Medical debt is different from every other kind of consumer debt, both in how it happens and in the legal protections attached to it. Nobody chooses to get sick or injured, and a lot of medical billing is confusing, delayed, or simply wrong — insurance companies deny claims months later, bills get sent to the wrong address, and the "debt" you are being harassed over is sometimes not even a real balance owed. On top of the standard FDCPA protections that apply to any debt collector, medical debt now has an extra, newer layer of protection specifically around your credit report.
The FDCPA still applies in full — with one catch
If a collection agency (not the hospital or doctor's office itself) is contacting you about medical debt, every standard FDCPA protection applies: no calls before 8 AM or after 9 PM, no threats of arrest, no contacting your family or employer about it, and full debt validation rights. The catch is that if the original healthcare provider is collecting the bill directly — not yet sold or assigned to a separate agency — the FDCPA does not apply to them, since they are the original creditor, not a third-party collector. The moment your bill gets sent to collections, that changes completely.
The 2024 CFPB rule that changed everything
In 2024, the Consumer Financial Protection Bureau finalized a rule that fundamentally changed how medical debt can appear on your credit report. Medical debt under $500 is now categorically exempt from credit reporting — it cannot legally appear on your credit report at all, regardless of collector. Larger medical debts are also being phased out of credit reporting more broadly as the rule rolls out. If you see medical debt on your credit report right now, especially anything under $500, it may already be illegal for it to be there.
How this interacts with the FCRA
The Fair Credit Reporting Act, 15 U.S.C. § 1681i, gives you the separate, independent right to dispute inaccurate information on your credit report directly with the credit bureau — Equifax, Experian, or TransUnion — regardless of what the FDCPA does or does not cover. This matters because even medical debt collected by the original provider (outside FDCPA territory) is still subject to FCRA accuracy rules if it ends up on your credit report. A dispute citing both the 2024 CFPB rule and FCRA § 1681i is the strongest combination for getting an ineligible medical debt entry removed.
What a proper medical debt dispute letter actually demands
An effective dispute cites the specific medical provider or collector name, the date of service if known, and explicitly invokes both the CFPB's 2024 rule and FCRA § 1681i as separate legal grounds for removal — not just one or the other. It should also note if you believe there is a HIPAA privacy concern, since any disclosure of medical information to a credit bureau is technically subject to health privacy law as well. Credit bureaus have 30 days to investigate; if they cannot verify the debt is both accurate and still eligible for reporting under the new rules, it must come off.
What to do if a collector is calling about medical debt right now
First, figure out who is actually calling you — the provider directly, or a separate collection agency. If it is a separate agency, you have full FDCPA rights and can send a cease and desist or debt validation letter immediately. Either way, if the debt is under $500, or if it is already showing up incorrectly on your credit report, a credit bureau dispute citing the 2024 rules is likely your fastest path to getting it removed, regardless of who is calling you about it.