What Is CPT Coding? How Coders Use the CPT Code Set

CPT stands for Current Procedural Terminology.

The American Medical Association describes the CPT code set as a listing of terms and five-digit codes that primarily describe medical services and procedures performed by physicians and other qualified health care professionals.

In practice that means the services and procedures a coder works with are reported as codes rather than as narrative text — and BLS says it is medical coders who assign the diagnosis and procedure codes, for patient care, population health statistics and billing purposes.

The federal government treats the set as more than a professional vocabulary.

HHS designated CPT under HIPAA as a national coding set for physician and other health care professional services and procedures.

The HIPAA code set rule at 45 CFR 162.1002 defines the pairing precisely.

For physician services, the adopted standard is the combination of HCPCS — maintained and distributed by HHS — and CPT-4, the fourth edition of CPT, maintained and distributed by the American Medical Association.

Day-to-day upkeep runs through the CPT Editorial Panel.

The AMA describes it as an independent group of clinical expert volunteers appointed by the AMA Board of Trustees, responsible for maintaining and updating the code set.

The panel meets three times a year to review applications for new codes or revisions to existing codes.

Anyone may register to attend those meetings or submit an application.

One more piece matters to anyone who works with the set: the AMA holds the copyright to CPT, and any individual or entity using CPT content needs a license from the AMA or an authorized distributor.

Software that uses CPT content — including the encoders and billing systems coders work in — needs that license.

The AMA also states that its CPT Professional Edition and other codebooks are for reference only, and do not give the purchaser the right to use CPT codes in an electronic product.

Every CPT code is five characters, and whether a code is numeric or alphanumeric depends on its category.

Per the AMA, Category I codes range from 00100 to 99499 and are generally ordered into sub-categories based on the type of procedure or service and on anatomy.

Category II codes are alphanumeric supplemental tracking codes used for performance measurement, such as quality data collection.

The AMA states that using Category II codes is optional and not required for correct coding.

Category III codes are temporary alphanumeric codes for new and developing technology, procedures and services.

The AMA releases them electronically three times a year.

The set also includes PLA codes — Proprietary Laboratory Analyses — a CPT code type for proprietary clinical laboratory analyses.

AMA releases PLA codes quarterly, with new codes effective in the quarter following publication.

Timing is the part coders feel.

Most approved CPT changes are incorporated into the annual code set and become effective on January 1, though Category I immunization codes, Category III codes, PLA codes and MAAA codes follow alternative release schedules.

The scale of that annual cycle is real.

For the CPT 2027 code set, the AMA's process produced 453 total editorial changes: 299 new codes, 74 revisions and 80 deletions, effective January 1, 2027.

The input is the record.

BLS lists among the typical duties of medical records specialists (SOC 29-2072 — the occupation category that includes medical coders) reviewing patients' records for timeliness, completeness and accuracy, and using classification systems to assign clinical codes for patients' diagnoses, procedures and medical services.

From there the work is matching.

The coder lines up what the record shows against the CPT descriptors — the terms and five-digit codes the AMA publishes — and works within the conventions the set itself defines.

One example of those conventions: in the CPT manual, an add-on code is designated by the plus symbol, and CMS's National Correct Coding Initiative materials note that add-on descriptors generally include phrases such as "each additional" or "(List separately in addition to primary procedure)".

Currency is a legal requirement rather than a preference.

HIPAA requires covered entities to use the medical data code sets that are valid at the time the health care is furnished, under 45 CFR 162.1000.

The practical upshot: the edition in force on the date of service governs what goes on the claim.

With most CPT changes landing each January 1, staying current is a standing part of the job rather than a one-time training event.

It also leaves a trace a coder can point to later.

A selection backed by the record, the descriptor, the edition and the conventions can be walked through again by an auditor; one recalled from memory or a secondhand list has nothing to show.

For where this skill sits in the wider role — the settings, the career ladder and the hiring process — see the medical coder career guide.

Professional-fee coding works in two code sets at once.

The CPT code says what was done; the ICD-10-CM code says why — the diagnosis or the reason for the visit.

Both are HIPAA-adopted.

Under 45 CFR 162.1002(c), for dates on and after October 1, 2015, the HIPAA medical code sets include ICD-10-CM, with its Official Guidelines, for diagnoses, and ICD-10-PCS, with its Official Guidelines, for hospital inpatient procedures.

ICD-10-CM itself is a U.S. morbidity classification for diagnoses and reasons for visits in all health care settings, based on the WHO's ICD-10.

Its Official Guidelines are approved by the four Cooperating Parties: AHA, AHIMA, CMS and NCHS.

So a coder working professional-fee claims lives in both systems — the AMA's set for procedures, and for diagnoses a classification whose Official Guidelines carry the approval of AHA, AHIMA, CMS and NCHS.

The CPT code is also where payment attaches.

Medicare prices physician services through the Resource-Based Relative Value Scale: RVUs represent the resources — time, skill and intensity — needed to perform CPT services, and the AMA/Specialty Society RUC plays a central role in RVU updates.

CMS's Claims Processing Manual (chapter 12) sets the physician fee schedule amount as the sum of the work, practice-expense and malpractice RVUs, each multiplied by its GPCI, times a conversion factor.

The unit that formula prices is the CPT-coded service a coder selected and put on the claim — which is why descriptor selection is never cosmetic.

CPT does not travel alone.

CMS describes HCPCS as having two main subsystems: Level I is CPT, maintained by the AMA, and Level II is a standardized coding system for products, supplies and services not in CPT — CMS's examples are ambulance services and DMEPOS.

The two are easy to tell apart on sight.

CPT codes run five characters, numeric or alphanumeric by category.

HCPCS Level II codes are a single alphabetical letter followed by four numeric digits.

Maintenance differs too.

CMS — not the AMA — maintains HCPCS Level II, including decisions about additions, revisions and deletions.

Two code families show where the systems meet.

HCPCS G codes identify professional services that would otherwise be coded in CPT but have no CPT code; CMS creates them internally, with no application process, and non-Medicare insurers may use them as well.

On the hospital outpatient side, HCPCS C codes report drugs, biologicals, devices and new-technology procedures under the outpatient prospective payment system, and CMS says non-OPPS hospitals and critical access hospitals may report them at their discretion.

The update rhythm differs.

CMS publishes the official HCPCS Level II update as quarterly public-use files, while most CPT changes take effect once a year on January 1.

HCPCS Level II modifiers sit on the CMS-maintained side of that split too: CMS establishes them internally, they are either alpha-numeric or two letters, and they are published as part of the HCPCS code set file.

For a working coder, the split shows up by claim type.

A professional-fee coder reports the physician's services in CPT and reaches for Level II when the claim has to report something CPT does not describe — an ambulance transport or durable medical equipment, to use CMS's own examples.

The credential layer shows what the field tests.

BLS says employers may prefer to hire certified medical records specialists or expect them to earn certification shortly after hire.

AAPC says certification and training are typically preferred by employers even though no degree is required for medical coding.

AAPC describes its CPC credential as validating comprehensive knowledge of medical coding across outpatient and physician services.

The skills themselves are the ones this page has described.

AAPC's own CPC exam shows the format, as AAPC's exam page described it as of October 13, 2026.

Its questions assess 17 areas of knowledge, mostly presented as coding scenarios, and the end of the exam has 10 cases that test the ability to read and accurately code a medical record.

Confirm current exam details with AAPC before you register.

On the job, the same moves decide audits: reading the record and assigning codes from it, respecting the set's conventions such as add-on notation, and coding from the edition valid on the date of service.

The diagnosis half sits in the same job description — BLS says medical coders assign the diagnosis and procedure codes — and HIPAA requires adherence to the ICD-10-CM Official Guidelines when assigning diagnosis codes.

Building that fluency is a practice problem.

Code from de-identified encounter notes, work through the annual changes each January, and learn the conventions inside the code book rather than from secondhand lists.

Employers hiring for this work post openings on the medical coder jobs board, where you can see the settings and skills each opening calls for.

Career information, not coding, billing-compliance, legal or tax advice; confirm code-set editions, guidelines and licensing terms with the AMA, and HIPAA code-set requirements with HHS or CMS, before you rely on them.