Your Legal Rights When Dealing With Medical Debt

The Fair Debt Collection Practices Act

The Fair Debt Collection Practices Act (FDCPA) is a federal law enforced by the Federal Trade Commission that governs the conduct of third-party debt collectors. If your medical bill has been transferred to a collections agency — an entity that is collecting a debt on behalf of another creditor, or that purchased the debt — the FDCPA applies to every communication they make with you.

The law does not apply to the original creditor (the hospital) collecting its own debt. It applies once a third party becomes involved. Understanding this distinction determines which rights apply to your situation.

Your right to debt validation

Within five days of a debt collector's first contact with you — whether by phone or mail — they must send you a written validation notice that includes the amount of the debt, the name of the original creditor, and a statement of your right to dispute the debt.

You then have 30 days from receipt of that notice to submit a written request for debt validation. This is one of the most important rights in the FDCPA. When you submit a timely written validation request:

The collector must cease all collection activity — calls, letters, credit reporting — until they provide you with verification of the debt. Verification must include the amount owed and documentation establishing the debt's validity.

The collector cannot report the disputed debt to credit bureaus as undisputed while a validation request is pending.

Any collection activity that continues after a timely validation request creates liability for the collector — up to $1,000 in statutory damages plus actual damages and attorney's fees, under the FDCPA.

The 30-day window runs from the date you received the validation notice, not from the date of the original bill. Missing this window eliminates this specific right, so acting promptly is essential.

What debt collectors cannot do under the FDCPA

The FDCPA prohibits a wide range of conduct that is common in aggressive collections operations. Debt collectors may not:

Contact you at inconvenient times. Calls before 8 a.m. or after 9 p.m. local time are prohibited. Calls to your workplace are prohibited if you inform the collector that your employer does not permit such calls.

Harass or threaten you. Threats of violence, repeated calls intended to annoy, obscene language, and false threats of legal action are all prohibited.

Misrepresent the debt. Collectors cannot claim you owe more than you do, misrepresent the legal status of the debt, or claim to be attorneys or government representatives when they are not.

Use deceptive practices. Sending documents designed to look like court documents when they are not, or falsely implying that nonpayment will result in arrest, are prohibited.

Contact third parties without permission. Collectors can contact third parties only to locate you, and may not discuss your debt with anyone except your spouse, attorney, or co-debtor.

Violations of the FDCPA can be reported to the Consumer Financial Protection Bureau (CFPB) and the FTC. You may also have the right to sue the collector directly in federal or state court.

Medical debt and your credit report

Significant changes to medical debt credit reporting took effect in 2023. The three major credit bureaus — Equifax, Experian, and TransUnion — implemented new policies under pressure from the CFPB:

Paid medical collections are removed. Once a medical collection account is paid or settled, it must be removed from your credit report. This is a significant change from prior rules, which allowed paid collections to remain for up to seven years.

Medical debt under $500 is excluded. Medical collection accounts under $500 are no longer included on credit reports from the three major bureaus, regardless of payment status.

The waiting period is extended. Unpaid medical debt cannot appear on your credit report for one year after it is reported to the credit bureaus, up from six months under prior rules. This gives patients additional time to dispute or resolve bills before their credit is affected.

The CFPB has additionally proposed a rule that would remove medical debt from credit reports entirely for purposes of lending decisions, on the grounds that medical debt is a poor predictor of creditworthiness.

The statute of limitations on medical debt

Medical debt, like all consumer debt, is subject to a statute of limitations — the period during which a creditor or collector can sue you to collect the debt. Once this period expires, the debt is "time-barred" and cannot be collected through legal action, although the debt itself does not disappear and collectors may still attempt to collect it.

Statutes of limitations vary by state, typically ranging from three to six years for most states, with some extending to ten years. The National Consumer Law Center maintains resources on state-specific statutes of limitations.

A critical warning: making a payment on a time-barred debt or making a written acknowledgment of the debt can restart the statute of limitations in many states, making a previously uncollectable debt collectible again. Before making any payment on an old debt, verify whether it is time-barred under your state's law.

501(r) protections against aggressive collection

Nonprofit hospitals are prohibited under IRS Section 501(r) from engaging in "extraordinary collection actions" before making reasonable efforts to determine whether a patient qualifies for charity care. Extraordinary collection actions include reporting to credit bureaus, wage garnishment, liens on property, and lawsuits.

If a nonprofit hospital initiated any of these actions without first completing a charity care eligibility determination, they may be in violation of 501(r). This is not only a potential IRS compliance issue for the hospital — it provides leverage in negotiating the account and potentially having the collection action reversed.

Receiving collection calls about a medical bill? Get a free consultation — our case managers can submit validation requests and dispute letters immediately.

What to do right now if you've received a collection notice

First, do not make any payment or acknowledge the debt verbally or in writing until you understand your rights and have assessed the validity of the underlying bill. Payment resets limitation periods in many states and significantly weakens your negotiating position.

Second, submit a written debt validation request to the collector within 30 days of their first contact. Send it via certified mail with return receipt requested, and keep a copy. This creates a documented record and immediately pauses collection activity.

Third, obtain your itemized bill from the original provider and have it reviewed for errors. The same billing errors that were present in the original bill remain in the collected debt — and documented errors are your most powerful negotiating tool.