THE CORWINLAW CODEX

A Practical Guide to Medical Collection Demand Letters in New York

Lawful, Effective, and Patient-Appropriate Collection Communications for Medical and Dental Practices

Codex Entry
009-26
Revision
1.0
Practice Area
Commercial Transactions & Corporate Counsel
Last Reviewed
August 2026

Medical and dental practices provide essential professional services, but they are also businesses that must collect valid patient balances. When a patient does not respond to statements, reminder letters, telephone calls, or other outreach, a carefully prepared demand letter can create a final opportunity to resolve the account before referral to a collection attorney.

A medical collection demand letter is not an ordinary commercial demand. It may involve protected health information, insurance questions, disputed patient responsibility, consumer-protection rules, and New York laws specifically addressing medical debt. The letter must therefore be firm enough to prompt action without disclosing unnecessary treatment information, misstating legal rights, or threatening consequences the practice cannot lawfully pursue.

This Codex explains:

  • what a medical collection demand letter is and what it should accomplish;
  • what the letter should—and should not—say;
  • how HIPAA applies to billing and collection communications;
  • New York’s rules governing creditor conduct and medical debt;
  • the important distinction between private practices and general hospitals;
  • best practices before sending a reminder or final demand;
  • how to refer an account to a collection attorney appropriately; and
  • practical compliance checklists for medical and dental offices.

The discussion focuses on New York medical and dental practices and federal law as of August 2026.

1. What Is a Medical Collection Demand Letter?

A medical collection demand letter is a written communication from a health care provider—or later from its attorney or collection agency—requesting payment of a patient-responsibility balance.

The letter may be used for balances arising from:

  • uninsured services;
  • copayments, coinsurance, or deductibles;
  • services denied or not covered by insurance;
  • amounts remaining after insurance adjudication;
  • payment-plan defaults; or
  • other charges the patient validly agreed to pay.

A demand letter should do more than repeat an invoice. It should clearly identify the account, explain what action is required, provide a reasonable response deadline, offer a way to raise a billing or insurance issue, and state the practice’s intended next step if the balance remains unresolved.

What the letter is intended to do

A properly drafted letter should:

  1. confirm the balance shown in the practice’s records;
  2. document the practice’s collection efforts;
  3. distinguish a reminder from a final demand;
  4. invite prompt correction of genuine billing or insurance errors;
  5. provide a practical way to pay or request an arrangement;
  6. set a clear deadline; and
  7. accurately describe the consequences of nonresponse.

What the letter does not do

A provider’s demand letter does not, by itself:

  • establish that every disputed charge is legally owed;
  • create liability in a spouse, parent, relative, or guarantor who did not undertake it;
  • authorize disclosure of unnecessary treatment information;
  • permit medical debt to be reported to a consumer reporting agency in New York;
  • permit collection fees or attorneys’ fees that are not otherwise legally recoverable;
  • convert a threatened remedy into a lawful remedy; or
  • replace the notices that a third-party debt collector may later be required to provide under applicable law.

Not every overdue account should begin with a final demand. A graduated process is generally more effective and more consistent with a patient-centered practice.

Stage One: Accurate patient billing

The first bill should clearly state:

  • the patient’s name;
  • an account or invoice number;
  • the amount billed;
  • payments and insurance adjustments already credited;
  • the remaining patient-responsibility balance;
  • payment methods; and
  • a telephone number or secure method for questions.

Before treating the account as delinquent, the practice should verify that the claim was submitted correctly, insurance payments and contractual adjustments were posted, and the patient—not an insurer or another responsible party—is actually responsible for the amount.

Stage Two: Gentle reminder

A reminder should use non-accusatory language. It should recognize that the patient may have paid recently, may believe insurance remains pending, or may need help understanding the bill.

The objective is voluntary resolution, not escalation.

Stage Three: Follow-up communication

If the reminder receives no response, the practice may use one or more additional letters, telephone calls, or secure electronic communications. Each contact should be documented in the account record, including the date, method, recipient, staff member, and general result.

Telephone messages should reveal as little information as reasonably possible. A neutral request to return a call is safer than leaving detailed information about a debt or treatment.

Stage Four: Final demand

The final demand should state that prior communications have not resolved the account and should provide a final, definite opportunity to:

  • pay the balance in full;
  • obtain approval of a suitable payment arrangement; or
  • raise a documented billing, insurance, or identity issue.

The letter may state that the practice will refer the matter to a collection attorney if that is genuinely the intended next step. If referral is discretionary, the letter should instead state that the practice may refer or intends to refer the account.

Stage Five: Attorney or collection referral

If the deadline expires without resolution, the practice should follow the consequence stated in the letter or make a documented decision not to proceed. Repeatedly threatening referral without making referrals may undermine credibility and may implicate New York’s prohibition against threatening action that a creditor does not ordinarily take.

3. HIPAA and Medical Collection Communications

The Health Insurance Portability and Accountability Act is commonly abbreviated HIPAA. HIPAA does not prohibit a medical or dental practice from billing patients or collecting valid balances. Payment and collection are recognized health care payment activities.

Federal guidance permits a covered provider to use and disclose protected health information, without a separate patient authorization, as reasonably necessary to obtain payment. It also permits a provider to use a collection agency or other business associate for that purpose, subject to HIPAA’s requirements. See the U.S. Department of Health and Human Services guidance on billing communications and use of debt collection agencies.

No special HIPAA disclaimer is ordinarily required

A provider’s demand letter ordinarily does not need to include a special HIPAA disclaimer, privacy warning, or patient authorization. Adding a generic disclaimer does not cure an unnecessary or misdirected disclosure. Compliance depends principally on what information is disclosed, to whom it is sent, why it is disclosed, and whether appropriate safeguards are used.

Apply the minimum-necessary principle

For most collection communications, the practice should use only the information reasonably needed to identify and resolve the account. HHS explains the minimum-necessary requirement as requiring reasonable efforts to limit protected health information to what is needed for the intended purpose.

Information ordinarily appropriate in the letter includes:

  • patient name;
  • practice name and contact information;
  • account or invoice number;
  • balance due;
  • payment deadline;
  • payment methods;
  • a general date or range of service, if needed to identify the account; and
  • a neutral statement that the patient may contact the practice with billing or insurance questions.

Information ordinarily best omitted unless specifically necessary includes:

  • diagnosis;
  • procedure descriptions;
  • tooth numbers;
  • medications;
  • clinical findings;
  • treatment plans;
  • detailed insurance information;
  • Social Security numbers;
  • complete financial-account numbers; and
  • information about unrelated services or family members.

Use discreet delivery methods

A neutral envelope should not display language such as “past-due medical debt,” “final demand,” “collection matter,” or treatment information. The return address may identify the practice, but the exterior should not reveal more than is necessary for delivery.

Before mailing, staff should:

  • verify the patient’s current address;
  • review any confidential-communications request;
  • use the address or communication method the practice agreed to use;
  • avoid sending the letter to an employer unless specifically authorized and appropriate; and
  • avoid addressing the envelope to another household member merely because that person previously brought the patient to an appointment.

Email and text messaging require comparable caution. The practice should use its approved secure processes and should not place detailed protected health or debt information in an insecure subject line, lock-screen preview, or message likely to be viewed by another person.

Communications with relatives and household members

A provider should not assume that a spouse, adult child, parent of an adult patient, emergency contact, or other relative is liable or authorized to receive account information. If another person guaranteed payment or is the legally responsible party, the practice should confirm and retain the underlying documentation.

New York also prohibits misrepresenting a family member’s obligation to pay another person’s debt. See N.Y. General Business Law § 601-a.

Referral to a collection attorney or agency

Before sharing protected health information with an outside collection professional, the practice should determine whether the recipient is acting as a HIPAA business associate and should execute an appropriate business associate agreement when required.

The referral package should be limited to information reasonably needed to establish and collect the account, such as:

  • patient and responsible-party information;
  • address and approved contact information;
  • signed financial responsibility or guaranty documents;
  • relevant bills and account ledgers;
  • insurance adjudication information needed to establish patient responsibility;
  • payment history;
  • dispute history;
  • copies of prior collection communications; and
  • notes showing the dates and results of outreach.

Clinical records should not be sent automatically. They should be provided only when reasonably necessary to address a dispute or substantiate the claim, and then only through an appropriate secure method.

4. New York Rules Governing Creditor Conduct

A medical or dental practice collecting its own account is a principal creditor. New York’s debt-collection statute applies important restrictions directly to principal creditors and their agents.

Under N.Y. General Business Law § 601, a creditor must not:

  • claim collection fees, attorneys’ fees, court costs, or expenses unless legally chargeable;
  • communicate or threaten to communicate false credit information;
  • communicate the nature of the claim to the patient’s employer before judgment, subject to limited exceptions;
  • conceal the fact that a debt is disputed when disclosing its existence;
  • communicate so frequently, at such unusual hours, or in such a manner that the conduct can reasonably be expected to abuse or harass;
  • threaten action the creditor does not ordinarily take;
  • assert or threaten a right known not to exist;
  • make a communication look like court process or an attorney communication when it is not; or
  • use a social-media platform to collect the claim.

Accuracy is essential

Before sending a demand letter, the practice should reconcile:

  • charges;
  • insurer payments;
  • contractual write-offs;
  • patient payments;
  • refunds;
  • credits;
  • prior arrangements; and
  • any pending claim, appeal, or corrected submission.

The demand should not state that insurance “denied” the claim unless that is accurate. It should not characterize a balance as final patient responsibility if an appeal, reconsideration, coordination-of-benefits issue, or corrected claim remains pending.

Do not add unauthorized charges

Collection fees, attorneys’ fees, late fees, and interest should not be added merely because an account is overdue. The practice should confirm a valid contractual or statutory basis before demanding any amount beyond the underlying balance.

A patient financial-responsibility form should be reviewed for clarity, enforceability, and consistency with current law. Even where a contract mentions fees, the practice should not assume that every stated charge is automatically enforceable.

Make only genuine threats

Language such as “will be referred to our collection attorney” should be used only when referral is the practice’s established and intended next step. Otherwise, “may be referred” or “the practice intends to refer” is more accurate.

The letter should not threaten:

  • arrest or criminal prosecution for nonpayment;
  • immediate seizure of property;
  • wage garnishment;
  • a lien on a primary residence;
  • disclosure to an employer;
  • adverse credit reporting of New York medical debt; or
  • any lawsuit or remedy the practice does not reasonably intend and have a lawful basis to pursue.

5. New York’s Medical-Debt Protections

New York gives medical debt protections beyond the general rules applicable to consumer claims. These provisions are especially important because a communication that might be lawful for ordinary commercial debt may be unlawful or misleading when applied to medical debt.

What qualifies as medical debt?

New York Public Health Law Article 49-A covers obligations arising from health care services, products, or devices provided by hospitals, licensed health care professionals, and certified ambulance services. Dental services furnished by a licensed dentist fall within this framework. See N.Y. Public Health Law § 4925.

Medical debt must not be reported to consumer reporting agencies

A hospital, licensed health care professional, or ambulance service may not furnish any portion of medical debt to a consumer reporting agency. A contract with a collection entity must prohibit that entity from reporting the medical debt. See N.Y. Public Health Law § 4926.

New York also prohibits consumer reporting agencies from reporting or maintaining medical-debt information. See N.Y. General Business Law § 380-j.

Accordingly, a provider’s letter should not say or imply:

  • “this account will be reported to the credit bureaus”;
  • “nonpayment will damage your credit score”;
  • “payment is required to avoid credit reporting”; or
  • any similar consequence based on medical-debt reporting.

The provider’s agreement with its collection attorney or agency should expressly prohibit furnishing the medical debt to a consumer reporting agency.

Restrictions on enforcement remedies

New York’s official medical-debt guidance states that hospitals and health care professionals may not garnish wages or place a lien on a patient’s primary residence to collect qualifying medical debt, although other lawful collection remedies may remain available after judgment. See the New York Attorney General’s medical-debt guidance.

Because enforcement rules can depend on the creditor, the nature of the obligation, how the debt was financed, and current statutory provisions, a provider should consult CorwinLaw before threatening or pursuing a specific post-judgment remedy.

Medical credit cards and financing require separate attention

A debt may be treated differently if the patient used a general-purpose credit card or entered a medical credit-card or loan arrangement. New York requires important disclosures before patients use certain medical credit products, including warnings that financing may affect protections associated with medical debt.

A demand-letter policy should therefore distinguish among:

  • a balance owed directly to the provider;
  • a provider-administered installment arrangement;
  • a medical credit card or medical loan; and
  • ordinary general-purpose credit-card debt.

The practice should not treat these categories as interchangeable.

6. Private Practices and General Hospitals Are Not the Same

One of the most important compliance distinctions is whether the creditor is a private medical or dental practice or a New York general hospital.

Private medical and dental practices

A private practice must comply with HIPAA, New York’s general creditor-conduct rules, medical-debt credit-reporting prohibitions, and other applicable laws. However, the special hospital financial-assistance and pre-referral requirements in Public Health Law § 2807-k do not automatically apply to every private physician or dental office.

A private practice should still adopt a reasonable written policy addressing:

  • billing accuracy;
  • insurance processing;
  • hardship requests;
  • installment arrangements;
  • timing and frequency of communications;
  • final-demand approval;
  • attorney referral; and
  • documentation and retention.

General hospitals

New York general hospitals are subject to substantially more detailed financial-assistance and collection procedures under N.Y. Public Health Law § 2807-k. Among other requirements, the current statute addresses:

  • written and public financial-assistance policies;
  • assistance for qualifying uninsured and underinsured patients;
  • installment plans and limits on plan terms;
  • applications for financial assistance during the collection process;
  • restrictions on collection while a completed application is under review;
  • written notification before collection referral;
  • restrictions on legal action against certain lower-income patients;
  • training and oversight of hospital staff and collection agencies;
  • a waiting period after the first post-service bill; and
  • reasonable efforts to determine financial-assistance eligibility.

The statute provides for written notification, including notification on a patient bill, not less than 30 days before referral for collection. It also states that a hospital or collection agent may not commence a civil action or delegate collection activity to a debt collector for at least 180 days after the first post-service bill and until the hospital has made reasonable efforts to determine financial-assistance eligibility.

These are hospital-specific rules. A document designed for a private dental practice should not be represented as satisfying a hospital’s obligations without separate review.

7. Anatomy of an Effective Final Demand Letter

A final demand should be concise enough to be read, detailed enough to identify the account, and restrained enough to avoid unnecessary disclosures or unlawful threats.

Practice identification

Use the provider’s correct legal or professional name, mailing address, and telephone number. A patient should be able to determine who is requesting payment and how to respond.

Date and patient address

Use the date of mailing and the verified patient or responsible-party address. Staff should confirm whether the patient has requested an alternative confidential address or method.

Neutral subject line

A useful subject line is:

Re: Final Request Regarding Account [last four digits or account reference]

Avoid treatment details in the subject line. If a date of service is needed, it may be placed discreetly in the body or account summary.

Account identification

State:

  • account or invoice number;
  • balance due;
  • general date or range of service, if necessary; and
  • the patient or contractually responsible party.

Do not include a diagnosis or detailed description of treatment merely to make the letter look more complete.

Prior contact history

A neutral sentence may state that the practice previously sent statements or reminders and attempted to contact the patient. The practice should not overstate the number or nature of prior contacts.

Clear demand and deadline

The letter should tell the recipient exactly what must happen and by when. A reasonable deadline should provide enough time for delivery and response. Although a 30-day period is mandatory in specified hospital circumstances, a private practice may select a reasonable policy-based period after consulting counsel.

Payment and dispute options

The patient should be able to:

  • pay in full;
  • contact the practice to request an approved arrangement;
  • report a payment already made;
  • identify a suspected insurance-processing problem; or
  • dispute the balance.

Offering these options does not weaken the demand. It helps separate nonresponsive accounts from legitimate errors or hardship cases.

Accurate referral statement

If the practice genuinely intends attorney referral after the deadline, the letter may say so directly. If the next step remains discretionary, the language should reflect that discretion.

Professional closing

The closing should communicate that direct resolution is preferred but immediate attention is required. Avoid insults, moral judgments, accusations of dishonesty, or statements designed to embarrass the patient.

8. Best Practices Before Sending the Letter

Confirm the debt

Before any final demand is approved, staff should confirm:

  • the patient received the service;
  • the correct person is financially responsible;
  • the charge is supported by the practice’s records;
  • insurance processing is complete or appropriately explained;
  • all payments and adjustments are posted;
  • the balance is mathematically correct;
  • no bankruptcy notice, attorney representation, or legal restriction has been received;
  • no completed hardship or financial-assistance request remains pending under the practice’s policy; and
  • the applicable limitations period has been considered before threatening litigation.

Confirm the recipient

The patient, guarantor, policyholder, and emergency contact may be different people. The account should establish who agreed to pay. Do not send a demand to a family member merely because that person is listed as an emergency contact.

For minors, guardianship, divorce, custody, and contractual responsibility can create complications. Office staff should not decide disputed legal responsibility by assumption.

Confirm the address and communication preferences

Use the verified address and review:

  • returned mail;
  • address changes;
  • confidential-communications requests;
  • documented permission to use email or text;
  • patient-portal settings; and
  • restrictions requested by the patient and accepted by the practice.

Document the process

Maintain a collection log showing:

  • dates bills and reminders were sent;
  • telephone contacts and messages;
  • patient responses;
  • insurance issues raised;
  • promises to pay;
  • arrangements offered or approved;
  • disputes and supporting documentation;
  • the final-demand deadline; and
  • the referral decision.

Good records help the practice respond consistently, substantiate the account, and avoid repeated or excessive contacts.

Train staff

Staff should know:

  • what may be said in voicemail;
  • how to verify identity before discussing an account;
  • when to transfer a disputed account to a supervisor;
  • how to document a patient’s request for confidential communications;
  • what information may be sent to counsel;
  • that New York medical debt must not be reported to consumer reporting agencies; and
  • that social-media collection communications are prohibited.

9. Common Mistakes to Avoid

Including unnecessary medical details

A demand letter does not need to describe the diagnosis, procedure, or treatment outcome. Additional detail increases privacy risk without necessarily improving collection.

Sending the letter to the wrong person

A spouse, parent, child, emergency contact, or insurance policyholder is not automatically the debtor. Confirm legal and contractual responsibility.

Threatening credit reporting

New York medical debt must not be furnished to consumer reporting agencies. Do not use outdated forms containing a credit-reporting threat.

Threatening remedies unavailable for medical debt

Do not threaten wage garnishment, a lien on the patient’s primary residence, or another specific enforcement remedy without current legal review.

Adding unsupported fees

Do not add a collection percentage, attorneys’ fee, late fee, or interest charge without confirming that it is lawfully due.

Threatening referral without intending to refer

A “final” demand should correspond to an actual policy. If the practice repeatedly sends final notices but routinely takes no further action, the threat may be inaccurate and ineffective.

Ignoring a dispute

If the patient disputes the balance, the practice should flag the account, investigate the issue, and communicate the result. The practice should not knowingly disclose the debt to others without identifying it as disputed where the law requires that fact to be disclosed.

Using social media

Do not contact patients through public or semi-public social-media platforms to collect an account. New York expressly prohibits a principal creditor from using a social-media platform as a means of collecting a consumer claim.

Disclosing the debt through voicemail or email previews

A detailed voicemail or subject line may expose the debt to household members, coworkers, or anyone with access to the device. Keep preliminary messages neutral.

10. Practice Policy Checklist

A medical or dental office should consider adopting a written policy that answers the following questions.

Account review

  • Who verifies patient responsibility?
  • Who confirms insurance adjudication and adjustments?
  • Who approves corrections, write-offs, hardship accommodations, and refunds?
  • When is an account considered delinquent?

Communications

  • How many reminders are sent?
  • At what intervals may staff telephone the patient?
  • What voicemail language is permitted?
  • How are confidential-communications requests recorded?
  • Which electronic methods are approved?

Payment arrangements

  • Who may approve an arrangement?
  • What information may be requested?
  • What minimum payment or duration rules apply?
  • How are missed payments handled?
  • Is interest charged, and if so, what legal basis supports it?

Final demands

  • Who reviews the ledger before mailing?
  • What deadline is used?
  • When does the letter say “will refer,” “intends to refer,” or “may refer”?
  • How is delivery documented?
  • What happens when the deadline expires?

Attorney or agency referral

  • Is there an appropriate written services agreement?
  • Is a business associate agreement required and executed?
  • Does the contract prohibit medical-debt credit reporting?
  • What records are included in the referral package?
  • How are disputes, payments, bankruptcies, and representation notices communicated?
  • Who authorizes litigation or settlement?

11. Final-Demand Review Checklist

Before sending a final demand, confirm:

  • The provider and patient names are correct.
  • The responsible party has been verified.
  • The address and confidential-communications instructions have been checked.
  • The balance has been reconciled.
  • Insurance processing and adjustments have been reviewed.
  • The account and dates are described without unnecessary treatment details.
  • The payment deadline is clear and reasonable.
  • Payment methods are accurate.
  • The patient has a way to raise a billing or insurance issue.
  • Any payment-arrangement language matches the practice’s actual policy.
  • The referral warning describes the practice’s genuine intended action.
  • The letter does not threaten credit reporting of medical debt.
  • The letter does not threaten unavailable enforcement remedies.
  • No unauthorized fees, costs, or interest have been added.
  • The envelope and transmission method are discreet.
  • A copy of the final letter and proof of mailing are retained.

12. When to Consult CorwinLaw

Medical and dental practices should consider consulting CorwinLaw before:

  • implementing a new collection policy;
  • revising patient financial-responsibility or guaranty forms;
  • using a collection agency or collection attorney;
  • adding interest, late fees, collection costs, or attorneys’ fees;
  • pursuing a disputed or unusually large account;
  • collecting from a spouse, parent, guarantor, estate, or other third party;
  • responding to bankruptcy, deceased-patient, identity-theft, or attorney-representation notices;
  • threatening or commencing litigation;
  • using medical credit cards or patient-financing products; or
  • applying hospital-specific collection rules.

CorwinLaw can assist with demand-letter templates, collection policies, patient agreements, HIPAA-conscious referral procedures, and New York medical-debt compliance. Visit https://www.corwinlaw.net.

Important Notice

This Codex provides general educational information concerning federal and New York law. It is not legal advice and does not create an attorney-client relationship. The governing rules may vary according to the provider, patient, service, financing arrangement, contract, insurance status, and collection method. Laws and regulatory guidance may change. A health care provider should obtain advice from CorwinLaw regarding its specific policies, forms, accounts, and proposed collection activity.

The CorwinLaw Codex

Explore additional legal guides, practical resources, and practice-area reference materials at:

https://www.corwinlaw.net