← Letter Library
Debt Collectors & Debt Buyers Specialized Debt Categories

Medical Debt Dispute (HIPAA Privacy, Itemized Billing, & No Surprises Act Reference)

Generate this letter

When to use it

Send to a collection agency attempting to collect a medical, hospital, or physician bill.

Preview

Bracketed fields are filled in from your account when you generate it.

[CLIENT FULL NAME] [CLIENT ADDRESS LINE1] [CLIENT CITY], [CLIENT STATE] [CLIENT ZIP] Phone: [CLIENT PHONE] Email: [CLIENT EMAIL] Date: [TODAY] [RECIPIENT NAME] [RECIPIENT ADDRESS BLOCK] RE: FORMAL DISPUTE OF ALLEGED MEDICAL DEBT, DEMAND FOR ITEMIZED BILLING, AND HIPAA PRIVACY NOTICE Account Number: [ACCOUNT ACCOUNT NUMBER MASKED] Original Provider: [ACCOUNT ORIGINAL CREDITOR] Claimed Amount: [ACCOUNT BALANCE] Dear [RECIPIENT NAME], I am writing regarding the above-referenced medical debt account originating from healthcare provider [ACCOUNT ORIGINAL CREDITOR]. I am formally disputing the balance claimed and requesting full verification pursuant to 15 U.S.C. § 1692g and federal medical billing regulations. Please take notice of the following requirements concerning medical debt collection: 1. Itemized Financial Statement: I demand an itemized bill from the healthcare provider detailing specific CPT procedure codes, billing descriptions, insurance payments applied, contractual adjustments, and patient responsibility balance. 2. Insurance Billing & No Surprises Act Verification: Provide proof that this claim was timely submitted to my primary/secondary medical insurance, and verify compliance with the No Surprises Act (42 U.S.C. § 300gg-111 et seq.) and CFPB Circular 2022-01 prohibiting illegal balance billing for out-of-network emergency or ancillary care. 3. HIPAA Compliance Notice: Under the Health Insurance Portability and Accountability Act (HIPAA), 45 CFR § 164.502, medical providers and debt collectors are restricted from improperly disclosing Protected Health Information (PHI). Disclosing detailed medical diagnosis or treatment details to credit bureaus or unauthorized third parties violates HIPAA privacy standards. 4. Credit Bureau Reporting Prohibition: Under national credit bureau policies and CFPB rules, medical debts under $500 or paid medical debts cannot be reported on credit profiles. Cease further collection efforts until you provide a complete, verified itemized accounting establishing compliance with medical billing law. Sincerely, [CLIENT FULL NAME] Sent via Certified Mail, Return Receipt Requested: [LETTER CERTIFIED NUMBER]

Legal basis

15 U.S.C. § 1692gHIPAA 45 CFR § 164.502No Surprises Act (42 U.S.C. § 300gg-111 et seq.)CFPB Circular 2022-01

Enclose

  • Copy of Medical Collection Notice

Before you send

  • Debt involves medical, dental, hospital, or emergency care services.
Know this first
  • Do not admit owing the debt or promise to make any payment, as doing so may restart or reset the statute of limitations in some state jurisdictions.
  • Under HIPAA rules (45 CFR § 164.502) and CFPB guidance, debt collectors collecting medical debts cannot disclose protected health information (PHI) without proper authorization and must comply with No Surprises Act balance billing protections.

Follow up

Allow about 30 days for a response.