ICD code Z28.9 – Immunization not carried out for unspecified reason

Key takeaways

Z28.9 is a billable ICD-10-CM code valid for FY2026, effective October 1, 2025, for immunizations deferred with no reason recorded.

The parent code Z28 is non-billable; never submit it for HIPAA-covered transactions. Always code to a specific subcode.

Z28.9 is a last-resort code. If the reason for non-vaccination appears anywhere in the record, a more specific Z28 subcode applies instead.

Associated CPT vaccine administration codes (90460, 90471) may appear alongside Z28.9 when the clinician documents counseling or a separate service at the same visit.

Pabau, practice management software, links encounter documentation to claim preparation and submits claims electronically through Claim.MD.

ICD-10 Code Z28.9: definition and billable status

ICD-10 Code Z28.9 is a billable ICD-10-CM status code. It indicates that a patient did not receive an immunization and that the medical record leaves the reason unspecified or undocumented. It sits in Chapter 21 of ICD-10-CM, “Factors influencing health status and contact with health services” (Z00-Z99). Within that chapter it falls in the Z20-Z29 block, under the Z28 category for immunization not carried out and underimmunization status. According to the CDC/NCHS ICD-10-CM browser, Z28.9 is confirmed as a billable, specific code, valid for use in HIPAA-covered transactions for FY2026.

The code’s clinical meaning is narrow. The clinician did not give the vaccine, and the chart gives no reason for it. A different Z28 subcode applies the moment a reason exists. That covers patient refusal, a medical contraindication, a belief-based objection, and prior immunity. Z28.9 does not cover vaccine hesitancy, and it does not cover an encounter where the clinician forgot to ask.

All Z28 subcodes: full list and descriptions

The Z28 category groups every scenario in which a clinician did not administer a vaccination, plus underimmunization status. Each branch maps to a different kind of reason. Z28.0 covers contraindications, Z28.1 belief-based decisions, Z28.2 other patient decisions, Z28.3 underimmunization status, and Z28.8 other reasons. The AAPC ICD-10-CM lookup lists Z28.9 as the final, unspecified option rather than the default. Coders who know the full family reach for Z28.9 less often, because they recognize that the record already contains one of the reasons below.

Five of these headings are parent codes rather than claim codes. Z28.0, Z28.2, Z28.3, Z28.31 and Z28.8 all require a further character, so coders can submit only the codes listed in the table above. Note too that Z28.83 covers a vaccine the practice did not have in stock. A documented allergy to the vaccine is Z28.04.

When to use Z28.9 instead of a more specific subcode

The rule is straightforward. Z28.9 is correct only when the clinician did not carry out the immunization and no reason appears anywhere in the medical record. If the clinician recorded even a brief note, such as “patient declined today” or “will defer pending labs,” a more specific subcode applies. Poor documentation habits inflate Z28.9 usage well beyond what CMS designed the code to capture. That pattern draws payer scrutiny on preventive care claims.

Working through a decision framework before coding prevents the most common mis-assignments. The Centers for Medicare and Medicaid Services (CMS) and the National Center for Health Statistics (NCHS) maintain the ICD-10-CM Official Guidelines. They require coders to use the most specific code the documentation supports. Z28.9 sits at the bottom of that decision tree, and the ladder below runs through it in order.

• Patient is acutely ill at the visit: use Z28.01
• A chronic illness or condition contraindicates the vaccine: use Z28.02
• Patient is immune compromised: use Z28.03
• Known allergy to the vaccine or a component: use Z28.04
• Patient declines on religious or philosophical grounds: use Z28.1
• Patient simply refuses the vaccine: use Z28.21
• Patient decides against it for another stated reason: use Z28.29
• COVID-19 vaccination status is being reported: use Z28.310 or Z28.311
• Patient previously had the disease: use Z28.81
• Caregiver refused on behalf of the patient: use Z28.82
• The vaccine was out of stock: use Z28.83
• A reason exists but fits no specific code: use Z28.89
• No reason documented anywhere in the record: use Z28.9

Before assigning Z28.9, read the full encounter note, the problem list, and the nursing documentation. Nursing staff often capture the reason in a separate triage note, where a coder reviewing only the physician note will miss it.

Documentation requirements for Z28.9

Supporting Z28.9 means the medical record has to show affirmatively that no one captured a reason for non-vaccination. Silence on the subject does not amount to that showing. Clinicians should record that they did not give the immunization, and that no one ever obtained or stated a reason.

Billing compliance depends on documentation that supports the code selected. For Z28.9, the minimum record elements are:

• A notation that the clinician did not administer the scheduled vaccine at this encounter
• A statement (or absence of statement) confirming that no one documented or obtained the reason
• The immunization entry marked “deferred” or “not given” in the encounter note or immunization record
• No conflicting documentation elsewhere in the chart that would support a more specific Z28 subcode

The CMS ICD-10-CM official guidelines state that coders may not infer a reason. The clinician has to document it explicitly before a coder can assign a more specific code. Where the chart carries no reason at all, Z28.9 is appropriate and defensible. Practices handling high volumes of preventive care often build an immunization deferral prompt into the encounter template. That captures the reason at the point of care.

Common coding errors with Z28.9

Most denials and audit findings tied to Z28.9 trace back to a small set of repeating mistakes. Payers report them back through the usual denial codes on preventive care claims, so a remittance review will surface them quickly.

• Using a non-billable parent code: Z28 itself is not a valid submission code, and neither are Z28.0, Z28.2, Z28.3, Z28.31 or Z28.8. The claim will reject. Always code to the full subcode level.
• Coding a belief-based refusal as Z28.9 or Z28.21: A religious or philosophical objection has its own code, Z28.1. Z28.21 is a plain refusal with no belief rationale, and Z28.9 means no one documented anything at all.
• Treating Z28.39 as a COVID-19 code: Z28.39 is other underimmunization status and is not specific to COVID-19. The COVID-19 codes are Z28.310 and Z28.311, both added on April 1, 2022.
• Reading Z28.83 as an allergy code: Z28.83 covers unavailability of the vaccine. A documented allergy to the vaccine or one of its components is Z28.04.
• Using Z28.9 when the chart documents a reason: If the chart says the patient declined today, that is a documented reason. Z28.21 (patient refusal) is more appropriate than Z28.9.
• Skipping nursing and triage notes: Reason statements frequently appear in triage notes or nursing assessments, not the physician note. Coders who review only the physician documentation miss these and default to Z28.9 unnecessarily.
• Confusing Z28.9 with underimmunization status codes: Z28.9 describes non-administration at a specific encounter. It does not describe a patient’s overall vaccination history or underimmunization status more broadly.
• Omitting secondary diagnosis codes: A contraindication such as a documented immune compromised state has its own code. Report that condition as a secondary diagnosis alongside the Z28.0 subcode, never in place of it.

High volumes of preventive care claims make these patterns expensive. A quality check built into the coding workflow catches them before claims reach the clearinghouse.

CPT codes commonly associated with Z28.9

Z28.9 appears as a secondary or additional diagnosis code on preventive care and well-child visit claims. The CPT codes below are the ones most commonly billed on the same claim, particularly in pediatric and family medicine practices. Using these CPT codes alongside Z28.9 tells payers that a scheduled vaccine went unadministered at the encounter. That can affect how payers reimburse vaccine counseling services. Clearinghouse edits check the pairing against payer rules before the claim reaches adjudication.

CPT code 90460 requires documentation of counseling. Billing it on a claim that also carries Z28.9, with no counseling note, will typically result in a denial. The same caution applies to 90471, which is not reportable unless the clinician administered a vaccine. Verify payer-specific guidance before reporting either code alongside a non-administration diagnosis.

COVID-19 immunization status and Z28.9

On April 1, 2022, ICD-10-CM added two dedicated COVID-19 codes under Z28.31, “Unvaccinated for COVID-19.” They sit inside Z28.3, the underimmunization status branch, rather than alongside the immunization-not-carried-out codes. These codes matter because payers, public health registries, and some quality measure sets treat COVID-19 vaccination status as a distinct reporting category.

The relationship between these codes and Z28.9 follows the same specificity logic as the rest of the Z28 family. Z28.9 is not the correct code for an unvaccinated COVID-19 patient. The correct approach:

• Z28.310 – Unvaccinated for COVID-19: the patient has received no dose of any COVID-19 vaccine
• Z28.311 – Partially vaccinated for COVID-19: at least one dose given, series incomplete
• Z28.39 – Other underimmunization status: a general code for any other vaccine, not a COVID-19 code
• Z28.9: still applies when the clinician deferred a non-COVID-19 vaccine at the same encounter without documenting a reason

Practices billing Medicare Annual Wellness Visits may need to report COVID-19 vaccination status as part of the encounter. The ICD List reference tool provides a searchable table of the full Z28.3 subcode set. That includes the two COVID-19 codes added on April 1, 2022, both still current in the FY2026 edition.

Pediatric and well-child visit coding with Z28.9

Pediatric and family medicine practices generate more Z28.9 volume than any other specialty. Well-child visits are where clinicians are most likely to defer scheduled immunizations. The Vaccines for Children (VFC) program and Medicaid immunization requirements add another layer of obligation. Practices in VFC must record reasons for non-administration in their registry entries, so the documentation almost always exists. That makes Z28.9 rarely appropriate in a VFC context.

In practice, the most common pediatric scenario generating a legitimate Z28.9 is a walk-in sick visit. Immunizations were on the schedule, but the family did not raise them and the clinician did not address them in the note. No reason appears anywhere in the record. Even then, the better workflow is to document “immunizations deferred, reason not discussed at this encounter.” That note moves the code toward Z28.89, other reason. A system that prompts staff for a deferral reason at check-out moves most of these encounters onto a specific subcode.

The American Academy of Family Physicians (AAFP) and the American Academy of Pediatrics both recommend an immunization status check in every well-child workflow. That holds whether or not the clinician gives vaccines that day. That single change tends to shift Z28.9 usage toward more specific subcodes. The conversation happens, and staff document it.

How practice management software supports Z28.9 coding accuracy

Coders assign Z28.9 because the record hands them nothing more specific to work with. The correction belongs at the encounter, where a structured prompt can capture the reason while the patient is still in the room. Software that pairs ICD-10-CM code search with those prompts keeps the chart and the claim in step.

Pabau’s claims management software connects encounter documentation with claim preparation, so the coder works from what the clinician recorded. Digital intake forms carry structured immunization status fields. They capture the refusal reason, the caregiver decision-maker, and the deferral rationale before staff close the encounter.

For practices submitting Z28-coded claims to US payers, the remittance files returned by the clearinghouse reveal denial patterns quickly. A spike in Z28.9 denials or downcodes points back to the encounter template rather than the coding queue. Pabau submits claims electronically through Claim.MD, and the pre-submission edits there catch code-pair problems before a payer sees them.

Code immunization deferrals from what the chart says

Pabau connects encounter documentation to claim preparation and submits claims electronically through Claim.MD. Your coders see what the clinician recorded before the claim leaves the practice.

Book a demo

Conclusion

ICD-10 Code Z28.9 is a defensible choice when the record carries no reason for non-vaccination at all. Most practices reach for it far more often than the code warrants. A structured deferral prompt, checked against the Z28 subcode family, moves those encounters onto the code the documentation supports.

Pabau connects documentation to claim preparation and routes claims through Claim.MD’s pre-submission edits. Submission problems surface before a payer sees them. If your preventive care claims are generating Z28.9 denials, start with the encounter template. Book a demo to see how Pabau helps your team code immunization deferrals from what the chart says.

Continue your research

Need the wider compliance picture behind your coding? Medical billing compliance covers the laws, the common violations, and a downloadable checklist for your practice.

Want to see what a clearinghouse checks before a claim goes out? Claim.MD clearinghouse review explains how pre-submission edits work and what they catch.

Looking to reduce denials across your preventive care billing? Denial management in healthcare covers root-cause analysis and workflow fixes for common denial patterns.

Frequently asked questions