HIPAA and Charity Care: What Patient Privacy Rules Mean for Hospital Financial Assistance

Product Pricing
Ready to get started? Book a demo with our team
Talk to an expert

HIPAA and Charity Care: What Patient Privacy Rules Mean for Hospital Financial Assistance

Kevin Henry

HIPAA

December 31, 2025

6 minutes read
Share this article
HIPAA and Charity Care: What Patient Privacy Rules Mean for Hospital Financial Assistance

Charity Care Definition and IRS Guidelines

What charity care means

Charity care is hospital-provided free or discounted services for patients who cannot afford their bills. It is typically limited to emergency and medically necessary care and administered through a written Financial Assistance Policy that explains eligibility, discounts, and how to apply.

Core IRS guidelines

For nonprofit hospitals, IRS Section 501(r) establishes how charity care must be structured and communicated. Facilities must maintain a written Financial Assistance Policy, provide a plain-language summary and application form, describe Medically Necessary Care Coverage, and ensure consistent application across locations and service lines.

IRS guidance also requires clear processes for eligibility review, documentation standards, and safeguarding against discouraging access to emergency care. These expectations work alongside HIPAA to protect patient information while enabling fair, timely determinations.

Nonprofit Hospital Tax-Exempt Requirements

What tax exemption requires in practice

  • Maintain a written Financial Assistance Policy and an emergency medical care policy that does not discourage seeking emergency services.
  • Conduct a Community Health Needs Assessment on a set cycle and adopt an implementation strategy addressing identified needs.
  • Limit charges for FAP-eligible patients to the hospital’s Amounts Generally Billed for emergency or medically necessary care.
  • Follow Billing and Collection Restrictions by making reasonable efforts to determine eligibility before any extraordinary collection actions.

Failure to comply can trigger corrective action, penalties, and risk to facility-level tax benefits. Documented, consistently applied procedures are essential to protect patients and preserve tax-exempt status.

Eligibility Criteria Based on Poverty Guidelines

How hospitals set income thresholds

Most programs anchor eligibility to the Federal Poverty Guidelines, adjusting for household size. Common approaches include full charity at lower percentages (for example, up to 200% of poverty) and sliding-scale discounts at higher levels (for example, 201–400%). Specific cutoffs, asset considerations, and residency rules vary by hospital and must be spelled out in the Financial Assistance Policy.

Medically indigent pathways

Many policies also recognize “medically indigent” situations where a bill is catastrophically high relative to income, even if the household exceeds standard thresholds. Determinations may consider ongoing treatment needs, affordability of payment plans, and exceptional hardships to ensure access to Medically Necessary Care Coverage.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Application and Presumptive Eligibility Processes

Standard application steps

  • Access materials: obtain the application, plain-language summary, and instructions in your preferred language.
  • Submit documentation: recent pay stubs or income statements, tax returns, insurance denials, and household-size verification.
  • Timing: you generally have at least 240 days from the first post-discharge bill to apply; collection activities must pause while a complete application is under review.
  • Determination notice: the hospital issues a written decision, applies discounts, and, if applicable, adjusts prior bills or refunds overpayments.

Presumptive Eligibility

Hospitals may approve charity care without a full application when reliable indicators show you likely qualify. Triggers can include prior Medicaid enrollment, participation in means-tested programs, homelessness, or validated third‑party data. If approved presumptively, you receive written notice and an opportunity to provide additional information if the assessment was partial.

Billing Protections and Financial Assistance Policies

Limits on charges and collections

  • Amounts Generally Billed: charges for FAP-eligible patients must not exceed AGB for emergency or medically necessary services, calculated under a permitted method.
  • Billing and Collection Restrictions: before taking extraordinary collection actions—such as lawsuits, wage garnishment, liens, or credit reporting—the hospital must make reasonable efforts to determine eligibility and provide required notices.
  • Application windows: no extraordinary collection actions may occur within at least 120 days of the first post-discharge bill, and applications submitted within 240 days must be considered.
  • Payment options: approved discounts are applied to remaining balances, and reasonable payment plans are offered consistent with the Financial Assistance Policy.

HIPAA Privacy Compliance in Charity Care

How HIPAA applies to charity care reviews

HIPAA allows covered entities to use and disclose protected health information for treatment, payment, and healthcare operations—activities that include determining charity care eligibility. Hospitals must apply the minimum necessary standard, restrict access to those who need it, and secure records whether stored electronically or on paper.

Patient Privacy Protections you can expect

  • Notice of Privacy Practices explaining permissible uses/disclosures, your rights, and how to request restrictions or access your records.
  • Business Associate Agreements with vendors who help process applications or verify eligibility, ensuring they safeguard information.
  • No marketing or fundraising use of application details without proper authorization; only limited data may be used for fundraising under HIPAA.
  • Safeguards such as role-based access, audit logging, and secure transmission when handling income documents and medical details.

Public Availability and Communication of Financial Assistance Policies

Making policies easy to find and understand

Hospitals must widely publicize the Financial Assistance Policy, application form, and a plain-language summary. Materials must be available without charge at key intake points and by mail upon request, and commonly provided in the emergency department and admissions areas.

Language access and outreach

Translated versions of the Financial Assistance Policy, application, and summary must be provided for Limited English Proficiency communities that meet regulatory thresholds (the lesser of 5% of the facility’s community or 1,000 individuals). Staff should offer oral notification about assistance options during registration and include clear FAP reminders on billing statements.

Together, HIPAA’s privacy rules and IRS Section 501(r) set a framework that protects your information while ensuring fair access to Medically Necessary Care Coverage. Understanding eligibility, application steps, and Billing and Collection Restrictions helps you navigate assistance confidently and avoid preventable debt.

FAQs

How does HIPAA protect patient information during charity care applications?

Hospitals may use your information for payment and healthcare operations to decide charity care, but they must apply the minimum necessary standard, limit access to authorized staff, and secure records. You receive a Notice of Privacy Practices describing allowed uses, your rights, and how to file concerns. Vendors that assist must sign Business Associate Agreements and follow equivalent safeguards.

What are the eligibility criteria for hospital charity care programs?

Criteria are set in each hospital’s Financial Assistance Policy and usually tie to the Federal Poverty Guidelines, adjusted for family size. Many offer full discounts below a set threshold and partial discounts above it, consider residency and insurance status, and include a medically indigent option when bills are catastrophically high relative to income. Coverage typically focuses on emergency and medically necessary services.

Are hospitals required to inform patients about their financial assistance policies?

Yes. Nonprofit hospitals must widely publicize their Financial Assistance Policy, application, and a plain-language summary, display notices in key areas, include reminders on bills, and make documents available by mail and online. They must also provide translations for qualifying language groups and offer oral assistance during registration and billing interactions.

Can hospitals exclude elective procedures from charity care coverage?

Yes. Most policies limit assistance to emergency and Medically Necessary Care Coverage as defined clinically, and they may exclude elective or cosmetic procedures that are not medically necessary. The exact inclusions and exclusions must be spelled out in the hospital’s Financial Assistance Policy so you know what services qualify for discounts.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Related Articles