No Surprises Act Impact on Medical Billing and Surprise Billing Rules
The No Surprises Act (NSA), enacted as part of the Consolidated Appropriations Act, 2021 (Pub. L. 116-260), established federal protections against unexpected out-of-network medical bills that had long affected patients receiving emergency care or services at in-network facilities from out-of-network providers. This page covers the Act's scope, the billing rules it imposes, the clinical and administrative scenarios where it applies, and the boundaries that distinguish protected situations from unprotected ones. Understanding these rules is foundational to accurate in-network vs. out-of-network billing compliance.
Definition and scope
The No Surprises Act took effect January 1, 2022, for plan years beginning on or after that date (CMS, "No Surprises Act," HHS.gov). The law applies to most private health insurance plans—including those offered through employers, the individual market, and grandfathered plans—but generally does not extend to Medicaid, Medicare, or Veterans Affairs coverage, which have separate billing frameworks addressed under medical billing for Medicare and medical billing for Medicaid.
The Act targets three categories of surprise billing:
- Emergency services from out-of-network providers or facilities — patients may not be billed beyond in-network cost-sharing amounts for emergency care regardless of network status.
- Non-emergency services from out-of-network providers at in-network facilities — applies when patients have not provided informed, written consent to out-of-network charges (with specific exceptions).
- Air ambulance services from out-of-network providers — ground ambulance services are excluded from the Act's protections as of initial implementation.
The Centers for Medicare & Medicaid Services (CMS) holds primary federal enforcement authority under the Act, with the Department of Labor (DOL) and Department of the Treasury sharing jurisdiction over different plan types (45 CFR Part 149).
How it works
The NSA's billing mechanism operates through a cost-sharing framework rather than a price control. When an NSA-protected service occurs, the patient's cost-sharing obligation is calculated as if the provider were in-network. The actual provider payment is then negotiated or arbitrated between the payer and provider—not absorbed by the patient.
The process follows these discrete phases:
- Open negotiation period — If the provider disputes the amount, a 30-business-day open negotiation window begins. Either party may initiate negotiation during this period.
- IDR entity decision — The arbitrator considers the Qualifying Payment Amount (QPA)—essentially the insurer's median contracted rate for the same or similar services in the same geographic region—as a benchmark. Additional factors include provider training, patient complexity, and market share.
- Cost-sharing collection — The provider may collect only the applicable in-network cost-sharing from the patient after final resolution.
The claim denial management implications are significant: NSA-related denials or improper balance bills constitute federal violations subject to civil monetary penalties up to $10,000 per violation (45 CFR § 149.430).
Common scenarios
Scenario 1 — Emergency department visit with out-of-network treating physician A patient presents to an in-network emergency department. The emergency physician or hospitalist is out-of-network. Under the NSA, the patient pays only the in-network emergency cost-sharing amount. The out-of-network physician cannot balance-bill the patient.
Scenario 2 — Elective surgery with out-of-network assistant surgeon A patient schedules a procedure at an in-network facility. An assistant surgeon brought in by the operating physician is out-of-network. Unless the patient signed a valid consent notice at least 72 hours before the procedure acknowledging the out-of-network status and estimated charges—and that provider was not the only available option—the NSA prohibits balance billing.
Scenario 3 — Anesthesia services Anesthesia billing is among the most common surprise-billing complaint categories. Patients selecting in-network surgical facilities frequently receive care from out-of-network anesthesiologists. The NSA explicitly covers this situation; the anesthesiologist must accept in-network cost-sharing limits.
Scenario 4 — Air ambulance transport Fixed-wing and rotor-wing air ambulance services provided by out-of-network carriers are NSA-protected. Providers must deliver a plain-language notice of the patient's rights, and balance billing is prohibited. Ground ambulance is not covered under current NSA provisions.
Decision boundaries
The NSA does not apply universally. Clear boundaries define when its protections apply versus when conventional commercial insurance billing rules govern the encounter.
Condition NSA Applies?
Emergency care, any out-of-network provider Yes
Non-emergency, out-of-network at in-network facility, no consent Yes
Non-emergency, out-of-network at in-network facility, valid written consent obtained No — patient may be balance-billed
Scheduled care at out-of-network facility (patient chose OON facility) No
Ground ambulance services No (as of initial implementation)
Medicare, Medicaid, VA, TRICARE plans No — governed by separate frameworks
Short-term limited-duration health plans Excluded from NSA coverage
The consent-notice exception deserves particular attention. For non-emergency, non-ancillary services, an out-of-network provider may obtain written consent to waive NSA protections only if the provider is not the only available specialist at the facility and sufficient advance notice was given. CMS has published a model notice form for this purpose.
The Qualifying Payment Amount (QPA) is the central comparison benchmark in the IDR process. The QPA is not equivalent to Medicare rates; it reflects the insurer's median in-network contracted rate for that service, plan type, and geographic market as of January 31, 2019, indexed for inflation under 45 CFR § 149.140. Providers whose contracted rates exceed the QPA have structural incentive to challenge initial insurer payments through the IDR pathway. Those with rates below the QPA face a harder arbitration environment.
For prior authorization requirements and documentation practices in NSA-affected encounters, CMS guidance clarifies that insurers may still require standard authorization for scheduled services; the NSA does not eliminate prior authorization obligations.
· ·