Good faith estimates, balance billing protections, and dispute resolution are now a permanent part of the revenue cycle. Here is what every practice needs to have in place in 2026.
The No Surprises Act has moved from a phased rollout into steady-state enforcement, and in 2026 it is one of the most underestimated sources of compliance risk in the revenue cycle. What started as a patient-protection measure against surprise out-of-network bills has become a set of operational requirements that touch scheduling, registration, billing, and patient communications, every day, for nearly every practice.
Most providers know the headline rule: patients should not be balance-billed for emergency care or for out-of-network services delivered at an in-network facility. Fewer have built reliable workflows for the part of the law that generates the most day-to-day work: the good faith estimate (GFE) for uninsured and self-pay patients. This guide breaks down both components and shows where compliance and revenue protection overlap.
The law has two distinct compliance tracks, and most practices are subject to both. Treating them as one requirement is the most common reason compliance programs have gaps.
For insured patients, providers cannot bill more than the in-network cost-sharing amount in three situations: emergency services, post-stabilization care, and non-emergency care delivered by out-of-network providers at an in-network facility (for example, an out-of-network anesthesiologist at an in-network surgery center). The patient pays only what they would have owed in-network, and the rest is resolved between the provider and the payer, often through arbitration. Patients can voluntarily waive these protections in limited, non-emergency cases, but only with a compliant written notice and consent obtained in advance.
For uninsured patients and those who choose not to use their insurance, providers must furnish a written good faith estimate of expected charges before a scheduled service. The GFE must include the primary service and the items and services reasonably expected to be provided alongside it, with diagnosis and procedure codes, expected charges, and provider details. For services scheduled at least three business days out, the estimate is due within one business day; for services scheduled further in advance, the window is slightly longer, and any patient who simply asks for an estimate must receive one.
Worried your front-end workflows aren't compliant?
Revenue Synergy builds No Surprises Act checkpoints directly into eligibility, registration, and estimation workflows for 500+ providers, with 99% clean claim rates and 24-day average AR.
Get a Free Compliance Review →The GFE requirement fails most often not because a practice refuses to comply, but because no one owns the workflow. A compliant, repeatable process has five steps.
The $400 rule, in plain terms: A self-pay patient billed $400 or more above their good faith estimate can request patient-provider dispute resolution. A neutral reviewer then decides what the patient owes. If you cannot show why the charge exceeded the estimate, the reviewer can hold the patient to the estimated amount, meaning you absorb the difference.
On the insured side, the financial stakes shift from the patient to the payer. When an out-of-network claim falls under the Act, the provider and payer must agree on payment, and if they cannot, either party can initiate independent dispute resolution (IDR), a baseball-style arbitration where each side submits an offer and the arbitrator picks one.
This is where revenue is won or lost. Practices that submit weak, poorly documented IDR offers consistently lose arbitration and leave money on the table. Strong submissions include the qualifying payment amount context, the provider's training and experience, the complexity of the service, and local market rates. Treating IDR as a structured appeals process, much like denial management, materially improves outcomes.
The administrative burden is real: tracking deadlines, batching eligible claims, and meeting strict submission formats. Practices that handle out-of-network volume, particularly emergency medicine, anesthesia, radiology, and hospital-based specialties, should treat the IDR pipeline as a dedicated function rather than an occasional task.
Beyond estimates and arbitration, the Act requires clear public disclosure of patients' balance-billing rights. Providers and facilities must post a one-page notice, on a public website, in the office, and provided to the patient, explaining the protections and how to report violations. When a patient is asked to waive protections (only allowed in specific non-emergency scenarios), the consent must use the standardized notice and consent form, be given far enough in advance, and never be a condition of receiving care.
These disclosures are low-effort and high-risk: they are simple to implement but among the easiest violations for regulators and patients to spot. Auditing your website footer, intake packet, and waiting-room signage once a year is a cheap insurance policy.
The practices that struggle with the No Surprises Act treat it as a legal checkbox owned by a compliance officer. The practices that thrive treat it as a front-end revenue workflow owned by the same teams that handle registration and estimation. Accurate good faith estimates reduce downstream patient disputes and bad debt. Strong IDR submissions recover out-of-network revenue. Clean disclosures prevent penalties. Every compliance requirement here has a revenue counterpart.
Revenue Synergy maintains HIPAA, ISO 27001, and HITRUST-aligned controls and embeds No Surprises Act checkpoints into the workflows we manage for clients, so estimates go out on time, disputes are documented, and out-of-network claims are worked through IDR with proper support.
Revenue Synergy results: Across 500+ providers and 22 specialties, our managed revenue cycles run at a 99% clean claim rate and 24-day average AR, with $500M+ recovered, including out-of-network and disputed balances handled through structured appeal and IDR processes.
Any provider or facility scheduling services for an uninsured or self-pay patient must furnish a written GFE covering the primary service and reasonably related items, within the required timeframe or upon request.
If a self-pay patient is billed at least $400 more than the GFE for a single provider or facility, they can dispute the bill through patient-provider dispute resolution, where a neutral party decides the amount owed.
Most practices are subject to at least one component, balance billing protections for insured patients, GFE requirements for self-pay patients, or both.
Civil monetary penalties can reach $10,000 per violation, in addition to refund obligations and reputational harm from patient disputes.
The No Surprises Act is no longer new, and "still getting up to speed" is no longer a defensible position. In 2026, compliant good faith estimates, disciplined IDR submissions, and clean public disclosures are simply part of running a revenue cycle. The good news: each requirement, done well, also protects revenue, fewer disputes, less bad debt, and more recovered out-of-network payment.
Related: HIPAA Compliant Billing · Prior Authorization Denials: How to Appeal and Win · Denial Management Process
Need help operationalizing No Surprises Act compliance? Revenue Synergy manages end-to-end RCM for 500+ providers with $500M+ recovered. Schedule a free revenue audit to see where compliance gaps are costing you.