Key Takeaways:
- Several states now regulate medical debt collection differently, and the rules do not agree with each other or with the federal government’s current position.
- The federal rule that would have simplified this was vacated in 2025, and the agency that wrote it is now arguing against the state rules that replaced it.
- A multi-state health system or MSO cannot run patient collections on a state-by-state lookup table without exposing itself to compliance risk and an inconsistent patient experience.
- The fix isn’t tracking every rule. It is one internal standard strict enough to satisfy the toughest state you operate in.
A patient in Maryland and a patient in Ohio can owe a hospital the same amount and face completely different collection paths. The difference is not clinical. It is jurisdictional.
For a multi-state health system, that gap shows up as a billing team guessing, case by case, which state’s rules apply to which patient. That guesswork is a pattern we see repeatedly across multi-state patient financial services operations. Meanwhile, federal protection is unsettled.
The Consumer Financial Protection Bureau rule meant to simplify medical debt reporting was struck down in 2025. The agency that wrote it now argues against the state rules that replaced it.
This piece lays out where the law stands, and outlines the patient collections vendor compliance standard that makes the patchwork manageable.
What is a Patient Collections Compliance Standard?
A patient collections compliance standard is a single internal policy set to the strictest state requirement a health system operates under. It governs financial assistance screening, collection timing, and credit reporting for every patient, regardless of location.
The Regulatory Picture in 2026: Where Federal Protection Actually Stands
In January 2025, the CFPB finalized a rule that would have banned most medical debt from credit reports nationwide. The rule was significant. It would have removed medical collections information from an estimated 15 million Americans’ credit files.
Six months later, a federal court in the Eastern District of Texas vacated it, at the Bureau’s own request. Under new leadership, the CFPB agreed the rule exceeded its statutory authority under the Fair Credit Reporting Act.
The court’s decision was final, and the administration chose not to appeal it. As of today, there is no federal ban on medical debt appearing on a credit report.
Why the Federal Rule is Not Enforceable Anymore
A compliance team building a policy today should pay close attention to that timeline. Revisit any internal standard that assumed the federal rule would eventually take effect because it will not.
The court vacated the rule in its entirety rather than narrowing or delaying it. Remove or update any references to the rule in policy documents, patient-facing notices, and vendor contracts because they are now outdated.
The Preemption Fight Nobody Resolved
The story did not end when the court threw out the rule. In October 2025, the CFPB issued an interpretive rule saying that the Fair Credit Reporting Act broadly overrides many state laws that filled the gap after the federal rule was vacated.
Debt collection trade groups have already used that argument to challenge at least one state law in court. So far, none of the 16 state laws discussed below has been struck down. But several now face more legal uncertainty than they did a year ago.
If your compliance program depends on one state law staying in place, it could quickly become outdated as the legal landscape changes.
16 States, 16 Different Answers
State medical debt collection law differences show up in three distinct mechanisms: outright credit-reporting bans, conditional reporting, and narrower restrictions on collection tactics.
With federal protection gone and its replacement contested, states have moved forward largely on their own, and they have not moved in the same direction. Some states ban medical debt from credit reports outright. Others attach conditions to reporting.
A few restrict collection tactics rather than credit reporting at all. The table below shows five representative approaches.
| State | Collection restriction | Trigger or condition |
| Maryland | Excludes medical debt from credit reports and requires financial assistance screening before any collection action | Effective October 1, 2025 |
| Nevada | Requires a 60-day notification before any collection action begins; the debt cannot be reported to a credit bureau during that window | Notification period only, not a standing ban |
| Texas | Requires an itemized bill with plain-language service descriptions before medical debt can be sent to collections at all | Pre-collections disclosure requirement, not a credit-reporting condition |
| Virginia | Prohibits medical providers and collection entities from reporting medical debt to credit bureaus. Also bans liens, foreclosure, and wage garnishment for patients who qualify for financial assistance. Other patients receive a 120-day waiting period and 30-day notice before wage garnishment. | Credit reporting ban already in effect; additional collection protections effective July 1, 2026 |
| Rhode Island | Prohibits credit reporting agencies and furnishers from including medical debt in credit reports. Also bars collectors from falsely claiming that medical debt will appear on a credit report or affect a credit score. | Credit reporting ban effective January 1, 2026 |
What the Credit Bureaus Changed on Their Own
Separate from any state or federal law, Equifax, Experian, and TransUnion voluntarily changed their credit reporting policies in 2023. They stopped reporting paid medical collections and medical collections under $500, and extended the waiting period before unpaid medical collections can appear on a credit report from six months to 12 months.
These policies apply nationwide, but they are voluntary business decisions rather than legal requirements. Because the credit bureaus can change them at any time, compliance programs should account for them without relying on them alone.
Why Know the Rules Does Not Scale Across State Lines
Healthcare patient financial services compliance is not a matter of collections philosophy. It is a matter of operational exposure. A health system operating in three, five, or twelve states cannot run patient financial services on a manually maintained exception list.
Every new state a system enters adds another rule, another effective date, and another condition to track. Every acquisition or new facility multiplies the number of state rules a single billing team must apply correctly, every day, for every account.
This is the failure mode we see most often. A team member applies last quarter’s rule to this quarter’s patient. It’s not carelessness. The rule changed and nobody flagged it. There is no reliable way to audit that kind of drift at volume. By the time it surfaces, in a state audit, a patient complaint, or a plaintiff attorney’s filing, it has already happened at scale.
HELP US REACH MORE PEOPLE
Like what you’re reading?
Add Connext as a preferred source on Google — it only takes a moment and helps more professionals find our content.
- 1 Click Add as preferred source below
- 2 Sign in to your Google account if prompted
- 3 Check the box next to Connext Global to confirm your preference
- 4 Close the tab — you're done. Thank you!
Financial Assistance Screening as the Foundation
Financial assistance screening before collections is now a baseline expectation in several states, not just a best practice. Section 501(r)(4) of the Internal Revenue Code sets the charity care policy 501 requirements every tax-exempt hospital must meet, including a written financial assistance policy. That requirement has been in place for more than a decade.
What has changed is how some states build on that federal requirement. For example, Maryland requires hospitals to notify patients about financial assistance, give them up to 240 days from the first bill to apply, and delay certain collection actions until that process and the required notice period are complete.
As more states adopt similar protections, financial assistance review is becoming a more important part of the collection process.
This shift matters operationally. Scheduling, insurance verification, and financial assistance screening are separate tasks that often belong to different teams and happen at different points in the revenue cycle. Confusing them leads to inconsistent collections.
A written policy should clearly define when financial assistance screening takes place, who is responsible for it, and what happens if the process is missed.
Building One Patient Collections Compliance Standard
Patient collections compliance is difficult when every state rule becomes a separate process. A stronger approach is one enterprise-wide standard built to the strictest requirements across all jurisdictions. This reduces complexity, limits compliance risk, and creates consistent patient experience.
Set Your Floor at the Strictest State You Touch
The practical answer to 16 different state rules is not 16 different workflows. It is one workflow, built to the strictest requirement across every state the system operates in.
If one state requires screening before any collection action, screen before any collection action everywhere. If one state requires a 30-day notice before an extraordinary collection action, send that notice everywhere.
This costs more upfront than a state-by-state approach. It removes the need to track which rule applies to which patient, and it removes the risk of applying the wrong one.
Document the Standard Once, Apply It Everywhere
A standard that lives only in institutional knowledge is not a standard. It must be written down: the screening sequence, the notice timing, the reporting rule, and the escalation path if a patient’s status changes mid-cycle. It must specify what happens when a patient moves between states during an active collection.
None of the state statutes discussed here address that scenario directly. Write the answer down before it becomes a live incident.
Where This Intersects the No Surprises Act and FDCPA
No Surprises Act patient billing compliance and FDCPA healthcare patient collections rules are often confused with state medical debt law, but they are not interchangeable. The No Surprises Act governs billing at the time of service for out-of-network care, not collections after the fact.
The Fair Debt Collection Practices Act generally governs third-party debt collectors, not hospital-employed billing staff, though many systems hold their vendors to FDCPA standards regardless. A patient collections compliance standard sits alongside both, not in place of either.
Why Partner with Connext
Building this standard is a policy decision. Applying it consistently, across every patient, every state, every day, is a capacity decision. That is usually where the gap opens. The standard exists on paper, but the team executing it is stretched too thin to apply it the same way every time.
Connext’s co-managed model is built for that gap. Staff work as part of your existing patient financial services team, following your policies, processes, and escalation paths. Our team, supported by an in-country manager who works with your operations team, follows those standards and helps manage the volume needed as your multi-state operations grow.
Every Connext team member working with patient data operates under HIPAA training protocols and signed Business Associate Agreements. Connext also holds SOC 2 Type II certification covering data security across client operations. This is additional, trained capacity applied to a standard you already own.
Book a discovery call to talk through what a multi-state patient financial services standard could look like for your team.
Frequently Asked Questions
No. The No Surprises Act governs billing for out-of-network care at the time of service. It does not set rules for collecting medical debt once a bill goes unpaid. That is governed separately by state law and, for third-party collectors, the FDCPA.
Most state medical debt statutes do not address this scenario directly. The safer approach is to apply whichever state’s rule is stricter, either the patient’s state at time of service or their current state. Confirm the approach with legal counsel.
Yes. Section 501(r)(4) applies to any nonprofit hospital seeking or maintaining federal tax-exempt status, regardless of what state law does or doesn’t require.
Generally, no. The FDCPA applies to third-party debt collectors, not original creditors collecting their own debts. Many health systems still hold internal teams and vendors to FDCPA standards as a practical safeguard. The statute itself doesn’t require it for in-house staff.
Not reliably at scale. Sixteen states have active medical debt statutes, several with different effective dates and conditions, and at least one is currently being challenged in court. Tracking that manually across a large team invites the exact drift this standard is meant to prevent.
A patient collections vendor compliance standard should specify, at minimum: a written screening sequence, notice timing by state, credit reporting conditions, and an escalation path for patients who relocate mid-cycle.
