Medical Debt Collection: What Changed and What Calls Can Still Do

Medical debt collection is the process of recovering unpaid patient balances, first by the provider and later, if the balance stays unpaid, by a collection agency. The rules around it changed twice in two years, and the second change undid the first.

The short version: a federal rule that would have removed medical debt from credit reports was finalized in January 2025, had its effective date stayed, and was vacated by a federal court in July 2025 before it ever took effect. What protects patients today is a set of voluntary credit bureau policies and a patchwork of state laws.

This covers what actually applies now, how a medical balance moves from bill to collections, and what the phone call can still do that a statement cannot.

TL;DR

• The CFPB's medical debt credit reporting rule was vacated in July 2025 and never took effect. There is no federal ban on medical debt appearing on credit reports.
• The voluntary bureau policies from 2022 and 2023 still stand: paid medical collections are removed, and unpaid medical collections under $500 are excluded.
• Around fifteen states passed their own restrictions, and whether federal law preempts them is unresolved.
• Third-party medical collections remain subject to the FDCPA and Regulation F. Provider billing offices collecting their own balances generally are not, though other rules still apply.
• Most unpaid medical balances are not refusals to pay. They are unanswered questions about insurance, billing errors, and financial assistance.
• That makes the pre-collection call the highest-value contact in the whole cycle, and the one least often made.

What is medical debt collection?

Medical debt collection is the recovery of the patient-responsible portion of a healthcare bill after insurance has paid its share.

It runs in two stages. First-party collection happens while the provider or its billing company still holds the account, and looks like statements, calls from the billing office, and payment plan offers.

Third-party collection begins when the provider places or sells the account to a collection agency. At that point a different set of federal rules attaches, and the account can be reported to credit bureaus subject to the limits below.

The distinction is not cosmetic. It changes which laws apply, what the collector must send, and what a patient can demand.

What changed: the federal rule was vacated

The CFPB rule that would have banned medical debt from credit reports is gone, and it never took effect.

The Bureau finalized the rule in January 2025 under Regulation V. On July 11, 2025 the US District Court for the Eastern District of Texas vacated it in its entirety in Cornerstone Credit Union League v. CFPB. The vacatur came on a joint request from the CFPB and the plaintiffs, the Bureau having changed its position under a new administration rather than defending the rule. The court agreed that the rule exceeded the Bureau's statutory authority and was contrary to the Fair Credit Reporting Act, since the FCRA permits properly coded medical debt information to be furnished and considered. The CFPB's own rule page now carries the vacatur notice and states that its materials on the rule are for reference only.

The court also said the FCRA preempts state laws imposing similar restrictions. That passage is dicta. It was not necessary to the vacatur, no state law was before the court, and it strikes nothing down. Consumer advocates dispute the reading, and the working position is that state medical debt protections remain in force and enforceable until a court holds otherwise in a case that actually presents the question.

For anyone operating in this space, the takeaway is that the regulatory position is unsettled rather than settled in either direction. Build processes that survive the rule coming back.

What still protects patients

Four things, none of them the vacated rule.

• Voluntary credit bureau policies. Since July 1, 2022, Equifax, Experian and TransUnion have excluded paid medical collections regardless of amount, and since April 2023 they have also excluded unpaid medical collections with an initial reported balance under $500. The same 2022 change extended the wait before an unpaid medical collection can appear at all, from six months to one year, measured from when the debt goes to collections rather than from the date of service. These are industry policies, not law, so they can change without a regulator.
• State law. Roughly fifteen states have enacted their own medical debt credit reporting restrictions, several effective from the start of 2026, and some go considerably further than the bureau policies.
• The FDCPA and Regulation F. Third-party medical collectors are subject to the validation notice requirement, the call frequency presumptions, communication restrictions, and the prohibition on harassment and misrepresentation.
• Nonprofit hospital obligations. Federal tax rules require charitable hospitals to maintain a financial assistance policy and to make reasonable efforts to determine whether a patient qualifies for it before taking extraordinary collection actions.

The last one is routinely under-used. A patient who qualifies for charity care and is never screened for it becomes a collection account that should never have existed.

How a medical balance becomes a collection account

The path is slower than most patients realize, and every step is a chance to resolve it earlier.

Look at the third row. In most billing operations, months pass in which the only contact with the patient is a piece of paper that explains a balance without explaining why.

That silence is where the account goes bad. By the time anyone calls, the patient has decided the bill is wrong, unaffordable, or not theirs, and the conversation is now adversarial rather than administrative.

What calls can still do

A call can resolve the four things that actually keep medical balances unpaid, and a statement cannot resolve any of them.

• Explain the balance. A patient who does not understand what insurance paid and why the rest is theirs will not pay it. One conversation removes that objection permanently.
• Screen for financial assistance. Charity care, sliding scale, and state programs all require someone to ask. Most patients do not know the policy exists.
• Find the insurance problem. A meaningful share of patient balances are coordination-of-benefits errors, missing secondary coverage, or claims that were denied for documentation rather than coverage. Those are fixable, and the patient usually knows the missing fact.
• Set up a payment plan. Affordability, not willingness, is the common blocker. A plan agreed on a call converts a write-off into a cash flow.

Notice that none of those is pressure. The highest-recovery medical call is an administrative one made early, not a collection call made late.

Where automated voice calls fit

They fit the volume problem, which is that nobody staffs enough people to call every patient with a balance before placement.

A voice agent can work the pre-collection population at volume through batch calling, explain the balance from approved language, ask the screening questions that identify a financial assistance candidate, capture a payment arrangement, and hand the call to a human the moment it needs one. On the inbound side it answers patients calling about a statement, which is the call that currently goes to hold.

Three rules make the difference between this working and this becoming a complaint.

1. Lead with resolution, not payment. The opening should offer to explain the bill and check for assistance, because that is what most of these calls are actually about.
2. Transfer on any dispute, hardship disclosure, or request for a person. A patient saying they cannot afford care is a human conversation, not a workflow branch.
3. Never guess. If the agent does not have the claim detail in front of it, it says so and routes. A wrong answer about what insurance paid destroys the trust the call was supposed to build.

Where it does not fit: hardship conversations, disputes, anything involving clinical information, and anyone in distress. Those need a person, which is why the warm transfer path matters more here than the automation rate does.

Compliance on a medical collection call

Four separate regimes can apply to the same call, and they do not overlap neatly.

• HIPAA. Patient information is protected whether the call is made by staff, a billing company, or a vendor's software. That means a business associate agreement, access controls on recordings, and a retention policy.

See the HHS guidance for covered entities and business associates for what that involves. Any vendor should publish its security posture, as Retell does in its Trust Center, and that is a starting point for your own risk assessment rather than a substitute for it.

Regulation F applies once the account is with a third party. The CFPB's Debt Collection Rule FAQs set out the presumptions: more than seven calls about a particular debt within seven consecutive days, or a call within seven days of a telephone conversation about that debt, presumptively violates the FDCPA. Both presumptions are rebuttable and both count per debt.

The artificial-voice rules, which are not the FDCPA rules

An AI-generated voice is an artificial voice under the TCPA, and that raises a consent question before any FDCPA question is reached.

The FCC ruled on February 8, 2024 that calls using AI-generated voices are "artificial" within the meaning of the Telephone Consumer Protection Act (FCC 24-17). Four things follow for a collections calling program, and they apply to a creditor and an agency alike.

• Consent. An artificial-voice call to a wireless number needs the called party's prior express consent. The FDCPA analysis never reaches this, so it is a separate review, with the consent record kept at the account level.
• A numerical limit on residential lines. Artificial and prerecorded debt collection calls to a residential line run under the exemption at 47 CFR 64.1200(a)(3)(iii), which allows no more than three such calls in any consecutive 30-day period. Going past that needs prior express consent. On a landline this binds before the Regulation F frequency presumption does.
• An opt-out on every call. The same exemption requires an automated, interactive voice or key-press opt-out mechanism on each call, under 47 CFR 64.1200(b)(3).
• Identification. 47 CFR 64.1200(b)(1) and (b)(2) require an artificial-voice message to state the identity of the business responsible for the call at the beginning of the message, and to give a telephone number during or after it.

State law adds to this. California's AB 2905, effective January 1, 2025, requires a call that uses an AI-generated voice to say so.

None of this prohibits the technology. It sets requirements the configuration has to meet, and they sit next to the FDCPA rather than inside it. Retell's TCPA compliance playbook for voice AI outbound goes through the consent side in detail.

One healthcare-specific point. The TCPA's health care message exemption at 47 CFR 64.1200(a)(3)(v) does not cover messages with "accounting, billing, debt-collection, or other financial content", so a patient balance call does not sit inside it. It runs under the general commercial exemption and its limit of three artificial-voice calls per residential line in any 30-day period.

State law sits on top of all of it, with several states setting stricter call limits or medical-specific requirements than the federal baseline.

None of this is legal advice. The point is that a medical collections calling program has more moving parts than a general one, and the configuration has to be set by someone who owns compliance, not by whoever built the agent.

Frequently asked questions

Is medical debt still on credit reports in 2026?

It can be. The federal rule that would have banned it was vacated in July 2025 and never took effect. Paid medical collections and unpaid medical collections under $500 are excluded under voluntary credit bureau policies, and around fifteen states have their own restrictions.

How long before a medical bill goes to collections?

There is no single federal timeline. Providers typically run a billing cycle of several months before placing an account, and the credit bureaus wait one year from the date a medical debt goes to collections before an unpaid medical collection can appear. Ask the provider for its own placement timeline, because it varies.

Does the FDCPA apply to hospital billing offices?

Generally no. The FDCPA covers third-party collectors, not creditors collecting their own debts. Whether a particular collector is first or third party is a fact-specific question, and state law, the TCPA, and unfair-practices rules can still apply either way.

Can a collection agency call about a medical bill?

Yes, within limits. Regulation F presumes a violation above seven calls about a debt in seven consecutive days, or a call within seven days of a phone conversation about that debt, and calls are restricted to convenient hours. Patients can also request that contact stop in writing.

Can AI make medical collection calls?

It can make the administrative calls: explaining a balance, screening for financial assistance, arranging payment plans, and answering inbound statement questions. It should route disputes, hardship, and anything clinical to a person, and the deployment needs the same HIPAA controls as any other system touching patient information.

What is the best time to contact a patient about a balance?

Before placement, while the account is still first-party and the conversation is administrative. Recovery rates fall and complaint rates rise once an account has been placed, and by then the patient's position has usually hardened.

Call the patient before the account is placed.

Retell is a Customer Experience AI Platform for Autonomous Customer Relations. It runs pre-collection and inbound billing calls at volume, explains the balance from your approved language, captures payment plans, and transfers anything that needs a person. Unlike customer service built to wait for a problem and close a ticket, Retell builds a relationship that continues after resolution, which is the difference between a patient who clears this balance and a patient who answers the next call too. Medical Data Systems runs three agents across inbound support, outbound collections, and insurer coordination: 30,000 calls and $280,000 monthly.

Prove it on your own calls before you sign anything. Run a pilot on your own patient call volume.

This article is for general information only and is not legal advice. Debt collection and calling rules vary by state and change over time, so have qualified counsel review any script, disclosure, or calling program before you use it.