The low-volume threshold: why many solos are excluded from MIPS

Check your status before you assume anything

The honest first move is not to calculate your MIPS obligation from memory — it is to look it up. CMS, not you, determines whether you are excluded, required, or eligible to opt in, and it posts that determination against your NPI on the Quality Payment Program participation-status lookup tool. Check there before you plan around any assumption, because the answer can change from year to year as your Medicare volume and the program's rules move.

The tool returns a status for your identifier — typically your NPI, and your NPI within each practice you bill under — so a clinician who bills in more than one setting can have more than one answer. Run it early in the year, save the screen, and re-run it if your patient mix or billing volume changes. The reason to start here is practical: MIPS penalties and bonuses only touch clinicians the program actually reaches, and a large share of very small practices never cross that line in a given year. Confirm which side of it you are on before you spend a single hour on measure selection, buy a reporting product, or worry about a penalty that may not apply to you at all.

For a lot of solo clinicians, MIPS is a source of low-grade dread built on secondhand information: a colleague's war story, a vendor's sales pitch, a half-remembered figure from a webinar. The lookup dissolves most of that. Either the program reaches you or it does not, and CMS will tell you which, for free, in the time it takes to type your NPI. Everything else on this page only matters after you have that answer, so resist the urge to plan for a burden that may not be yours.

What the low-volume threshold actually measures

The low-volume threshold is the gate that keeps most tiny practices out of MIPS, and it looks at the size of your Medicare Part B business along a few axes: how much you bill in allowed charges, how many Part B patients you see, and how many covered professional services you furnish. CMS sets the exact cutoffs and revisits them over time, so this page points you to the tool rather than quoting a figure.

How the axes combine is what determines your door. Fall below the thresholds and you are excluded; clear all of them and you are required to participate; land in between — over some measures but not others — and you may be eligible to opt in. That is why two solos with similar-looking panels can get different answers: a cash-pay-heavy practice with little Medicare business looks very different to the program than one whose panel is mostly Medicare. Do not reason from a colleague's status; read your own.

The tool also surfaces the special-status flags — small practice, rural, health professional shortage area — that change what is expected of you if you do participate, sometimes reducing the data you must report or adjusting your score. Those flags are determined the same way: by CMS, from your claims, not by self-attestation. The takeaway holds across all of it: the low-volume threshold is a claims-based measurement CMS performs on you, so the reliable path is to read the result it publishes rather than to estimate your own eligibility from figures that shift year to year.

Excluded, required, or opt-in: three doors

Your status resolves to one of three doors, and each carries a different obligation. If you are excluded, MIPS imposes nothing on you: no reporting, no penalty, no bonus, though you may still report voluntarily. If you are required, you report or you accept a payment adjustment on your Medicare Part B claims. If you are opt-in eligible, you get to choose, and the choice is real: opting in makes you fully scored, with the upside and the downside.

The adjustment is not trivial for a required clinician, and it lands in a later payment year, so a missed reporting year quietly reduces payments well after you have forgotten it. Voluntary reporting, by contrast, never triggers a penalty — it produces feedback without financial risk, which makes it a low-stakes way to learn the mechanics before any obligation applies to you. The one status that catches people out is opt-in: choosing to opt in is irreversible for the year and makes you fully scored, so treat it as a decision with a real downside, not a formality.

Reasons a solo might report even when excluded

Being excluded is not always a reason to sit out. Some solos report voluntarily because a payer contract, a value-based arrangement, or a future plan to grow rewards a track record of quality data. If you do choose to engage, the lighter-weight paths matter: MIPS Value Pathways bundle a smaller, specialty-shaped set of measures instead of the full sprawl, and you can pick measures you already do rather than bolting on new work.

Two questions shape a light-touch approach. First, what are MIPS Value Pathways — the MVPs are the smaller, specialty-shaped MIPS that replace a scavenger hunt across hundreds of measures with a curated set built for your kind of practice, so a behavioral-health solo is not sorting through measures written for cardiology. Second, how will the data actually reach CMS: many solos report through a qualified registry or a QCDR rather than wrestling an EHR into direct submission, because registries package the reporting rails and, often, the measures together. The unifying principle is to pick measures you already do — a screening you already administer, a follow-up you already track — so participation documents your real work instead of adding a parallel one. If a measure would force you to change how you practice just to score, that is a signal to look for a better-fitting measure, not to contort the practice around the program.

Whatever you report, report something real. For an excluded solo the value of participating is almost never the small payment adjustment; it is the habit of measuring your own care and the credibility a documented track record lends you in payer conversations. That value only exists if the measures reflect what you actually do. A registry can make submission painless, but no reporting rail rescues measures chosen because they were easy rather than because they describe your practice.

If you are required: keep the audit file and know the exceptions

If you are required to report, build the MIPS audit file as you go, not the week CMS asks for it. Keep the source data behind every measure you submit — the reports, the denominators, the screenshots — because a selected clinician has to produce evidence that the numbers were real. And learn the exit ramps: hardship exceptions exist for clinicians knocked out of reporting by extreme and uncontrollable circumstances, which is where a disaster or a cyberattack can matter.

A ransomware attack is the clearest example of that overlap. If an attack encrypts your systems during the performance year, it can support a hardship exception for the categories it made impossible — and, entirely separately, it triggers a HIPAA obligation, because a ransomware encryption of ePHI is presumed a reportable breach unless a documented risk assessment shows a low probability that the data was compromised 1Ref 1HHS Office for Civil Rights (2016).FACT SHEET: Ransomware and HIPAA.That a ransomware encryption of ePHI is presumed a reportable breach absent a documented low-probability risk assessment, distinct from any MIPS hardship exception.. So the same event lives in two files: the exception request that protects your MIPS score, and the breach analysis that protects you under the Security Rule. Keep them distinct, and keep the audit file current enough that neither one catches you flat.

The audit file is cheap insurance precisely because you may never be asked for it. A required clinician who assembles the evidence at the moment of submission — the measure reports, the dates, the source screens — has already done the hard part; a clinician who planned to reconstruct it later is the one who scrambles when a validation notice arrives two years after the fact. Save it where a future you can find it, labeled by performance year.

'Excluded from MIPS' is not 'exempt from accountability'

Falling below the MIPS threshold ends one obligation, not all of them — quality and integrity reach your practice through other doors. Health plans track their own quality measures, several of which follow your clinical patterns whether or not you report to CMS. Payers re-verify your credentials on a fixed cycle, which is when problems surface. And any clinician who bills a federal program carries screening duties that have nothing to do with MIPS at all. Excluded is not exempt.

HEDIS is the measure set health plans report, and several of its measures reach directly into outpatient behavioral-health practice — antidepressant medication management, or follow-up after an emergency department visit for mental illness — so your everyday patterns feed a plan's quality scores even with no MIPS involvement 2Ref 2National Committee for Quality Assurance (2026).HEDIS.That HEDIS measures such as antidepressant medication management and follow-up after an ED visit for mental illness track outpatient BH patterns regardless of MIPS.. Credentialing is the second door: plans re-verify licensure and query the databases on a set schedule, recredentialing at least every 36 months 3Ref 3National Committee for Quality Assurance (2026).Credentialing — NCQA.That health plans recredential providers at least every 36 months under NCQA's standards, independent of MIPS status., and that cycle is often where an administrative problem like the lapsed license first becomes visible to a payer. The third door is program integrity: if you bill any federal program, no payment may be made for services furnished by an excluded person, and the public LEIE is the check — so you screen yourself and anyone you hire against it, MIPS or no MIPS 4Ref 4HHS Office of Inspector General (2026).Exclusions Program.That no federal-program payment may be made for services furnished by an OIG-excluded person and the LEIE is the public screening check.. Being excluded from MIPS frees you from its paperwork; it does not free you from being a competent, verified, non-excluded professional.

A short decision path this quarter

If you are not sure where you stand, here is the order of operations. Look up your status on the participation-status tool and save the result. If you are excluded, decide once whether any contract or growth plan makes voluntary reporting worth it. If you are opt-in eligible or required, choose measures you already generate, pick a reporting rail, and start the audit file now.

• Look it up first. Confirm your status by NPI on the Quality Payment Program tool before doing anything else, and re-check it each year.
• Excluded? Report only if a specific contract or a plan to grow rewards it; otherwise spend the hours elsewhere.
• Opt-in eligible? Model the downside as seriously as the upside before you opt in, because opting in makes the score binding.
• Required? Pick measures drawn from work you already do, choose a registry or QCDR to carry the data, and keep the audit file as you go.
• Either way, remember that HEDIS, credentialing, and exclusion screening keep applying regardless of your MIPS status.

None of this requires a consultant for most solo practices. It requires knowing which door you are behind, choosing measures that document your real care, and keeping the evidence current — the same discipline that makes the rest of your documentation defensible.