No Surprises Act Compliance for Out-of-Network Behavioral Health

You admit a self-pay client for residential detox. Thirty days later, the family calls demanding an itemized breakdown because the bill is 40% higher than what admissions verbally quoted. Now you’re in a dispute you can’t win — because you never issued a written good-faith estimate, and the No Surprises Act says the patient can challenge any bill that exceeds the estimate by more than $400.

Out-of-network behavioral health facilities carry more NSA exposure than most operators realize. The rules were written with emergency rooms and surprise anesthesia bills in mind, but they land squarely on residential SUD, PHP, and IOP programs that admit self-pay and out-of-network commercial patients. Getting the paperwork wrong doesn’t just risk a patient dispute — it puts your facility in front of a federal Independent Dispute Resolution process you didn’t budget for.

The short version

Good-faith estimates (GFEs) are required for every self-pay and uninsured patient at scheduling — and behavioral health admissions almost always count as “scheduled.”
Balance billing is prohibited for emergency services and certain non-emergency services at in-network facilities, but out-of-network residential and outpatient behavioral health has narrower protections — with big exceptions around consent.
The notice-and-consent waiver form lets patients waive balance-billing protections for some non-emergency services, but it must be delivered on specific timelines with specific disclosures.
Documentation is the whole game. If it’s not in the chart with a signature and a timestamp, it didn’t happen — and IDR arbitrators will side with the patient.

Does the No Surprises Act apply to my out-of-network SUD or mental health facility?

Yes. The NSA applies to any licensed healthcare facility and any licensed provider billing for services. That includes residential treatment centers, PHPs, IOPs, detox facilities, mental health hospitals, and the individual clinicians (LCSWs, LMFTs, MDs, psychiatric NPs) who bill under them. If you have an NPI and you send claims or invoices, you’re in scope.

The two obligations that hit behavioral health hardest are the good-faith estimate requirement for self-pay and uninsured patients, and the balance-billing prohibition for out-of-network providers delivering emergency or certain post-stabilization services.

Where operators get tripped up: many assume “we’re out-of-network, so NSA doesn’t apply to our commercial patients.” That’s backwards. Out-of-network is exactly when the balance-billing rules kick in. If a commercial patient’s plan pays partial and you try to bill them the difference without a valid notice-and-consent waiver, you’re in violation — and the patient can dispute through the federal IDR process. The plan’s out-of-network payment becomes the ceiling unless you’ve done the paperwork correctly.

The one place NSA gives you more room is pure self-pay. Self-pay and uninsured patients don’t have balance-billing protections in the traditional sense, but they do have the GFE right — and if your bill exceeds the estimate by $400 or more per provider, they can invoke Patient-Provider Dispute Resolution.

What has to be in a good-faith estimate for a residential or PHP admission?

The GFE must be delivered in writing (paper or electronic, patient’s choice), and it must include specific elements. Missing any of them makes the estimate defective:

Patient name and date of birth
Description of the primary item or service — for behavioral health, this typically reads as “residential substance use disorder treatment, estimated 30 days” or “partial hospitalization program, estimated 4 weeks”
Itemized list of items and services reasonably expected, grouped by provider or facility
Applicable diagnosis codes, service codes (CPT/HCPCS/Rev codes), and expected charges
Name, NPI, and TIN of each provider or facility expected to bill
State, service location, and dates of anticipated service
Disclaimer that the estimate is not a contract, that actual charges may differ, and that the patient has dispute rights if the bill exceeds the estimate by $400 or more per provider

Timing matters. If services are scheduled at least 10 business days in advance, the GFE must be delivered within 3 business days. If scheduled 3–9 business days in advance, it must be delivered within 1 business day. If the patient requests an estimate without scheduling, you have 3 business days to deliver.

For residential and PHP programs, the tricky part is estimating length of stay. Build tiered GFEs (14-day, 30-day, 45-day) tied to your typical medical necessity ranges, and reissue an updated GFE whenever the treatment plan changes. Any time expected charges change by more than the $400 threshold, a new GFE is required.

One operational note: co-treating providers — the psychiatrist doing med management, the primary therapist billing under their own NPI, the medical director — each need their own line items. This is where a lot of facilities fall down. Admissions is generating a facility estimate but forgetting the professional fees, and the patient’s total bill blows past the $400 threshold on the provider side alone.

When can I balance-bill an out-of-network commercial patient?

Under the NSA, balance billing is prohibited for:

Emergency services at any facility, in-network or out-of-network
Non-emergency services delivered by out-of-network providers at in-network facilities (the classic “surprise anesthesia” scenario)
Post-stabilization services following an emergency, until the patient can safely be transferred or gives informed consent

For out-of-network behavioral health facilities providing scheduled, non-emergency services — most residential admissions, PHP, IOP — balance billing is technically permitted if you obtain a valid notice-and-consent waiver using the federal Standard Notice and Consent form.

The waiver requirements are strict. The notice must be delivered at least 72 hours before the appointment for services scheduled more than 72 hours out, or on the day of service (before care begins) if scheduled with less notice. It must include a good-faith estimate of charges, a list of in-network alternatives, and clear language that the patient is not required to consent and can seek care elsewhere.

The waiver cannot be used for certain categories — including some ancillary services and emergency-related care. Several state parity and consumer-protection laws layer additional restrictions on top of the federal rules, particularly for mental health and SUD services. California, New York, Texas, and Florida each have wrinkles that override or supplement the federal standard.

If you’re admitting a patient in acute withdrawal or acute suicidal crisis, that’s an emergency service under most interpretations — and no waiver can override the balance-billing prohibition. Charging the patient the difference between billed charges and the plan’s out-of-network payment is a violation.

How do I build NSA compliance into admissions and billing workflows?

Compliance is a workflow problem, not a legal problem. The regulations are clear enough. What breaks down is the handoff between admissions, clinical, and billing — and that’s where facilities get caught.

A workable operational model:

At inquiry / pre-admission: Verification of benefits determines insurance status. If uninsured or self-pay, GFE generation starts immediately. If commercial and out-of-network, VOB confirms plan status and admissions determines whether notice-and-consent is appropriate or whether the service qualifies as emergency (in which case no waiver applies). A thorough verification of benefits process is the foundation — if you don’t know the patient’s network status and remaining benefits, you can’t build a defensible estimate or waiver.

Before admission: GFE or notice-and-consent delivered with required timing. Signature captured, timestamped, stored in the chart. Copy provided to patient in their preferred format.

During treatment: If length of stay, level of care, or provider mix changes, a revised GFE is issued. This is where utilization review and billing have to talk — every step-down, every extended stay authorization changes the estimate.

At discharge and billing: Final charges reconciled against the most recent GFE. If the delta is greater than $400 per provider, expect a potential dispute. Bills flagged for review before they go out. Documentation packaged and retained for the 6-year record requirement.

Fragmentation hurts here. If your VOB is done by one vendor, your billing by another, and admissions is generating GFEs from a template someone downloaded in 2022, the pieces don’t line up. Global AHS handles VOB, utilization review, billing, and appeals in-house — which matters because a compliant GFE has to reflect what UR is actually authorizing and what billing is actually going to submit. When those functions live under one roof, the estimate a patient signs at admission is the estimate their bill matches at discharge.

What happens if I get NSA compliance wrong?

Two enforcement paths matter. The first is Patient-Provider Dispute Resolution for self-pay patients — a federal process where a Selected Dispute Resolution Entity reviews the case and, if the bill exceeds the GFE by more than $400, typically caps the patient’s obligation at the estimated amount. You eat the difference. The second is federal IDR for commercial out-of-network disputes, where a certified arbitrator picks between the plan’s offer and your offer under a baseball-style arbitration model.

Beyond disputes, HHS can impose civil monetary penalties per violation. State enforcement varies but generally piggybacks on federal complaints. And commercial payers have used NSA violations as grounds for network termination and audit expansions — meaning a compliance failure with one patient can trigger a takeback review across your entire commercial book.

The cost of building a clean GFE and consent workflow is trivial compared to the cost of one IDR loss with an arbitrator who reads your documentation and sees gaps. Get the paperwork right up front, and the rest of the revenue cycle gets easier — cleaner claims, fewer patient balance disputes, faster cash.

If you want a second set of eyes on your current GFE templates, consent workflow, and VOB-to-billing handoff, Global AHS offers a free 6-month billing audit that includes an NSA compliance review. Request the audit here.

Frequently Asked Questions

Do we have to issue a good-faith estimate to insured patients who are staying in-network?

Not currently. The GFE requirement under the No Surprises Act applies to uninsured and self-pay patients. Regulations for insured patients (Advanced Explanations of Benefits) have been announced but enforcement has been repeatedly delayed. Best practice is to build the GFE workflow now so you’re ready when AEOB enforcement begins.

How does the $400 dispute threshold work for a 30-day residential stay?

The $400 threshold is applied per provider or facility, not per line item. If your facility’s final bill exceeds the good-faith estimate for facility charges by $400 or more, the patient can initiate Patient-Provider Dispute Resolution. Professional fees billed under separate NPIs (psychiatrist, primary therapist) each have their own $400 threshold against their own line items in the GFE.

Can we use the notice-and-consent waiver for a patient admitted in acute withdrawal?

No. Emergency services — including care for acute intoxication, withdrawal management, and acute psychiatric crisis under most interpretations — cannot be waived through the notice-and-consent process. Balance billing is prohibited for emergency services regardless of network status, and any consent form signed under emergency conditions would not hold up in a dispute.

What happens if length of stay changes and we don’t update the good-faith estimate?

If actual charges exceed the original GFE by more than $400 per provider, the patient can initiate dispute resolution and the arbitrator will typically cap the bill at the original estimate. Any material change — extended stay, level-of-care change, added services — should trigger a new GFE. Tie the update trigger to your utilization review workflow so it happens automatically when authorizations shift.

How long do we have to keep good-faith estimates and consent forms on file?

The federal record retention requirement is 6 years from the date the GFE or consent was issued. Store the signed documents in the patient’s chart or a dedicated compliance repository with clear timestamps. If a dispute is filed years later, the burden is on the facility to produce the documentation.

Not sure where your billing is leaking?

Global AHS will audit your last 6 months of billing for free. We pull denials, aged AR, timely filing misses, undercoded services, and underpaid claims, then hand you a written report showing the exact gaps and what they’re costing you. No commitment, no sales pressure — just your numbers, laid bare.

Request your free 6-month audit →