The No Surprises Act for an office practice: the short list

The short list: which No Surprises Act rules reach a solo office

Three parts of the No Surprises Act touch an office practice, and only one reaches most of them. The good-faith estimate for uninsured and self-pay patients is almost certainly yours. The balance-billing ban mostly governs emergency care and out-of-network services delivered at facilities. The patient-provider dispute process exists to enforce the accuracy of the estimate you give 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act requires good-faith estimates for uninsured and self-pay patients and restricts balance billing in defined settings, with CMS hosting the guidance..

Read the rest of this page against your own setup rather than as a generic checklist. A cash-pay therapist, or a small in-network primary-care office, will spend nearly all of its NSA effort on the good-faith estimate — the written statement of expected charges owed to patients who are not billing insurance for a service. If you never furnish care inside a hospital, ambulatory surgical center, or other facility, the surprise-billing provisions that make headlines will rarely, if ever, apply to you.

That is the useful frame for a practice of one: separate the rule you must operationalize this month from the ones you only need to recognize if your footprint changes. The sections below take them in that order — the estimate first, then the balance-billing ban, the dispute process, and the disclosure notice, and finally the obligations that feel like the No Surprises Act but are actually different federal laws with their own agencies.

Good-faith estimates: the duty that reaches nearly every office

The good-faith estimate is the No Surprises Act obligation that actually lands on a solo office. You owe a written GFE to any patient who is uninsured, or who is insured but chooses not to use their coverage for the service — a self-pay patient. The estimate goes out before scheduled care and whenever a patient asks for one, whether or not anything is scheduled 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative regulation text for good-faith-estimate content and timing and the patient-provider dispute process..

The trigger is the patient's payment posture, not their diagnosis or your specialty. A patient with commercial insurance who decides to pay cash for a visit — common in behavioral health, where privacy or an out-of-network stance drives the choice — is a self-pay patient for that service and is owed an estimate 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act requires good-faith estimates for uninsured and self-pay patients and restricts balance billing in defined settings, with CMS hosting the guidance.. The moment to ask is at scheduling: will the patient be using insurance for this visit? The answer routes them into either the insurance workflow or the good-faith-estimate workflow.

Two practical consequences follow. First, the duty is recurring, not one-time: a patient who self-pays for a course of weekly visits is owed an estimate that covers the expected course, which the regulation lets you issue as a single estimate for recurring services within a bounded period. Second, the estimate is convention-setting for your cash rates. Because the patient can later compare the bill to the estimate, the number you write down becomes the number you are effectively standing behind — which is why the content and timing rules in the next section are worth getting exactly right rather than approximately right.

What the estimate must contain and when it's due

A good-faith estimate must be in writing — paper or electronic, in the patient's preferred format — must list the items and services expected along with their billing and diagnosis codes, and must state the expected charges. It also identifies the provider and the setting. The timing depends on how far ahead the visit is scheduled, or whether the patient simply asked for an estimate with nothing yet on the calendar 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative regulation text for good-faith-estimate content and timing and the patient-provider dispute process..

The regulation sets the windows in business days:

Two rules keep an estimate defensible over time. When the expected charges change materially — the plan of care expands, or a code changes — issue a new good-faith estimate within one business day of the new schedule rather than letting the original drift out of date. And for a self-pay course of care, a single estimate can cover recurring services for a bounded window before it must be refreshed. Build a template that pre-fills your common self-pay services with their codes and your cash charges, and the whole task collapses into a few minutes at scheduling. Keep the estimate in the record: it is the document the dispute process compares against if a patient ever challenges a bill.

The balance-billing ban: why an in-network office rarely triggers it

The balance-billing ban is the part of the law that makes news, and it is also the part least likely to reach a solo office. It prohibits billing a patient more than in-network cost-sharing in three settings: emergency services, out-of-network care delivered at an in-network facility, and air ambulance transport. A practice that sees patients only in its own office, in network, is generally outside all three 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act requires good-faith estimates for uninsured and self-pay patients and restricts balance billing in defined settings, with CMS hosting the guidance..

Where an office can be pulled in is through facility work. If you are an out-of-network clinician furnishing non-emergency services at an in-network facility, the balance-billing ban can reach those services, and the analysis of convening vs co-provider roles — who assembles the estimate and who bills — starts to matter. For certain non-emergency services, the law allows a notice-and-consent path by which a patient may knowingly waive the protection, but it is hedged with content, timing, and delivery requirements, and it is unavailable for many ancillary services precisely because the patient has no real choice of provider in the moment.

The safe reading for a pure office practice is this: know that the ban exists, know that it keys off where care is delivered rather than your specialty, and re-check the moment you take on any facility-based or emergency work. That is where the line sits — not a verdict that any particular arrangement of yours is clear, which is a question for your own counsel against your actual contracts.

The patient-provider dispute process behind the estimate

The good-faith estimate has teeth through the patient-provider dispute resolution process. When an uninsured or self-pay patient receives a final bill that exceeds their good-faith estimate by a set threshold, they can initiate a federal dispute rather than simply paying. That is why the estimate is not a throwaway form: an inaccurate one that lowballs the charge invites a dispute you can lose 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative regulation text for good-faith-estimate content and timing and the patient-provider dispute process..

The threshold that opens the process is a final bill that runs $400 or more above the estimate for that provider 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative regulation text for good-faith-estimate content and timing and the patient-provider dispute process.. The patient files, pays a modest administrative fee, and a certified reviewer compares the bill against the estimate; if the extra charges are not justified, the amount the patient owes can be held down toward the estimate. The practical defense is upstream: an estimate built from your real codes and cash rates, refreshed when the plan of care changes, rarely diverges by enough to trigger a dispute at all.

Do not confuse this with the payer-provider track. The No Surprises Act also created an independent dispute resolution process for out-of-network payment fights between providers and health plans — a different arena that a cash-pay office does not enter, and one worth understanding only if you bill plans out of network. For a self-pay practice, the patient-provider process is the one that matters, and a disciplined estimate is the whole of your exposure management for it.

The one-page notice and public disclosure

Providers and facilities that are subject to the balance-billing protections must also disclose them: a one-page notice of patients' rights against surprise billing, given to the patient, posted where patients can see it, and published on the practice website. Because this duty is tied to balance-billing exposure, an office practice with no facility-based or emergency services generally has little or nothing to post — but confirm your own footprint before assuming it is zero 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act requires good-faith estimates for uninsured and self-pay patients and restricts balance billing in defined settings, with CMS hosting the guidance..

If you do fall within scope, the disclosure content is prescribed: what the protections are, the applicable state rules where relevant, and how a patient can report a suspected violation. A federal model notice exists so you are not drafting this from scratch; adapt the standardized language rather than writing your own summary of the law.

Enforcement sits behind all of this. NSA enforcement generally runs through the agencies that administer the law, with civil monetary penalties available for violations, and the estimate-and-disclosure duties are exactly the kind of concrete, checkable requirements an enforcer can point to. For a solo practice the message is proportion, not alarm: the realistic exposure is a mishandled good-faith estimate, so put your effort there and treat the disclosure notice as a footprint question you answer once and revisit only when your service locations change.

What isn't the No Surprises Act (and which rule is)

Several duties that feel like surprise-billing compliance are actually separate federal regimes, and confusing them wastes effort. Accessibility in your office is the Americans with Disabilities Act, not the No Surprises Act. Injury-log paperwork is OSHA. A data leak from a consumer app that isn't your business associate can fall under the Federal Trade Commission's rules rather than HIPAA. Knowing which body owns which duty tells you which page to actually read.

• Accessibility is Title III of the ADA. A private health care office is a place of public accommodation, which carries effective-communication duties — including interpreters for patients who are deaf or hard of hearing — physical-access requirements, and web-accessibility expectations 3Ref 3U.S. Department of Justice (2026).The Americans with Disabilities Act.That Title III of the ADA makes a private health care office a public accommodation with effective-communication and physical-access duties.. None of this is No Surprises Act territory.
• Injury recordkeeping is OSHA, and small practices catch a break. Employers with ten or fewer employees are exempt from routine OSHA injury and illness recordkeeping, though the obligation to report severe incidents still applies 4Ref 4Occupational Safety and Health Administration (2026).Recordkeeping.That employers with ten or fewer employees are exempt from routine OSHA injury and illness recordkeeping while severe-incident reporting still applies.. A solo office spends its safety effort on hazards, not logs.
• Some tools sit outside HIPAA entirely. A health app or vendor that is not your business associate may still fall under the FTC's Health Breach Notification Rule, which reaches health data held by non-HIPAA apps and vendors 5Ref 5Federal Trade Commission (2026).Health Breach Notification Rule.That the FTC's Health Breach Notification Rule reaches health data held by apps and vendors that fall outside HIPAA.. Match the tool to the rule before assuming HIPAA covers it.

The fraud-and-abuse statutes — the False Claims Act among them — are a third, separate world; the fca and the solo practice is its own topic, distinct from surprise billing. Treat the No Surprises Act as one lane among several, and you will spend your limited compliance time on the duty that is actually yours: the good-faith estimate.