Guide

The state layer: where local balance-billing law still governs

Summary

It depends on the plan. The No Surprises Act sets a federal floor, but it defers to a qualifying state surprise-billing law where one applies — typically for fully-insured plans regulated by your state. State law generally cannot reach self-funded employer plans, which ERISA governs, so the federal act fills that gap. Your first move is identifying the plan type, then checking your state's law; neither rule is national on its own.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

Federal floor, state law on top: how the two fit

State surprise-billing laws and the federal No Surprises Act are layered, not competing. The federal act is a floor: as of 2026 it defers to a qualifying state surprise-billing law where one governs the plan and the service, and it steps in where no such state law reaches 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act sets a federal framework restricting balance billing in defined settings and hosts the implementing guidance — the federal floor that defers to qualifying state law and governs where no state law reaches.. The regulation frames this deferral to a specified state law explicitly 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative rule text implementing the No Surprises Act, including its deferral to a specified state law and the federal methodology that applies as the backstop when no such state law governs.. A state can protect patients more than the federal minimum, so the operative rule is frequently your state's — which is why there is no single national answer for a given bill.

That is the whole reason this page cannot hand you one rule to memorize. The answer to "what am I allowed to bill" is assembled from two sources at once, and the balance between them shifts with the patient's coverage. The No Surprises Act for office practice describes the federal layer; the state layer sits on top of it and, for many patients, is the one that actually controls.

The plan-type fork that decides which law applies

Before you can tell which surprise-billing rule applies, identify the patient's plan type, because that single fact routes the whole question. A fully-insured plan is regulated by your state's insurance department, so a state surprise-billing law can reach it 4Ref 4National Association of Insurance Commissioners (2026).National Association of Insurance Commissioners.That state insurance departments regulate fully-insured plans and that the NAIC coordinates model laws states adapt — the frame for finding your state's authority and for why surprise-billing details vary across states.. A self-funded employer plan is governed by ERISA, largely beyond state insurance law, so the federal act governs 3Ref 3U.S. Department of Labor (2026).ERISA.That self-funded employer plans are governed by ERISA rather than state insurance law, which is why state surprise-billing statutes generally do not reach them and the federal act fills that gap.. Government coverage runs on its own separate rules entirely.

Plan type	Who regulates it	Which surprise-billing rule tends to govern
Fully-insured	Your state insurance department	State surprise-billing law if any, with the federal act as the floor 4Ref 4National Association of Insurance Commissioners (2026).National Association of Insurance Commissioners.That state insurance departments regulate fully-insured plans and that the NAIC coordinates model laws states adapt — the frame for finding your state's authority and for why surprise-billing details vary across states.
Self-funded (ERISA)	Federal, under ERISA	The federal No Surprises Act 3Ref 3U.S. Department of Labor (2026).ERISA.That self-funded employer plans are governed by ERISA rather than state insurance law, which is why state surprise-billing statutes generally do not reach them and the federal act fills that gap.
Medicare / Medicaid	Federal or state program	The program's own rules, not the NSA framework

The practical failure is skipping this step — applying your state's rule to a self-funded plan it never reached, or the federal default to a patient your state actually protects further. Sort the plan first, then reach for the rule.

Where state law reaches, and where ERISA stops it

State insurance law reaches the plans your state regulates — fully-insured coverage — and there it can set payment standards, prompt-pay statutes, and its own dispute path. It generally cannot reach self-funded employer plans, because ERISA preempts state insurance regulation as applied to them; that is the structural reason a state surprise-billing law leaves a gap the federal act fills 3Ref 3U.S. Department of Labor (2026).ERISA.That self-funded employer plans are governed by ERISA rather than state insurance law, which is why state surprise-billing statutes generally do not reach them and the federal act fills that gap.. The National Association of Insurance Commissioners coordinates model laws that states adapt, which is why the specifics differ across state lines rather than following one template 4Ref 4National Association of Insurance Commissioners (2026).National Association of Insurance Commissioners.That state insurance departments regulate fully-insured plans and that the NAIC coordinates model laws states adapt — the frame for finding your state's authority and for why surprise-billing details vary across states..

Fully-insured: your state's law can govern the surprise bill, the payment amount, and the appeal route.
Self-funded (ERISA): state insurance mandates largely do not apply; the federal framework carries the protection.
The line is not the employer's size or name — it is whether the employer bears the claims risk itself (self-funded) or buys insurance (fully-insured).

How to find the rule that actually governs your bill

To find the rule that actually governs a given bill, start with your state's insurance department and its surprise-billing or balance-billing statute, then confirm whether the plan is one the state regulates. Do not borrow a neighboring state's threshold or arbitration method — they vary, and presenting one state's rule as the norm is how a practice ends up out of compliance in its own state 4Ref 4National Association of Insurance Commissioners (2026).National Association of Insurance Commissioners.That state insurance departments regulate fully-insured plans and that the NAIC coordinates model laws states adapt — the frame for finding your state's authority and for why surprise-billing details vary across states.. The federal text is the backstop when no state law reaches the situation 2Ref 2Office of the Federal Register (2026).45 CFR Part 149 — Surprise Billing and Transparency Requirements.The operative rule text implementing the No Surprises Act, including its deferral to a specified state law and the federal methodology that applies as the backstop when no such state law governs..

State law is also where adjacent tracks live — the prompt-pay statutes that set how fast a plan must pay you, and the external review process a patient uses after a denial — so the state layer governs more than the surprise bill itself. When you cannot determine which law applies from the coverage alone, the plan or its administrator can confirm whether it is self-funded, and that answer settles the fork.

What this means for your billing workflow

For your billing workflow, the practical sequence is short: confirm the plan type, check your state's surprise-billing law when the plan is state-regulated, and default to the federal framework when it is a self-funded ERISA plan or no state law reaches the situation 1Ref 1Centers for Medicare & Medicaid Services (2026).No Surprise Billing.That the No Surprises Act sets a federal framework restricting balance billing in defined settings and hosts the implementing guidance — the federal floor that defers to qualifying state law and governs where no state law reaches.. Keep the self-pay good-faith-estimate process separate — that federal track applies regardless of state law and does not turn on any of this.

Because the two layers rest on separate authority, both can enforce. NSA enforcement runs on federal authority, and a state penalty for violating a state balance-billing law runs on its own — a single bad bill can expose you under both at once, not one or the other. The defensive posture is the same either way: know the plan type before you bill out-of-network, apply the layer that governs it, and document which rule you relied on and why.

Common questions

No. The No Surprises Act is a floor, not a ceiling. It defers to a qualifying state surprise-billing law where one governs the plan and the service, and a state is free to protect patients more than the federal minimum. The federal rule fills gaps — chiefly self-funded ERISA plans and situations no state law reaches — rather than displacing state protection that already applies.

Because ERISA governs self-funded employer plans and largely preempts state insurance regulation as applied to them. A state surprise-billing law generally cannot reach a self-funded plan, so the federal No Surprises Act is what protects the patient and constrains your billing there. For a fully-insured plan, by contrast, your state's law can govern. The plan type decides which layer controls.

You usually cannot tell from the card alone, so ask. The plan or its third-party administrator can confirm whether the employer bears the claims risk itself, which makes it self-funded, or buys insurance, which makes it fully-insured. The distinction is about who carries the risk, not the employer's size or the insurer logo on the card. When in doubt, get the answer in writing.

Start with your state insurance department and its balance-billing statute, and confirm the plan is one the state regulates before applying it. The National Association of Insurance Commissioners is a useful orientation point for finding your state's authority and understanding how model laws vary. Never assume a neighboring state's threshold or method applies to yours — those details differ state by state.

No. The good-faith-estimate requirement for uninsured and self-pay patients is a federal obligation that applies regardless of your state's surprise-billing law and regardless of plan type, because a self-pay patient has no plan in the picture. Keep that process running on its own track; the state-versus-federal analysis in this page is about insured patients and which balance-billing rule governs their bill.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.Centers for Medicare & Medicaid Services (2026). No Surprise Billing. Centers for Medicare & Medicaid Services (CMS). link ✓That the No Surprises Act sets a federal framework restricting balance billing in defined settings and hosts the implementing guidance — the federal floor that defers to qualifying state law and governs where no state law reaches.
2.Office of the Federal Register (2026). 45 CFR Part 149 — Surprise Billing and Transparency Requirements. eCFR. link ✓The operative rule text implementing the No Surprises Act, including its deferral to a specified state law and the federal methodology that applies as the backstop when no such state law governs.
3.U.S. Department of Labor (2026). ERISA. U.S. Department of Labor. linkThat self-funded employer plans are governed by ERISA rather than state insurance law, which is why state surprise-billing statutes generally do not reach them and the federal act fills that gap.
4.National Association of Insurance Commissioners (2026). National Association of Insurance Commissioners. NAIC. linkThat state insurance departments regulate fully-insured plans and that the NAIC coordinates model laws states adapt — the frame for finding your state's authority and for why surprise-billing details vary across states.

https://www.gale.care/for-providers/nsa-state-surprise-laws · 4 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers