Surprise Medical Billing Protections Under Federal Law

Federal law places enforceable limits on what providers and insurers can bill patients when out-of-network care is received without the patient's advance knowledge or meaningful choice. The No Surprises Act, enacted as part of the Consolidated Appropriations Act of 2021 and effective January 1, 2022, established a national floor of billing protections that applies across most private insurance markets. This page covers how those protections are defined, how the billing and dispute process operates, the clinical settings where protections apply, and the boundaries of federal versus state jurisdiction.

Definition and Scope

The No Surprises Act (Pub. L. 116-260, Division BB), enacted as part of the Consolidated Appropriations Act, 2021 (effective December 27, 2020), prohibits balance billing in specific circumstances where patients receive out-of-network services involuntarily. Balance billing occurs when a provider bills a patient for the difference between the provider's full charge and what the insurer has paid — a gap that can reach tens of thousands of dollars for a single episode of care.

Federal protections under the Act apply to:

  1. Emergency services at any hospital or freestanding emergency department, regardless of whether the facility or any treating clinician is in-network.
  2. Non-emergency services at an in-network facility, when a patient is treated by an out-of-network provider without receiving adequate advance notice and providing written consent to out-of-network billing.
  3. Air ambulance services provided by out-of-network air ambulance suppliers to patients covered by group or individual health plans.

Ground ambulance services were explicitly excluded from the Act's initial scope, a distinction the Government Accountability Office (GAO) flagged as a gap requiring separate legislative action.

The Act applies to most employer-sponsored group health plans, individual and small-group market plans sold through marketplace enrollment, and grandfathered health plans in limited circumstances. It does not apply to short-term limited-duration insurance, health care sharing ministries, or Medicaid and Medicare directly — though those programs have independent billing protections under 42 C.F.R. Parts 422 and 438.

Understanding how these protections interact with in-network versus out-of-network provider distinctions is essential, because the Act's trigger conditions depend on network status at the time of service.

How It Works

When a qualifying surprise billing situation occurs, the No Surprises Act establishes a three-step framework governing what patients pay and how disputes between providers and insurers are resolved.

Step 1 — Patient Cost-Sharing Limit
Patients are held to in-network cost-sharing amounts only. The insurer calculates the patient's deductible, copay, and out-of-pocket amounts as if the out-of-network provider were in-network. That payment counts toward the patient's annual out-of-pocket maximum under the plan.

Step 2 — Initial Payment or Notice of Denial
Within 30 calendar days of receiving a clean claim, the insurer must send the out-of-network provider either an initial payment or a written denial. The initial payment is based on the plan's Qualifying Payment Amount (QPA), defined under federal rule as the median contracted rate for the same or similar service in the same geographic region (45 C.F.R. § 149.140).

Step 3 — Independent Dispute Resolution (IDR)
If the provider and insurer cannot agree on a payment rate through a 30-day open negotiation period, either party may initiate federal IDR. A certified IDR entity selects between the two final offers using a "baseball arbitration" model, required to consider the QPA as the primary benchmark and specific additional factors enumerated in the Act. The losing party pays the IDR administrative fee, which the Centers for Medicare & Medicaid Services (CMS) sets by regulation; as of 2024, the fee is $115 per party for non-batch disputes (CMS, Federal IDR Process Fees).

Patients who believe billing violations have occurred may file complaints through the CMS No Surprises Help Desk or through their state insurance commissioner if the state has a concurrent enforcement role.

Common Scenarios

Scenario A — Emergency Room with Out-of-Network Anesthesiologist
A patient presents at an in-network hospital emergency room. The treating anesthesiologist is employed by a staffing group that has no contract with the patient's insurer. Under the No Surprises Act, the anesthesiologist cannot send the patient a balance bill. The patient pays only the in-network ER cost-sharing. This is the most commonly cited scenario in CMS guidance.

Scenario B — Elective Surgery at In-Network Facility
A patient schedules a knee replacement at an in-network hospital. An out-of-network assistant surgeon participates without the patient's written prior consent. Federal protections apply. If the hospital had obtained signed consent using the federally prescribed notice form at least 72 hours before the scheduled procedure, the out-of-network charge could lawfully become the patient's responsibility — this is the consent exception.

Scenario C — Consent Exception Applied
If a patient receives an advance notice at least 72 hours prior to a non-emergency service, delivered on the standardized CMS notice form, and signs a consent form, the provider may bill at out-of-network rates. Critically, this consent exception is not available for emergency services, ancillary services (such as laboratory, radiology, or pathology performed at the facility), or when no in-network alternative exists. Understanding the healthcare complaint and grievance process is relevant when patients believe consent was improperly obtained.

Scenario D — Air Ambulance Transport
A patient transported by an out-of-network air ambulance following a motor vehicle accident is protected under the Act. The air ambulance provider cannot balance bill. The patient's cost-sharing is calculated at the in-network rate. Ground ambulance situations require review under state law, as federal protections do not extend there.

Decision Boundaries

Not every unexpected medical bill constitutes a "surprise bill" under federal law. The following distinctions govern whether federal protections apply.

Federal protection applies when:
- The patient is enrolled in a private group or individual market plan subject to the Act
- Services were emergency in nature, or the out-of-network provider was at an in-network facility without adequate advance consent
- The provider or facility is subject to federal or state No Surprises Act enforcement jurisdiction

Federal protection does not apply when:
- The patient knowingly scheduled care with an out-of-network provider and received proper advance notice
- The service is ground ambulance transport
- The patient is covered exclusively under Medicaid or Medicare (separate billing rules govern those programs — see Medicare Parts A, B, C, D explained)
- The plan is a short-term limited-duration plan, health sharing ministry, or other excluded coverage type

State law interaction:
States that had existing surprise billing laws in effect before January 1, 2022 may retain enforcement authority if their laws provide equal or greater patient protection. The National Conference of State Legislatures (NCSL) has tracked state-level laws; as of 2022, at least 33 states had enacted some form of surprise billing protection, though breadth and enforcement mechanisms varied substantially.

QPA vs. Billed Charge — A Critical Distinction:
The QPA is not the provider's billed charge and is not necessarily what the insurer ultimately pays. It is the median in-network contracted rate, recalculated annually under CMS methodology. Providers who believe the QPA is calculated incorrectly may raise that dispute within the IDR process. Patients who seek to understand how their explanation of benefits reflects these calculations can request an itemized bill and QPA disclosure from the insurer, both of which are required under the Act.

Protections under the No Surprises Act operate in parallel with, not as a replacement for, patient rights and responsibilities frameworks established by state licensing authorities and accreditation bodies such as The Joint Commission.

References

📜 8 regulatory citations referenced  ·  ✅ Citations verified Feb 26, 2026  ·  View update log

Explore This Site

Regulations & Safety Regulatory References Tools & Calculators Bmi Health Metrics Calculator