The No Surprises Act (NSA) is usually framed as a hospital-and-emergency-care law. It is not. Several of its requirements apply directly to small independent practices — and the practices most likely to be caught off-guard are the ones that mostly see in-network commercial patients and assume the law does not touch them. The exposure is not theoretical: HHS and state insurance commissioners have begun auditing, and the penalties are per-violation.
What the NSA actually requires of small practices
Three obligations matter for most independent practices: the Good Faith Estimate (GFE), public notice and disclosure, and out-of-network billing rules. None require new technology. All require documented processes.
1. Good Faith Estimates for self-pay and uninsured patients
If a patient is uninsured or chooses not to use their insurance ("self-pay"), you must give them a written Good Faith Estimate of expected charges before the service. The estimate has to be in writing, has to itemize CPT codes and expected costs, and has to be delivered within the federal timing windows — generally one business day after scheduling for services scheduled three or more business days out, or three business days after scheduling for services scheduled ten or more days out.
- The estimate must be itemized — not a single "office visit: $250" line.
- The estimate must include any reasonably expected co-provider charges (anesthesia, lab, pathology) or list the practice’s good-faith inability to estimate them.
- Patients have a dispute right if the actual bill exceeds the estimate by more than $400.
- You must keep the GFE in the patient record for at least six years.
2. Public notice and disclosure
Practices must post a one-page "Right to Receive a Good Faith Estimate" notice on their website and in a prominent location at the practice. The federal model notice is fine — you do not have to write your own. Most practices that fail this requirement fail it because the notice exists somewhere on the website but is not linked from the homepage or new-patient flow.
3. Out-of-network balance billing
If you provide services at an in-network facility but you are out-of-network with the patient’s plan, you cannot balance-bill the patient at out-of-network rates without specific written consent obtained at least 72 hours in advance, on the federal standard form. This applies to many specialty consults, anesthesia services in surgical settings, and pathology/lab services. Most small practices that rely on "facility-based" out-of-network billing as a revenue strategy are now exposed.
A 30-minute compliance checklist
- Confirm the federal "Right to Receive a Good Faith Estimate" notice is on the homepage of your website and visible in the waiting room.
- Build a Good Faith Estimate template — either through your EHR’s NSA module or as a structured document — and document who on staff is responsible for issuing it.
- Train front-desk staff to identify self-pay and uninsured patients at scheduling, and to flag those visits for GFE preparation.
- Audit your last quarter of out-of-network claims for any cases where a balance bill went to a patient without the federal consent form on file.
- Set a six-year retention policy for GFEs, consent forms, and dispute communications — most practice EHRs do not do this automatically.
What enforcement actually looks like
Federal enforcement is complaint-driven for most small practices — a patient who feels surprised by a bill files a complaint, and the audit follows. State insurance commissioners have parallel authority and in some states are more active. Penalties are up to $10,000 per violation, and "per violation" usually means per patient encounter that lacked the required document. A small practice that has never issued a GFE to its self-pay patients can build a six-figure exposure quietly.
The good news: getting compliant is a process change, not a technology project. A template, a staff workflow, and a quarterly self-audit close the gap for most independent practices. The cost of the workflow is small. The cost of waiting for the first complaint is not.