Centers for Medicare & Medicaid Services (CMS)

The Centers for Medicare & Medicaid Services (CMS) is the US federal agency running Medicare, Medicaid, and the Children’s Health Insurance Program (CHIP). Based in Baltimore, CMS covers about 160 million Americans and sets the payment rules US providers follow.

Congress created CMS in 1965 as part of the Social Security Amendments. It sits inside the Department of Health and Human Services (HHS) and sets payment rates, coverage rules, and quality standards for hospitals, doctors, insurers, and long-term care providers.

For outsourcing partners in medical billing, coding, revenue cycle management, and back-office claims work, CMS is the rulebook. Its coding updates, billing forms, and audit protocols shape what offshore teams process every day for US clients.

Every US-facing health BPO deal, from clinical documentation to claim denials, traces back to a CMS rule. That gives the agency outsized influence over the offshore healthcare labor market.

Key takeaways

• CMS runs Medicare, Medicaid, and CHIP, together covering about 160 million Americans in 2024.
• Created in 1965, CMS operates inside HHS as one of its main operating divisions.
• Its coding sets, fee schedules, and audit rules shape US healthcare revenue cycles day to day.
• Offshore BPO teams handling US medical billing, coding, and denials must follow CMS guidance to stay compliant.
• CMS’s annual outlays exceed $1.5 trillion, making it one of the largest single payers of health services in the world.

How it works

CMS runs three main programs — Medicare for people 65 and older, Medicaid for low-income households, and CHIP for children — and it pays roughly $1.5 trillion a year to hospitals, clinicians, and health plans across the country.

Its core levers are payment rates, coverage rules, and compliance audits. Each program has its own funding stream, eligibility criteria, and administrative structure, but all three run through CMS headquarters in Baltimore, Maryland.

CMS updates its coding sets and fee schedules each year, and it publishes the official CMS program rules and payment updates that US providers cite in daily operations.

State Medicaid agencies then adapt those national rules to local eligibility criteria and benefit designs.

Compliance sits at the heart of every CMS program. Audits, denials, and clawbacks push providers to invest heavily in coding accuracy — which is why medical billing became one of the earliest US healthcare functions to move offshore in the 2000s.

Errors cost providers real money in recoupments, which is why CMS bulletins get read the day they drop by both onshore and offshore teams.

Examples

Every major US healthcare payer, provider network, and outsourcing partner works within CMS rules. Real examples show how the agency’s programs touch insurers, hospital systems, and offshore back-office vendors that manage billing and claims for US clients.

UnitedHealth Group is the largest Medicare Advantage insurer, covering about 7.8 million enrollees in 2024 under CMS-regulated plans. Its Optum arm handles revenue cycle management (RCM) for hundreds of US hospitals under CMS billing codes.

Cognizant and Accenture run offshore RCM operations for US hospital chains, translating CMS coding sets and payment forms into daily claims work.

Much of that processing sits in the Philippines and India, staffed by trained medical coders certified against CMS-approved standards.

Philippine BPO providers, including Cebu- and Manila-based teams, handle claim status calls, prior authorization, and denials management under CMS timelines.

Medicare requires responses within tight windows, so business process outsourcing firms build workflows around CMS deadlines.

Kaiser Permanente is an integrated Medicare Advantage and Medicaid managed-care operator. It reports CMS Star Ratings, the quality benchmark that ties reimbursement to member outcomes, as a headline metric each year.

Related terms

• Revenue cycle management (RCM): the billing and collections workflow that CMS payment rules govern end to end.
• HIPAA: the US privacy law that pairs with CMS billing rules for every patient interaction.
• Business process outsourcing: the model most US healthcare firms use to run CMS-driven back-office work.
• Back-office support: the claims, coding, and admin functions that sit downstream of CMS rulings.
• Data privacy: the compliance layer offshore healthcare teams must maintain alongside CMS protocols.
• Offshore outsourcing: the delivery model powering US healthcare’s CMS-compliant claims processing at scale.

FAQ

What does CMS stand for?

CMS stands for the Centers for Medicare & Medicaid Services, the US federal agency inside HHS that runs Medicare, Medicaid, and CHIP.

It was established in 1965 under the Social Security Amendments. Program details are published at Medicare’s own consumer resources.

How is CMS different from HHS?

HHS is the cabinet-level department overseeing US public health, while CMS is one of its operating divisions focused specifically on health insurance programs.

Every CMS rule ultimately flows up to HHS oversight. That structure matters when offshore teams trace a compliance rule back to its source.

Why does CMS matter for outsourcing firms?

US healthcare providers hire offshore BPO teams to process CMS-regulated billing, coding, and claims work.

Any coding update or audit rule CMS issues directly reshapes what those offshore teams do the next day. Vendors that stay current with CMS bulletins keep their clients out of denial trouble.

How do I find a CMS-focused outsourcing partner?

The Philippines and India host the largest concentration of medical coders and RCM analysts trained on CMS billing rules and audit protocols.

Ready to explore outsourcing options? Browse OA’s directory of vetted providers to find a partner suited to your operation.