30-60-90 day plan for clinic managers
On this page
A clinic manager runs the business and operations of an outpatient medical practice: the schedule and patient access, the front desk and check-in, billing and collections, staffing for medical assistants and front office staff, supplies, and the compliance records a clinic needs for privacy, workplace safety and lab testing. Providers want full schedules that run on time, patients want appointments they can get, and the owner or health system wants the clinic to collect what it bills. A 30-60-90 day plan for clinic managers should check compliance in the first month, build a baseline of access, flow and revenue, and then fix the workflows behind the worst numbers.
This plan is for the physician owner, practice administrator or health system director hiring a manager for a primary care, specialty or urgent care clinic. For dental practices, see the 30-60-90 day plan for dental office managers. The general structure is in the 30-60-90 day plan template for new hires.
HIPAA, OSHA and CLIA records to check first
A clinic that bills insurance electronically is generally a HIPAA covered entity. As of October 2026, the records a new manager should check include:
- Privacy official and documentation. 45 CFR 164.530 requires a designated privacy official, workforce training, and retention of required policies and documentation for six years from creation or the date last in effect.
- Security risk analysis. 45 CFR 164.308 requires an accurate and thorough assessment of risks to electronic protected health information.
- Business associates. Under 45 CFR 164.502(e), a clinic may let a business associate, such as a billing company or IT vendor, handle protected health information only with satisfactory assurance, documented in a contract, that it will safeguard the information. List every vendor that touches patient data and find the agreement for each.
- Breach notice and patient access. Affected individuals must be notified without unreasonable delay and no later than 60 calendar days after a breach is discovered under 45 CFR 164.404, and requests for access to records generally must be acted on within 30 days under 45 CFR 164.524.
- Bloodborne pathogens. OSHA's 29 CFR 1910.1030 requires a written exposure control plan reviewed at least annually, training at initial assignment and at least annually, hepatitis B vaccination made available within 10 working days of initial assignment, and a sharps injury log for employers that must keep OSHA injury records.
- Lab testing. CMS regulates laboratory testing on humans through CLIA. Under 42 CFR 493.3, a laboratory must hold a CLIA certificate that covers the tests it performs or be exempt, and under 42 CFR 493.15(e), laboratories with a Certificate of Waiver must follow the manufacturer's instructions for each test. Check that the certificate is current and matches the tests the clinic actually runs.
State licensing, controlled substance rules, radiation equipment registration and state privacy laws add requirements. Confirm what applies with counsel or the compliance officer; this is not legal advice.
The 30-60-90 day plan
30-60-90 day plan — [Name], Clinic Manager, [clinic]
Reports to: [physician owner / practice administrator] Start: [date]
Clinic: [N] providers, [N] MAs/nurses, [N] front office
Systems: [EHR / practice management] Payers: [main payers]
Lab: [waived tests / CLIA certificate type]
DAYS 1-30 — Records and baselines
Goals:
- Check HIPAA: privacy official, risk analysis, training,
business associate agreements
- Check OSHA: exposure control plan, training, vaccination
records, sharps injury log
- Check CLIA certificate against the tests performed
- Work check-in, rooming with an MA, and check-out
- Baseline: next available appointments, no-shows, visit
cycle time, denials by reason, AR by age, turnover
Deliverables by day 30:
- Compliance gap list with owners and dates
- Baseline report the owner agrees with
Check-in: day 30, with [owner / administrator]
DAYS 31-60 — Fix the flow
Goals:
- Close urgent compliance gaps (example: overdue risk
analysis, missing business associate agreements)
- Verify insurance and referrals before the visit
- Work the top denial reasons at the source
- Set a reminder and waitlist process for no-shows
Deliverables by day 60:
- Denials and no-shows tracked weekly against baseline
- Compliance gaps closed or dated
Check-in: day 60
DAYS 61-90 — Own operations
Goals:
- Review schedule templates with providers
- Build a staffing plan for MAs and front office
- Deliver a monthly report with the same measures
Deliverables by day 90:
- Measures improving against baseline
- Monthly report running; staffing plan agreed
Check-in: day 90 — full reviewWhat to measure
The standards below are examples only. Define each measure with the owner at day 30 and track it the same way every month.
| Measure | Why it matters | Example standard (example only) |
|---|---|---|
| Next available appointment by provider | Shows whether patients can get in | Tracked weekly; long waits explained |
| No-show rate | Empty slots are lost visits | Falling against the baseline |
| Visit cycle time | Long waits drive complaints and late clinics | Bottlenecks identified by step |
| Claim denials by reason | Most denials start at the front desk | Top reasons fixed at the source |
| Compliance gaps open | Breach and inspection exposure | Every gap owned and dated |
A filled example
Clinic manager: Grace Liu (invented), previously a front office supervisor at a hospital outpatient department, joining a five-provider family medicine clinic.
Day 30: Found no business associate agreement on file for the answering service and an exposure control plan not reviewed in two years. The clinic had started a new rapid test that was not listed on its CLIA records. Denials were mostly for missing referrals and inactive coverage.
Day 60: Signed the missing agreement, reviewed the exposure control plan with the lead MA and updated the CLIA information with the state agency. Moved eligibility and referral checks to two days before visits and added text reminders with a short-notice waitlist.
Day 90: Denials for referrals and eligibility fell against the baseline, and no-shows dropped. Providers agreed new schedule templates with same-day slots. The owner received the first monthly report.
What "on track" looks like
| Checkpoint | On track | Worth a direct conversation |
|---|---|---|
| Day 30 | Compliance checked; flow observed; baseline agreed | Only financial reports reviewed; no time on the floor |
| Day 60 | Urgent gaps closed; checks moved before the visit | Denials resubmitted without fixing causes |
| Day 90 | Measures improving; monthly report running | Changes announced but not held; providers not involved |
Working with providers and clinical staff
Clinic managers usually do not supervise clinical decisions, but every operational choice affects the clinical day. Schedule templates, rooming steps, supply levels and staffing ratios decide whether clinics run on time. Meet each provider in the first month and ask what slows their day, and spend time with the medical assistants, whose rooming and documentation work sets the pace. The medical assistant plan shows how new MAs ramp, and the nurse manager plan is useful where the clinic has a nursing lead.
What the owner owes the new manager
- Authority over schedules, staffing and front office processes, agreed with the providers.
- Access to payer portals, contracts and billing reports.
- Budget for compliance work when gaps are found.
- A monthly review with the same measures.
Common mistakes
| Mistake | Result | Fix |
|---|---|---|
| Treating compliance as a binder | Missing agreements, stale plans | Check records in the first month |
| Adding tests without checking CLIA | Testing outside the certificate | Review every new test before it starts |
| Chasing denials without fixing intake | New denials replace old ones | Fix the top reasons at the front desk |
| Changing schedules without providers | Resistance and workarounds | Agree templates provider by provider |
Adapting the plan
- Health system clinics: central billing and compliance teams may own parts of the plan; focus on front desk data quality and patient flow.
- Urgent care: replace appointment availability with door-to-provider time and staffing to arrival patterns.
- Specialty clinics: add referral intake, prior authorization and procedure scheduling.
If you are building the front office, the medical receptionist screening questions and the medical billing coder screening questions cover the roles a clinic manager depends on most.
Questions people ask
What should a new clinic manager check first?
Compliance records and patient flow. On compliance: the HIPAA privacy official designation, the last security risk analysis, business associate agreements, OSHA bloodborne pathogens records and the CLIA certificate for any lab testing. On flow: appointment availability, no-shows, check-in to check-out time, and claim denials by reason.
Does a clinic need a CLIA certificate for rapid tests?
Generally yes. CMS regulates laboratory testing on human specimens through CLIA, and a laboratory must hold a CLIA certificate that covers the tests it performs or be exempt. A clinic doing only waived tests, such as many rapid tests, typically holds a Certificate of Waiver and must follow the manufacturer's instructions for each test. Contact the state survey agency for applications. This is not legal advice.
How do you measure a clinic manager's first 90 days?
Against a day-30 baseline: appointment availability, no-show rate, visit cycle time, claim denials by reason, days in accounts receivable and staff turnover, plus compliance gaps closed. Use the clinic's own history rather than industry figures.
How is a clinic manager different from a dental office manager?
The business structure is similar, but a medical clinic usually has more providers and payers, more referral and prior authorization work, point-of-care lab testing under CLIA, and clinical staff such as medical assistants and nurses whose workflows the manager schedules around. A dental office manager plan centers on hygiene recall and dental insurance.