For decades, out-of-network (OON) billing was straightforward: you billed your full fee, and you attempted to collect it. That changed with the No Surprises Act (NSA) . While the law was designed to protect patients, it created an entirely new compliance and reimbursement reality for providers one that has been complicated by shifting regulatory guidance, legal challenges, and aggressive payer tactics.
Despite these challenges, the U.S. Department of Health and Human Services (HHS) has consistently said it expects full compliance. Failing to understand the NSA’s requirements puts providers at risk of significant penalties, and overlooking strategic OON billing opportunities leaves millions in potential reimbursement on the table.
This guide synthesizes the regulatory requirements with the practical compliance and revenue cycle management (RCM) strategies you need to succeed in 2026.
What Has Changed? The Core Rules of the No Surprises Act
For providers, the NSA transformed the landscape for balance billing. Before the law, patients were often held financially responsible for the difference between a provider’s billed charge and what their insurance paid (balance billing). The NSA now prohibits this practice in specific scenarios, instead holding the health plan responsible for paying a greater share.
When Balance Billing Is Prohibited
The NSA explicitly prohibits out-of-network providers from balance billing patients in two primary situations:
- Emergency Services: For any emergency services, regardless of where they are provided and whether you have a contract with the patient’s plan.
- Non-Emergency Ancillary Services: When you provide non-emergency services at an in-network facility, such as an anesthesiologist, assistant surgeon, hospitalist, or radiologist.
When balance billing is prohibited, you are required to hold the patient harmless. Their cost-sharing responsibility is limited to what they would pay if you were an in-network provider.
The “Notice and Consent” Exception
Not all OON care falls under the NSA’s blanket prohibition. For non-emergency services provided to out-of-network patients in an out-of-network facility, providers can bypass the law’s protections by securing a valid Notice and Consent from the patient.
To be valid, this notice must:
- Be provided in writing, in the patient’s preferred language, at least 72 hours before the service.
- Confirm the patient is aware of the OON status.
- State that the patient knowingly waives the NSA’s balance billing protections.
- Be signed and dated by the patient voluntarily, without coercion.
Crucial Warning: This waiver cannot be used for emergency services or for certain ancillary services like anesthesiology or pathology provided at in-network facilities. These services are always protected by the NSA, regardless of consent.
The Independent Dispute Resolution (IDR) Process
The IDR process is the mechanism for resolving disagreements between providers and insurers when a surprise bill is involved. It’s a “baseball-style” arbitration designed to determine the final out-of-network rate.
How the IDR Works (and What’s Changed)
If a health plan denies a claim or you disagree with its offered payment amount for a service where balance billing is prohibited, you may be able to initiate the IDR process. But there are strict prerequisites and the rules of the game are changing:
- Prerequisite: You and the plan must have attempted to negotiate a payment. If no agreement is reached within 30 business days, you can initiate IDR.
- Portal Access: Disputes are initiated through the Federal IDR Portal. Despite government shutdowns in 2025 and 2026, CMS has repeatedly confirmed the portal remained operational and all standard timelines continue to apply.
- The “Presumption” of the QPA: The IDR entity begins its determination with the assumption that the Qualifying Payment Amount (QPA) the health plan’s median in-network rate is the correct payment. Providers can submit additional information to argue the QPA is not appropriate, such as patient acuity, complexity, training, or outcomes.
Key Legal Developments to Know
Recent court rulings have had a major impact on the enforceability of IDR awards and they are not all favorable to providers.
- Split in Circuits: In 2025, federal courts divided on whether providers have the legal right to sue a health plan to enforce an IDR award. The Fifth Circuit (covering Texas, Louisiana, and Mississippi) ruled that providers have no private right of action, meaning only the government can enforce the award. However, a district court in Connecticut found the opposite, ruling that providers can sue under the NSA and ERISA.
- Operational Reality: Regardless of the legal venue, providers report it is common to make multiple follow-up calls to a health plan just to secure a payment after a favorable IDR award.
The “Ghost Rates” Victory
Providers recently secured a significant legal victory regarding how QPA is calculated. A federal court struck down regulations that allowed payers to calculate QPA based on “ghost rates” that excluded key payment types like risk-sharing, incentive payments, and retrospective adjustments. The court ruled that QPA must include the total maximum payment, giving providers more leverage in the final calculation.
Provider Requirements: 5 Key RCM Actions for Out-of-Network
Success in this environment hinges on moving from a reactive to a proactive and automated strategy. A small volume of out-of-network claims can represent millions of dollars in revenue, and providers are winning a majority of disputes but only if they act in time.
1. Identify and Flag OON Claims Immediately
The 30-day clock for negotiations begins the moment a payment posts. Waiting 60 days to review a remittance is no longer an option. You must automate the identification of OON claims.
- Action: Update your practice management system to flag payer classes and load NSA-specific remit codes to catch these claims early before they are lost in the queue.
2. Automate Timely Filing and Deadline Tracking
Navigating multiple, tight deadlines is the single biggest challenge. You must initiate a single case agreement within 30 days, then meet a separate, often shorter deadline to initiate IDR if negotiations fail.
- Action: Move beyond manual tracking. Create workflow alerts that notify your billing team of every deadline. In 2026, relying on memory or spreadsheets is a direct path to writing off legitimate reimbursement.
3. Strengthen Your Notice and Consent Protocols
Gathering a valid Notice and Consent is a complicated and document-heavy process. The form must be provided 72 hours in advance, and any errors can invalidate your ability to balance bill.
- Action: Implement a templated, audited workflow that automatically schedules the delivery of the notice and secures the patient’s signature in a compliant manner, preserving all records for at least six years.
4. Optimize Your Data for IDR Challenges
The QPA sets a low baseline for arbitration. To win, you need compelling data to overcome the presumption that the QPA is appropriate. Strong documentation includes patient complexity, procedure difficulty, and provider qualifications.
- Action: Develop an internal playbook to efficiently gather and package specialized pricing data, clinical notes, and arguments to support your claim. The payer will present a low QPA; you must be prepared to counter with a superior argument.
5. Audit Reimbursements Quarterly
The legal and regulatory landscape is evolving. What constituted a valid QPA calculation or a violation of the “good faith” negotiation standard last year may have changed.
- Action: Conduct quarterly targeted audits of your OON claims. This allows you to identify patterns in payer behavior, recover revenue from underpaid claims, and adjust your workflow based on the most recent guidance.
State Laws: When Federal Rules Don’t Apply
The No Surprises Act acts as a federal floor, not a ceiling. Many states have their own, often more protective, surprise billing laws that can apply instead of the federal IDR process. In 2025 and 2026, numerous states updated their frameworks.
For providers, this means two sets of rules to consider.
| State | 2025–2026 Key Development |
| New Hampshire | Established a new framework requiring OON providers to negotiate directly with insurers and created a state dispute resolution process, giving providers flexibility to choose between state or federal IDR channels |
| Virginia | Proposed amendments to balance billing rules, including definitions for “good faith negotiation period” and “general business practice” |
| Illinois | Created a “Consumer Protection from Surprise Health Care Billing Act” effective July 1, 2025, establishing in-network cost-sharing limits for surprise bills |
| Colorado & North Carolina | Both states updated laws in 2025 to explicitly align their local surprise billing rules with the federal No Surprises Act, creating a single, harmonized standard |
Your first step for any OON claim should be to determine whether a relevant state law exists and whether it offers a more favorable framework than the federal rules.
Summary Table: Your OON Billing Workflow
| Step | Key Action | Deadline / Watch-Out |
| 1. Identify | Automatically flag OON claims on remittance. | 30-day negotiation clock starts at payment posting. |
| 2. Negotiate | Initiate single-case agreement with payer. | Document all communication attempts. |
| 3. Resolve | If negotiation fails, determine which process to use: federal IDR or state dispute resolution. | Must select correct process; deadlines vary. |
| 4. Document | If allowed, secure a valid Notice and Consent waiver. | Must be provided before service (no retroactive waivers). |
| 5. Report (if applicable) | Notify CMS of the status of your dispute via the IDR portal. | Non-compliance here can result in enforcement action against you. |
For seamless revenue cycle management, integrate these steps with your overall billing process. For more insights, see our guides on Revenue Cycle Management (RCM) in Healthcare and How to Reduce Claim Denials in Medical Billing.
Frequently Asked Questions (FAQs)
1. Can I balance bill a patient for an out-of-network service in 2026?
Generally, no for emergency services and non-emergency services provided at an in-network facility. For non-emergency care at an out-of-network facility, you may be able to with a valid, signed consent waiver provided at least 72 hours before the service.
2. What is the Qualifying Payment Amount (QPA) and why does it matter?
The QPA is essentially the health plan’s median in-network rate for a service. Under the current IDR rules, it is the presumed correct payment amount. Providers defeat this presumption by submitting compelling evidence of the case’s clinical complexity or other unique factors.
3. What is the notice and consent exception?
It’s the legally valid process that allows you to opt a patient out of the NSA’s balance billing protections for non-emergency services in an out-of-network facility. It requires advanced notice and the patient’s written, voluntary agreement.
4. What happens if a health plan underpays an OON claim?
You must attempt to negotiate a higher payment. If you cannot reach an agreement within 30 business days, you can initiate the federal IDR process or use a qualified state dispute resolution process to contest the payment amount.
5. My state has its own surprise billing law. Which one applies?
It depends. For many services, like emergency care, state laws can apply if they meet or exceed the protections of the federal law. For others, the federal process is the sole option. Each OON claim should be evaluated for both federal and state applicability.
6. What’s the single biggest mistake providers make with OON billing today?
Failing to identify the claim and contest the payment within the initial 30-day window. Complacency here allows a low payment to become the accepted benchmark for future reimbursement.
Final Thought: Compliance Is Your Leverage
The era of aggressive, unrestricted balance billing is over, regardless of your location. The 2025-2026 regulatory updates make one thing clear: you can no longer approach out-of-network billing casually. Success requires equal parts strict compliance and proactive strategy.
Establish ironclad notice and consent procedures, tightly manage your 30-day deadlines, and act decisively to challenge inappropriate QPAs. This is the new playing field complying with the rules is the only way to get paid.
Disclaimer: This guide provides general information and is not legal advice. Healthcare providers should consult qualified legal counsel regarding their specific compliance obligations and revenue cycle strategies.
Looking for more revenue cycle and compliance insights? Subscribe to the Med Revenue Hub newsletter for expert guidance on medical billing, coding, and practice management.
