The Law That Quietly Reshaped Home Care Compliance
Most home care agency owners didn't get a dramatic warning. No alarm bells, no countdown clock on the wall. But quietly, over the past several years, a piece of federal legislation has fundamentally changed how agencies must document the care they deliver — and the financial consequences of ignoring it are severe.
The 21st Century Cures Act EVV mandate is now fully in effect, and Medicaid reimbursements are on the line. If your agency is still relying on paper timesheets, manual call-in systems, or a scheduling platform that doesn't meet federal standards, you're operating in dangerous territory.
The good news? Understanding what the law actually requires — and what steps you need to take — isn't as complicated as it sounds. This guide breaks it all down in plain language so you can protect your agency, your caregivers, and most importantly, the clients you serve.
What Is the 21st Century Cures Act?
Signed into law in December 2016 by President Obama, the 21st Century Cures Act was a sweeping piece of healthcare legislation designed to accelerate medical innovation, improve mental health treatment, and modernize how health data is managed across the country.
Buried within its hundreds of pages was a provision that would have enormous implications for the home care industry: a federal mandate requiring Electronic Visit Verification (EVV) for all Medicaid-funded personal care and home health services.
In short, Congress decided that paper timesheets and handwritten signatures were no longer sufficient proof that home care visits actually occurred. They wanted digital, real-time verification — and they put federal funding on the line to enforce it.
Why Was the EVV Mandate Created?
The mandate wasn't created in a vacuum. Medicaid fraud in home care had been a persistent and costly problem. The Office of Inspector General had repeatedly flagged improper payments tied to home care claims — visits billed that never happened, times inflated, services misrepresented. According to some estimates, Medicaid improper payments totaled over $80 billion annually across all program types, with personal care services being a notable area of concern.
EVV was designed as a systemic solution — a way to use technology to create an auditable trail for every Medicaid-funded home care visit, making fraud significantly harder to commit and easier to detect.
Key EVV Requirements Under the 21st Century Cures Act
The law specifies that Electronic Visit Verification systems must capture six core data points for every qualifying visit:
- Type of service performed
- Individual receiving the service
- Date of the service
- Location of the service delivery
- Individual providing the service
- Time the service begins and ends
These six data points must be captured electronically at the time of the visit — not reconstructed afterward from memory or paper records. This is a critical distinction. Retroactive documentation doesn't satisfy the requirement.
Which Services Are Covered?
The EVV mandate applies to two primary categories of Medicaid-funded services:
- Personal Care Services (PCS): This includes assistance with activities of daily living (ADLs) such as bathing, grooming, meal preparation, and mobility support. The compliance deadline for personal care services was January 1, 2020.
- Home Health Services: This covers skilled nursing, physical therapy, occupational therapy, speech therapy, and similar clinical services delivered in the home. The compliance deadline for home health services was January 1, 2023.
If your agency delivers either of these service types and bills Medicaid, EVV compliance is not optional — it is a federal requirement.
The Compliance Deadlines and Penalty Structure
This is where many agencies still have blind spots. Yes, the original deadlines have passed — but enforcement and penalties are an ongoing reality, not a one-time checkbox.
States that fail to implement EVV systems face a graduated reduction in their Federal Medical Assistance Percentage (FMAP) — the rate at which the federal government reimburses states for Medicaid spending. These reductions cascade down, meaning agencies in non-compliant states or agencies that aren't properly using EVV-compliant systems risk having their claims denied or reimbursements clawed back.
The FMAP penalty structure works as follows:
- First year of non-compliance: 0.25% reduction
- Second year: 0.5% reduction
- Third year: 0.75% reduction
- Fourth year: 1.0% reduction
- Fifth year and beyond: 1.0% reduction annually
These reductions may seem small in percentage terms, but when applied to a state's total Medicaid spending — which can be in the billions — the financial pressure on states to enforce compliance with agencies is substantial. And that pressure flows directly to you.
How States Are Implementing EVV: Two Models
One of the most confusing aspects of the 21st Century Cures Act EVV mandate is that implementation isn't uniform across the country. Federal law sets the standard, but states determine how agencies actually meet it. There are two primary implementation models:
1. State-Mandated EVV Systems
Some states have built or contracted for a specific EVV platform that all Medicaid-billing agencies must use. In these states, your flexibility is limited — you use what the state provides, often at no cost, and must integrate or reconcile that data with your own internal systems.
2. Open Model (Agency Choice)
Other states allow agencies to use any EVV system they choose, provided it meets the federal data requirements. This gives agencies considerably more flexibility to select a platform that fits their workflow — including all-in-one solutions that combine EVV with scheduling, billing, and care management.
Knowing which model your state uses is step one in building a compliant operation. Your State Medicaid Agency (SMA) is the primary resource for this information, and most states have published detailed EVV implementation guides on their Medicaid websites.
Common Compliance Mistakes Home Care Agencies Make
Even agencies that believe they're compliant often have gaps in their EVV implementation. Here are the most common pitfalls to watch for:
- Using EVV only sometimes: EVV must be used for every qualifying visit, not just some. Inconsistent usage creates audit risk and claim denial exposure.
- Relying on manual overrides too frequently: Most EVV systems allow manual entry for situations where electronic capture wasn't possible (rural areas, connectivity issues, etc.). States monitor the ratio of manual entries. A high override rate triggers scrutiny.
- Capturing data after the fact: EVV is designed to capture data at the point of care. Logging visits hours later — or worse, at the end of a shift — undermines the integrity of the system and may not satisfy state auditors.
- Not training caregivers properly: Even the best EVV system fails if caregivers don't know how to use it correctly. Clock-in errors, missed check-outs, and device issues all create compliance gaps that land on your desk.
- Ignoring exception reports: EVV platforms generate exception reports when something doesn't match — a caregiver clocked in from an unexpected location, a visit that ran significantly longer or shorter than scheduled. These reports need to be reviewed regularly, not ignored.
What Your Agency Needs to Do Right Now
If you're reading this and feeling uncertain about your current compliance status, here's a practical action plan:
- Confirm your state's EVV model. Visit your State Medicaid Agency's website or contact your Medicaid provider relations representative to clarify whether you must use a state system or can choose your own.
- Audit your current EVV usage. Pull reports from your current system. What percentage of visits have complete, electronically captured data? What's your manual override rate? Where are the gaps?
- Evaluate your technology stack. Is your EVV system genuinely meeting all six federal data requirements? Is it integrated with your scheduling and billing, or are you re-entering data across multiple platforms?
- Invest in caregiver training. Make EVV compliance part of onboarding and ongoing training. Caregivers need to understand not just how to use the system, but why it matters.
- Establish a compliance review process. Designate someone in your agency to review EVV exception reports weekly and address discrepancies before they become audit findings.
- Document your exception handling procedures. When manual overrides are necessary, have a clear, documented process for approving and recording them. This protects you in an audit.
How Modern Technology Makes EVV Compliance Less Painful
Here's the reality: EVV compliance doesn't have to be a burden. When it's integrated into a modern operating platform rather than bolted on as an afterthought, it actually improves your operations rather than complicating them.
The agencies that struggle most with EVV compliance are typically those using disconnected systems — a separate scheduling tool, a separate EVV app, manual billing. Every handoff between systems is a point of failure.
Platforms like BridgeCare OS are built with EVV as a core feature, not an add-on — meaning clock-in and clock-out data flows directly into scheduling records and billing, reducing manual entry, eliminating data gaps, and making it significantly easier to generate the clean, compliant documentation that Medicaid auditors expect to see.
When caregivers clock in through a mobile app that captures GPS location and timestamps automatically, when that data populates a visit record that links to the client's care plan, and when your billing team can pull audit-ready reports with a few clicks — that's compliance working for your agency instead of against it.
Looking Ahead: EVV Enforcement Is Only Getting Stricter
It would be a mistake to think that because the original compliance deadlines have passed, the urgency has faded. The opposite is true. States have had time to build out their EVV infrastructure, train their audit teams, and develop the data analytics capabilities needed to flag non-compliant providers.
CMS continues to issue guidance clarifying EVV requirements, and states are increasingly sophisticated in how they use EVV data to identify billing anomalies. Agencies that aren't capturing clean, consistent data today will find themselves increasingly vulnerable as enforcement matures.
"EVV is no longer just a compliance checkbox. It's becoming the foundation of how Medicaid programs verify the quality and integrity of home care delivery. Agencies that embrace it fully will have a competitive and compliance advantage for years to come."
Conclusion: Compliance Is a Business Strategy, Not Just a Legal Obligation
The 21st Century Cures Act EVV mandate changed the home care landscape permanently. Paper timesheets are a relic. Manual call-in systems are a liability. The agencies that are thriving are the ones that have embraced EVV not just as a compliance requirement, but as a foundation for better operations, cleaner billing, and stronger relationships with their Medicaid managed care partners.
If you're not confident in your current EVV compliance posture — or if you're spending hours every week reconciling data between disconnected systems — it's worth taking a hard look at whether your technology is truly built for where home care regulation is heading.
Ready to see what fully integrated EVV compliance looks like in practice? Start a free 14-day trial of BridgeCare OS and explore how modern home care technology can turn compliance from a headache into a competitive advantage — no setup fees, no contracts required.
Keep Reading
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Why Your Caregivers Need a Mobile-First Platform (And What to Look For)
Discover why a mobile-first home care platform boosts caregiver retention, compliance, and efficiency — plus what features to look for in 2024.
HIPAA Compliance for Home Care Agencies: A Practical Guide
Everything home care agencies need to know about HIPAA — common violations, practical compliance steps, and how technology helps protect patient data.
Keep Reading
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Why Your Caregivers Need a Mobile-First Platform (And What to Look For)
Discover why a mobile-first home care platform boosts caregiver retention, compliance, and efficiency — plus what features to look for in 2024.
HIPAA Compliance for Home Care Agencies: A Practical Guide
Everything home care agencies need to know about HIPAA — common violations, practical compliance steps, and how technology helps protect patient data.
Keep Reading
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Why Your Caregivers Need a Mobile-First Platform (And What to Look For)
Discover why a mobile-first home care platform boosts caregiver retention, compliance, and efficiency — plus what features to look for in 2024.
HIPAA Compliance for Home Care Agencies: A Practical Guide
Everything home care agencies need to know about HIPAA — common violations, practical compliance steps, and how technology helps protect patient data.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Why Your Caregivers Need a Mobile-First Platform (And What to Look For)
Discover why a mobile-first home care platform boosts caregiver retention, compliance, and efficiency — plus what features to look for in 2024.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Why Your Caregivers Need a Mobile-First Platform (And What to Look For)
Discover why a mobile-first home care platform boosts caregiver retention, compliance, and efficiency — plus what features to look for in 2024.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Understanding EVV Requirements: What Home Care Agencies Need to Know
A clear breakdown of Electronic Visit Verification requirements under the 21st Century Cures Act — what data to capture, state variations, and compliance tips.
Keep Reading
Everything Home Care Agencies Need to Know About EVV Compliance in 2026
A complete guide to EVV compliance in 2026 for home care agencies — requirements, deadlines, penalties, and how to stay audit-ready year-round.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
Everything Home Care Agencies Need to Know About EVV Compliance in 2026
A complete guide to EVV compliance in 2026 for home care agencies — requirements, deadlines, penalties, and how to stay audit-ready year-round.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
Everything Home Care Agencies Need to Know About EVV Compliance in 2026
A complete guide to EVV compliance in 2026 for home care agencies — requirements, deadlines, penalties, and how to stay audit-ready year-round.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
Everything Home Care Agencies Need to Know About EVV Compliance in 2026
A complete guide to EVV compliance in 2026 for home care agencies — requirements, deadlines, penalties, and how to stay audit-ready year-round.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
Everything Home Care Agencies Need to Know About EVV Compliance in 2026
A complete guide to EVV compliance in 2026 for home care agencies — requirements, deadlines, penalties, and how to stay audit-ready year-round.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance in Home Care Technology: What Agency Owners Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Ready to modernize your home care agency?
BridgeCare OS unites scheduling, EVV, billing, and family transparency on one platform. Start your 14-day free trial — no credit card required.
Start Free Trial →