Surprise Medical Billing: Patient Protections Under Federal Law

Federal law now prohibits the most common forms of surprise medical billing, fundamentally changing the financial exposure patients face when receiving care from out-of-network providers. This page explains how the No Surprises Act defines prohibited billing practices, which provider and facility types are covered, how the dispute resolution process operates, and where the law's protections stop. Understanding these boundaries helps patients identify when a bill may be unlawful and what documentation supports a formal complaint.

Definition and Scope

Surprise medical billing occurs when a patient receives a bill from a provider who is outside the patient's insurance network, even though the patient had no meaningful opportunity to choose an in-network alternative. The phenomenon is most acute in emergency settings and in facilities where the hospital itself is in-network but individual providers — anesthesiologists, radiologists, assistant surgeons, and pathologists — contract separately and at out-of-network rates.

The No Surprises Act (NSA), enacted as part of the Consolidated Appropriations Act, 2021 (Public Law 116-260), took effect on January 1, 2022. It is enforced jointly by the U.S. Department of Health and Human Services (HHS), the U.S. Department of Labor (DOL), and the U.S. Department of the Treasury. The Centers for Medicare & Medicaid Services (CMS) maintains operational guidance and the federal patient-provider dispute resolution system.

The law applies to:

  1. Emergency services at any hospital or freestanding emergency department
  2. Non-emergency services at in-network facilities when a patient could not reasonably have selected an in-network provider
  3. Air ambulance services provided by out-of-network carriers under group or individual health plans

The NSA does not apply to ground ambulance services, a gap that CMS has acknowledged as a distinct policy question pending further rulemaking.

Coverage under the NSA extends to most private insurance plans — including employer-sponsored group health plans and individual market plans purchased on or off the Health Insurance Marketplace — but does not extend to short-term limited-duration insurance, Medicare, or Medicaid, which operate under separate billing frameworks.

How It Works

When a patient receives a covered service from an out-of-network provider in a qualifying context, the NSA imposes a structured set of obligations on both the insurer and the provider.

Patient cost-sharing ceiling. The patient's cost-sharing — copayments, coinsurance, and deductibles — is calculated as if the provider were in-network. The patient owes no more than the in-network cost-sharing amount (45 CFR Part 149).

Insurer-provider negotiation. After the patient's in-network cost-sharing is settled, the insurer and the out-of-network provider negotiate the remaining payment privately.

Independent Dispute Resolution. Under the IDR process, a certified arbitrator selects between the insurer's offer and the provider's offer — a "baseball arbitration" model. The arbitrator must give substantial weight to the qualifying payment amount (QPA), which is defined as the median contracted rate for the same or similar service in the same geographic area, as calculated by the insurer (42 U.S.C. § 300gg-111). The patient bears no cost from this arbitration process.

Advance notice requirement. For non-emergency services, providers must give patients a plain-language notice of their out-of-network status at least 72 hours before a scheduled service, or on the day of scheduling if the appointment is within 72 hours. This notice must include a good faith estimate of expected charges.

Good Faith Estimate. Uninsured or self-pay patients are entitled to a Good Faith Estimate of expected charges before receiving scheduled services. If the final bill exceeds the estimate by more than $400, the patient can initiate a Patient-Provider Dispute Resolution process through CMS (CMS Good Faith Estimate guidance).

Common Scenarios

Surprise billing materializes most frequently in four recognized clinical contexts:

Emergency department visits. A patient presents at an in-network emergency room. The facility fee is covered at in-network rates, but the emergency physician group bills separately as out-of-network. Under the NSA, this separate physician bill is prohibited from exceeding the patient's in-network cost-sharing obligation.

Elective surgery with ancillary providers. A patient schedules an elective procedure at an in-network hospital but has no control over which anesthesiologist, assistant surgeon, or surgical assistant is assigned. If those providers are out-of-network, the NSA prohibits balance billing — provided the patient did not sign a valid consent waiver to out-of-network rates.

Diagnostic services. Radiology reads and pathology interpretations frequently come from providers with separate contracts. A patient who undergoes imaging at an in-network facility may receive a separate bill from an out-of-network radiologist. The NSA covers this scenario when the service is performed at an in-network facility.

Air ambulance. A patient transported by an out-of-network air ambulance operator following a medical emergency is protected under the NSA. The patient's cost-sharing cannot exceed the in-network equivalent. This protection applies to fixed-wing and rotary-wing air ambulance services. Ground ambulance — including municipal, county, and private ground transport — falls outside NSA jurisdiction.

For a broader view of how these billing protections interact with emergency medical rights under EMTALA, the two frameworks address distinct but overlapping patient concerns: EMTALA governs access and stabilization obligations, while the NSA governs post-stabilization billing.

Decision Boundaries

The NSA's protections are not unconditional. Three primary categories define where the law does and does not apply.

Consent waivers (valid vs. invalid). For non-emergency services, an out-of-network provider may bill at out-of-network rates if the patient signs a written consent waiver at least 72 hours before service (or on the day of scheduling for same-day appointments). However, the NSA explicitly prohibits consent waivers for certain provider types even in non-emergency settings. Providers who cannot obtain a valid consent waiver include:

  1. Anesthesiologists
  2. Pathologists
  3. Radiologists
  4. Neonatologists
  5. Assistant surgeons
  6. Hospitalists
  7. Intensivists
  8. Any provider the patient could not have reasonably chosen independently

This list reflects the recognition that patients have no practical ability to select these ancillary providers in most clinical settings (HHS FAQ on NSA Implementation, Part 61).

Facility type. The NSA applies to hospitals, hospital outpatient departments, and freestanding emergency departments. It does not apply to urgent care centers that are not classified as emergency departments, though state law may impose separate restrictions. Patients receiving outpatient care at facilities that fall outside these categories should verify applicable state protections.

Insurance type. The NSA does not apply to excepted benefit plans (dental, vision, or standalone limited-benefit plans), health care sharing ministry arrangements, grandfathered health plans under the Affordable Care Act, or Workers' Compensation coverage. Patients covered under these arrangements retain rights under applicable state balance billing laws, which vary by jurisdiction. As of 2023, at least 33 states had enacted some form of state-level surprise billing protection (Commonwealth Fund, "State Balance-Billing Protections," 2023).

Dispute resolution eligibility. Not every billing dispute qualifies for the federal IDR process. The dispute amount must exceed a minimum threshold — set at $400 per claim as of the initial 2022 implementation guidance — and the service must fall within a qualifying category. Disputes below that threshold are directed to the CMS Patient-Provider Dispute Resolution process, available specifically to self-pay and uninsured patients.

For patients navigating the intersection of billing disputes and insurance coverage disputes, the distinction between an insurer's internal appeals process and the federal IDR mechanism is critical: internal appeals address coverage determinations, while IDR resolves provider-insurer payment disagreements after coverage is established.

Understanding the full scope of medical billing rights — including itemized statement requests, billing error dispute procedures, and charity care eligibility — extends beyond the NSA's specific surprise billing prohibitions and involves separate statutory and regulatory frameworks.

References

📜 5 regulatory citations referenced  ·  ✅ Citations verified Feb 26, 2026  ·  View update log

Explore This Site

Regulations & Safety Regulatory References Tools & Calculators Bmi Health Metrics Calculator