When “Don’t Call” Collides With Hospital Bad Debt

The delay is not complete relief. There are existing TCPA consent and revocation obligations that remain in force. What may change is the scope of revocation. If it is taken with a wider interpretation, a patient who opts out of one type of autodialed or prerecorded communication – appointment reminders for example – could be considered to have revoked their consent for other calls or texts, like billing or bad debt unless consent for each type of communication is explicitly documented. For health systems that provide a variety of services, this could become a daunting task. While the FCC has received petitions to reconsider this approach, there have been no decisions as of early 2026, which gives hospitals to make a choice in the next year: assume the rule will take effect in a broad definition and plan accordingly or bet on a significant softening of the proposed regulation. The choice can impact both a hospital’s bad debt recovery and vendors they work with.

Vendor Risk = Hospital Risk

The voice providers and dialing platforms utilized by hospitals and health systems are directly subject to FCC robocall rules and enforcement, which means that their risk tolerance shapes the practices hospitals employ. With carriers deploying increasingly aggressive call blocking and analytics and dialing platforms tightening their own robocall policies, hospitals that believe their outreach programs are fully compliant may find their outbound capacity constrained by a vendor’s risk tolerance and how carriers label and treat their calls.

To ensure consistency and the proper risk tolerance, CFOs and risk leaders need to ask questions, including:

• Does our dialer vendor maintain current Robocall Mitigation Database filings and other required registrations?
• What contractual protection and indemnification exists if the vendor platform or traffic is flagged or blocked?
• How quickly can the vendor adapt to new FCC or FTC guidance, and how transparent are they about enforcement inquiries?

These questions are not merely IT questions, they can impact your revenue recovery also.

What We Don’t Know Still Matters

When the FTC publishes complaint data it includes categories like debt relief and certain health-related products, but the public summaries usually do not quantify how many of these complaints or enforcement actions are specifically related to medical debt or hospital collections. FCC enforcement announcements are similar, describing targets and conduct, but do not consistently separate hospital bad debt collection as its own category, making it hard to know if it’s a smaller share of telemarketing enforcement or underreported. This uncertainty makes it difficult for hospitals and health systems to decide how to invest in compliance.

Redesign over Risk Avoidance

When hospitals treat DNC and TCPA compliance as a revenue cycle issue as much as a communication problem, reengineering consent capture, segmentation, and outreach, they are better positioned to improve their bad debt recovery while reducing regulatory exposure.

Making this change requires three shifts in through:

• Consent becomes granular and persistent: Instead of relying on a signature at registration, hospitals capture context-specific permission across the patient journey.
• Segmentation drives channel strategy: All accounts should not be treated the same. Propensity-to-pay models, prior contact history, and compliant risk can determine what contact style is used. Call, text, email or letter are utilized based on their preferences.
• Analytics track indicators, not just outcomes: Right-party contacts, opt-outs, complaints and net recovery by channel can help uncover problems earlier and reduce the likelihood of enforcement events. They can also help identify where complaint outreach actually improves financial and patient experience outcomes.

Change Is Coming

Combining ever-evolving FTC Do Not Call Registry data and potential TCPA rule changes creates a small window for action. Over the next one to two years, hospitals should:

• Audit their current consent practices and map them against TCPA and FCC requirements to identify gaps where implied consent, bundled consent, or outdated permissions may create exposure.
• Assess vendor compliance posture—particularly for dialing platforms and VoIP carriers—and ensure contracts appropriately allocate regulatory and operational risk.
• Build cross-functional governance that aligns legal, compliance, IT, and revenue cycle around a shared risk-return model for patient outreach.

If hospitals and health systems rely on reactive compliance after an event forces the issue, the costs can be higher and the options for positive outcomes fewer. Even though millions of households have placed their numbers on the National Do Not Call Registry, bad debt doesn’t simply go away. Healthcare providers need to decide how – and where – they will respond.