State-Level Medical Debt Rules to Watch

Medical debt regulation is increasingly being shaped at the state level. While federal law continues to establish important consumer protections, states are adopting additional requirements governing how medical debt may be collected, reported, disclosed, and enforced.

The result is a growing patchwork of obligations that can differ significantly from one jurisdiction to another.

For healthcare providers, collection agencies, and accounts receivable organizations, this creates an operational challenge. A process that is permitted in one state may require additional notices, longer waiting periods, financial-assistance screening, or different collection treatment in another.

The central compliance question is no longer simply whether an organization has a medical-debt policy. It is whether its technology and workflows can apply the correct policy to each account based on location, account type, provider requirements, and current law.

State Activity Is Accelerating

States have taken an increasingly active role in addressing medical debt and healthcare affordability.

Recent legislation has addressed areas such as:

• Credit-reporting restrictions
• Required waiting periods
• Financial-assistance screening
• Consumer disclosures
• Billing transparency
• Collection activity during disputes or appeals
• Interest, liens, garnishment, and litigation
• Requirements placed on hospitals and other providers

In 2025 alone, at least 40 measures concerning medical debt and surprise billing were enacted across 22 states, according to the National Conference of State Legislatures. The approaches vary considerably, reinforcing the need for state-specific compliance monitoring.

Credit Reporting Is One of the Most Active Areas

Medical-debt credit reporting has received significant attention from federal and state policymakers.

Several states have enacted or considered restrictions on including medical debt in consumer reports. Colorado and New York were among the states that adopted medical-debt reporting restrictions, and other states have continued considering similar measures.

At the federal level, the legal landscape has also changed. The CFPB issued a medical-debt credit-reporting rule in January 2025, but subsequent litigation affected that rule, and the Bureau later issued an interpretation addressing federal preemption of certain state credit-reporting laws.

For collection organizations, the practical lesson is clear: credit-reporting rules must be monitored as an evolving area rather than treated as a fixed national standard.

Waiting Periods Can Delay Collection or Reporting

Some medical-debt protections establish waiting periods before specific collection or credit-reporting activities may begin.

Waiting periods may be intended to give consumers time to:

• Receive and review a bill
• Confirm insurance processing
• Apply for financial assistance
• Dispute the amount
• Appeal a coverage decision
• Establish a payment arrangement

Organizations need workflows that accurately calculate and enforce the applicable waiting period without relying on employees to track dates manually.

A missed restriction can create compliance exposure, while an unnecessarily long delay can affect recovery performance. Configurable rules help organizations balance both concerns.

Financial-Assistance Requirements Are Expanding

State policymakers are also placing greater emphasis on hospital financial-assistance policies and consumer eligibility.

Depending on the jurisdiction and provider, requirements may include:

• Screening patients for assistance
• Providing application information
• Delaying collection while an application is pending
• Offering income-based discounts
• Documenting eligibility decisions
• Including assistance information in notices

These requirements can affect when an account becomes eligible for external collection and what documentation must accompany it.

Healthcare organizations and their collection partners need clear processes for confirming that required financial-assistance steps have been completed before collection activity begins.

Disputes and Appeals May Restrict Collection Activity

Medical bills often involve questions that do not arise with other types of consumer debt.

A consumer may dispute:

• Whether insurance processed the claim correctly
• Whether the service was covered
• Whether the provider was in network
• Whether the amount exceeds permitted charges
• Whether financial assistance was applied
• Whether the consumer is responsible for the balance

Federal law may also affect collection activity involving amounts prohibited by the No Surprises Act. The CFPB has stated that attempting to collect or report amounts exceeding what the Act permits may violate federal consumer-protection laws.

Some state frameworks provide additional protections during disputes, appeals, or assistance reviews. Systems should therefore be able to pause or modify activity when an account enters a protected status.

Collection Remedies May Differ by State

States may also regulate the remedies available for medical debt.

Depending on the jurisdiction, restrictions may affect:

• Wage garnishment
• Property liens
• Foreclosure
• Civil litigation
• Interest and fees
• Collection against certain income or assets

These rules can change the appropriate strategy for an account and may depend on factors such as the provider, the consumer's income, the balance, or the type of medical service.

A national organization cannot assume that one recovery process will be appropriate everywhere.

Notices and Disclosures Require Careful Management

State rules may require specific language, timing, formatting, or delivery methods for consumer notices.

Requirements may include:

• Financial-assistance disclosures
• Dispute rights
• Itemized billing information
• Contact information
• Reporting disclosures
• Required timeframes
• Language-access provisions

Manual template management becomes difficult when an organization handles accounts across multiple states and provider types.

Centralized communication templates combined with state-specific rules reduce the likelihood that an outdated or incorrect notice will be used.

Hard-Coded Compliance Creates Operational Risk

When compliance logic is embedded directly into software code, every regulatory change may require development, testing, and deployment.

That approach becomes increasingly difficult as state requirements multiply.

A more adaptable model treats compliance requirements as configurable operational data, including:

• State
• Account type
• Provider type
• Balance
• Date of service
• Dispute status
• Financial-assistance status
• Permitted communication or collection activity
• Required notice or waiting period

Configurable rules allow compliance teams to update workflows more quickly and consistently without redesigning the entire platform.

A State-Level Compliance Program Needs Clear Ownership

Technology is only one part of the solution.

Organizations should establish responsibility for:

• Monitoring legislative and regulatory changes
• Reviewing new requirements
• Determining operational impact
• Updating policies and procedures
• Configuring system rules
• Training employees
• Testing changes
• Documenting implementation decisions

Compliance, operations, legal counsel, technology, and client leadership may all need to participate.

The goal is to create a repeatable process for converting a legal change into an operational requirement.

What Organizations Should Prioritize

Organizations managing medical receivables should consider several practical steps:

• Maintain a current state-law inventory.
• Identify which requirements apply by account and provider type.
• Document financial-assistance and dispute statuses.
• Configure waiting periods and activity restrictions.
• Centralize notices and communication templates.
• Preserve detailed audit trails.
• Test rule changes before deployment.
• Review client responsibilities and data requirements.
• Reassess processes regularly as laws change.

State-level compliance cannot be managed effectively through a spreadsheet and employee memory alone. It requires structured governance supported by adaptable technology.

Looking Ahead

Medical-debt regulation will likely remain an active area of state policymaking.

Different states will continue pursuing different approaches to credit reporting, financial assistance, collection practices, disclosures, and enforcement. Federal developments may also affect how state requirements operate or whether some provisions face preemption challenges.

Organizations do not need to predict every future rule. They do need an operating model that can respond when rules change.

The agencies and healthcare organizations best prepared for the future will be those that treat compliance as a configurable, continuously managed discipline rather than a fixed set of hard-coded requirements.