any communication about specific patients with a healthcare context

Generic financial statements without patient-level detail aren't PHI. Practice-level aggregate financial data isn't PHI. But the AR aging report that shows "John Smith – $1,240 balance, insurance pending" is PHI.

Operational implications

Accountants handling medical practice engagements need:

  • BAAs signed before accessing any patient-level data
  • Secure transmission of any files containing PHI (encrypted email, secure portal, not regular email)
  • Access controls limiting who sees PHI
  • Audit logs of PHI access
  • Breach notification procedures if PHI is exposed

Offshore accountants working on medical practices sign BAAs just like US-based accountants do. HIPAA Privacy and Security Rules apply regardless of accountant location – they apply to the data and the relationship, not the geography.

Dental practices have the same requirements. Dental practices are HIPAA covered entities. All of the above applies identically to dental. See dental practices industry page.
Monthly reporting

Monthly reporting medical practices use

  • Practice P&L. Revenue, operating expenses, physician compensation, net practice income.
  • Revenue cycle dashboard. Charges, payments, adjustments, net collection rate, days in AR, denial rate.
  • Provider productivity. Production per provider, wRVU (work relative value units), collections per provider.
  • Payer mix analysis. Revenue by payer category, reimbursement rate trends, contractual adjustment % by payer.
  • Insurance AR aging. By payer, by age bucket.
  • Patient AR aging. Patient responsibility balances by age bucket.
  • Denied claims analysis. Denials by reason, recovery rate, aging of pending denials.
  • Overhead % analysis. Operating expenses as % of collections by category.
  • Benchmark comparison. Practice metrics vs MGMA or industry benchmarks for specialty.

Related: healthcare industry page, dental practices, HIPAA BAA template.

Related

Related pages

Industry-trained offshore bookkeeper, 3-week onboarding.

Book my call →