3.4 FDCPA, FCRA & Patient Collections
Key Takeaways
- The Fair Debt Collection Practices Act (FDCPA) regulates third-party debt collectors and collection agencies — it generally does not apply to a provider collecting its own original debt.
- The FDCPA limits debtor contact to 8 a.m. through 9 p.m. local time and prohibits harassment, false statements, and contact after a written cease request.
- Collectors must send a written validation notice within 5 days describing the debt and the consumer's right to dispute within 30 days.
- As of 2026 the three major credit bureaus voluntarily exclude paid medical collections, medical debts under $500, and medical debts under one year old — but the 2025 CFPB rule that would have made this federal law was vacated in July 2025.
- State patient-collection and bad-debt rules can be stricter than federal law, so billers must apply the more protective standard.
Why Collections Rules Matter to Billers
When patient balances go unpaid, the practice either pursues the debt itself or assigns it to a collection agency. Two federal laws frame what happens next: the Fair Debt Collection Practices Act (FDCPA) and the Fair Credit Reporting Act (FCRA). The CPB exam tests whether you know which law applies and what conduct is allowed.
FDCPA: Third-Party Collectors Only
The FDCPA (15 U.S.C. 1692) governs third-party debt collectors — agencies and others collecting debts owed to someone else. A crucial exam point: the FDCPA generally does not apply to the original creditor collecting its own debt. A physician practice billing its own patient is usually outside the FDCPA; the collection agency it hires is inside it.
Permitted vs. Prohibited Conduct
| Allowed | Prohibited |
|---|---|
| Contacting the debtor 8 a.m. - 9 p.m. local time | Calling before 8 a.m. or after 9 p.m. |
| Sending a written validation notice | Harassment, threats, or obscene language |
| Verifying the debt when disputed | Falsely claiming to be an attorney or government agent |
| Contacting third parties only to locate the debtor | Discussing the debt with an employer, friends, or neighbors |
| Honoring a written cease-contact request | Continuing contact after a written cease request |
The Validation Notice
Within 5 days of first contact, a collector must send a validation notice stating the amount of the debt, the creditor's name, and the consumer's right to dispute within 30 days. If the consumer disputes in writing, the collector must stop and verify the debt before resuming collection. The CFPB's Regulation F also caps phone-call frequency (generally seven calls per debt in seven days).
FCRA and Medical-Debt Credit Reporting (2026 Status)
The Fair Credit Reporting Act governs how data appears on reports kept by the credit reporting agencies (Equifax, Experian, TransUnion). The medical-debt landscape shifted recently, and the exam-prep field must track it:
- Voluntary bureau policies (still in effect, 2026): the three bureaus stopped reporting paid medical collections, medical collections with an original balance under $500, and unpaid medical debt less than one year old.
- The CFPB rule was vacated. A January 2025 CFPB final rule would have removed all medical debt from credit reports, but a federal court vacated it in July 2025, finding it exceeded CFPB authority and conflicted with the FCRA.
- Bottom line: the $500 / paid / one-year protections survive today as voluntary industry practice plus existing FCRA provisions, not as a binding federal regulation.
These practices recognize that medical debt often reflects billing disputes and insurance lag, not financial irresponsibility.
State Bad-Debt Rules
Many states add their own patient-collection and bad-debt requirements — mandatory itemized statements before collection, restrictions on collecting from patients eligible for charity care, interest caps, or notice periods before reporting. When state law is stricter than federal law, the practice must follow the more protective standard. Billers should never treat the federal rule as a ceiling.
The Validation-Notice Timeline in Practice
The exam likes to test the 30-day dispute window sequence. The clock works like this: the collector contacts the consumer, sends the validation notice within five days, and the consumer then has 30 days to dispute. If the consumer disputes within that window, the collector must cease collection until it mails verification of the debt. If the consumer does not dispute, the collector may continue — but silence is not a legal admission that the debt is valid. Billers handing accounts to an agency should ensure the underlying balance is accurate first, because a disputed debt the agency cannot verify must be dropped.
When the Original Creditor Becomes a Collector
A subtle trap: a provider that uses a false name implying a third party is collecting, or that buys debts in default to collect them, can lose its original-creditor exemption and become subject to the FDCPA. So "we are the original creditor" is not an unconditional shield — it depends on how the practice actually collects.
Tying It to the Revenue Cycle
Good collection compliance starts at the front desk. A clear financial policy, an itemized statement, and a documented attempt to bill insurance before turning to the patient reduce both disputes and legal exposure. Many practices set an internal aging ladder:
| Account age | Typical action |
|---|---|
| 0-30 days | First statement; verify insurance processed correctly |
| 31-60 days | Second statement; offer payment plan |
| 61-90 days | Final notice; phone contact within 8 a.m.-9 p.m. |
| 90+ days | Refer to agency or write off per charity-care policy |
Before any medical balance is reported or sent to collections, confirm it clears the bureaus' voluntary thresholds (over $500, over one year old, unpaid) — sending a small or recent medical balance to a bureau wastes effort because it will not appear.
Charity Care and Financial Assistance
Nonprofit hospitals are independently bound by IRS section 501(r), which requires a written financial assistance policy (FAP), limits charges to FAP-eligible patients, and bars extraordinary collection actions (lawsuits, credit reporting, wage garnishment) until the hospital has made reasonable efforts to determine FAP eligibility. This is a separate, often stricter layer billers in hospital settings must respect alongside the FDCPA and FCRA.
A physician practice's own in-house billing staff call a patient at 7:30 p.m. to remind him of an unpaid balance. The patient claims this violates the FDCPA. What is the most accurate response?
A patient paid off a $620 medical collection account. Two months later it still shows as a paid collection on her credit report. What is the most accurate statement under current (2026) practice?