Surprise Billing: What the Law Now Protects

You did everything right — in-network hospital, in-network surgeon — and a bill arrives from an anesthesiologist you never chose, at a rate no one quoted you, for an amount that bears no relationship to what your plan pays anyone else. That is a surprise bill, and until 2022 the answer depended on which state you lived in and what kind of plan your employer bought. It no longer does.

The federal floor, and why it matters more than your state’s law. The No Surprises Act (NSA) — Division BB, Title I of the Consolidated Appropriations Act, 2021, codified at IRC §9816 and IRC §9817, with parallel provisions at Public Health Service Act §§2799A-1–2799A-5 and ERISA §§716–717 — took effect January 1, 2022 and applies nationwide. Three protections, automatic, with no action required from you:

• Emergency services at any facility, in or out of network, including post-stabilization care, are billed at your in-network cost-sharing. No prior authorization, no network check.
• Non-emergency services by an out-of-network provider at an in-network facility — the anesthesiologist, the pathologist reading your biopsy, the radiologist, the assistant surgeon — likewise capped at in-network cost-sharing.
• Air ambulance from an out-of-network operator, same treatment.

Your cost-sharing is computed against the Qualifying Payment Amount (QPA), broadly the plan’s median contracted rate for that service in that region, and it counts toward your in-network deductible and out-of-pocket maximum. Whatever fight remains between the provider and the plan goes to a federal independent dispute resolution process in which you are not a party and have no exposure. If a “balance” arrives anyway, it is not yours to pay.

The reason this matters more than California’s or New York’s statute is jurisdictional, and it is the single most important fact in this section: state surprise-billing laws cannot reach self-funded ERISA plans, which is how most large employers cover their people — and therefore how most readers of this book are covered. California’s AB 72 (Health & Safety Code §1371.9; Insurance Code §10112.8) binds state-regulated plans and nothing else. The NSA reaches self-funded plans, fully insured plans, and individual-market coverage alike. Before 2022 a Californian on a self-funded employer plan had no surprise-billing protection at all. The CMS No Surprises portal is the federal reference, and the No Surprises Help Desk (1-800-985-3059) takes complaints directly.

State resources remain useful for the coverage state law does reach, and for knowing which regulator to call. In California, complaints route to the California Department Of Managed Health Care (DMHC) for HMOs and most commercial enrollment, and to the California Department Of Insurance (CDI) for insurance-regulated policies ( Consumer Protection from Medical Surprise Bills) — two different regulators, and readers routinely file with the wrong one. New York publishes its own guidance at the Department of Financial Services.

The one way to lose the protection: sign the waiver. An out-of-network provider may ask you to sign a notice and consent form (45 C.F.R. §§149.410, 149.420) at least 72 hours before scheduled care, waiving your balance-billing protection in exchange for a written estimate. Signing it is the entire failure mode — and it is the only decision in this area that is actually yours to make. Decline it. You are under no obligation to sign, and declining does not forfeit care.

Better still, know when the form is void on its face. The waiver may never be used for:

• emergency services of any kind;
• ancillary services — emergency medicine, anesthesiology, pathology, radiology, and neonatology, whether delivered by a physician or a non-physician practitioner, plus assistant surgeons, hospitalists, and intensivists;
• diagnostic services including laboratory and imaging;
• any service where no in-network provider is available at that facility;
• unforeseen urgent medical needs arising during a procedure you did consent to.

Those categories cover essentially every setting in which a form will be pushed at you on a clipboard. A consent presented in any of them is unenforceable.

The gaps that remain. Two, and both are worth knowing precisely.

Ground ambulance is excluded from the NSA. Air ambulance is covered; ground is not, because Congress left ground transport to state and local regulation. This is now the largest live balance-billing exposure a well-insured household actually faces. California closed it at the state level with AB 716 (Stats. 2023, ch. 454), which bars non-contracted ground ambulance operators from balance billing above in-network cost-sharing as of January 1, 2024 — but AB 716 is state law, so it does not reach self-funded plans either. The result is a genuine hole with a specific shape: a Californian on a self-funded employer plan is protected by the NSA everywhere except the ambulance, and by AB 716 nowhere. If that describes you, an out-of-network ground transport is a real uninsured-balance risk and the reason to read the itemized bill rather than autopay it.

Medicare, Medicaid, TRICARE, VA, and the Indian Health Service are outside the NSA — not because enrollees are exposed, but because those programs carry their own balance-billing bans. If you are on Original Medicare, the relevant protection is the participating-provider agreement and the limiting charge, not the NSA (section “Medicare”).

If you are uninsured or paying cash, you have a price-quote right. This is the piece almost no one uses, and it applies directly to the concierge, DPC, and bridge-year arrangements recommended above. A provider must give any uninsured or self-pay patient a written Good Faith Estimate (GFE) of expected charges on scheduling or on request (45 C.F.R. §149.610), covering the full episode — facility, physician, anesthesia, labs, imaging. If the final bill exceeds the estimate by $400 or more for that provider, you may invoke patient-provider dispute resolution within 120 days of receiving the bill (§149.620). A third-party arbitrator reviews the estimate against the bill, the filing fee is nominal, and collections must stop while the dispute is pending. Ask for the GFE in writing before any scheduled cash-pay procedure. It costs nothing, it is federally mandated, and it converts an open-ended bill into a documented ceiling with an appeal attached.

One 2026 development, kept in proportion. The tri-agency Federal Independent Dispute Resolution Operations final rule (published June 4, 2026) cut the IDR administrative fee from $115 to $15 per party for disputes initiated on or after June 11, 2026 and tightened QPA disclosure from August 3, 2026. That is plumbing between providers and plans. It does not change a dollar of what you owe, and it is listed here only so you recognize it as noise when a headline implies otherwise.