Patients in the United States have more medical billing protections than most people realize. Between federal laws like the No Surprises Act, EMTALA, and the Fair Debt Collection Practices Act, and a patchwork of state-level protections covering everything from timely billing requirements to charity care mandates, you have legal rights at every stage of the billing process — from the moment you receive care through debt collection. The challenge is knowing which rights apply to your situation. This guide maps out the full landscape.

1. Federal billing rights every patient has

Several federal laws establish baseline protections that apply in every state. These are your foundational rights regardless of where you live or what insurance you have:

Federal Law What It Protects Who It Covers Effective Since
No Surprises Act Bans surprise out-of-network bills for emergency care and at in-network facilities; requires good faith estimates for uninsured patients Patients with private insurance; uninsured/self-pay patients January 2022
EMTALA Requires hospitals to screen and stabilize anyone who arrives at an ER, regardless of ability to pay or insurance status All patients at Medicare-participating hospitals (virtually all hospitals) 1986
FDCPA Prohibits abusive, deceptive, and unfair debt collection practices; requires validation of debts; limits contact methods and times All consumers contacted by third-party debt collectors 1977
HIPAA Gives patients the right to access their medical records, including billing records; limits how health information is shared All patients at covered entities (hospitals, clinics, insurers) 1996
IRS Section 501(r) Requires nonprofit hospitals to have a written financial assistance policy, publicize it, screen patients before collections, and limit charges for assistance-eligible patients Patients at nonprofit (tax-exempt) hospitals 2010 (ACA)
Hospital Price Transparency Rule Requires hospitals to publish machine-readable files of all standard charges and display prices for 300 shoppable services All patients; all hospitals January 2021
Your most powerful federal rights: You cannot be surprise-billed in an emergency. You are entitled to an itemized bill. Nonprofit hospitals must offer financial assistance before sending you to collections. Debt collectors must validate debts and follow strict rules. These rights apply everywhere in the United States. If you have a bill you suspect violates any of these protections, upload it to BillKarma — we will flag surprise charges, coding errors, and overcharges automatically.

2. The No Surprises Act: surprise bill protections

The No Surprises Act (NSA) is the most significant federal billing protection enacted in the last decade. It covers three main scenarios:

  • Emergency services: You cannot be balance-billed by any out-of-network provider during an emergency visit — the ER physician, radiologist, anesthesiologist, or any specialist called in. Your cost-sharing is calculated at in-network rates.
  • Non-emergency services at in-network facilities: If you go to an in-network hospital for scheduled care and are treated by an out-of-network provider you did not choose (common with anesthesiologists, pathologists, and assistant surgeons), you are protected from balance billing.
  • Good faith estimates for uninsured patients: Providers must give uninsured or self-pay patients a written estimate before scheduled services. If the final bill exceeds the estimate by $400 or more, you can initiate a dispute within 120 days.

The NSA applies to commercial insurance (employer plans, marketplace plans, individual plans). It does not apply to Medicare, Medicaid, TRICARE, or VA — these programs have their own, separate protections. For a deeper look at how these protections work in practice, see our full No Surprises Act guide.

3. Medical debt collection rights (FDCPA)

If a medical bill goes to a third-party debt collector, the Fair Debt Collection Practices Act gives you these specific protections:

  • Right to debt validation. Within 30 days of first contact, you can request written validation of the debt — the original creditor, the amount, and proof that you owe it. The collector must stop collection efforts until they provide validation.
  • Limits on contact. Collectors cannot call before 8 a.m. or after 9 p.m. They cannot contact you at work if you tell them your employer prohibits it. They cannot use abusive language or make threats they cannot legally carry out.
  • Right to cease communication. You can send a written letter telling a collector to stop contacting you. After receiving it, they can only contact you to confirm they will stop or to notify you of a specific legal action.
  • No false or misleading statements. Collectors cannot misrepresent the amount owed, threaten legal action they do not intend to take, or falsely claim to be attorneys or government officials.
  • Credit reporting protections. As of 2023, medical debt under $500 is excluded from credit reports. Paid medical collections are removed entirely. Unpaid medical debt cannot appear on a credit report for at least one year from the date it was sent to collections.

For detailed guidance on handling debt collectors, see our FDCPA rights guide and debt validation letter template.

4. State-level billing protections

Many states have enacted billing protections that go beyond federal law. Here are some of the strongest state-level protections:

State Key Protection Details
California Timely billing + charity care Providers must bill insured patients within 365 days; nonprofit hospitals must offer financial assistance to patients under 400% FPL; limits charges for uninsured to Medicare rates
New York Surprise bill ban + credit protections State surprise bill law (predates NSA); prohibits medical debt on credit reports; requires hospitals to offer financial assistance
Texas Surprise bill mediation State mediation process for surprise out-of-network bills exceeding $500; applies to state-regulated insurance plans
Colorado Medical debt credit ban Prohibits medical debt from appearing on consumer credit reports under state law; limits interest on medical debt to 3%
Illinois Charity care mandate Nonprofit hospitals must provide free care to patients under 200% FPL and discounted care up to 600% FPL; among the most generous thresholds in the country
Oregon Hospital financial assistance All hospitals (including for-profit) must screen patients for financial assistance before pursuing collections; limits charges for qualifying patients
Maryland Rate regulation Only state with all-payer hospital rate regulation — the Health Services Cost Review Commission sets rates that all insurers and hospitals must follow

Your state may have additional protections not listed here. Contact your state attorney general's consumer protection division or your state insurance department to find out what specific protections apply where you live. You can also check your hospital's billing grade in our directory to see whether it has a track record of compliance with financial assistance and billing transparency rules.

5. Time limits on medical billing by state

Many states impose time limits on how long a provider has to send you a bill (timely billing or timely filing requirements) and how long they can pursue collection through a lawsuit (statute of limitations on medical debt). These are two different deadlines:

  • Timely billing: How long the provider has to send you the initial bill after the date of service. If they miss this window, they may be prohibited from billing you at all. Not all states have specific timely billing laws.
  • Statute of limitations: How long a creditor or collector has to file a lawsuit against you for unpaid medical debt. Once this expires, the debt becomes "time-barred" and cannot be collected through the courts (though the creditor can still attempt voluntary collection). This ranges from 3 to 10 years depending on the state.

If you receive a bill that seems unreasonably old, check both deadlines. A bill that arrives three years after service may violate your state's timely billing requirement even if it falls within the statute of limitations for lawsuits. See our statute of limitations guide for state-by-state details.

Case study: $8,400 ER bill arrives 14 months late in California

A patient in California received an $8,400 emergency room bill 14 months after the date of service. The patient had been insured at the time of the visit, but the hospital had failed to bill the insurance company within the insurer's timely filing window (typically 90 to 180 days). Under California law (Health and Safety Code Section 127425), hospitals cannot bill insured patients more than 365 days after service. The patient sent a written response citing the law and noting the bill arrived outside the 365-day window. The hospital withdrew the bill entirely. Result: $8,400 bill eliminated.

Have an old or suspicious bill? Scan it with BillKarma to check for timing issues, coding errors, and overcharges before you pay.

6. Price transparency requirements

Since January 2021, federal rules have required hospitals to make their prices public. As of 2025, CMS has increased enforcement penalties and compliance rates have improved, though gaps remain:

  • Machine-readable file: Every hospital must publish a complete file of standard charges for all items and services, including gross charges, discounted cash prices, payer-specific negotiated rates, and de-identified minimum and maximum rates.
  • Shoppable services display: Hospitals must display prices for at least 300 "shoppable" services in a consumer-friendly format — meaning patients can compare prices before receiving care.
  • Insurer price transparency: The Transparency in Coverage Rule requires health insurers to publish machine-readable files of negotiated rates with in-network providers and allowed amounts for out-of-network providers.

In practice, you can use these tools to compare hospital prices before a scheduled procedure and to verify after the fact whether the charges on your bill match the hospital's published rates. If a hospital charges you more than their published rate for your insurance plan, that discrepancy is worth disputing. Use the BillKarma cost calculator to look up Medicare rates for any procedure code and compare them against what you were charged.

Use price transparency to your advantage: Before any scheduled procedure, check the hospital's published prices. After receiving a bill, compare the charges to published rates. Any discrepancy between the published rate and your bill is a basis for dispute. Upload your bill to BillKarma to automatically compare your charges against Medicare benchmarks.

7. How to exercise your billing rights

  1. Always request an itemized bill with CPT codes. A summary statement is not enough. You need individual line items to identify errors, duplicates, and overcharges. Our 12-point audit checklist walks you through exactly what to look for on each line.
  2. Compare every bill to your Explanation of Benefits. Your insurer's EOB shows what was billed, what they paid, and what you owe. If the provider's bill does not match the EOB, one of them is wrong.
  3. Check for No Surprises Act protections. If you see out-of-network charges from an ER visit or from a provider you did not choose at an in-network facility, cite the NSA and request reprocessing.
  4. Request debt validation before paying a collector. If a medical bill goes to collections, send a written validation request within 30 days. Do not pay until the debt is validated with documentation.
  5. Apply for financial assistance at nonprofit hospitals. Under 501(r), nonprofit hospitals must have a written financial assistance policy and screen patients before pursuing collections. Apply even if you have insurance — many policies cover the patient-responsibility portion. See our financial assistance guide for a step-by-step walkthrough.
  6. Know your state's deadlines. Check timely billing laws and the statute of limitations for medical debt in your state. An old bill may be uncollectible.
  7. File complaints when rights are violated. Report No Surprises Act violations to CMS at cms.gov/nosurprises. Report FDCPA violations to the CFPB at consumerfinance.gov. Report state law violations to your state attorney general.

8. Frequently asked questions

Do I have the right to an itemized medical bill?

Yes. You can request an itemized statement with CPT codes from any healthcare provider. The No Surprises Act also requires providers to give uninsured patients a good faith estimate before scheduled services. Many states require hospitals to provide itemized bills automatically. Always request line-item detail rather than a summary total.

How long does a hospital have to bill me after treatment?

Time limits vary by state. California requires billing within 365 days for insured patients. Texas requires initial billing within the first billing cycle. Many states do not have specific timely billing laws, but all have a statute of limitations on debt collection lawsuits (typically 3 to 10 years). See our statute of limitations guide for state-specific deadlines.

Can a hospital sue me for unpaid medical bills?

Yes, but they must file within your state's statute of limitations. Nonprofit hospitals that sue without first screening for financial assistance may be violating IRS 501(r) requirements. Always respond to a lawsuit within the deadline — ignoring it results in a default judgment. Check whether your hospital is nonprofit in our hospital directory, and see our lawsuit defense guide for what to do if you are sued.

What is the No Surprises Act and does it apply to me?

The No Surprises Act protects patients with private insurance from surprise out-of-network bills in emergencies and from providers they did not choose at in-network facilities. It also gives uninsured patients the right to good faith estimates. It does not apply to Medicare, Medicaid, TRICARE, or VA. See our full No Surprises Act guide for details.

Can medical debt appear on my credit report?

Medical debt under $500 is excluded from credit reports. Paid medical collections are removed entirely. Unpaid medical debt cannot appear for at least one year from the date it was sent to collections. Some states like Colorado and New York ban medical debt from credit reports under state law. See our medical debt and credit guide for full details.

9. Sources