No Surprises Act QPA Disclosures: Provider Audit and Negotiation Guide

A QPA is not automatically the final out-of-network payment. It can determine patient cost sharing in specified circumstances and is one factor in the Federal IDR framework, but payment may instead be controlled by an All-Payer Model Agreement, specified state law, open-negotiation agreement, or IDR determination. The first task is therefore jurisdiction and claim-path screening, not comparing the QPA to billed charges in isolation.

This guide reflects federal regulations and joint agency guidance available October 14, 2026. It distinguishes plan disclosure duties, agency guidance, court-affected methodology questions, and Millennova operational review. It is not legal advice, a QPA recalculation, or a finding that a claim is eligible for Federal IDR.

QPA disclosure audit at a glance

1. Confirm that the federal QPA pathway applies

Screen the service, facility, provider status, plan, state, and patient-protection facts before auditing a QPA. Federal protections generally address covered emergency services, certain non-emergency services furnished by nonparticipating providers at participating facilities, and air ambulance services. A specified state law or All-Payer Model Agreement may determine the recognized amount or out-of-network payment route instead.

• Identify the plan or issuer, funding arrangement, network status, service type, facility status, and jurisdiction.
• Confirm whether the payment or denial concerns an NSA-protected item or service.
• Determine whether state law, an All-Payer Model Agreement, a contract, or the federal process controls the rate.
• Preserve the patient cost-sharing calculation separately from the provider-payment dispute.
• Do not infer Federal IDR eligibility solely because an EOB displays a QPA or an NSA remark code.

2. Preserve the initial payment or denial and every disclosure

Joint agency FAQs state that required QPA disclosures must be furnished in writing, on paper or electronically, with each applicable initial payment or notice of denial. An electronic payment notice does not remove the disclosure duty merely because the plan's transmission system cannot attach the information in the same transaction. Providers should log actual receipt dates for the ERA or EOB, payment, denial, disclosure page, paper mailing, portal document, and any later supplement.

This receipt chronology matters because open-negotiation timing is tied to receipt of the initial payment or notice of denial, while 2025 agency guidance addresses situations in which required disclosures arrive later in paper form. Do not change a deadline based on an informal expectation; apply the current guidance to the documented receipt pattern and check current CMS notices.

3. Test the required claim-level disclosures

The disclosure rules require the QPA for each item or service when the QPA is the recognized amount or applicable cost-sharing basis. The packet also must include certification language addressing application of the QPA and compliance with the applicable QPA rules, a statement explaining the opportunity to initiate the 30-business-day open-negotiation period and the general Federal IDR timing, and contact information for the appropriate person or office.

1. Match every disclosed QPA to the patient, claim, service date, billed line, code, modifier, units, provider, and facility.
2. Confirm the packet identifies the QPA for each item or service rather than only a total allowed amount.
3. Locate the required certification statements and preserve their exact wording.
4. Confirm the open-negotiation statement describes the provider's opportunity and identifies the correct contact channel.
5. Test the phone, email, address, or portal sufficiently to document whether it reaches the appropriate negotiation office.
6. Record each missing, inconsistent, or ambiguous element without assuming the defect changes the final rate.

4. Audit downcoding separately

Federal guidance defines downcoding for these disclosure purposes as altering a billed service code to another code, or altering, adding, or removing a modifier, when the changed code or modifier is associated with a lower QPA. When downcoding occurs, the plan or issuer must provide information about the code or modifier used, the QPA if the billed code or modifier had been used, and an explanation of why the alteration was made.

A code difference is not automatically an improper downcode. The provider should reconcile whether the claim was corrected, bundled, denied, repriced, or altered for another stated reason. Keep clinical and coding support distinct from the commercial rate argument.

5. Make a targeted request for additional QPA information

The regulation requires additional information in a timely manner upon provider request. The request can address whether the QPA was calculated using contracted rates or an eligible database, whether it was determined using a derived amount or other permitted alternative when applicable, and information sufficient to identify the relevant geographic region and specialty or facility category used under the rule.

• Identify the exact claim and each item or service covered by the request.
• List the missing initial disclosure elements before asking broader methodology questions.
• Ask whether contracted rates or an eligible database supported the QPA and request the information required by the current rule.
• Request the geographic region, provider specialty or facility type, service code, modifier, and downcoding information relevant to the claim.
• Use a delivery method that preserves the request, timestamp, recipient, and response.
• Escalate suspected systemic noncompliance through the appropriate plan, regulator, or CMS complaint channel rather than inventing unavailable data.

6. Use QPA evidence correctly in open negotiation

A complete QPA packet helps the provider identify the claim, validate the payment pathway, compare coding, contact the negotiation office, and preserve timing. It does not mean the provider's counteroffer should be a simple percentage above the QPA. A decision-ready package can combine the disclosure audit with the provider's training and experience, patient acuity, complexity, market and access facts, teaching or case-mix considerations where relevant, prior contracting efforts, and other evidence permitted by the governing process.

Separate the regulatory record from Millennova commentary. The regulation defines what the plan must disclose. Agency FAQs explain how the Departments interpret implementation and late disclosure scenarios. Court decisions and later guidance may affect QPA methodology. The provider's operational position explains why a different out-of-network rate is justified on the particular record.

1. Document the payment or denial receipt date and the disclosure receipt date.
2. Screen jurisdiction and Federal IDR eligibility independently.
3. Complete the required-disclosure and downcoding checklists.
4. Send a focused additional-information request where needed.
5. Reconcile billed, QPA, initial payment, patient share, and requested rate by line.
6. Submit the current open-negotiation notice through the disclosed contact channel and preserve delivery.
7. Maintain a separate business-day calendar for open negotiation, Federal IDR initiation, extensions, and current agency notices.

7. Handle missing or late disclosures without losing the claim

FAQs Part 55 state that missing disclosures can impair meaningful negotiation, but providers retain the right to initiate open negotiation within 30 business days after receipt of the initial payment or denial. FAQs Part 69 addresses a timely paper disclosure received after an electronic payment or denial and explains when the Departments will consider the open-negotiation period to end 30 business days after both have been received. It also discusses extensions where noncompliance contributed to a missed Federal IDR initiation deadline.

These are fact-sensitive timing rules. Preserve proof of when each item arrived, use the current standard notice, document efforts to identify a contact when none was provided, and review live CMS notices. Do not wait for perfect disclosure if doing so could jeopardize an independent deadline.

Provider quality-control checklist

• Federal-versus-state jurisdiction and NSA claim eligibility documented.
• Initial payment or denial, payment, ERA or EOB, and every disclosure preserved.
• Actual receipt dates recorded for electronic and paper transmissions.
• QPA matched to every item or service, code, modifier, unit, provider, facility, and service date.
• Certification, open-negotiation statement, and negotiation contact verified.
• Billed and adjudicated codes compared for downcoding disclosure requirements.
• Additional-information request tailored to the current rule and claim facts.
• QPA concerns distinguished from coding, coverage, contract, and patient-share issues.
• Counteroffer supported by claim-specific permissible evidence rather than an invented QPA formula.
• Open-negotiation, Federal IDR, extension, and agency-notice calendars maintained separately.

Related Millennova Legal resources

Explore Millennova Legal's No Surprises Act and Federal IDR support, Federal IDR process guide, open-negotiation deadline guide, 2026 Federal IDR implementation timeline, Transparency in Coverage negotiation-data guide, and TPA and out-of-network commercial negotiation support.

Primary federal sources