Patient Overpayments in Florida: Why Sitting on Credits Is No Longer an Option

By: Nailah Morris

It starts with a number that looks too small to matter.

A patient pays at check-in. The claim goes out. Two weeks later, the insurer processes the EOB. Your system posts the payment. And now the account shows a credit balance: $18.42. Nobody panics. Nobody calls compliance. Nobody rushes to refund $18.42. It just sits there. Because in most organizations, patient credits live in the same place as “we will get to it after month-end” and “the vendor is working the queue.” They are treated like a back-office nuisance, not a regulatory risk.

Florida just changed that.

Effective January 1, 2026, Florida law (CS/CS/SB 1808) makes one thing painfully clear: sitting on patient overpayments is no longer an option. Once an overpayment is determined, you have 30 days to refund it, whether the delay is intentional, accidental, or caused by someone you hired. The simple truth: a credit balance is not neutral. It is a clock.

What the New Law Requires (In Plain Terms)

If you are licensed in Florida under:

• Chapter 456, Florida Statutes (Department of Health regulated practitioners), or
• Chapter 408 (AHCA-licensed providers),

The rule is straightforward:

• Determine whether an overpayment occurred.
• Refund it within 30 days of that determination.

Here is where most compliance problems will be born:

• The trigger is not when the overpayment happened.
• The trigger is when you knew or should have known it existed.

That “should have known” language is where the risk lives, because regulators do not audit feelings. They audit systems, timestamps, reports, and notes. If your records show the credit was visible, the question becomes simple: why did it sit?

Who Is Covered (and Who Is Not)

This statute is narrow, but it targets a very common situation.

Covered: the “patient paid up front, insurer paid later” scenario

The 30-day refund requirement applies when:

• A patient overpaid for services, and
• The provider submitted a claim for those services to:

• • a private insurer or HMO, or
  • a government program (Medicare, Medicaid, TRICARE, etc.)

Think about the everyday workflow:

• Patient pays a copay, deductible, or coinsurance at the front desk.
• Insurance processes the claim later.
• The final payment reveals the patient paid too much.
• A credit balance appears.

That is the scenario Florida is addressing.

Not covered: self-pay and insurer overpayments

The law does not apply to:

• Self-pay/cash-pay patients.
• Services not billed to an insurer or government program.
• Overpayments made by insurers (those are governed by existing insurance statutes).

So this is not “every credit balance everywhere.” It is a targeted rule aimed at insured/government-billed claims where patient money is involved.

Enforcement Risk: Florida Added Teeth

Refunds are not new. What is new is the state’s willingness to treat delay as a compliance failure, not a clerical inconvenience.

If you are AHCA-licensed:

AHCA may impose administrative fines up to $500 per violation. And under existing enforcement concepts, each day the refund remains unpaid can be treated as a separate violation. That is how small credits become big problems: not because the amount is large, but because the days stack.

If you are DOH-licensed:

For physicians and other DOH-regulated professionals, failure to refund in a timely manner is grounds for discipline, including:

• Fines.
• Probation or restrictions.
• In serious cases, suspension or revocation of licensure.

The uncomfortable part: even if billing is outsourced, the license is not. Simple truth: you can delegate the work, but you cannot delegate the accountability.

The Gray Area That Will Get People Hurt: When Is an Overpayment “Determined”?

The statute does not define determination with a neat, compliance-friendly timestamp. That ambiguity is not a loophole. It is a trap. In the real world, “determination” will be inferred from evidence such as:

• Account reconciliation dates.
• Payment posting entries.
• System-generated alerts or credit balance reports.
• Internal compliance reviews.
• Documentation created by third-party billing vendors.

Here is how this goes sideways in practice:

Scenario 1 | The report exists, but nobody owns it: Your system generates a weekly credit balance report. It lands in a folder. No one reviews it for two weeks. The credits are “there,” but not “worked.” Regulators will not care that it was inconvenient. They will care that it was visible.

Scenario 2 | The EOB posts, and the clock starts quietly: Payment posting happens on Tuesday. Credit appears on Wednesday. Your team “determines” overpayments during the month-end close. Regulators may argue your system determined it the moment the credit was posted or flagged.

Scenario 3 | The vendor knew first: Your billing company flags the credit, adds a note, and puts it in a queue. You do not see it until later. The record still exists. And the license still has your name on it. Providers should assume regulators will look at records, timestamps, and system notes, not intent. If a system flags a credit balance and nothing happens, that record may become the start of the 30-day clock.

This is especially important if you use:

• Third-party billing companies
• Centralized revenue cycle platforms
• Automated posting systems

Automation is not protection. It is documentation.

Why Management Companies and Billing Entities Matter More Than Ever

The statute expressly extends the refund obligation to billing departments, management companies, and group practices that accept patient payments on behalf of licensed providers. That sounds operational. It is actually governance. Because many providers are employed by or contract with large entities where they do not control refund workflows day-to-day. Yet the treating provider remains exposed.

Expect regulators to test one question:

“How do you supervise and monitor the people handling patient money under your license?”

If the answer is “I assumed the vendor handled it,” you are not describing a control. You are describing a hope.

Practical Compliance Takeaways (What to Do This Week, Not “Someday”)

This law is less about refunds and more about process discipline. If you want to reduce risk, stop treating credits as accounting leftovers and start treating them like regulated events. Here is a practical starting list:

1. Define “determination” internally—on purpose: Pick a clear operational trigger (e.g., posting date, credit report generation date, reconciliation completion date) and document it. Ambiguity is where enforcement grows.
2. Create a credit-balance workflow with owners and timestamps: Every credit should move through a queue: identified → validated → approved → refunded → documented.
3. Build a 30-day tracker that cannot be ignored: If you cannot see aging, you cannot manage risk. Track credit date, “determination” date, refund due date, and completion date.
4. Update vendor agreements to match the law: Add timeliness obligations, documentation requirements, escalation rules, and audit rights. Vendor delay should be a contract problem, not your compliance problem.
5. Train billing staff on escalation and documentation: If a refund is delayed, the file should show why, who approved the delay, and what steps were taken. Silence reads like neglect.
6. Update patient financial policies and scripts: Your written policies should reflect refund timelines so front desk, billing, and leadership all communicate the same expectation.

Being “too busy” or “waiting for the system to catch up” will not be a defense. It will be a record.

The Bottom Line

Florida closed a long-standing gap in patient financial protections. Beginning January 1, 2026, patient overpayments are no longer passive credits. They are time-sensitive compliance obligations. Providers who treat refunds as an afterthought risk fines, disciplinary scrutiny, and reputational harm. Providers who tighten their processes now will not only reduce regulatory exposure, they will also demonstrate transparency and accountability to patients in an era where both matter more than ever.

Simple truth to end where we started: the credit balance is not “extra work.” It is a compliance clock you can either manage or explain later.

***************************************************

It should be noted that I am not your lawyer (unless you have presently retained my services through a retainer agreement). This post is not intended as legal advice; it is purely educational and informational, and no attorney-client relationship shall result after reading it. Please consult your own attorney for legal advice. If you do not have one and would like to retain my legal services, please get in touch with me using the contact information listed above.

All information and references to laws, rules, regulations, and advisory opinions were accurate as of this time, but laws are constantly evolving. Please get in touch with me to ensure that the law governing your business is up to date. Thank you.