Skip to main content

Surprise Billing & Patient Protections

Understanding Balance Billing Restrictions and Patient Rights

A patient schedules an appointment at an in-network hospital, receives the services, and later opens a bill from a physician they never selected. The physician was out-of-network, even though the hospital was not. In other situations, an emergency leaves no realistic opportunity to choose a participating facility at all. These are the circumstances that surprise-billing protections are designed to address.

Patient financial services teams need to understand more than whether an insurance company paid. They need to determine which protections apply to the service, which portion of a bill can legally be assigned to the patient, whether a valid notice-and-consent exception exists, and how an incorrect balance can be investigated and corrected.

Whether a balance can be billed depends on the care setting, provider and facility relationships, applicable law, and the patient's circumstances. That assessment has to happen before an account is routed into an ordinary statement or collection workflow.

When Balance Billing Becomes a Legal Question

Surprise billing commonly refers to an unexpected out-of-network medical bill, particularly when patients could not reasonably choose an in-network provider. Balance billing refers to billing a patient for a difference between the provider’s charge and what an insurer paid or allowed, outside the patient’s applicable cost-sharing. Not every balance bill is unlawful, and not every ordinary deductible or copayment is a surprise bill.

The federal No Surprises Act (NSA) took effect January 1, 2022. For most employer-sponsored and individual private health coverage, it establishes protections for certain emergency services, covered non-emergency services furnished by out-of-network providers at participating facilities, and covered air ambulance services. Other federal programs, including Medicare and Medicaid, have separate billing protections. [1]

TermMeaning in account reviewImportant distinction
In-network providerProvider participating with the plan under the applicable arrangementA participating facility can still have out-of-network clinicians
Out-of-network providerProvider without the applicable network participationOut-of-network status alone does not establish that the NSA applies
Patient cost-sharingDeductible, copayment, or coinsurance under the coverage termsProtected NSA services generally use the relevant in-network cost-sharing framework
Balance billAdditional billed amount beyond applicable insurance payment and patient cost-sharingMay be prohibited for an NSA-protected service
Good Faith Estimate (GFE)Expected charges provided under applicable rules to uninsured/self-pay patientsA GFE is not the same as an insured-patient estimate or an EOB

Which Coverage and Services Are in Scope?

The protection analysis begins with the plan type, where the service occurred, whether the service was covered, the provider and facility network relationships, and whether any permitted notice-and-consent process occurred. A plan’s EOB or a billing-system “out of network” flag is only one part of that analysis.

SituationTypical federal NSA treatmentWhat to verify
Most emergency services from out-of-network providers or facilitiesProtected against prohibited balance billing and generally limited to in-network cost-sharingEmergency setting, covered benefits, post-stabilization circumstances
Covered non-emergency services at certain in-network facilities by out-of-network providersUsually protected; limited notice-and-consent exceptions may existFacility status, specialty, service, documents and timing
Covered out-of-network air ambulanceGenerally protected against prohibited balance billingAir versus ground transport, coverage and claim determination
Ground ambulanceNot subject to the federal NSA surprise-billing prohibitionsState or other protections may still apply
Routine elective care at an out-of-network officeNot automatically protected by these NSA provisionsActual plan terms, state law and other contractual restrictions

Where Protections Apply in the Care and Billing Process

Emergency and Post-Stabilization Services

For most covered emergency services, the patient cannot be required to obtain prior authorization before emergency care merely because a provider or facility is out-of-network. Applicable NSA protections generally limit the patient to in-network cost-sharing. Post-stabilization services may also be protected; narrowly defined exceptions depend on clinical circumstances and compliant consent. Billing staff should not infer that a patient waived rights because a general intake or financial-responsibility form was signed. [2]

Non-Emergency Care at an In-Network Facility

An out-of-network anesthesiologist, radiologist, pathologist, or other specialist may participate in care at a facility the patient selected because it is in-network. Many such services are covered by NSA balance-billing protections. Certain ancillary services cannot use a notice-and-consent waiver. The relevant facility types and details matter; simply seeing a hospital name in the claim is not enough to determine protection.

Air Ambulance and Ground Ambulance

Covered out-of-network air ambulance transportation falls within the federal protection framework. Ground ambulance transportation does not fall under the same federal balance-billing ban, although state rules or other protections may restrict billing. For transport-related complaints, validate the service type before deciding which rules apply. [3]

Who Is Responsible for Checking and Applying the Rules?

Several teams may touch the same account. Patient access may identify an out-of-network provider during scheduling, billing may transmit the necessary claim data, payer relations may examine contracted or statutory payment rules, and patient financial services may review the final balance. Compliance and legal teams may need to resolve unclear jurisdiction, notice-and-consent questions, or potential violations.

Team or participantTypical roleLimit of responsibility
Scheduling / patient accessCommunicates network and estimate information when available; routes questionsCannot promise every downstream clinician participates in-network
Provider billing and codingSubmits accurate service, facility, and provider informationMust not change clinical facts or codes to produce a preferred payment outcome
Health planProcesses coverage and cost-sharing under applicable requirementsAn EOB needs validation against actual services and protections
Patient financial servicesReviews statements, holds, collections, receipts, disputes and creditsShould route disputed regulatory interpretations for authorized review
Compliance / payer contractingReviews applicability, consent, plan and state rules, and escalationsFormal determinations may require specialist or legal input

What Records and Data Are Needed?

The strongest protection review reconstructs the complete context rather than judging a statement alone. The source documents establish where the patient was treated and by whom; the remittance establishes what the payer adjudicated; the ledger establishes what the patient has actually been charged or paid.

RecordWhat it helps establishReview question
Insurance policy or benefit informationCoverage type and applicable network/cost-sharing termsDoes this plan and service fall within the relevant protection?
Claim and service detailsDate, place of service, rendering/billing provider and billed chargesWas care emergency or non-emergency, and where was it furnished?
Facility and provider network recordsParticipation status for the relevant dateWhich parties were in-network?
EOB/ERA and adjustment dataPayer payment, reductions and assigned patient responsibilityWas cost-sharing processed under the proper framework?
Notice-and-consent forms, if applicableThe documents, timing and circumstances surrounding any purported waiverWas the exception even permitted, and were its requirements met?
Patient account ledger and statementsPayments, deposits, credits, statements, and collection activityWhat balance was actually billed, collected, or referred?

The Difference Between the Recognized Amount and the Provider’s Charge

For NSA-protected services, in-network cost-sharing generally uses a legally defined recognized amount, determined under the applicable all-payer model, specified state law, or federal method. The qualifying payment amount (QPA) is relevant in certain circumstances but is not a universal amount every payer or provider must use. The patient’s cost-sharing base is not automatically the provider’s billed charge or the eventual amount settled between provider and insurer. [4]

A Practical Surprise-Billing Review Workflow

Step 1: Identify the questioned balance

Confirm patient, account, service date, provider, facility, claim, and the specific amount being challenged. Separate the patient’s statement from what the payer placed on the EOB.

Step 2: Establish coverage and service context

Identify the plan type, service setting, emergency status, relevant dates, and covered service. Determine whether a state protection or separate government-program rule may control.

Step 3: Check the network relationships

Validate the facility and individual provider status on the service date. A hospital may be in-network even when a professional claim comes from an out-of-network clinician.

Step 4: Determine whether an exception is possible

Review whether notice-and-consent is legally permitted for that service. If the provider relies on consent, obtain and evaluate the specific documentation; a generic consent form is insufficient by itself.

Step 5: Reconcile remittance and ledger

Compare the payer-designated cost-sharing, payments, adjustments, account transfers, prior patient deposits, and any balance billing. Identify the exact excess amount if one exists.

Step 6: Hold or route the disputed activity as appropriate

Use organizational procedures for a billing hold and suspend inappropriate escalation while an apparent prohibited balance is investigated. Refer legal or policy interpretation questions to authorized personnel.

Step 7: Correct and communicate

After approval, make supported account adjustments or corrected billing actions, resolve statements or collections activity, and communicate an understandable explanation to the patient.

Step 8: Verify completion

Confirm the revised ledger, statements, possible credit/refund, payer coordination, and documentation. Track repeated instances by facility, provider, system rule, or payer.

Worked Example: Protected Out-of-Network Professional Bill

Illustrative scenario: A patient has covered surgery at an in-network facility. An out-of-network clinician submits a professional claim for $2,000. For this example, assume applicable NSA protections prohibit additional balance billing, and the payer determines $180 in permitted patient cost-sharing under the appropriate methodology.

ItemAmountInterpretation
Professional billed charge$2,000Provider’s charge, not automatically collectible from the patient
Payer payment$620Illustrative insurer payment; not proof by itself of correct overall reimbursement
Permitted patient cost-sharing$180Amount assigned under the assumed applicable protection
Additional statement generated$1,200Proposed balance outside the $180 amount
Potentially prohibited excess billed$1,200Requires investigation and correction if protection applies

The reviewer confirms the in-network facility and the clinician’s network status, checks that the service is protected and not subject to a valid exception, and reconciles the actual remittance against the ledger. The $1,200 additional statement isn't justified merely because the provider charged $2,000 and the payer paid $620. If the protection applies as assumed, the patient would not be responsible for the extra $1,200. The remaining insurer-provider payment question must be handled separately.

The hypothetical figures are designed to illustrate classification of amounts; they don't calculate a statutory recognized amount or a provider reimbursement rate.

Notices, Consent, and Limits on Waiving Protections

Some covered non-emergency services may qualify for a narrow notice-and-consent exception, and certain post-stabilization situations have additional requirements. An appropriate notice must explain the potential out-of-network costs and consequences in the prescribed manner and timing. However, consent is not a general loophole for ancillary services, and emergency circumstances carry their own limits. [1] [2]

  • Do not assume that a signature on routine registration paperwork waives NSA rights.
  • Identify the exact provider, facility, service, setting and permitted exception before evaluating consent.
  • Confirm notice content, delivery timing and written consent with the compliance team when applicable.
  • Retain source records and avoid changing the bill solely on an unsupported claim that the patient “agreed to out-of-network rates.”

Uninsured and Self-Pay Patients: Good Faith Estimates

The NSA also establishes a separate transparency process for patients who do not have insurance or are not using insurance to pay for care. In many scheduled-care situations, a provider or facility must furnish a written Good Faith Estimate (GFE) of expected charges. This is distinct from the ordinary insured-patient benefit estimate discussed in earlier Patient Access guides. Emergency care is not generally subject to the advance GFE requirement. [5]

Scheduling or request situationGeneral GFE timing
Scheduled 3–9 business days aheadNo later than 1 business day after scheduling
Scheduled 10 or more business days aheadNo later than 3 business days after scheduling
Requested without schedulingWithin 3 business days after the request
Scheduled only 0–2 business days in advanceAdvance GFE requirement based solely on scheduling generally does not apply

A GFE should identify expected charges for relevant items and services. Current federal implementation may require estimates from individual providers or facilities rather than a single comprehensive estimate covering everyone involved. Readers should verify the applicable rules and any new coordination requirements at the time of service. [6]

Worked Example: Bill Exceeds a Good Faith Estimate

A self-pay patient receives a GFE for $1,400 from a provider. The provider later bills $1,920 for that provider’s services. The difference is $520, which exceeds the federal $400 threshold for potential eligibility for the patient-provider dispute resolution process, assuming the other eligibility requirements are satisfied.

Review itemAmount or ruleResult
Provider’s GFE$1,400Estimate of expected charges
Provider’s initial bill$1,920Compare charges from the same provider or facility
Difference$520$1,920 − $1,400
PPDR thresholdAt least $400 above estimateThreshold met in this example
Time to initiate qualifying disputeGenerally 120 calendar days after the initial billPatient should preserve the bill and estimate and verify the deadline

The $400 rule does not mean the patient automatically owes only the original estimate, nor does it apply to every insured patient’s billing complaint. The eligible patient may request an independent determination. During a qualifying pending PPDR case, specific restrictions apply to collections activity and late fees. [7]

Two Different Dispute Paths

It is easy to confuse the federal payment-dispute mechanisms because both involve independent reviewers. They resolve different disputes between different parties.

ProcessWho uses itCentral question
Patient-provider dispute resolution (PPDR)Qualifying uninsured/self-pay patient versus provider or facilityIs a bill substantially above the patient’s Good Faith Estimate, and what amount is appropriate?
Federal independent dispute resolution (IDR)Eligible provider/facility/air ambulance provider and health planWhat out-of-network payment amount applies between provider and payer?
Insurance appeal or external reviewPatient or authorized representative under applicable plan and lawWas a coverage or claim decision properly made?
NSA complaintPatient or provider reporting suspected noncomplianceDid an entity comply with applicable patient billing protections?

In an eligible federal IDR case, a provider and health plan generally must first attempt open negotiation. The patient is not responsible for funding the extra negotiated or IDR-determined provider payment beyond applicable patient cost-sharing. Detailed IDR eligibility, process deadlines and calculation rules deserve their own specialized guide. [8]

Common Billing Problems and How to Resolve Them

ProblemWhat to inspectAppropriate next action
Patient billed full out-of-network balance after emergency careEmergency setting, plan coverage, claim and EOB, billEvaluate protection and correct prohibited patient transfer
Out-of-network professional claim at in-network hospitalProvider/facility participation, service type and any noticeDetermine whether protected ancillary/non-emergency rules apply
Consent invoked without supporting documentationActual notice, service, timing and permitted exceptionRoute for compliance review before billing
In-network cost-sharing may be wrongEOB, recognized amount methodology, plan responseSeek payer clarification or appropriate reprocessing
Self-pay bill exceeds GFEProvider-specific GFE, initial bill, service differences, datesDetermine PPDR eligibility; provide dispute information
Patient paid disputed excess alreadyReceipt, ledger, remit, corrected liabilityAssess credit or refund and follow authorized refund process
Protected balance sent to collectionsBilling history, collection status and supporting determinationEscalate promptly for corrective action and patient communication
Multiple similar accounts involvedSample claims, facility/provider pattern, configuration and noticesInvestigate recurring control failure with responsible teams

Recognizing a Pattern Without Assuming the Cause

Repeated out-of-network billing complaints may reflect an individual error, a payer adjudication issue, a bad rule that transfers balances automatically, inadequate notice-and-consent review, or inaccurate provider participation records. A pattern warrants careful tracing, not immediate blame. Identify affected populations, compare representative claims with original records, and escalate the validated findings to billing operations, payer relations and compliance.

Patient Communication, Complaints, and Documentation

When a patient questions a bill, explain what is being reviewed: service setting, network status, coverage, payer-designated cost-sharing, applicable protection, and any patient payments already received. Avoid telling the patient that a denial, EOB, or contractual adjustment automatically establishes that they owe the full remaining charge.

Patients may contact the federal No Surprises Help Desk at 1-800-985-3059 or submit a complaint when they believe a covered protection was violated. Complaint and appeal routes are not interchangeable, and state protections or other coverage programs may require different channels. [9]

  • Document the service date, facility, provider, plan and the exact questioned amount.
  • Record the payer response and the evidence supporting protection or a lawful exception.
  • Preserve notice, estimate, bill, payment and correspondence records when relevant.
  • Tell the patient which team will review the issue and how follow-up will occur.
  • Verify that final statements, credits and collections records reflect the resolved balance.

Practical Review Checklist

  • □ Confirm the patient account, service date, provider, facility and insurance plan.
  • □ Determine the setting: emergency, non-emergency, air ambulance, or other service.
  • □ Verify whether federal, state, contract, or program-specific patient protections apply.
  • □ Check network participation and whether notice-and-consent is legally available and supported.
  • □ Compare EOB/ERA cost-sharing with the actual patient ledger and statements.
  • □ Investigate any balance bill beyond permitted cost-sharing.
  • □ For uninsured/self-pay services, review GFE timing and billed amount when relevant.
  • □ Distinguish a patient dispute, insurance appeal, regulatory complaint and provider-payer IDR.
  • □ Route corrections, billing holds, credits, and refunds through approved processes.
  • □ Verify final account accuracy and record any broader trend that merits review.

This checklist is an educational workflow reference, not a substitute for legal interpretation, payer instructions, applicable state requirements, or local patient-financial-services procedures.

References and Further Learning

The sources below support the federal distinctions in this guide. Rules and administrative guidance can change; check the current document, applicable state law and plan/program scope before applying them to an account.

References

SourceWhat It Supports
CMS: What Are the New Protections?Covered services, balance-billing protections, notice-and-consent limitations and program distinctions.
CMS: Medical Bill Rights When Using InsuranceEmergency, facility-based, post-stabilization, air ambulance and ground ambulance distinctions.
CMS: Overview of Key Consumer Protections (PDF)Detailed scope and cost-sharing principles for covered out-of-network services.
CMS: Consolidated Appropriations Act and QPARole of the qualifying payment amount and remittance requirements in NSA implementation.
CMS: Medical Bill Rights When Not Using InsuranceGood Faith Estimate obligations and basic self-pay dispute rights.
CMS: What Is a Good Faith Estimate?Advance scheduling and request timelines, estimate contents and limitations.
CMS: Dispute a Medical BillPatient-provider dispute eligibility, the $400 comparison and the 120-day filing window.
CMS: About Independent Dispute ResolutionSeparate provider–payer IDR process and negotiation pathway.
CMS: Submit a Provider or Insurer ComplaintComplaint process and No Surprises Help Desk contact.

Additional Learning

ResourceWhat You’ll Learn
CMS: Medical Bill RightsPatient-oriented explanations of protected situations and where to seek help.
CMS: Rules and Fact SheetsProvider, facility and plan implementation resources for deeper review.
CMS: Providers and Patient DisputesProvider documentation and collection limitations during qualifying PPDR proceedings.
CMS: Get Help With a Medical BillPatient assistance and routes for questions, complaints, and disputes.

Educational Disclaimer

Revenue Cycle Uncovered is an independent educational resource. Content is provided for general informational purposes and does not represent the policies, practices, or positions of any employer or organization. Workflows, payer requirements, regulations, and operational practices may vary. Information should be independently verified when applied to specific situations.

Continue Exploring Revenue Cycle Uncovered