The CFPB’s amended Regulation B should prompt hospitals to inventory the credit decisions already embedded throughout their patient payment workflows.
By Ray Freedenberg, CEO, ClearBalance Healthcare
For years, hospitals have viewed patient payment plans as billing accommodations rather than consumer credit. Yet every time a hospital determines whether a patient receives a payment plan, how long repayment will be allowed, whether a down payment is required, or which pay-over-time options are presented, it may be participating in a credit decision under federal law.
The challenge is that these decisions rarely exist within a single policy or department. No one intentionally designed a lending operation; it emerged incrementally as hospitals modernized the patient financial experience, with decisions embedded across technology, patient financial services, financial counseling, and third-party vendor workflows that evolved independently over many years. As a result, few organizations have stepped back to evaluate whether those individual decisions, taken together, add up to a regulated credit decisioning framework.
That question is not new. Under the Equal Credit Opportunity Act (ECOA) and Regulation B, credit is the right to defer payment of a debt, and a creditor includes any party that regularly participates in decisions about whether credit is extended or on what terms. A hospital offering a structured payment plan may be extending consumer credit, particularly where repayment is documented over multiple installments or otherwise falls outside the incidental credit exemption. Whether a particular plan or workflow falls within Regulation B ultimately depends on its specific structure and applicable legal exceptions. That uncertainty is precisely why hospitals should inventory these practices now rather than assume consumer finance laws do not apply.
What is new is the attention. On April 22, 2026, the Consumer Financial Protection Bureau (CFPB) published a final rule amending Regulation B, effective July 21, 2026. While the amendments do not fundamentally change who is a creditor or what constitutes credit, they provide a timely reason for hospitals to examine whether existing payment plan practices already carry fair lending obligations. Many health systems may discover that credit decisions are being made in far more places than they expected.
What the New Rule Actually Changed
The amendment makes three principal changes. It provides that ECOA does not authorize disparate impact liability, removing the effects test from Regulation B. It narrows the prohibition on discouragement to oral or written statements that express an intent to discriminate. And it tightens the requirements for special purpose credit programs.
Some have read the rule as deregulation. Healthcare leaders should read it more carefully, for three reasons.
First, the rule did not change who qualifies as a creditor or what counts as credit. If your payment plan workflows made you a creditor before the amendment, they still do.
Second, the rule did not eliminate the procedural obligations that most hospitals have never operationalized. Regulation B’s core prohibition on discrimination applies to every extension of credit, and its notification, consistency, and recordkeeping requirements apply broadly. Many hospitals assume their payment plans fall under the incidental credit exemption. That exemption is partial, it never excuses the discrimination prohibition, and it is generally lost when a plan is payable by agreement in more than four installments.
Third, the rule should not be viewed as a relaxation of compliance expectations. Hospitals still need to ensure that payment decisions are consistent, explainable, and fair. State consumer protection laws remain in force, and state attorneys general continue to scrutinize medical debt and hospital payment practices. Beyond legal risk, hospitals face something equally important: public trust. If a health system cannot explain why one patient received favorable payment terms while another did not, the reputational consequences may begin long before a regulator reaches a conclusion.
Where Hospitals Are Making Credit Decisions Today
The modern revenue cycle is dense with decision points that influence credit outcomes. Every day, hospitals and their vendors determine:
- whether a patient is offered a payment plan at all,
- how long repayment is allowed and whether a down payment is required,
- whether long term financing is presented or suppressed,
- whether financial assistance is offered first, and
- whether an account is routed directly toward collections.
These decisions occur inside EHR workflows, digital engagement platforms, payment optimization tools, call centers, and financial counseling. Under Regulation B, the issue is not who performs the work or what department owns it. The issue is whether the activity amounts to credit decisioning, and increasingly, it may.
Why Propensity Scoring and AI Raise the Stakes
The industry has rapidly adopted tools marketed as personalized financial engagement: propensity to pay scoring, behavioral segmentation, dynamic payment plan structures, and AI driven payment recommendations. These tools are explicitly designed to give different patients different financial options based on predicted behavior. To the extent those options determine whether credit is extended or on what terms, the tools may constitute participation in credit decisioning under Regulation B.
Consider the practical picture. One patient is shown thirty-six months, another is offered only a short-term arrangement, and a third is routed to collections, and the difference is driven by an opaque scoring model. The organization has built an underwriting function it may not be able to explain. If regulators, an attorney general, or a plaintiff’s counsel asked tomorrow how those outcomes were determined, most hospitals could not answer. Neither could many of their vendors.
Differential outcomes also raise the adverse action question. If a patient is denied a payment plan or offered materially worse terms because of a score, Regulation B’s notice requirements may be triggered. Most hospitals have never evaluated whether they are required to send adverse action notices, let alone built the workflow to do it.
Five Areas Every Hospital Should Evaluate
A governance review should start with these five areas.
1. Payment plan policies. Are plans offered consistently under written criteria, or do representatives negotiate different terms for similarly situated patients?
2. Technology workflows. Do EHR systems, engagement platforms, or optimization tools determine which patients see which financing options? Can anyone in your organization explain the logic?
3. Predictive models. Are propensity to pay scores or behavioral analytics influencing eligibility, terms, affordability options, or collections routing?
4. Vendor oversight. Hospitals generally remain responsible for financial policies executed by vendors acting on their behalf. If asked, could your team explain how a vendor decides which options a patient receives?
5. Adverse action. If patients receive different credit outcomes, when are notices required, and who sends them today? For most organizations the honest answer is no one.
A Governance Question Many Hospitals Have Not Asked
Perhaps the most important question is not whether credit decisions are occurring, but whether anyone in the organization owns them. In many health systems, revenue cycle, compliance, legal, patient financial services, and technology teams each manage part of the process without a single accountable owner. Payment plan policies may be set in one department, technology workflows configured in another, and vendor relationships managed somewhere else entirely.
Demonstrating Regulation B compliance is difficult without that owner. When regulators, auditors, attorneys general, or plaintiffs’ counsel ask how credit decisions are made, hospitals will need someone who can explain the policies, controls, technology, and oversight governing those decisions. In many organizations, that accountability does not exist today.
What a More Defensible Model Looks Like
Once a hospital maps where credit decisions occur, it can decide whether each is worth defending. Many hospitals have inadvertently built underwriting functions inside the revenue cycle without the governance structures, compliance resources, or regulatory expertise typically associated with consumer lending. For many, the simplest answer will not be building more sophisticated decisioning processes, but reducing the amount of decisioning they perform in the first place.
Where financing is appropriate, partnering with a specialized provider that offers broadly available, standardized patient financing can reduce operational complexity, improve consistency, and limit the need for hospitals to defend individualized credit determinations.
A New Responsibility for Revenue Cycle Leaders
Healthcare has invested heavily in automation, personalization, and AI across the patient financial experience. Those investments create real value. They also require leaders to recognize when billing operations may have crossed into regulated credit activity, because in many health systems they already have.
Every hospital should be able to answer five questions: Where are we making credit decisions today? Who or what makes them? Can we explain them? Are patients treated consistently? And have we evaluated whether Regulation B applies to each workflow?
Revenue cycle leaders have spent years modernizing the patient financial experience. The next phase of that modernization is governance. Whether or not a hospital concludes Regulation B applies to every payment workflow, it should understand where credit decisions occur, who owns them, and whether they can be explained and defended consistently. Those are governance questions that extend well beyond this rulemaking.
Ray Freedenberg is CEO of ClearBalance Healthcare, which partners with hospitals and health systems to provide zero percent interest patient financing and payment engagement solutions designed for consistency, broad access, and fair lending defensibility.
