Complete NSA Guide for Healthcare Providers
Enacted in December of 2020, the No Surprises Act is a landmark piece of legislation that aims to protect patients from unexpected, high-cost medical bills. It's the most significant federal patient billing reform in recent years, offering unprecedented levels of financial protection to everyday Americans. It officially went into effect on January 1st of 2022.
As the name suggests, legislators designed the No Surprises Act (NSA) to protect patients against "surprise billing" situations. The law establishes new federal protections to prevent patients from receiving unexpected bills from out-of-network providers for services they couldn't control. The NSA covers emergency services, non-emergency services at in-network facilities and air ambulance transportation.
It applies broadly to group health plans, individual health insurance coverage and federal employee health benefits plans. However, it doesn't apply to Medicare, Medicaid, TRICARE, Veterans Affairs health programs or Indian Health Services.
For healthcare providers, facilities and insurers, No Surprises Act compliance is not optional. Failing to comply with the new federal law can lead to significant penalties. However, it demands operational adjustments across several processes, including eligibility verification, cost estimation, patient communication, documentation and more. This NSA implementation guide will provide a comprehensive overview of the No Surprises Act and its impact on practices, covering balance billing limitations, Good Faith Estimate requirements, dispute processes, enforcement penalties and implementation strategies.
Healthcare Providers and Facilities Subject to NSA Requirements
The surprise medical billing protections within the NSA are possible with strict rules that apply to many different types of providers and facilities. The first step to complying with the law is understanding how your practice fits into the equation. This law applies to all providers operating within the scope of state-issued licensing. That includes physicians and mental health professionals, such as marriage and family therapists, clinical social workers, psychologists, etc.
The law also applies to various facilities and ancillary providers. These include:
• Hospitals
• Hospital Outpatient Departments
• Alternate Care Sites (ACSs)
• Critical access hospitals
• Anesthesiology providers
• Radiology
• Pathology
• Labs
• Neonatologists
• Assistant Surgeons
• Hospitalists
• Intensivists
As mentioned earlier, it also applies to air ambulance providers. However, it excludes ground ambulance.
One of the most important aspects of the NSA is that it applies to both in-network and out-of-network providers when services fall within protected categories. That includes telehealth providers. Even self-pay scenarios are covered by the law, providing comprehensive protection for patients.
Balance Billing Prohibitions That Protect Patients
The goal of the No Surprises Act is to protect patients from unexpected costs beyond their control. One way the law prevents billing surprises is by prohibiting balance billing in certain circumstances.
Balance billing is the practice of charging a patient the difference between their total charge and the amount covered by insurers. In the past, patients often received unexpected bills when they received care from an out-of-network provider. For example, a patient might go to an in-network hospital for surgery, but the anesthesiologist could be out-of-network. In that scenario, the patient might receive a surprise bill from the anesthesiologist due to balance billing.
The No Surprises Act would prohibit such a situation. Balance billing prohibitions apply for emergency services. The protections exist regardless of the facility's network status and do not require prior authorizations. In the context of the NSA, emergency medical conditions are those with acute symptoms serious enough to require immediate care. Without immediate care, the patient's health would be in serious jeopardy, leading to impairment of bodily functions or dysfunction of a body part. Balance billing prohibitions aren't limited to just emergency service providers. They also extend to ancillary services for emergency evaluation, such as imaging or radiologist interpretation.
The NSA also prohibits balance billing for post-stabilization services. The exception applies when providers provide proper prior notice and obtain written consent. However, providers can't obtain consent when the patient is cognitively impaired, impaired by medication or under duress.
Notice and Consent Requirements for Waiving Balance Billing Protections
In limited circumstances, providers and facilities may obtain advance written consent from patients to waive balance billing prohibitions and protections for certain non-emergency situations. However, there are strict rules that providers must follow.
First, providers must obtain consent at least 72 hours before rendering services when possible. If the scheduled appointment is less than 72 hours away, providers can obtain consent on the day of scheduling. However, patients must have ample time and opportunity to review required disclosures. In urgent situations, abbreviated timelines may apply.
Additionally, notices must include several elements. These include:
• A clear statement that the provider is out of network
• A good-faith estimate of applicable charges
• Information about in-network alternatives
• A statement that consent is voluntary
Meeting these requirements is crucial, but they can be operationally challenging for healthcare providers. The biggest hurdle is confirming that a patient is out-of-network before obtaining consent. Confirming network status manually is time-consuming, labor-intensive and error-prone. To help meet those requirements while overcoming the challenges of manual verification, some practices use automated verification processes that confirm network status through payer portal checks combined with direct payer calls.
Consent requirements are crucial, and providers must meet all requirements when obtaining consent to waive protections. It's important to note that the NSA excludes several ancillary services from the waiver option, including:
• Anesthesiology
• Pathology
• Radiology
• Neonatology
• Assistant Surgeons
• Hospitalists
• Intensivists
• Diagnostic Services
GFE Requirements for Uninsured and Self-Pay Patients
Another important element of the No Surprises Act is good faith estimates (GFEs). Good-faith estimates are written documents that detail expected charges, giving patients a better idea of what they'll need to pay out of pocket. The GFE provisions apply to virtually all providers who schedule services.
Providers must provide GFEs to uninsured and self-pay patients. Uninsured patients are those not enrolled in group health plans and lack individual insurance. They also don't have coverage from programs like FEHB, Medicare, Medicaid, TRICARE, IHS or VA benefits. Self-pay patients may have insurance coverage but actively choose not to submit a claim with their insurer. That choice may stem from privacy concerns, high-deductible requirements, or the belief that self-paying will be less expensive. Either way, these patients pay the full costs out of pocket.
GFEs must include key elements. Good faith estimate requirements dictate that these documents need to include the following:
• Patient name and date of birth
• Provider/facility name, NPI, TIN
• Itemized expected charges for each service/item
• Applicable diagnostic codes and expected CPT codes
• Expected service dates and location
• All items or services reasonably expected in conjunction with the primary service, even if by different providers.
As you can imagine, meeting all good-faith estimate requirements isn't easy for providers. Calculating itemized charges at the CPT code level requires knowing exact copays, coinsurance and deductible status for every procedure. Finding that information through payer portals alone is difficult, as most only provide general benefits categories rather than procedure-specific amounts.
Automation tools can make calculating charges and creating good-faith estimates far easier, calculating out-of-pocket costs at the CPT code level. Automation eliminates extensive manual labor and ensures greater estimate accuracy.
Accuracy is important, but GFEs must represent services reasonably expected. Actual charges may differ, but the patient has the right to proceed with patient-provider dispute resolution (PPDR) if actual charges exceed the estimate by $400 or more. Disputes must not affect the quality of care and aren't a contract.
If providing recurring services, such as therapy or PT, providers can create GFEs that cover up to 12 months.
GFE Timing and Delivery Deadlines
In addition to complying with all good-faith estimate requirements, including the content requirements mentioned above, providers must deliver GFEs within a specified timeframe. The NSA establishes a clear timeline for delivering GFE to self-pay and uninsured patients. Delivery dates vary based on when providers schedule services.
•Scheduled 10+ Days in Advance: Patients must receive GFE within 3 business days after scheduling.
•Scheduled 3-9 Days in Advance: Patients must receive GFE within 1 business day after scheduling.
•Scheduled Less Than 3 Days in Advance: No GFE required
When patients request a GFE without scheduling an appointment, providers must deliver it within 3 business days.
Recent updates to good-faith estimate requirements provide guidance on what to do if the information provided changes. When charged, services, providers or other relevant information changes after delivering a GFE, providers must provide updated information no later than one business day before the scheduled service.
Convening Provider Coordination with Co-Providers and Co-Facilities
The convening provider is the one that receives the initial GFE request and is responsible for scheduling the primary service. Under the No Surprises Act, there are new convening provider responsibilities. In addition to providing the GFE, convening providers must contact all co-providers and co-facilities that will furnish items or services customarily performed alongside the primary service.
Contact must occur within one business day of receiving a patient's GFE request or after scheduling a service appointment. Co-providers must then respond within one business day with information about expected charges. These requirements streamline GFE creation, allowing convening providers to establish and assemble complete estimates.
In complex cases, such as surgical procedures involving multiple specialties, convening provider responsibilities can be operationally challenging. Strict timelines and the convening provider's reliance on communication from others can create hurdles. That's why the No Surprises Act has Good Faith reliance protections.
These protections ensure that the convening provider isn't violating the law if they utilize incomplete or inaccurate information from co-providers/co-facilities. The exception applies when the co-provider should reasonably know that the information wasn't correct.
Patient-Provider Dispute Resolution When Bills Exceed Estimates
Part of the NSA's surprise medical billing protections is the right of patients to dispute charges. When real charges substantially exceed the total expected charges provided in the GFE, patients are within their rights to initiate patient-provider dispute resolution. This right triggers when the actual charges exceed the expected charges in the GFE by $400 or more. For example, if the GFE was $2,000, but the actual bill was $2,450, the patient would meet that $400 threshold to initiate a dispute.
It only applies to total actual charges, not individual line items.
To initiate a PPDR, patients must submit a notification to the U.S. Department of Health and Human Services (HHS) within 120 calendar days of receiving the initial bill. The HHS has an intuitive online portal with easy digital forms, allowing patients to initiate disputes without legal representation.
After initiating the process, an entity will receive the GFE, any revisions provided and the actual services rendered. The entity reviewing disputes looks at the situation objectively. They evaluate whether unforeseen circumstances or changes in the patient's condition justify billing differences. Then, they make a binding determination. If the billing difference isn't justified, providers must legally adjust billing accordingly.
PPDR can present a significant administrative burden on healthcare providers and facilities. Naturally, you want to avoid these situations as much as possible. The best defense against PPDR is accurate initial estimates. When providers create GFEs using verified, CPT-level benefits data rather than general estimates, the gap between expected charges in the GFE and actual charges narrows. Using verified benefits data reduces a provider's exposure to disputes and patient billing complaints.
Independent Dispute Resolution for Provider-Payer Payment Disputes
In situations where out-of-network providers and health plans can't agree on payment for services covered by the NSA balance billing prohibitions, there's an Independent Dispute Resolution (IDR) process. Before IDR begins, both parties must attempt to negotiate. Parties have 30 days from the date the provider receives the initial payment or denial notice to reach a voluntary agreement. There are 30 days to negotiate.
However, if the parties don't reach a resolution, either party can initiate IDR within 4 days of the negotiation period ending. Either the provider or the insurer can notify HHS and propose a certified IDR entity. The other party then has three business days to either object or propose an alternative IDR entity. If neither party agrees to a proposed entity, the HHS will select from a certified pool.
From there, both parties must submit proposed payment amounts and supporting documentation. The IDR entity has 30 business days to select one of the two offers. There are no compromises, midpoint adjustments or renegotiations. The IDR entity's decision is binding, and they must provide the decision in writing.
Independent Dispute Resolution in healthcare ensures a timely resolution while maintaining compliance with federal requirements.
Qualifying Payment Amount and Payment Determination Factors
The qualifying payment amount (QPA) serves as a benchmark for the IDR process. It's a median contracted rate the plan/insurer has for the same or similar services in a geographic region. It's a critical IDR factor and is the basis for calculating patient cost-sharing. During disputes, the QPA is a key reference point for entities evaluating payments.
By law, IDR entities must consider multiple factors beyond the IDR, including:
• The provider's level of training and experience
• The complexity of the case
• The facility market share and prior experience with the payer
• Circumstances unique to each particular case
Courts rejected earlier interpretations that gave presumptive weight to the QPA, requiring that entities must genuinely consider all additional factors when determining the final payment.
When initiating the IDR process, both parties must pay administrative fees. Typically, the losing party will bear the IDR entity fee. If parties have multiple payment disputes, the IDR process can be batched. That only applies if the dispute involves the same parties and similar services within the same 30-business-day period.
Public Notice and Provider Directory Requirements
In addition to establishing good faith estimate requirements and out-of-network billing regulations, the No Surprises Act requires providers to display GFE availability in three key locations. These include:
• Easily searchable public websites
• Provider office or facility
• Any on-site location where scheduling occurs
Practices can also provide notices developed by CMS models. Doing so constitutes good faith compliance. Notices should be in plain language, informing patients of their rights to receive a GFE.
Accurate provider directories are also crucial under the NSA. It's on health plans to maintain accurate provider directories. Insurers bear full responsibility if inaccurate directory information leads to inadvertent out-of-network care. Providers also play a supporting role and must inform patients of network status changes as soon as possible.
Enforcement, Penalties, and Compliance Audits
As stated earlier, the No Surprises Act is mandatory. Failing to comply will lead to penalties. Enforcement of the NSA is primarily overseen by the Centers for Medicare & Medicaid Services (CMS). However, the Department of Labor (DOL) and the United States Department of the Treasury (USDT) enforce group health plans and insurers.
NSA penalties for providers are substantial. Civil penalties of up to $10,000 per violation apply for:
• Balance billing violations
• Failure to provide required GFEs
• Notice and consent violations
The severity of NSA penalties for providers and insurers will depend on willfulness, the number of violations and the corrective actions taken. CMS and other enforcement entities monitor compliance in several ways.
One is by collecting patient complaints through online portals. They also publish quarterly enforcement reports. Providers found in violation of the NSA and out-of-network billing regulations should respond promptly and thoroughly to any enforcement inquiry.
There is some state-level coordination regarding compliance with the No Surprises Act. States maintain enforcement authority where state law meets or exceeds federal standards. Several states also have collaborative enforcement agreements with federal agencies. In states with strong existing no-surprise-billing protections, providers and insurers may need to comply with both state and federal requirements.
Implementation Strategies and Operational Requirements
Effective No Surprises Act compliance and implementation begins with identifying which provisions apply based on your services, network participation, patient population and facility type. Practices like yours should clearly define staff roles and invest in compliance training.
For example, front desk staff should identify self-pay or uninsured patients. They must also understand GFE requirements and timelines. Meanwhile, billing staff need to understand when balance billing prohibitions apply, how to successfully apply cost-sharing and how to respond to disputes.
Document role-specific responsibilities and train your team to comply with the law. Next, practices must improve operational workflows to accommodate tight deadlines and good-faith estimate requirements. The GFE delivery window of one to three business days provides little room for error and virtually no margin for manual processes. You must also consider the convening provider responsibilities and the one-business-day response requirements, which add complexity to your workflow. It's also important to identify situations that could create unsustainable manual administrative burden, such as high self-pay volume or multi-provider services.
From a technological standpoint, evaluate current systems. See if your current tech stack can generate CPT-level cost estimates for accuracy and speed. You must also see if your technology can track GFE delivery dates and maintain documentation for audit defense.
The ability to verify insurance at the CPT code level can dramatically change your approach to No Surprises Act compliance. It allows your practice to generate more accurate GFEs than using general estimates. You can determine exact copays, coinsurance and deductible amounts for specific procedures while confirming network status through both portal checks and direct payer calls.
Automation simplifies much of the process while removing manual work from the equation. It can support proper application of balance billing rules, notice-and-consent requirements and more. Digital patient intake captures relevant information upfront before payments, and automation accurately extracts insurance data, reducing the risk of manual errors.
See how automation can help with No Surprises Act compliance and streamline GFE workflows for specialty practices firsthand.
FAQs
The $400 threshold is the minimum difference between the actual billed charges and the amount provided in the good-faith estimate to qualify for a formal dispute. This threshold applies to the total charges, not individual line items. If the GFE provided an estimated total charge of $1,500 but the patient received a bill for $2,000, the difference exceeds $400. Thus, the patient is eligible initiate a patient-provider dispute resolution (PPDR) request with the HHS. Patients have 120 calendar days from the date they receive their bill to initiate a dispute and challenge the unexpectedly high costs.
Providers must provide good faith estimates (GFEs) to all uninsured and self-pay patients when scheduling services or upon request. Uninsured patients are those with no individual health coverage or coverage from group plans, FEHB, Medicare, Medicaid, TRICARE, IHS or VA benefits. Self-pay patients are those who elect to pay for services out of pocket rather than submitting an insurance claim.If scheduled 10 days or more in advance, providers have three business days to deliver the GFE. For services scheduled three to nine days in advance, providers have a single business day to supply the GFE. If requesting a GFE without scheduling an appointment, providers have only one business day.
Under the No Surprises Act, out-of-network providers generally can't balance bill patients for emergency services and specific non-emergency services at in-network facilities. The NSA has prohibitions on balance billing for emergency services. It also includes ancillary services for emergency evaluation.The exception is post-stabilization care, but providers must receive advanced written notice and consent. Out-of-network providers must obtain consent at least 72 hours before service, and patients can't be cognitively impaired or medicated. The waiver doesn't apply to ancillary services.
The qualifying payment amount is the median contracted rate that a health plan or insurer pays for services in a geographic region. The QPA is a key reference point when calculating patient cost-sharing. It's also one factor that affects the Independent Dispute Resolution process between providers and payers. It's something that IDR entities must consider, but it can't be the sole determinant for an outcome. According to court rulings, IDR entities must consider provider experience, case complexity, specific case circumstances and other relevant factors when making a decision.
Convening providers, those who receive the initial GFE request and schedule the primary service, must coordinate with all co-providers and co-facilities by contacting them within one business day of the GFE request. Co-providers and co-facilities must then respond within one business day, giving convening providers time to promptly create an accurate GFE.Because convening provider responsibilities rely on other parties, there are operational challenges when working with multiple specialists. Convening providers must communicate promptly while working under tight GFE timelines. Good-faith reliance protections are in place. They ensure that convening providers aren't violating NSA rules when creating GFEs with inaccurate estimate information from co-providers.







.avif)
.avif)
.avif)

.avif)
.avif)
