HIPAA claims attachments are going digital. Get your workflows ready.

What the rule changes — from side processes to core workflows

Today, claims and attachments operate as separate processes, and not fully automated.

• Claims (837 transactions) are submitted electronically

• Supporting documentation is handled “off to the side” — faxed, scanned, uploaded or emailed

Under the new rule, that separation disappears. Claims and attachments will need to be structured and included in a standardized format within the same workflow.

Now, in addition to the 837 transaction, attachments and signatures must adhere to these standardized formats:

• X12 277 – payer request for additional information

• X12 275 – provider submission of attachments

• HL7 C CDA / Attachments Implementation Guides – structured clinical content

• Standardized electronic signatures for attachment transactions

This changes attachments from an afterthought into an integrated part of the claim itself, allowing automation from the initial submission.

The immediate impact is:

• Higher efficiency and less manual follow-up

• Faster adjudication

• Greater reliance on clean, structured documentation at the source

• Reduced risk, higher compliance

The long-term benefits are expected to deliver:

• Improved patient care

• Auditability

• Faster revenue and predictable cash flow

• Lower labor costs

The bottleneck is unstructured documents

Most healthcare documentation is not structured in a way that supports automated exchange. Even in advanced EHR environments, organizations still depend on scanned documents, external records, legacy systems, and documents created outside standardized templates.

The information in unstructured documents (faxes, scans, emails, PDFs, etc.) make it impossible to automatically extract the data so it can’t be classified, extracted and reliably mapped to claims, often requiring manual intervention to interpret or correct the data.

Simply put, unstructured documents will break automation. Documents must be ready — and usable — from the start.

Hospitals face the biggest disruption

While the rule applies broadly, hospitals and health systems will feel it most.

Compared to physician groups, hospitals manage:

• Higher-value claims

• Greater documentation volume and complexity

• A wider range of clinical content types

• More frequent payer requests for additional information

They also rely heavily on processes the rule effectively eliminates:

• Centralized scanning operations

• Fax-based intake

• Manual indexing and document classification

These processes ― involving a high volume of unstructured documents ― are foundational workflows in many health organizations.

This creates a clear mismatch: highly manual document processes feeding into a system that now requires structured, standardized data. And that mismatch puts hospitals in a position of risk when the process breaks.

EHRs and clearinghouses are limited

It’s tempting to assume that EHRs or clearinghouses will absorb the impact of the rule.

They won’t, and they can’t. Clearinghouses are designed to route transactions, not to fix the quality or structure of the documents being sent.

EHRs can generate structured outputs, but they depend on what’s fed into them. They don’t have the capability to standardize intake documents from siloed clinical systems, scans, faxes, PDFs, or acquired facilities with inconsistent workflows.

Therefore, while health systems may meet the technical requirements of the HIPAA claims rule, they often fall short operationally — underscoring the importance of structuring data at the beginning of the claims process rather than at the point of transmission, when automation will break down.

Compliance requires workflow redesign — not system upgrades

To meet the HIPAA claim attachment rule as intended, hospitals and health systems must redesign how documentation flows in, out and across the organization.

This includes alignment across:

• Health Information Management (HIM) systems

• Revenue cycle operations

• IT and integration teams

• Clinical documentation practices

Key capabilities become non-negotiable:

• Standardized intelligent document capture at the point of intake

• Consistent classification, extraction and validation of data

• Automated routing tied to claim workflows

• Integration across EHRs, document repositories and clearinghouses

Why HIM now sits at the center of the revenue cycle system

One of the biggest shifts driven by this rule is the role of Health Information Management systems, which acquire, analyze and protect digital and traditional medical data while ensuring compliance with laws like HIPAA. With the new HIPAA claims attachment rule, Intelligent Document Processing (IDP) solutions must be integrated with HIM to transform unstructured documents into accessible, structured data as soon as documents enter the system.

Without IDP, revenue cycles stall. Manual workarounds are no longer sustainable, which directly impacts revenue cycle performance. Hospitals will experience delayed adjudication, increased payer requests, higher denial rates, and slower cash flow.

In this new environment, HIM becomes a frontline contributor to revenue — responsible for ensuring that documentation is not only complete, but also usable within standardized workflows.

Where organizations should focus now

Health systems that are moving forward effectively are not waiting for systems to catch up. They’re focusing on improving the underlying workflows.

Early priorities should include:

• Creating a cross-functional team to meet the 2028 deadline

• Inventorying all attachment-related processes

• Identifying dependencies on fax, scanning and manual intake

• Validating vendor and clearinghouse readiness for X12 transactions

• Engaging payers to begin testing electronic attachments

It’s especially critical to have internal alignment involving operations, IT, compliance, privacy, and finance hospital leaders as well as claims operations and finance leaders from the health insurer side. The biggest early mistake is treating this as a narrow IT project instead of an enterprise-wide change effort.

From document chaos to structured workflows

The most difficult part of this transition is rethinking how HIPAA claim attachment workflows should be implemented. That’s where many health organizations need additional support.

We help bridge the gap between today’s fragmented document processes and the structured workflows required under the new rule by:

• Providing onsite services, assessments and operational transformation

• Modernizing document intake at the source

• Converting unstructured content into standardized, usable data

• Designing end-to-end workflows across HIM, revenue cycle and IT

• Orchestrating integration between systems, repositories, payers, and clearinghouses

• Driving change management and operational readiness

Our services look beyond the systems to examine many of the hidden risks associated with inbound and internal documents, job roles, workflow ownership, interoperability, governance, security, accountability between departments, training, and much more. We help health organizations achieve faster adoption, fewer post‑go‑live disruptions and less resistance from frontline teams.

And, no matter what EHR system your organization uses ― Epic, Oracle Health or MEDITECH ― we can prepare you for readiness with the ability to solve the messy middle between document creation and transaction submission. Out with legacy processes; in with compliant, digital documents.

Our approach addresses the root issue — not just how data is transmitted, but how it is prepared and managed across the organization from the start.

We offer over 30 years of industry expertise gained by working with over 3,200 health systems across the country, including 9 out of the 11 largest for-profit hospital systems and 22 out of the 32 largest non-profit hospital systems. Additionally, approximately 70% of the nation’s 40 largest integrated delivery networks are Ricoh customers.

Readiness starts before the transaction

By May 26, 2028, manual attachment workflows will no longer be viable. The two-year implementation window reflects the scale of this change. It’s no secret that enterprise transformations take time.

Readiness also requires a mindset shift from challenge to opportunity. This is a compliance requirement, but it is also an operational advantage. Organizations that act early will be positioned for faster revenue cycles and more scalable operations. Those that wait will discover that compliance alone isn’t enough.

See how our Intelligent Capture helps healthcare organizations transform document intake and workflow orchestration to meet HIPAA claim attachments requirements — and improve revenue cycle performance.