Guide

The waived-test menu: what a small office may run and bill

Summary

A CLIA Certificate of Waiver covers only tests FDA has cleared as simple and low-risk for error — common examples include glucose meters, urine dipsticks, rapid strep and flu, urine hCG, fecal occult blood, and certain drug-screen and INR tests. The list changes as FDA clears new devices, so check the current one before adding a test rather than assuming last year's menu still applies. The waived test and the office visit are billed and documented separately.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

What 'waived' actually means

A CLIA-waived test is one FDA has determined is simple to perform and carries a low risk of an incorrect result if done as directed — the category the Certificate of Waiver exists to authorize. It isn't a loophole around lab oversight; it's a deliberate carve-out for tests low-risk enough that CLIA's more demanding quality-control requirements aren't needed.

The waiver attaches to specific test systems, not to your practice generally — you're authorized to run the waived tests on the list, using the specific device and method FDA cleared, following the manufacturer's instructions exactly. Running a waived test off-label, or modifying the manufacturer's procedure, can take it out of waived status even though the same analyte is being measured.

The menu is a moving target — check before you add a test

FDA adds newly cleared tests to the waived list on an ongoing basis and can also remove or reclassify a test, so the waived-test menu is not something you memorize once and rely on for years. Confirm current waived status for a specific test system before you buy the analyzer or bill the code, not after.

This matters most when you're expanding your in-office testing — adding a new point-of-care analyzer, or a device your reference lab is pitching you. Ask the vendor for the specific test system's current waived status and keep that confirmation with your CLIA file, rather than relying on a sales rep's verbal assurance that 'it's all waived.'

What a solo practice's waived menu usually includes

In practice, a solo office's waived-test menu tends to cluster around a handful of categories: glucose meters, urine dipstick and pregnancy tests, rapid strep and flu, fecal occult blood, certain INR meters, and — for a prescribing practice — in-office urine drug testing.

In-office udt sits in its own regulatory lane worth reading separately — udt billing patterns draw more OIG scrutiny than most other waived categories — but the certificate itself is the same Certificate of Waiver either way, covered fully in the clia certificate of waiver. Treat the menu as a starting checklist for what's common, not a ceiling on what's possible — plenty of waived tests outside this short list exist for other specialties.

Billing: the test and the visit are two separate line items

A waived test is billed with its own CPT code alongside the office visit, not folded into the E/M level — the two are documented and coded as separate services even though they happen in the same encounter. Reviewing a point-of-care result is one input into the data-complexity element used to select the E/M level under the current medical decision-making framework 1Ref 1Centers for Medicare & Medicaid Services (2023).Evaluation and Management Services Guide.That point-of-care test results reviewed during a visit are one input into the medical decision-making data-complexity element used to select the E/M level., but the test itself still gets its own code.

Keep the connection between the test result and the visit note explicit: why you ordered it, what it showed, and how it changed the plan. That link is what turns 'we happened to run a test' into a documented part of the medical decision-making, and it's the same documentation habit that supports the test administration codes billed alongside instrument-based testing.

A fingerstick test creates occupational exposure — plan for it

Any waived test that draws blood — a fingerstick glucose, hemoglobin, or INR check — creates occupational exposure under OSHA's bloodborne pathogens standard for whoever performs it, which means your exposure control plan has to name that task specifically 2Ref 2Occupational Safety and Health Administration (2026).Bloodborne Pathogens and Needlestick Prevention.That a blood-based waived test (fingerstick glucose, hemoglobin, INR) creates occupational exposure requiring the task be named in the exposure control plan..

This is easy to miss because the test itself feels routine and low-risk, but the standard doesn't distinguish a fingerstick for a waived test from a full blood draw — both are contact with blood as part of a job duty. If your waived-test menu includes any blood-based test, confirm it's listed in your exposure determination, not treated as too minor to mention.

Free or subsidized analyzers: the kickback question

A reference lab or vendor offering a free or below-cost analyzer in exchange for sending them your confirmatory or send-out testing raises a real anti-kickback question, not a hypothetical one — the arrangement has to fit a safe harbor, such as the equipment-rental or personal-services exceptions, with fair-market-value terms set in advance 3Ref 3Office of the Federal Register (2026).42 CFR 1001.952 — Exceptions (Anti-Kickback Safe Harbors).The anti-kickback safe-harbor elements (fair-market value, terms set in advance) a discounted or free analyzer arrangement must meet to avoid kickback exposure..

The safe harbors exist precisely so ordinary business arrangements — renting equipment, paying for services — don't automatically become kickbacks, but they only protect you if the specific elements are met, not just the general idea of the deal. If a vendor's offer feels tied to your referral volume rather than to a fair rental price, OIG's published advisory opinions are the place to check how similar arrangements have actually been analyzed before you sign anything 4Ref 4HHS Office of Inspector General (2026).Advisory Opinions.That OIG publishes advisory opinions analyzing whether specific arrangements, like a subsidized analyzer tied to referral volume, implicate the anti-kickback statute..

Put the analyzer in your risk analysis, not just your CLIA file

A waived-test analyzer that stores results, connects to your EHR, or transmits data over your network becomes part of your ePHI inventory, and the security risk analysis the Security Rule requires should account for it the same way it accounts for your laptop or your billing software 5Ref 5Office of the National Coordinator / ASTP (2026).Security Risk Assessment Tool.That a networked or EHR-connected analyzer storing results belongs in the ePHI inventory covered by the required security risk analysis..

In practice this is a short addition, not a new project: name the device, note what it stores and where it sends data, and fold it into the same risk-rating exercise you already run. Settling the covered-entity test for your practice generally is the prior question that determines whether this section applies to you at all, but for most billing practices handling any electronic PHI, the answer is yes and the analyzer belongs on the list.

Common questions

It changes. FDA continually adds newly cleared test systems to the waived list and can reclassify or remove others, so it's not something to memorize once. Confirm the current waived status of a specific test system — by exact device and method — before you buy an analyzer or start billing the code, rather than relying on what a vendor tells you or what the menu looked like last year.

Yes. The test gets its own CPT code as a separate billed service from the E/M visit, even though both happen in the same encounter. Reviewing the result is one input into the medical decision-making complexity that helps select the E/M level, but that connection doesn't merge the two into a single code — document why you ordered the test and how the result changed your plan.

Yes. Any waived test that involves blood contact — a fingerstick glucose, hemoglobin, or INR check — creates occupational exposure for whoever performs it, the same trigger a blood draw would create. Your exposure control plan needs to name that specific task, with its precautions, even though the test itself is routine and low-risk clinically.

It can be, if the arrangement is really tied to your referral volume rather than a fair-market-value rental or services deal. Anti-kickback safe harbors protect genuine equipment-rental and personal-services arrangements, but only when their specific elements — fair-market pricing, terms set in advance — are actually met. If the offer feels contingent on where you send other testing, check it against OIG's published advisory opinions before accepting.

If it stores results, connects to your EHR, or transmits data over your network, yes — it's part of your electronic PHI inventory the same way your laptop or billing software is. Add it to your existing risk analysis rather than treating it as a separate project: name the device, note what it stores and where the data goes, and rate it alongside everything else.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.Centers for Medicare & Medicaid Services (2023). Evaluation and Management Services Guide. CMS Medicare Learning Network (MLN006764). link ✓That point-of-care test results reviewed during a visit are one input into the medical decision-making data-complexity element used to select the E/M level.
2.Occupational Safety and Health Administration (2026). Bloodborne Pathogens and Needlestick Prevention. U.S. Occupational Safety and Health Administration. link ✓That a blood-based waived test (fingerstick glucose, hemoglobin, INR) creates occupational exposure requiring the task be named in the exposure control plan.
3.Office of the Federal Register (2026). 42 CFR 1001.952 — Exceptions (Anti-Kickback Safe Harbors). eCFR. link ✓The anti-kickback safe-harbor elements (fair-market value, terms set in advance) a discounted or free analyzer arrangement must meet to avoid kickback exposure.
4.HHS Office of Inspector General (2026). Advisory Opinions. HHS Office of Inspector General (OIG). link ✓That OIG publishes advisory opinions analyzing whether specific arrangements, like a subsidized analyzer tied to referral volume, implicate the anti-kickback statute.
5.Office of the National Coordinator / ASTP (2026). Security Risk Assessment Tool. HealthIT.gov. link ✓That a networked or EHR-connected analyzer storing results belongs in the ePHI inventory covered by the required security risk analysis.

https://www.gale.care/for-providers/os-clia-waived-test-menu · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers