The EVV Mandate Is Here — Is Your Agency Ready?
If you run a home care agency that serves Medicaid clients, the 21st Century Cures Act isn't just a piece of federal legislation sitting in a Washington filing cabinet. It's a law that directly affects how your caregivers clock in and out, how you bill Medicaid, and whether your agency continues to receive reimbursements at all. Miss the mark on compliance, and you risk claim denials, payment withholds, and — in worst-case scenarios — losing your Medicaid provider status altogether.
The good news? Understanding what the law actually requires isn't as complicated as it might seem. And with the right systems in place, compliance becomes a natural part of your daily operations rather than a stressful burden. This guide breaks down exactly what the 21st Century Cures Act changed, where EVV requirements stand today, and what concrete steps your agency needs to take to stay on the right side of the law.
What Is the 21st Century Cures Act?
Signed into law in December 2016 by President Obama, the 21st Century Cures Act was a sweeping piece of legislation covering everything from drug approvals to mental health funding. But buried within its hundreds of pages was a provision that would reshape the home care industry: a federal mandate requiring Electronic Visit Verification for Medicaid-funded home care services.
Section 12006 of the Act specifically targets two major Medicaid service categories:
- Personal Care Services (PCS) — services like bathing, dressing, meal preparation, and assistance with daily living activities
- Home Health Care Services (HHCS) — skilled nursing, therapy, and other clinical services delivered in the home
The core idea behind the mandate is straightforward: verify that home care visits are actually happening as billed. Medicaid fraud, waste, and abuse in home care had long been a concern for federal and state governments, with some estimates suggesting improper payments in the billions annually. EVV creates a digital paper trail that confirms the right caregiver visited the right client at the right time and provided the right services.
What Exactly Does EVV Capture?
Under the 21st Century Cures Act EVV mandate, every qualifying visit must electronically capture six specific data points at the time of service:
- Type of service performed
- Individual receiving the service (the client)
- Date of the service
- Location of the service delivery
- Individual providing the service (the caregiver)
- Time the service begins and ends
These six data points must be captured electronically — not through paper timesheets, phone call-ins, or manual entry after the fact. The verification must happen in real time, or as close to real time as technically feasible.
The EVV Deadline Timeline: Where Things Stand
Implementation of the EVV mandate rolled out in phases, and states have navigated this process at different speeds. Here's a general overview of how the timeline played out:
Personal Care Services Deadline
The original federal deadline for EVV compliance for Personal Care Services was January 1, 2020. States that didn't meet this deadline faced a reduction in their Federal Medical Assistance Percentage (FMAP) — essentially a penalty applied to all Medicaid funding, not just home care. Due to the COVID-19 pandemic, the Centers for Medicare & Medicaid Services (CMS) granted extensions to many states, but the window for those extensions has largely closed.
Home Health Care Services Deadline
For Home Health Care Services, the federal deadline was January 1, 2023. Again, some states received CMS-approved extensions, but the expectation is clear: full EVV compliance is no longer optional for any Medicaid-funded home care provider.
Where States Are Today
As of 2024, all 50 states have active EVV programs in some form. However, implementation models vary significantly from state to state:
- State-mandated systems — Some states require agencies to use a specific EVV platform selected and funded by the state
- Open model systems — Other states allow agencies to use any CMS-approved EVV vendor, as long as the system integrates with the state's EVV aggregator
- Hybrid models — A mix of both, where certain program types use state systems and others allow open vendor selection
Knowing your state's model is step one in building your compliance strategy.
What Happens If Your Agency Is Not EVV Compliant?
This is where many agency owners underestimate the stakes. Non-compliance isn't just a technical violation — it has real financial consequences:
- Claim denials — Medicaid will reject claims that don't include valid EVV data
- Payment recoupment — States can recoup payments already made for visits that lack proper EVV documentation
- FMAP reductions — States that fail to enforce EVV requirements face reductions in federal Medicaid matching funds, which creates political pressure to hold agencies accountable
- Audits and investigations — Gaps in EVV data can trigger fraud investigations, even when non-compliance was unintentional
- Provider termination — Repeat or severe violations can result in removal from the Medicaid provider network
"EVV compliance isn't just about checking a regulatory box — it's about protecting your revenue stream and your agency's long-term viability as a Medicaid provider."
Common EVV Compliance Mistakes Agencies Make
Even agencies that have adopted EVV technology sometimes fall short of full compliance. Here are the most common pitfalls to watch for:
1. Allowing Manual Overrides Without Documentation
Most EVV systems allow supervisors to manually correct visit data when a caregiver forgets to clock in or out. This is a legitimate feature — but every manual override must be documented with a reason code. Agencies that allow overrides without proper documentation create audit risk and may have their claims flagged.
2. Using GPS Spoofing or Unapproved Check-In Methods
Some caregivers have been known to check in remotely, claiming to be at the client's home when they aren't. Your EVV system should have geolocation verification that flags check-ins outside the expected service area. This protects your agency from fraudulent billing, even if the fraud is being committed by your own staff.
3. Not Reconciling EVV Data Before Billing
Submitting Medicaid claims without first reconciling your EVV data is one of the fastest routes to claim denials. Build a pre-billing workflow that compares scheduled visits, EVV records, and care plan authorizations before any claim goes out the door.
4. Failing to Train Caregivers Properly
Your EVV system is only as good as the people using it. If caregivers don't understand how to use the app, when to clock in and out, or how to handle connectivity issues in the field, your EVV data will be incomplete and inconsistent. Ongoing training — not just onboarding — is essential.
5. Using an EVV System That Doesn't Integrate With Your State Aggregator
If your state uses an open EVV model, you can choose your own vendor — but that vendor must be able to transmit data to your state's EVV aggregator. An EVV system that doesn't support this integration may leave you with beautiful internal data that never actually reaches the state, resulting in non-compliance even though your caregivers are doing everything right.
What Your Agency Should Do Right Now
If you're feeling uncertain about where your agency stands, here's a practical action plan:
Step 1: Know Your State's EVV Model and Requirements
Contact your state Medicaid agency or visit CMS's EVV resource page to confirm whether your state uses a state-mandated system, an open model, or a hybrid. Understand which specific programs require EVV in your state, as requirements can vary by waiver program.
Step 2: Audit Your Current EVV Data Quality
Pull a report from your current EVV system (or your state's portal) and look for missing clock-ins, excessive manual overrides, GPS anomalies, and gaps in service documentation. A data quality audit will quickly show you where your weak points are.
Step 3: Evaluate Your Technology Stack
If your current EVV solution is clunky, difficult for caregivers to use, or doesn't integrate cleanly with your billing workflow, it may be time for an upgrade. The best EVV systems do more than capture six data points — they connect visit verification directly to scheduling, billing, and compliance reporting in a seamless workflow.
Platforms like BridgeCare OS are built with EVV compliance at the core, integrating real-time visit verification with scheduling, Medicaid billing, and AI-powered compliance alerts — so you're not managing EVV as a separate process but as a natural part of running your agency.
Step 4: Strengthen Caregiver Training
Develop a simple, visual training guide for caregivers covering how to clock in and out, what to do if they lose connectivity, and how to flag issues to their supervisor. Make EVV compliance part of your regular caregiver meetings, not just a one-time onboarding topic.
Step 5: Implement a Pre-Billing Reconciliation Process
Before submitting any Medicaid claims, run a systematic check that matches EVV records to your care plan authorizations and scheduled visits. Flag any discrepancies and resolve them before billing. This single habit can dramatically reduce your claim denial rate.
The Bigger Picture: EVV as a Business Asset
It's easy to view EVV compliance as a regulatory burden — another thing the government is making you do. But agencies that embrace EVV strategically often find it becomes a genuine business asset.
Accurate EVV data gives you visibility into caregiver punctuality, missed visits, and service delivery patterns that you simply can't get from paper timesheets. It reduces billing errors, speeds up reimbursements, and creates documentation that protects your agency in the event of an audit. Some agencies have even used EVV data to identify staffing inefficiencies and reduce overtime costs.
When your EVV system is integrated with the rest of your operations — scheduling, billing, HR, and family communication — the data becomes even more powerful. You're not just capturing compliance data; you're building an operational intelligence layer for your entire agency.
Conclusion: Compliance Is Non-Negotiable, But It Doesn't Have to Be Painful
The 21st Century Cures Act EVV mandate fundamentally changed the documentation requirements for Medicaid-funded home care, and there's no going back. Every agency serving personal care or home health clients under Medicaid must have a compliant EVV system in place — full stop.
But compliance and operational efficiency don't have to be in conflict. With the right technology, the right training, and the right internal processes, your agency can meet every EVV requirement while actually running a smoother, more profitable operation in the process.
If you're ready to simplify EVV compliance and connect it to the rest of your agency's operations, try BridgeCare OS free for 14 days — no setup fees, no contracts, no hassle. Your caregivers, your billing team, and your auditors will all thank you.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Keep Reading
How to Prepare Your Home Care Agency for a Medicaid Audit
Learn how to prepare your home care agency for a Medicaid audit with actionable steps to protect your revenue and stay compliant.
HIPAA Compliance Checklist for Home Care Agencies (2024 Guide)
A practical HIPAA compliance checklist for home care agencies. Protect client data, avoid costly fines, and build trust with this step-by-step guide.
SOC 2 Compliance for Home Care Technology: What Every Agency Owner Must Know
Learn why SOC 2 compliance matters for home care data security and how to evaluate technology vendors before you sign a contract.
Ready to modernize your home care agency?
BridgeCare OS unites scheduling, EVV, billing, and family transparency on one platform. Start your 14-day free trial — no credit card required.
Start Free Trial →