Skip to content
DuringHealth

Popular

    ↑ ↓ to move · Enter to open · Esc to close
    Billing & Revenue CycleOctober 7, 2026 · 8 min read

    Medicare EDI and HIPAA Transactions Explained: 837, 835, 276/277, 270/271 and Acknowledgments

    Every electronic claim is a conversation: you send an 837, and a series of replies tells you whether it got in, what happened to it and what you were paid. Here is what each HIPAA transaction does, how to read the three acknowledgments, who must bill electronically, and what changed recently.

    By During Health Editorial

    Share on LinkedIn

    EDI, electronic data interchange, is the use of nationally established standards to exchange information electronically between business partners. HIPAA turned it into law for health care: it required standard formats for electronic claims and the transactions around them. Medicare fee-for-service follows those standards, and CMS says that all other health care EDI formats became obsolete on October 16, 2003. If you submit claims, check eligibility, track claim status or post payments, you are already using these transactions, often without seeing them.

    What HIPAA standardized

    The standard transactions are named in Part 162 of Title 45 of the Code of Federal Regulations. They come from two standards bodies: ASC X12 for medical, dental and institutional transactions, and NCPDP for pharmacy. Medicare fee-for-service uses ASC X12 version 5010 implementation guides for its claim, remittance, claim status and eligibility transactions, and NCPDP version D.0 and batch 1.2 for pharmacy claims at the DME MACs.

    The transactions Medicare fee-for-service uses

    • 837P

      HIPAA standard

      Professional claim

      005010X222A1

    • 837I

      HIPAA standard

      Institutional claim

      005010X223A2

    • 837D

      HIPAA standard

      Dental claim

      005010X224A2

    • 835

      HIPAA standard

      Remittance advice

      005010X221A1

    • 276 / 277

      HIPAA standard

      Claim status request and response

      005010X212

    • 270 / 271

      HIPAA standard

      Eligibility inquiry and response

      005010X279A1

    • TA1 · 999

      Medicare adds

      Interchange and implementation acknowledgments

      005010X231A1

    • 277CA

      Medicare adds

      Claim acknowledgment

      005010X214

    • NCPDP D.0

      HIPAA standard

      Retail pharmacy claims (DME MACs)

      Telecommunication D.0 / Batch 1.2

    Source: CMS, Medicare Claims Processing Manual, Chapter 24, Section 10.3. Version numbers are the ASC X12 implementation guides in use.

    The transactions Medicare fee-for-service supports, with the implementation guide versions CMS lists.

    The life of a claim, step by step

    The life of a claim, by transaction

    1. 270 / 271

      Check eligibility

      Ask the payer, get the answer back.

    2. 837

      Send the claim

      Professional, institutional or dental, directly or through a clearinghouse.

    3. TA1 · 999 · 277CA

      Read the acknowledgments

      Was the file readable, was it valid, was each claim accepted?

    4. 276 / 277

      Check claim status

      Ask where a claim is, get the answer back.

    5. 835

      Receive the remittance

      Payment and adjustments, ready to post.

    TA1, 999 and 277CA are acknowledgments that Medicare requires its contractors to send; HIPAA itself does not mandate them. Source: CMS, Medicare Claims Processing Manual, Chapter 24.

    Five questions, five transactions.
    1. Eligibility (270/271). You ask the payer about a patient’s coverage and it answers. Do this before the visit, not after the denial.
    2. The claim (837). One standard for each of professional, institutional and dental claims. You send it directly or through a clearinghouse or billing service.
    3. Acknowledgments (TA1, 999, 277CA). The replies that tell you whether the claim got in, covered next.
    4. Claim status (276/277). You ask about a claim, and the payer’s 277 says where it is.
    5. Remittance (835). The electronic explanation of payment: what was paid, what was adjusted and why. This is what your posting and denial work start from.

    Three acknowledgments, three different questions

    HIPAA does not require the acknowledgments, but Medicare requires its A/B MACs and the DME front end to send them, and most payers send something similar. Each answers a different question, and reading them in order tells you exactly where a claim stopped.

    • TA1, the interchange acknowledgment. Was the envelope around your file readable? A problem here means nothing inside was looked at.
    • 999, the implementation acknowledgment. Did each transaction follow the implementation guide? It reports syntax errors, and Medicare also uses it to confirm receipt of claims without errors, unless the submitter asks not to receive those.
    • 277CA, the claim acknowledgment. Did each claim pass the payer’s business edits and get accepted? For Medicare, an accepted claim has passed the translator and the Combined Common Edits/Enhancements Module (CCEM) and has been given a claim control number, which comes back on the 277CA.

    Two practical points follow from CMS’s manual. First, a 999 can be purged from your mailbox after five business days if you do not download it, though contractors are encouraged to keep it up to 30 days. If you miss it, a claim status query gives comparable information. Second, if that query shows no record of the claim, it was probably rejected at the front end for a syntax error, and you can correct and resubmit it to get a fresh 999.

    A rejected claim is not a denied claim

    A claim rejected at the front end never received a claim control number, so there is nothing to appeal. Read the 999 and 277CA, correct the problem and resubmit. Because the CCEM checks for duplicate submissions, resubmitting a claim that was actually accepted can create a second problem, so check the 277CA or claim status first.

    How Medicare EDI is set up

    Medicare fee-for-service EDI runs through the A/B MACs, the Common Electronic Data Interchange (CEDI) front end for DME MACs and, where CMS designates it, the new Technical Consolidation of EDI (TCEDI) gateway. The manual defines the pieces you will meet in onboarding.

    • Submitter. The entity that owns the data being submitted, usually the provider, directly linked to each billing NPI.
    • EDI enrollment. Documents which transactions you will exchange and how you will send them.
    • EDI registration. Names the Medicare contractor you will work with and commits both sides to policies that protect the security and integrity of the data.
    • Trading partner agreement. Covers the integrity of the electronic exchange between the parties.
    • Third party agreement. Required when an agent represents you, such as a billing service, clearinghouse or certain value-added networks.

    You do not need your own translator or a clearinghouse to bill Medicare: the manual says contractors make free claim submission software available and support it, along with software that converts an 835 into a printable document. Whether to send directly, through a clearinghouse or through a billing service is a business decision about volume, staff and the other payers you bill. The exact enrollment steps vary by MAC, so start with your contractor’s EDI page.

    Is electronic billing required?

    Mostly yes. The Administrative Simplification Compliance Act (ASCA) and the regulation at 42 CFR 424.32 require initial Medicare claims to be submitted electronically, with limited exceptions, and Medicare may not pay paper claims that do not qualify. Initial claims include resubmitted rejected claims, claims with paper attachments, demand bills and claims where Medicare is the secondary payer; they do not include adjustments, corrections or appeals.

    • Small providers are exempt. That means fewer than 25 full-time equivalent employees for a provider billing a Part A MAC, and fewer than 10 for a physician, practitioner, facility or supplier billing a Part B MAC or DME MAC.
    • Some claim types cannot be sent in the standard formats, and providers self-assess for them. Roster billing of vaccinations is the example CMS gives.
    • The requirement does not apply to claims submitted by beneficiaries, to providers who only furnish services outside the United States, or to claims for Medicare managed care plans or any health plan other than Medicare.

    Medicare is not the only payer

    HIPAA binds health plans, clearinghouses and providers who conduct the standard transactions electronically, so Medicaid and commercial payers use the same standards. What differs is the detail: payers publish their own companion guides that say which optional data they want and how they respond, and they set their own edits. Test with each payer rather than assuming that what works for Medicare works everywhere.

    A setup and monitoring checklist

    1. Know who your submitter, clearinghouse and billing software are for each payer, and keep the enrollment and agreements current.
    2. Reconcile every day. Match what you sent (837) to what came back (TA1, 999, 277CA) so no claim sits unacknowledged.
    3. Work rejections the same day. They are the cheapest errors to fix because the claim has not started adjudication.
    4. Use 276/277 sparingly and on purpose, for claims that are overdue, not for every claim.
    5. Post from the 835 and reconcile it to the bank deposit. Route adjustments and denial reasons to the people who can fix the cause.
    6. Keep an audit trail of what was sent and received, and limit who can see it. These files contain protected health information.
    7. Ask your vendors and payers, in writing, how and when they will handle changes like TCEDI and the claims attachments rule.

    EDI and prior authorization are converging

    The X12 278 transaction handles prior authorization requests today, and HHS has announced enforcement discretion for it so payers can move to FHIR APIs under CMS-0057-F. Do not assume your portal or 278 route disappears on January 1, 2027. Read our CMS-0057-F article for the dates and a readiness checklist.

    Read: CMS-0057-F and prior authorization

    Frequently asked questions

    What does EDI stand for in healthcare?

    Electronic data interchange: using nationally established standards to exchange electronic information between business entities, such as providers, clearinghouses and payers. HIPAA made specific standards mandatory for health care transactions.

    What is the difference between an 835 and a 277?

    An 835 is the remittance advice: it explains payment and adjustments. A 277 is the answer to a 276 claim status request. Do not confuse either with the 277CA, which is the claim acknowledgment that tells you whether a submitted claim was accepted.

    Are the 999 and 277CA required by HIPAA?

    No. CMS’s manual marks the TA1, 999 and 277CA as not required under HIPAA. Medicare nevertheless requires its contractors to send them as part of its acknowledgment model.

    Which EDI version does Medicare use?

    ASC X12 version 5010 for the claim, remittance, claim status, eligibility and acknowledgment transactions, and NCPDP version D.0 with batch 1.2 for pharmacy claims at the DME MACs, as listed in CMS’s Claims Processing Manual, Chapter 24.

    Can I still send paper claims to Medicare?

    Only if you qualify. Small providers (under 25 FTEs for Part A providers, under 10 for Part B and DME suppliers) and some special claim types are exempt. Everyone else must submit initial claims electronically, and Medicare may not pay paper claims that do not meet an exception.

    Do I need a clearinghouse to bill Medicare electronically?

    Not necessarily. Medicare contractors make free claim submission software available. A clearinghouse or billing service is often useful for volume and for payers other than Medicare, but it is a choice.

    What is TCEDI?

    The Technical Consolidation of Electronic Data Interchange, a new centralized gateway for Medicare fee-for-service EDI. CMS updated Chapter 24 of the Claims Processing Manual, effective October 30, 2026, to support it, and says the update involves no new legislative or regulatory policy.

    What is the HIPAA claims attachments rule?

    A final rule published March 24, 2026 that adopts ASC X12 version 6020 transactions (275 and 277) and HL7 standards for sending clinical documentation with or in response to a claim, plus electronic signature standards. Covered entities must comply by May 26, 2028. It did not adopt standards for prior authorization attachments.

    Major updates

    Major updates, newest first

    1. May 26, 2028All covered entities

      Claims attachments compliance date

      HHS’s final rule, published March 24, 2026 and effective in late May 2026, adopts ASC X12 version 6020 transactions (275 and 277) and HL7 standards for claims attachments and electronic signatures. Covered entities must comply by May 26, 2028. Prior authorization attachments were left out.

    2. Jan 1, 2027Payers

      FHIR prior authorization APIs (CMS-0057-F)

      Impacted payers must run four FHIR-based APIs. HHS announced enforcement discretion for the X12 278 prior authorization transaction, so payers may build FHIR-only. See our CMS-0057-F article.

    3. Oct 30, 2026Medicare FFS

      New centralized gateway: TCEDI

      CMS updated Chapter 24 of the Claims Processing Manual to support the Technical Consolidation of EDI (TCEDI) gateway. CMS says the change involves no new legislative or regulatory policy. TCEDI can take over intake, validation and translation before the MAC’s edits, so claim control numbers can come back earlier on the 277CA.

    4. Oct 1, 2026Medicare FFS

      October 2026 front-end edits

      CMS released the October 2026 update of the Combined Common Edits/Enhancements Module (CCEM) for Part A and Part B MACs and the DME front end, effective October 1 and implemented October 5. The first version was replaced on September 28 to fix the 276/277 flat file.

    Reviewed October 7, 2026. Sources: CMS transmittals R13954CP and R13977OTN; Federal Register, March 24, 2026; CMS fact sheet for CMS-0057-F.

    This article is for general educational purposes and is not legal, coding, billing or compliance advice. Regulations change; confirm specifics against the primary source and with qualified counsel before acting.

    Newsletter

    Regulatory Watch

    Plain-English analysis of CMS and compliance changes that hit revenue cycle teams — when it matters, not weekly noise.

    No spam; unsubscribe anytime. See our privacy policy.

    Is your claim workflow ready for what is coming?

    Prior authorization APIs and claims attachments are changing how information moves. Score your readiness with our free scorecard, or talk to us.