Medical

Healthcare Data Management Tips and HIPAA Compliance

Healthcare, like almost every other business area, deals with a lot of user-sensitive data.

Unlike many other commercial activities, providing medical services means knowing how to handle and store this highly sensitive information. Physicians and other care providers have several considerations when managing their patient data, ranging from legal compliance to cybersecurity. And data management isn’t only about ensuring that the information is secure; it ultimately can provide opportunities for greater care through insights and data analysis. Let’s take a quick look at some helpful ways healthcare providers can protect, manage, and leverage patient data.

HIPAA Legal compliance

HIPAA (Health Insurance Portability and Accountability Act) was enacted in the U.S. in 1996 to protect patient health information. It includes rules and regulations that healthcare providers, including doctors, must follow to be compliant. Here are some of the key components of HIPAA compliance:

Privacy Rule: The Privacy Rule restricts who can have access to Protected Health Information (PHI). PHI includes a broad array of information, from the individual’s past, present, or future physical or mental health conditions, to the provision of health care and payment for that care. Doctors must have safeguards in place to protect this information and can only disclose it under specific conditions.
Security Rule: The Security Rule stipulates that doctors must have physical, technical, and administrative safeguards in place to protect electronic PHI (e-PHI). This can include secure computer systems, locked file cabinets for paper records, and policies to handle data breaches.
Breach Notification Rule: If there is a breach of unsecured PHI, the doctor must notify the individuals affected, the Department of Health and Human Services (HHS), and in some cases, the media.
Enforcement Rule: This rule provides guidelines for investigations into compliance. If a doctor is found to be in violation of HIPAA, they could be subject to penalties.
HITECH Act: The Health Information Technology for Economic and Clinical Health (HITECH) Act was enacted as part of the American Recovery and Reinvestment Act of 2009, and expands upon the original HIPAA legislation. Among other things, it increases penalties for HIPAA violations and extends some of the requirements of HIPAA to business associates.

HIPAA violations can be quite costly for providers, with maximum penalties for noncompliance of 1.5 million dollars per incident.

The role of data in healthcare

The digitization of medical records is far from new, with electronic health records (EHRs) being the norm in the industry for many years. Physicians and other providers collect, store, and share digital patient records, and the number of records continues to grow. The widespread use of EHRs has resulted in large data sets.

To ensure HIPAA compliance, doctors should do the following:

Risk Analysis and Management: Regularly perform risk analysis to identify potential vulnerabilities to the confidentiality, integrity, and availability of e-PHI.
Training: Regularly train all staff members about the importance of HIPAA compliance and how to follow the rules.
Policies and Procedures: Develop and implement clear policies and procedures to comply with the Privacy, Security, and Breach Notification Rules.
Business Associates Agreement (BAA): Ensure that any third parties that may handle PHI on your behalf (known as “business associates”) are also compliant with HIPAA regulations. This is often handled through a BAA.
Access Control: Limit access to PHI to only those employees who need it to perform their job duties.
Data Encryption: Encrypt e-PHI, both at rest and in transit, to protect it from unauthorized access.

One reason for this growth is the use of connected devices for delivering care and monitoring patient well-being. Internet of Things (IoT) devices connect patients with care providers and collect data that can help diagnose and monitor patient health.

This increased data has been shown to reduce hospital-acquired conditions and increase cost savings through innovations in billing, bundled payments and debt collection. Data can undoubtedly improve the quality of care, but it can also overwhelm providers. Data burnout is a growing problem with providers because all of the information leads to overwork. Cumbersome health records software is a culprit, and so, is the often puzzling and complicated process of navigating insurance reimbursements.

Cybersecurity practices for providers

Data security is one of the most significant risk areas of concern under HIPAA. All businesses need to pay close attention to cybersecurity. But the vast amount of collected data in healthcare, the sensitive nature of that data, and the consequences of noncompliance means that healthcare providers have to be especially vigilant. Also, cybercriminals are only getting more sophisticated, with new, unknown threats developing on a near-daily basis.

Today, delivering healthcare means providing security for patient data. Cybersecurity is not just a technical concern, it is a patient safety issue. Providers rely on health IT vendors, adding a layer of complexity, and it has become clear that while HIPAA provides a basic framework for data protection, it is not sufficient in today’s data-heavy world.

This last practice may be the most effective, as human error is most often the culprit in data loss. For example, if a person uses the same username and password combination across multiple digital services, the risk of compromised credentials skyrockets. This is because cybercriminals have had so much success in data breaches that collect user login information. So, suppose a banking login is stolen, and the same combination of credentials is used for logging into an EHR system. In that case, it’s entirely possible that a hacker would attempt logging in with the credentials. This is because vast amounts of compromised login data exist.

To avoid this one major problem, organizations can educate users on password policies and how to recognize such threats as phishing emails.

Overall, data management can be an obstacle to the delivery of care and can affect the business of healthcare. Providers should prioritize data management, as it can lessen the burden of modern medical practice, ensure compliance, and protect patient data.

Nexa has assisted several hospitals and medical professionals to recover money from their past due accounts effectively. If you need a debt collection agency: Contact us

New York Medical Debt Collection Agency for Healthcare Providers

New York has rewritten the rules for medical and dental debt faster than almost any other state: a three-year statute of limitations instead of six, a ban on wage garnishment and home liens for hospital and provider judgments, and a law that keeps most medical debt off consumer credit reports entirely. A new NYC rule taking effect September 1, 2026 adds further limits on contact frequency and stronger notice requirements for medical accounts. None of this means medical debt in New York is uncollectible. It means the old playbook, credit-reporting threats and slow-moving lawsuits, no longer works, and providers need a partner built around patient-centered outreach, accurate account aging, and strict compliance instead.

If your current collection partner is still threatening credit reporting, talking about wage garnishments, or dragging out lawsuits, they are working off an outdated playbook, and you are the one carrying the risk.

Why switch? The hidden cost of using the wrong agency

Many New York providers are still partnered with agencies that were a decent fit ten years ago, but not today. Common warning signs: they still talk about using credit reporting as leverage, even though New York now blocks most provider-reported medical debt from credit reports; they push long, drawn-out lawsuits, ignoring that the statute of limitations on medical debt is now only three years, and that hospitals and many providers cannot enforce medical judgments with wage garnishments or home liens; they don’t mention New York City licensing and disclosure rules or the need for a city collector’s license to collect from NYC residents; and their scripts clearly aren’t written for a state where medical debt can no longer be used to damage a patient’s credit score.

If your agency is still operating as if New York were any other state, you may be leaving recoverable dollars on the table, carrying more legal risk than necessary, and spending internal time cleaning up patient complaints, regulator inquiries, and lawyer letters.

We work New York medical and dental accounts directly, under the state’s current rules, rather than passing your file to a third party.

Nexa provides reputation-safe, 50-state licensed collections, with free credit reporting, free litigation and bankruptcy scrubs, and zero onboarding fees. Secure, SOC 2 Type II and HIPAA compliant. Over 2,000 online reviews rate us 4.85 out of 5.

Need a Collection Agency? Contact us.

What has actually changed? A snapshot of New York medical debt rules

Here are the big shifts every New York provider should know:

Credit reporting of medical debt is heavily restricted. State law prevents most New York hospitals, health care professionals, and ambulance providers from reporting medical debt to credit agencies. Medical and many dental debts from New York providers aren’t supposed to appear on consumer credit reports. Medical charges buried inside a general credit card balance can still show up as part of that card debt, but that’s a card issue, not provider-reported medical debt.

The statute of limitations for medical debt is now three years. Under CPLR § 213-d, the period to sue on most medical debts was shortened from six years to three, measured from the date of treatment rather than the date of last payment, which dramatically narrows the window for lawsuits.

No wage garnishments or home liens for many medical judgments. Hospitals and similar providers can no longer enforce many medical debt judgments through wage garnishment or liens on primary residences.

Stronger hospital financial assistance and consent rules. New York requires standardized financial assistance programs, limits what hospitals can bill certain low- and middle-income patients, and caps interest rates on medical judgments for qualifying patients.

New, broader New York City collection rules take effect September 1, 2026. NYC’s Department of Consumer and Worker Protection finalized amended rules extending coverage to original creditors, not just third-party collectors, capping contact at three communications per account within a seven-day period, requiring opt-in consent for electronic communications, and adding medical-debt-specific disclosure requirements, including notice that medical debt cannot be reported to credit bureaus.

National trend away from medical credit reporting. Major credit bureaus have already stopped reporting paid medical collections and medical debts under a certain threshold, and federal regulators continue pushing lenders to stop using medical bills in credit decisions, further reducing the value of credit-reporting pressure as a collection tactic.

All of this means New York policy deliberately makes old-school, aggressive collection tactics less effective. The only sustainable path now is patient-centric, compliant recovery.

Recent results: how Nexa operates in New York

These are illustrative, fresh examples aligned with how Nexa approaches New York accounts today.

Manhattan multi-specialty practice, Midtown NYC:
A multi-specialty group near Midtown had about $220,000 in patient balances between 90 and 180 days, with a heavy mix of high-deductible plans and self-pay accounts. Their previous agency was still talking about “sending to credit” and filing suits four or five years after service, completely out of sync with New York’s shorter statute and credit-reporting rules. After Nexa took over these accounts, they were re-aged and prioritized to stay within the three-year window, scripts were rewritten to emphasize financial assistance, realistic payment plans, and clear explanations instead of threats, and within nine months, about 41% of the assigned dollars were resolved through payments or structured plans, with noticeably fewer complaints bouncing back to the practice.

Brooklyn dental group, family-oriented practice:
A dental group in Brooklyn had roughly $135,000 in overdue balances, many under $1,200, from families juggling multiple visits and orthodontic treatments. Their previous agency kept hinting at credit damage, which was no longer realistic and only generated angry calls and poor reviews. After Nexa took over, messaging shifted to a collaborative tone with flexible plans and clear breakdowns of insurance versus patient responsibility, professional multi-channel reminders replaced harsh threats, and over seven months, the practice resolved about 48% of the dollars placed, with far fewer reputation issues and less staff time spent apologizing for a vendor’s behavior.

These examples show that even with tight state policies, a meaningful share of A/R is still recoverable, when the agency actually understands New York.

How your data and payments are handled

Every account Nexa handles moves through a secure client portal with encrypted transfer, never email attachments or unsecured file sharing. A signed Business Associate Agreement is in place before any protected health information is shared, consistent with HIPAA requirements. All patient contact follows FDCPA guidelines, New York’s medical debt statutes, and the city’s debt collection rules, including the contact-frequency and notice requirements taking effect this September. Data is used only for the accounts placed with us.

Where Nexa fits in

Our team works New York medical and dental accounts directly, built around the state’s shorter statute of limitations, the ban on wage garnishment and home liens, and the credit-reporting restrictions covered above.

What we do:

Prioritize accounts by age so nothing quietly crosses the three-year window unaddressed.
Use patient-centered outreach, payment plans, and settlement options instead of credit-reporting threats that New York law no longer allows for most medical debt.
Track New York City’s contact-frequency limits and disclosure requirements, including the rules taking effect September 1, 2026.
Sign a Business Associate Agreement (BAA) and handle every account through a secure, encrypted portal.

Pricing is straightforward, and you choose the model per account:

Nexa Collections fixed-fee and contingency pricing for New York medical debt recovery

Fixed-Fee Recovery ($15/account): ideal for early-stage receivables. Debtors pay 100% directly to you, with no commission taken out.
Contingency Service (20%-40%): performance-based recovery for older or harder accounts. No recovery, no fee.

For more on how Nexa’s medical collections process works for patient balances, or for exact rates, see the full breakdown of Nexa’s fixed-fee and contingency pricing. Nexa also supports dental-specific collection strategies, senior care and assisted living facilities, and commercial and business accounts across New York.

Need a Collection Agency? Contact us.

New York FAQ

If medical debt can’t go on credit reports, is there any point sending accounts to collections?

Yes. Credit reporting was always just one tool, and often a blunt one. Recovery in New York now relies more on thoughtful, timely patient outreach, realistic payment plans and settlements, and early placement well before the three-year mark. The right approach can still recover a large share of overdue balances without credit reporting.

Are dental debts treated differently from medical debts in New York?

Most bills from licensed health care professionals, including many dental providers, are treated similarly to medical debt under New York’s newer protections, covered by the same credit-reporting bans and consumer protections as hospital bills.

What does HIPAA compliance really mean in the collection context?

Any agency handling New York medical or dental accounts should sign a Business Associate Agreement, use encrypted systems with restricted PHI access, train staff on minimum-necessary disclosure, and avoid leaving detailed medical information in voicemails or letters.

How do New York’s hospital financial assistance rules affect collections?

Hospitals must maintain clear financial assistance programs, limit what they can bill eligible patients, and cap interest rates in certain circumstances. This means more screening for assistance eligibility, tighter billing rules, and more accounts that should be reduced or converted to charity care rather than pursued aggressively.

Does the shorter three-year statute of limitations really matter?

Yes. Waiting too long to place accounts can quietly erase legal options. A smarter approach defines clear placement triggers, such as 90 or 120 days past due, tracks debt age accurately, and flags time-barred accounts so lawsuits aren’t threatened where they’re no longer legally available.

Are lawsuits still worth considering for medical debt in New York?

Rarely as a default. The window to sue is shorter, wage garnishment and home liens are restricted for hospital and provider debt, and courts are watching medical cases closely. Legal action should be rare, strategic, and well documented rather than routine.

What’s changing under New York City’s new debt collection rules?

Effective September 1, 2026, NYC’s amended rules extend coverage to original creditors, cap contact to three communications per account within a seven-day period, require opt-in consent for electronic communications, and add specific medical-debt notice requirements, including disclosure that medical debt cannot be reported to credit bureaus.

How is patient data secured during the collections process?

Accounts move through a secure, encrypted client portal rather than email attachments. A signed Business Associate Agreement is in place before protected health information is shared, consistent with HIPAA, alongside FDCPA and New York-specific requirements.

Where does Nexa fit into New York medical collections?

We work New York medical and dental accounts directly, built around the state’s shorter statute of limitations, the wage garnishment and lien ban, and current credit-reporting restrictions.

Hospital Unpaid Bills: Compliant Revenue Recovery for Health Systems & Practices

Nexa Collections helps hospitals and medical practices recover aging self-pay and patient-responsibility receivables before they get discounted to near-zero on a borrowing base — using HIPAA-aligned, FDCPA-careful practices rather than outdated credit-reporting threats. Accounts are typically worked at a flat $15 fixed fee or 40% contingency, with no fee unless funds are recovered.

Why Aging Receivables Are Becoming a Balance-Sheet Problem, Not Just a Collections One

If you’re sitting in the CFO’s office or running revenue cycle right now, the math is getting harder to make work. Labor and drug costs have climbed faster than reimbursement, and Medicare reimbursed hospitals just 83 cents for every dollar spent on patient care in 2023 — a gap the American Hospital Association has flagged as a persistent, worsening trend, not a one-year anomaly. The accounts receivable sitting on your books were supposed to be a source of liquidity. Increasingly, they’re a line item that needs explaining.

The “Ineligibles” Problem: How Lenders Discount Your AR

When a hospital goes to a bank for a line of credit, the bank isn’t lending against gross AR — it’s lending against Net Realizable Value, after stripping out what it considers uncollectible. Receivables aged past 90 days are often valued near zero. Some lenders “cross-age” an entire payer or patient-class bucket once enough of it crosses that line, which can tighten a borrowing base faster than the underlying receivables actually deteriorated.

The Self-Pay Layer Lenders Don’t Trust

As more employees carry high-deductible health plans, a growing share of a bill is owed by the patient directly rather than the insurer — and self-pay collection rates tend to run well below insurer collection rates industry-wide. Lenders know this and typically apply a steeper discount to self-pay AR than to payer-owed balances, regardless of how collectible any individual account actually is.

Illustrative Example: When a Receivable Line Item Is Worth Less on Paper Than It Looks

Consider a composite scenario: a mid-sized health system carries several million dollars in aging self-pay balances, most under 120 days old and not yet written off internally. A lender reviewing the borrowing base treats a large share of that bucket as ineligible collateral simply because of its age and payer class — not because any specific account has been individually assessed as uncollectible. The gap between what the system believes the AR is worth and what the bank is willing to lend against it becomes the actual problem to solve, not the original unpaid bills themselves.

The Regulatory Landscape Has Shifted Again — What’s Actually True in 2026

The Federal Medical-Debt Credit-Reporting Rule Was Vacated, Not Enacted

The CFPB’s January 2025 rule that would have banned medical debt from credit reports nationwide never took effect — a federal court vacated it in July 2025, at the CFPB’s own request. There is currently no federal law banning medical debt from credit reports. Building a collections strategy around the assumption that credit-reporting leverage is now off the table everywhere would be based on a rule that doesn’t exist.

State Laws Still on the Books — But Under Legal Challenge

That doesn’t mean state law is irrelevant — roughly 15 states, including California, Connecticut, Delaware, Colorado, and New York, currently restrict or ban medical debt credit reporting under their own statutes, and those remain the operative law in those states today. What’s changed is that their long-term durability is now genuinely uncertain: the same court that vacated the federal rule suggested, in non-binding language, that the FCRA preempts these state laws too, and that theory is now being tested in active litigation. A national health system operating across several of these states is dealing with a live legal question, not a settled one.

California’s SB 1061: A Disclosure Clause That Can Void a Debt Entirely

California’s SB 1061 is worth knowing in detail regardless of the federal preemption fight, because its mechanism is unusually strict: any contract creating medical debt entered into on or after July 1, 2025 must include a specific disclosure statement (Civil Code § 1785.27), or the resulting debt is void and unenforceable. This isn’t a penalty layered on top of the debt — it can eliminate the underlying obligation to pay entirely if a single required sentence is missing from an intake or payment-plan form.

Illustrative Example: A Compliance Gap Hiding in an Old Intake Form

Picture a specialty practice with multiple California locations that updated its standard consent forms in 2024 but never touched its separate payment-plan agreement template. Every payment plan signed after July 1, 2025 using that older template is, by the statute’s own terms, void and unenforceable the moment it’s challenged — not because of anything the practice did to the patient, but because of one missing paragraph. Auditing which specific documents actually create a “medical debt” under the statute, rather than assuming a general consent form covers it, tends to be the more useful first step.

A Two-Step Approach Built Around Cost-to-Collect

Most agencies want a high contingency fee from day one, regardless of how old or difficult an account actually is. That means a patient who just needed a reminder about a $1,000 deductible costs the same percentage as an account that needed months of investigation. A tiered approach tends to make more sense for most portfolios.

Step One: A Measured First-Contact Sequence

For early-stage accounts, a fixed-fee service — roughly $15 per account — runs a structured sequence of contacts designed to read as a professional extension of your business office rather than a collections agency. If the patient pays during this phase, you keep 100% of what’s recovered; there’s no percentage taken.

Step Two: Contingency Recovery for Aged or Unresponsive Accounts

Accounts that don’t respond to the initial sequence move to a contingency-based phase — a standard 40% fee, charged only on what’s actually recovered. This is where more intensive skip tracing and negotiation apply, generally to accounts where a lighter-touch approach hasn’t worked.

Illustrative Example: Sorting a Portfolio Before Working It

In a composite scenario typical of a mid-sized practice, a portfolio of a few hundred aging patient balances gets sorted by age and payer class before any outreach begins — accounts under 60 days go through the fixed-fee sequence first, while accounts already past a year move straight to the contingency phase. Working the portfolio in that order, rather than treating every account identically, tends to produce a better mix of recovered revenue relative to cost than a single blanket approach would.

Why Hospitals and Practices Work With Nexa

Compliance Treated as Asset Protection, Not an Afterthought

An agency still leaning on outdated credit-reporting threats, or unaware of state-specific disclosure requirements like California’s, isn’t just failing to collect — it’s creating exposure that can turn a recoverable receivable into a voided one. Every account is worked with current federal and state requirements in mind, updated as the legal landscape around medical debt continues to shift.

Patient Relationships Are Part of the Calculation

A patient today can be a returning patient, or a referral source, next year. Recovery approaches that damage that relationship for the sake of a faster collection tend to cost more than they save over time.

Zero Onboarding Fees & Included Screening

There are no setup costs or hidden monthly fees to place a portfolio, and pre-collection screening — sorting accounts by age, payer class, and likely recoverability — is included rather than billed as a separate service.

Success Stories

The scenarios below are illustrative composites drawn from the kinds of situations that come up repeatedly in hospital and practice receivables, not verified individual case results, but they reflect the actual mechanics of how each type of recovery tends to get resolved.

The Health System Cleaning Up Its Self-Pay Bucket

Problem: A regional health system’s self-pay AR had grown to the point that its lender was discounting a significant share of it as ineligible collateral, tightening the system’s available credit line.

Approach: Nexa segmented the portfolio by age and payer class, running the freshest accounts through the fixed-fee sequence and moving older balances directly to contingency-based outreach.

Outcome: A meaningful share of the aged bucket was resolved within a couple of quarters, and the system had a clearer, more current picture of what was actually collectible going into its next borrowing-base review.

The Specialty Practice and the HDHP Deductible Problem

Problem: A multi-location specialty practice was seeing a growing number of patients with high-deductible plans leave $1,000–$3,000 balances unpaid, not out of inability but because the bill had been set aside.

Approach: A structured, documented reminder sequence — positioned as a routine billing follow-up rather than a collections notice — was run before any account moved to a more assertive phase.

Outcome: A large share of the balances were resolved during the initial sequence, with patients paying the full amount directly and no percentage owed on those accounts.

The Practice Auditing Its California Intake Forms

Problem: A California specialty group discovered, during a routine review, that its payment-plan template hadn’t been updated to include the SB 1061 disclosure language required as of July 2025 — putting a portion of its outstanding balances at risk of being deemed void and unenforceable.

Approach: Nexa flagged the affected date range and worked with the practice to prioritize collection on accounts predating the compliance gap, while the practice corrected its forms going forward.

Outcome: The practice avoided pursuing debt that carried real legal risk, and its updated documentation now protects newer balances from the same exposure.

Industries We Serve

Revenue cycle challenges look different depending on the type of care being billed, and a hospital’s borrowing-base concerns aren’t the same as a dental practice’s patient-payment-plan issue.

Hospitals & Health Systems

Portfolio-level recovery built around how aging self-pay AR affects lending relationships, not just individual account balances.

Specialty & Outpatient Practices

Deductible and copay recovery for HDHP patients who typically have the ability to pay but need a structured, professional nudge rather than aggressive tactics.

Dental Practices

Payment-plan and treatment-balance recovery, with the same attention to state-specific disclosure and compliance requirements that apply to broader medical debt.

Behavioral Health

Recovery handled with particular care given the sensitivity of the underlying records, on top of standard HIPAA-aligned procedures.

Senior Living & Skilled Nursing

Estate and family-representative recovery for balances left after a resident’s care ends, handled with a measured, dignity-first approach.

Emergency & Urgent Care

High-volume, often first-time-patient balances where documentation and prompt, professional follow-up matter more than any single aggressive tactic.

Trust, Security & Compliance

HIPAA & BAA Coverage

Patient billing records carry protected health information regardless of account size or age. Nexa maintains HIPAA-aligned handling procedures for all medical accounts and executes a Business Associate Agreement (BAA) with hospitals and practices that require one.

FDCPA & FCRA Alignment

Every account is worked in alignment with the federal Fair Debt Collection Practices Act and Fair Credit Reporting Act — including current FCRA guidance on medical debt, which is more nuanced today than a simple “banned or not” answer.

SOC 2 Type II & PCI-DSS Data Security

Data handling is SOC 2 Type II certified — meaning security and privacy controls have been independently audited, not self-reported — and payment processing runs at PCI-DSS Level 1, a high tier of card data encryption.

Secure Client Portal for Documentation & Portfolio Tracking

Patient ledgers, aging reports, and account-level documentation are exactly the kind of sensitive data that shouldn’t move through email. A secure client portal lets your team upload documentation, track portfolio status, and monitor recovery progress without exposing patient data to unnecessary risk.

Transparent Pricing

Fixed-Fee Recovery ($15/account)

Ideal for early-stage receivables. Debtors pay 100% directly to you. No commissions.

Contingency Service (40%)

Performance-based recovery. No Recovery, No Fee.

See the full breakdown on the collection agency fee schedule page.

Frequently Asked Questions

Is medical debt currently banned from credit reports federally?

No. The CFPB finalized a rule in January 2025 that would have banned it, but a federal court vacated that rule in July 2025 before it ever took effect. There is currently no federal ban on medical debt appearing on credit reports.

Does that mean state medical debt credit-reporting laws don’t matter anymore?

Not yet, and possibly not at all — it’s genuinely unsettled. Roughly 15 states, including California, Connecticut, Delaware, and New York, currently have their own bans or restrictions in effect, and those remain the operative law today. Whether the FCRA preempts them is being actively litigated, with no final resolution yet.

How does aging accounts receivable actually affect our credit line?

Lenders typically value AR against Net Realizable Value rather than gross balances, often discounting receivables aged past 90 days heavily and applying steeper discounts to self-pay balances than to payer-owed ones. A shrinking “eligible” AR base can tighten a borrowing base even when the underlying receivables haven’t necessarily gotten less collectible.

What does California’s SB 1061 actually require?

Any contract creating medical debt entered on or after July 1, 2025 must include a specific disclosure statement (Civil Code § 1785.27) about the prohibition on credit reporting. Omitting it renders the resulting debt void and unenforceable — a stricter consequence than a typical compliance penalty.

Do you rely on credit-reporting threats to collect?

No — between the federal rule’s vacatur and the roughly 15 states that already restrict it, credit-reporting leverage isn’t a stable foundation to build a collection strategy on. The approach here centers on structured, documented outreach and negotiation instead.

Is patient billing data handled under HIPAA?

Yes. All medical accounts are processed under HIPAA-aligned procedures, with a Business Associate Agreement executed where the engagement requires one.

Clean Up Your Balance Sheet

Inflation, denials, and a shifting regulatory picture aren’t going away, and letting self-pay AR age out quietly tends to cost more than addressing it directly.

Let’s clean up your balance sheet.

Contact us to discuss how we can implement the Step 2 / Step 3 strategy to lower your cost-to-collect and unlock the liquidity trapped in your unpaid bills.

Florida Medical Collection Agency: Local Experience Matters!

It’s February in a Tampa clinic waiting room, and half the patients checking in have a Michigan or Ohio driver’s license. By April, most of them will be gone until next winter, along with any balance that didn’t get resolved while they were still in town. That’s the real shape of the Florida medical billing problem: not compliance for its own sake, but a hard seasonal deadline most practices don’t realize they’re racing against, layered on top of a state that already has some of the toughest collection rules in the country.

Roughly 1 in 12 Floridians has medical debt in collections, typical balances run around $1,500, and close to 1 in 9 residents is uninsured, so a lot of care goes straight to self-pay. For hospitals, dentists, physicians, urgent care centers, and senior living centers, that’s slow cash flow and rising write-offs, made worse by a compliance layer, the Florida Consumer Collection Practices Act (FCCPA), stricter and more penalty-heavy than the federal HIPAA and FDCPA alone.

Serving medical offices, dentists, hospitals, urgent care centers, ophthalmologists and senior living providers.

Need a Florida Medical Collection Agency? Contact us

The Snowbird Calendar

Florida practices are really running three different collection windows at once, and most billing policies don’t distinguish between them.

November through April, patients are here. This is the only real window to collect from a seasonal resident face to face, or at least while their Florida contact information still works. A balance that slips past this window doesn’t disappear, it just gets dramatically harder to collect.

April and May, they leave. Addresses and phone numbers on file go stale fast. A collection partner without licensing in the patient’s home state simply loses the account here; one licensed in all 50 states doesn’t.

Summer onward, the account is either resolved or it’s aging badly. By the time snowbirds return next winter, an unresolved balance from the prior season is often past the point where a friendly reminder does anything.

Does a Florida medical collection agency actually need out-of-state licensing to matter?

Yes, specifically because of this calendar. A seasonal resident who leaves Florida in April is only reachable, legally, by an agency licensed in whatever state they’ve gone home to. Nexa holds active licenses in all 50 states for exactly this reason, so a snowbird account doesn’t quietly die the moment the patient crosses the state line.

What Waiting Actually Costs You

Say a practice is carrying $50,000 in delinquent balances at the start of snowbird season, an entirely realistic number for a mid-sized group. Assume an 80% eventual recovery rate, $40,000 collected either way. The only real question is what it costs to get there.

A traditional agency charging 40% contingency keeps $16,000 of that recovery, leaving the practice $24,000. Nexa’s $15 fixed-fee model, applied across roughly 50 accounts, costs about $750 total, leaving the practice $39,250, over 98% of what’s actually recovered. The math doesn’t change because Nexa is cheaper to run; it changes because the fee is priced per account, not as a percentage of the money you were already owed.

How much does a $15 Fixed Fee Service actually save compared to a traditional 40% agency?

On a typical $50,000 delinquent portfolio recovering $40,000, the difference is roughly $15,000, $39,250 net under the fixed-fee model versus $24,000 net under a traditional 40% contingency structure. The gap widens further on larger portfolios, since the fixed-fee cost scales with account count, not dollar volume.

The Compliance Layer You Can’t Skip

Florida doesn’t just apply the federal FDCPA, it layers the FCCPA (Florida Statute § 559.55 and surrounding sections) on top, which reaches further than federal law: it can apply to anyone collecting a consumer debt in the state, including a practice’s own front-desk staff, not just outside collectors. Aggressive or misleading language from your own billing office can create liability the same way it would for a third-party agency.

Florida also formally treats certain steps, selling the debt, lawsuits, liens, garnishments, credit reporting, or denying medically necessary care over an unpaid bill, as “Extraordinary Collection Actions.” Before any of those, hospitals and ambulatory surgery centers generally have to bill available insurance first, send a clear itemized bill, screen for financial assistance, and give proper written notice with a real chance to resolve the balance.

How does Nexa stay compliant with both the FCCPA and Extraordinary Collection Action rules?

By treating Florida’s layered requirements as the starting framework for every account, not an afterthought applied after a generic script. That means confirming insurance was billed, financial-assistance screening happened where required, and proper notice was given before any account reaches the point where credit reporting or legal escalation is even considered, backed by SOC 2 Type II data security and a signed Business Associate Agreement for every PHI-containing account.

Two Practices, One Winter

An urgent care network with 180 past-due accounts totaling $72,000 in co-pays and deductibles used the fixed-fee service and recovered $50,400 in 35 days, spending under $2,700 in fees, more than $17,000 less than a traditional 40% agency would have kept.

A Tampa surgical practice facing $85,000 across 35 accounts, several of them snowbird patients already back in their home states, recovered $59,500 in under 40 days without a single FCCPA dispute or negative review, precisely because the outreach stayed diplomatic and the out-of-state accounts didn’t require a separate agency relationship to pursue.

What This Should Feel Like From the Patient’s Side

Will a soft, diplomatic collection process actually stop patients from leaving negative reviews?

In most cases, yes, because the confrontation that generates a bad review rarely comes from receiving a professional letter, it comes from a heated phone call or a billing office that feels adversarial. A calm, third-party demand tends to resolve the balance quietly, which protects the practice’s Google and Healthgrades presence better than an aggressive internal collections push ever does.

Every account carries PHI even after it’s past due, which means the same HIPAA discipline that governs clinical records applies here too: a signed BAA, encrypted data handling, minimum-necessary access, and a documented trail of every contact.

Key services a medical collection agency must offer in Florida:

Compliance with Florida Collection Laws and HIPAA Regulations
Amicable Patient Communication and Debt Resolution
Tailored Collection Strategies for Medical Practices
Skip Tracing to Locate Hard-to-Reach Patients
Credit Reporting to Major Bureaus When Appropriate
Flexible Payment Plan Options for Patients
Secure Online Payment Portal for Easy Bill Settlement
Regular Progress Reports and Transparent Account Management
Pre-Collection Services to Resolve Debts Early
Legal Support for Unresolved Cases, If Needed

These services ensure effective debt recovery while maintaining compliance and patient relations.

Schedule a No-Obligation Consultation Today

California Medical Collection Agency: Local Experience Matters!

California medical debt collection requires extra care because healthcare providers must navigate strict state and federal collection rules while protecting patient relationships.

Nexa helps California hospitals, clinics, physicians, dental practices, and other healthcare providers recover unpaid patient balances through patient-friendly, HIPAA– and FDCPA-compliant collection practices, with careful attention to California’s Rosenthal Act and other applicable state requirements. Our approach focuses on improving recovery rates and cash flow while protecting your patients, your reputation, and your organization from unnecessary compliance risk. References available on request.

Quick Answer: A California medical and hospital collection agency must balance HIPAA data security and the Rosenthal Fair Debt Collection Practices Act (Cal. Civ. Code § 1788) with soft-touch patient outreach. Nexa Collections provides 50-state licensed, Rosenthal Act and HIPAA-compliant medical debt collection starting at a $15 Fixed Fee Service per account. Backed by SOC 2 Type II security, signed Business Associate Agreements (BAAs), and a 4.85/5 rating across 2,000+ reviews, our soft Fixed Fee approach helps California hospitals, health systems, and private practices recover unpaid co-pays, deductibles, and self-pay balances while retaining 100% of recovered principal.

🛡️ HIPAA & Signed BAA Compliant | ⚖️ Rosenthal Act (Cal. Civ. Code § 1788) Aligned | 🏷️ $15 Fixed Fee Service | ⭐️ 4.85/5 Rated

Need a Collection Agency? Contact us

Hospital & Health System Revenue Cycle

Hospital Fair Pricing Act Pre-Scrubbing.

Every hospital account is pre-screened against the facility’s discount payment and charity care policy before active collection, required under Cal. Health & Safety Code § 127400 et seq. As of January 1, 2024, enforcement of this law transferred to the California Department of Health Care Access and Information (HCAI), which directly reviews hospital billing and collection policies and runs a formal Hospital Bill Complaint Program, this isn’t a rule hospitals can treat as background noise anymore. Eligibility for discount or charity care generally extends to patients at or below 400% of the federal poverty level, following the 2023 update (AB 2297).

High-Deductible & Post-Insurance Balances.

Recovering patient-responsibility balances after insurance adjudication, the confusing post-EOB charge that generates disputes when it isn’t clearly explained.

Enterprise Portal Integration.

Bulk account uploads compatible with Epic, Cerner, and MEDITECH, so a health system’s billing team isn’t manually re-entering data that already lives in its EHR.

California’s Layered Compliance Requirements

California stacks more regulation on medical debt collection than almost any other state. The Rosenthal Fair Debt Collection Practices Act (Cal. Civ. Code § 1788) extends FDCPA-style protections to original creditors, not just outside agencies, so a hospital’s own billing staff are bound by similar rules to Nexa’s. The Hospital Fair Pricing Act governs charity care and discount policy compliance specifically, now enforced by HCAI. The Confidentiality of Medical Information Act (CMIA) is a California-specific medical privacy law that operates alongside HIPAA, not a replacement for it, both apply, and neither one covers everything the other does.

Our HIPAA Compliant Pricing

Nexa $15 Fixed Fee Service.
$15 flat fee per account, 0% commission, practice or hospital retains 100% of recovered principal. Ideal for early-stage patient balances, 30–90 days past due. See the full pricing breakdown for how these tiers compare.

Contingency Recovery (Late-Stage Defaults).
Performance-based recovery for aged, uncontactable, or out-of-state patients, no fee unless funds are recovered. Contrast this against traditional agencies charging 40% contingency fees.\

Nexa provides reputation-safe, equipped with all 50-state collections license, offering free credit reporting, free litigious debtor check, free bankruptcy scrub, and zero onboarding fees. Secure – SOC 2 Type II & HIPAA compliant. Over 2,000 online reviews rate us 4.85 out of 5. Every California hospital and practice is assigned a dedicated account executive, backed by a specialized healthcare support team, not a call center.

Need a California Medical Collection Agency? Contact us

What $50,000 in Delinquent California Medical A/R Actually Nets You

A simple static example on a $50,000 delinquent portfolio, an 80% eventual recovery rate ($40,000 collected):

	Nexa $15 Fixed Fee Service	Traditional 40% Contingency
Amount recovered	$40,000	$40,000
Fee (50 accounts × $15)	$750	$16,000 (40% of recovered)
Practice/hospital keeps	$39,250 (98.1%)	$24,000 (60%)

In-House Billing Staff vs. Traditional 40% Agency vs. Nexa $15 Fixed Fee Service

Factor	In-House Billing Staff	Traditional 40% Agency	Nexa $15 Fixed Fee Service
Upfront cost	Staff overtime, no direct cash outlay	Often 40%+ contingency regardless of account age	$15 flat fee, practice keeps 100% of what’s recovered
California legal compliance (Rosenthal Act/§ 127400/CMIA)	Bound by Rosenthal Act as original creditor, rarely tracked separately from FDCPA	Varies, generic scripts may miss California’s layered requirements	Built around Rosenthal Act, Hospital Fair Pricing Act, and CMIA from intake
HIPAA & BAA security alignment	Depends on internal protocols	Varies by agency	SOC 2 Type II certified, signed BAA on every account
Hospital charity care screening integration	Manual, dependent on staff catching it before placement	Rarely built into the process at all	Pre-scrubbed against § 127400 policy before any account is worked

Recent Recovery Results

Multi-Specialty Medical Group — Los Angeles / Orange County, CA.
Placed 210 past-due accounts totaling $92,000 in uncollected deductibles. Using Nexa’s $15 Fixed Fee Service, recovered $64,400 within 35 days while keeping 100% of recovered principal for under $3,150 in total fixed fees, saving over $22,000 compared to traditional 40% contingency agencies.

Outpatient Specialty Clinic — San Francisco Bay Area, CA.
Faced $105,000 in defaulted patient responsibility balances across 38 accounts. Nexa’s soft Fixed Fee diplomatic outreach resolved 26 accounts in under 40 days, recovering $73,500 with zero Rosenthal Act complaints or negative online reviews.

Frequently Asked Questions

How does Nexa maintain compliance with the Rosenthal Fair Debt Collection Practices Act (Cal. Civ. Code § 1788) during patient outreach?

By treating the Rosenthal Act as its own compliance layer, since it extends similar protections to original creditors, not just third-party agencies, meaning a practice’s own staff face the same standard Nexa does. Outreach that’s FDCPA-compliant but ignores Rosenthal-specific requirements still creates exposure in California.

Can a $15 Fixed Fee Service help California hospitals recover high-deductible patient responsibility balances post-insurance adjudication?

Yes, this is one of the most common account types placed under this service. A professional, low-cost demand letter that clearly explains what insurance did and didn’t cover resolves many post-EOB balances without the hospital paying a percentage of the recovery.

How does Nexa handle California Hospital Fair Pricing Act (§ 127400) requirements and charity care pre-scrubbing prior to collection outreach?

Every hospital account is checked against the facility’s discount payment and charity care policy before active collection begins, consistent with the requirements now enforced directly by HCAI, so patients who should be routed to financial assistance aren’t pursued as a standard balance.

How does Nexa guarantee HIPAA and CMIA compliance with a signed Business Associate Agreement (BAA)?

Every medical account is processed under a signed BAA, with SOC 2 Type II certified data security. California’s CMIA operates alongside HIPAA rather than replacing it, so both standards are applied together, not treated as interchangeable.

How do soft diplomatic demand letters protect medical groups and hospitals from negative Google or Yelp reviews?

By resolving the balance through a calm, professional notice rather than an aggressive call, since most negative reviews stem from a confrontational interaction, not from receiving a formal letter.

See also the statute of limitations guide for how aged California medical balances are handled once they’re past the recovery window.

Need a Medical Collection Agency in California:
Contact us

Texas Medical & Healthcare Debt Collection Agency

To run a successful medical practice or hospital, you need to be able to get paid in full for the services you provide. If you are a doctor or work on the business side in a hospital in the state of Texas, you know the aggravation of medical debt collection. This is a problem the medical community all over the country faces but in Texas, there are state-specific challenges to deal with. Here is the current state of Texas medical debt collection.

Medical Debt in Texas

Debt, in general, is a problem in the United States and Texas is one of the “leaders” in this issue. 71 million Americans have debts that are currently in collection. Texas is second, only to Louisiana, in the percentage of residents who have debts in collection. A hefty 44% of all Texans face collection which equates to approximately 12.7 million Texas residents or, almost 18% of the total number of Americans with pending dent collection. A big portion of this debt is related to medical bills. The overall median medical debt in collections for a person in Texas is $850.

Need a Medical Collection Agency in Texas: Contact us

Texas Medical Collection Laws

Medical debt collectors in Texas are beholden to the Federal laws on the books that relate to debt collection. These can be found by looking at the Federal Trade Commission website. There are some Texas-specific laws that creditors need to know. One is that Texas is a homestead state which means, in most cases, a debtor’s home cannot be taken away to pay a debt. Also, wages can only be garnished in Texas in certain cases and unpaid medical bills are not one of them. These and other Texas laws relating to medical debt collection can be found on the Texas Attorney General’s website.

There is another, lesser-known, law in Texas that applies specifically to the timing of medical billing. A Texas civil statue states that you must “bill a patient or other responsible person for services provided to the patient not later than the first day of the 11th month after the date the services are provided.” This makes the timing of medical billing even more crucial in Texas.

Bond Requirement: In Texas, third-party debt collectors and credit bureaus must post a $10,000 bond with the secretary of state.

Communication: Under the TDCA, a debtor has the right to request in writing that a debt collector or creditor cease communication with them. Once a cease communication request has been made, the collector is limited to filing a lawsuit or discontinuing their collection efforts.

Statute of Limitations: Texas law sets forth a four-year statute of limitations for many types of debt, including credit card debt and medical debt. This means a debt collector cannot sue a consumer for a debt that is more than four years old.

Texas provides protections to consumers through state laws that align with the federal Fair Debt Collection Practices Act (FDCPA), along with some additional provisions under the Texas Debt Collection Act (TDCA)

Problems Faced by Doctors and Hospitals Texas

While the issue of medical debt collection is not unique to Texas, many of the problems it causes here are. One of the biggest problems facing Texas doctors and hospitals is the financial viability of hospitals located in the most rural areas of the state. 131 rural hospitals across the country have closed their doors since 2010 and 23 of them (or just under 18%) have been in Texas. In addition to these hospitals that have closed, about 50% of Texas’ 150 or so rural hospitals are in financial danger.

Another challenge facing Texas doctors and hospitals is that the state has some of the largest amounts of uninsured residents in the country. There are more uninsured people in Texas than California even though the west coast state has 40% more people. These two factors are big challenges for doctors and hospitals in Texas and a major reason why medical debt is such a huge concern.