Medical Billing Regulations by State: The 2026 Complete Guide
Medical billing runs on federal rails and state rules. The CPT codes are national; almost everything that decides whether a claim gets paid — the Medicaid filing deadline, the prompt-pay clock, the managed care structure, the enrollment portal — is set state by state, and the differences are enormous. This guide maps all of it: every state's filing window, the prompt-pay laws with real teeth, the program structures that exist nowhere else, and links to our detailed billing guides for all 50 states. Every figure is checked against state Medicaid agencies and statutes — including one case where the official manual contradicts what most published lists claim.
Why state rules are where the money leaks
The denial environment has never been harsher. Initial claim denial rates reached 11.8% in 2024, up from 10.2% a few years earlier, and 41% of providers now report denial rates above one in ten. Medicare Advantage denials alone jumped 4.8% in a single year. Each denied claim costs somewhere between $25 and $181 to rework — and the industry's ugliest number is that roughly 65% of denied claims are never resubmitted at all. That's not revenue delayed; it's revenue donated.
Timely filing denials are the purest form of this loss, because they're almost always final: miss New York Medicaid's 90-day window or Texas's 95-day statutory deadline and there is generally no appeal that resurrects the claim. And they're disproportionately a multi-state problem. A biller working claims for practices in three states to one internal deadline is either wasting margin in the generous states or losing claims outright in the strict ones — the spread between the shortest and longest state windows is a factor of four.
The same is true in reverse: state prompt-pay laws entitle providers to interest on late-paid claims — up to 18% annually in the strongest states — and the overwhelming majority of practices never calculate or invoice a cent of it. State rules cut both ways. Knowing them is how you stop the leaks on both sides.
The federal floor: 42 CFR §447.45
One federal regulation frames everything below it. Under 42 CFR §447.45, state Medicaid agencies may not require claims to be filed later than 12 months from the date of service — that's the ceiling — and must pay 90% of clean claims within 30 days and 99% within 90 days. Within that frame, states are free to set shorter filing windows, and most do: the working deadlines below range from 90 days to the full federal maximum.
Two more layers sit on top. Managed care organizations — which now process the majority of Medicaid claims nationally — set their own filing limits in provider manuals, frequently 90–180 days regardless of the state window. And exception pathways (retroactive eligibility, state system errors, disaster declarations) exist everywhere but demand documentation; they're a safety net, never a strategy.
Medicaid timely filing limits: all 50 states
Windows below are for original fee-for-service claims from the date of service, per state agency policy. Where a state runs entirely through managed care, or where only secondary published sources exist, the entry says so. For members in MCOs, the plan manual controls — always. Click any state for its full billing guide; our interactive timely filing tool covers commercial payers too.
| State | FFS filing window | Notes |
|---|---|---|
| Alabama | 12 months | Pure FFS — no MCOs; one state rulebook |
| Alaska | 12 months | Pure FFS; tribal/IHS coordination layer |
| Arizona | 6 months (initial) | Clean-claim resolution within 12; AHCCCS plans control |
| Arkansas | 12 months | ARHOME expansion members bill commercial QHP rules |
| California | 6 months | Up to 12 with delay reason codes; Medi-Cal plans control |
| Colorado | 365 days | State-adjudicated under the RAE/ACC structure |
| Connecticut | 12 months | No MCOs since 2012 — self-insured ASO model |
| Delaware | Plan manuals control | Diamond State MCOs since 1996 carry nearly all members |
| Florida | 12 months | SMMC plan manuals control for most members |
| Georgia | 6 months | Georgia Families CMO manuals control |
| Hawaii | 12 months | QUEST Integration plan manuals control |
| Idaho | 365 days | Largely state-administered |
| Illinois | 180 days | HealthChoice MCO limits often shorter |
| Indiana | 180 days | Program-specific MCE manuals control |
| Iowa | 365 days | Iowa Health Link MCO manuals control |
| Kansas | 12 months (published) | KanCare all-MCO — plan manuals, commonly 180 days, control |
| Kentucky | 12 months | Six MCOs set shorter working limits |
| Louisiana | 12 months | Healthy Louisiana MCO manuals control |
| Maine | 120 days (published) | Unusually short for a no-MCO FFS state |
| Maryland | 12 months | HealthChoice MCO limits commonly 180 days |
| Massachusetts | 90 days | Among the shortest in the nation — file fast |
| Michigan | 12 months | Health plan limits vary 90 days–12 months |
| Minnesota | 12 months | PMAP plan manuals control |
| Mississippi | 365 days (published) | MississippiCAN plan manuals control |
| Missouri | 12 months | ABD members largely FFS; families in MCOs |
| Montana | 365 days | State-administered; no MCOs |
| Nebraska | 6 months (published) | Heritage Health MCO manuals control |
| Nevada | 180 days | MCOs in urban counties; FFS in rural |
| New Hampshire | 365 days (published) | MCM plan manuals control |
| New Jersey | 180 days | Exceptions may extend to 12 months |
| New Mexico | 90 days | Among the shortest anywhere; Turquoise Care MCOs |
| New York | 90 days | Delay reason codes required for late claims |
| North Carolina | 365 days | Standard Plan manuals commonly 180 days |
| North Dakota | 180 days | Per the official manual — not the 365 aggregators publish |
| Ohio | 365 days | Next Generation plan agreements may differ |
| Oklahoma | 6 months | SoonerSelect plan manuals control since 2024 |
| Oregon | 12 months | CCO manuals control for nearly all members |
| Pennsylvania | 180 days | HealthChoices MCO limits commonly 180 days |
| Rhode Island | 12 months (published) | Short TPL clocks after primary EOBs |
| South Carolina | 12 months | Healthy Connections MCO manuals control |
| South Dakota | 6 months (published) | Pure FFS — no MCOs |
| Tennessee | 120 days (MCO standard) | No FFS lane — TennCare MCO manuals are the law |
| Texas | 95 days | Statutory — among the shortest in the US |
| Utah | 12 months | ACO plan manuals control on the Wasatch Front |
| Vermont | 365 days | Pure FFS — no MCOs |
| Virginia | 12 months | Cardinal Care MCO limits commonly shorter |
| Washington | 365 days | Apple Health plan manuals control |
| West Virginia | 365 days (published) | Mountain Health Trust MCO manuals control |
| Wisconsin | 365 days | BadgerCare Plus HMO limits vary by region |
| Wyoming | 365 days | Pure FFS — no MCOs |
"(published)" marks figures where only secondary sources are broadly available — verify against your provider manual. Managed care plan limits override the state window for enrolled members.
The North Dakota lesson: why primary sources matter
Nearly every published state-by-state filing list on the internet gives North Dakota 365 days. The state's own billing manual says otherwise: ND Medicaid must receive original primary claims within 180 days of the date of service, with the 365-day figure applying only to defined secondary, tertiary and retroactive-eligibility situations — and timeliness is measured by the date the state receives the claim, not the postmark. A biller trusting the aggregator tables loses six months of North Dakota claims without ever knowing why.
It's the clearest example of a general rule: secondary lists drift, provider manuals govern. The same pattern shows up in California's delay-reason-code system, Arizona's 6-month-initial-versus-12-month-resolution split, and Rhode Island's short third-party-liability clocks hiding behind a 12-month headline number. Our state guides are built from agency manuals and statutes, and flagged wherever only secondary sources exist.
How states structure Medicaid — and why it changes your billing
The filing window tells you when; the program structure tells you who you're actually billing. Four families of structure exist, and they demand different operational disciplines.
Pure fee-for-service: one state rulebook
Eight states run Medicaid with no MCOs at all — Alaska, Alabama, Connecticut, Maine, Montana, South Dakota, Vermont and Wyoming. Claims bill directly to the state under one manual. The trade: no plan-lottery variance, but a single policy bulletin changes every claim statewide at once. Connecticut is the standout — it dropped its MCOs in 2012 and moved to a self-insured ASO model, the only state to reverse course, and its per-claim administrative simplicity is the quiet argument for the model.
Full managed care: the plan manual is the law
At the other pole, states like Tennessee (TennCare — the first fully managed-care Medicaid, 1994), Arizona (AHCCCS — statewide managed care since 1982, the nation's oldest), Kansas (KanCare, 2013) and Delaware (Diamond State, 1996) have no meaningful FFS lane. Every rule that matters — filing, auth, appeals — lives in MCO manuals, and the number of manuals ranges from two (Delaware) to six (Kentucky, the most fragmented lineup in the country). The discipline is per-plan calendaring: each MCO is its own payer with its own clocks.
Hybrids: geography and category decide
Nevada runs MCOs in its two urban counties and FFS everywhere else — the member's county picks the rulebook. Missouri splits by category: families and expansion adults in MCOs, aged/blind/disabled members largely FFS. Oklahoma moved most members into SoonerSelect plans in April 2024 after decades of FFS, with populations retained on the state side. In hybrid states, the first question on every claim is which world does this member live in — and the answer changes with an address, a birthday or an eligibility category.
Structures that exist nowhere else
Five states run models with no analog: Oregon's CCOs hold regional global budgets and coverage follows the ranked Prioritized List of condition-treatment pairs; Maryland's HSCRC sets all-payer hospital rates every insurer pays alike; Arkansas's private option buys expansion adults commercial marketplace plans; Vermont ran the all-payer ACO decade and is transitioning toward federal AHEAD hospital budgets; and Colorado's RAEs coordinate care regionally while claims stay state-adjudicated. Each one breaks assumptions billers import from other states — which is precisely why generic national billing playbooks underperform.
Prompt-pay laws: the deadlines payers owe you
Filing deadlines run one way; prompt-pay statutes run the other. Nearly every state puts a statutory clock on insurers to pay clean claims, with interest or penalties when they miss — and because so few practices track payer turnaround against the statute, this is the most under-collected money in medical billing. The strongest verified regimes:
| State | Clean-claim deadline | Late-payment consequence |
|---|---|---|
| Georgia | 15 working days | Interest; active Insurance Commissioner enforcement |
| Texas | 30 electronic / 45 paper | Escalating penalties up to 18% annual interest |
| North Carolina | 30 days | 18% annual interest — among the nation's highest |
| New York | 45 days (30 electronic) | 12% annual interest (Ins. Law §3224-a) |
| Wisconsin | 30 days | 12% annual interest (§628.46) — the cleanest statute in the country |
| Michigan | 45 days | 12% annual interest (MCL 500.2006) |
| New Jersey | 30 electronic / 40 paper | 12% annual interest (HINT Act) |
| Pennsylvania | 45 days | 10% annual interest (Act 68) |
| Illinois | 30 days | 9% annual interest (215 ILCS 5/368a) |
| Washington | 95% in 30 / 95% of all in 60 | Interest; active OIC enforcement (WAC 284-170-431) |
| Maryland & Kentucky | 30 days | Escalating interest that grows with the delay |
| Ohio, Minnesota, Colorado, Indiana | 30 days (30/45 e/paper in CO & IN) | Interest with state-regulator complaint routes |
The operational point: prompt-pay interest is only collectible if you can prove the clock. Electronic submission timestamps make the proof automatic — which means the money is sitting in your clearinghouse data. Track payer aging against your state's statute, invoice the interest, and escalate chronic offenders to the insurance regulator; the states with real enforcement histories (Georgia, Washington, Pennsylvania) respond to documented complaints. Self-funded ERISA plans are the exception — they follow federal rules, not state prompt-pay law, which is why knowing a plan's funding status matters before choosing the fight.
Enrollment portals: 50 states, 50 systems
Before a single claim pays, the provider has to exist in the state's system — and every state built its own. Texas enrolls through PEMS (via TMHP), California through PAVE, New York through eMedNY, Pennsylvania through PROMISe, Ohio through PNM, Illinois through IMPACT, Georgia through GAMMIS, North Carolina through NCTracks, Michigan through CHAMPS, Washington through ProviderOne, Arizona through APEP, Missouri through eMOMED, Maryland through ePREP, Wisconsin through the ForwardHealth Portal and Utah through PRISM — each with its own application logic, document demands and revalidation cycles.
Two portal rules generalize. First, sequencing: most MCO states won't finalize a provider's network participation until state enrollment is active — Illinois's IMPACT-before-MCO rule is the classic onboarding stall, idling new providers for months when run in the wrong order. Second, revalidation stakes scale with centralization: in Ohio, where PNM feeds credentialing for all seven Next Generation plans, one lapsed revalidation knocks a provider out of every plan simultaneously. Portal upkeep isn't paperwork; it's network status. Our credentialing service runs these portals across all 50 states, and our calculator estimates realistic timelines by payer.
Expansion, non-expansion, and the 2026 work-requirement wave
Forty states plus DC have expanded Medicaid; ten have not — Alabama, Florida, Georgia (partial, via Pathways), Kansas, Mississippi, South Carolina, Tennessee, Texas, Wisconsin and Wyoming. The billing consequence is structural: non-expansion practices carry the coverage gap as self-pay volume, making point-of-service collections, category screening and retroactive-eligibility capture core revenue infrastructure rather than afterthoughts. Late expanders — Missouri (Oct 2021), South Dakota (Jul 2023), North Carolina (Dec 2023) — still hold under-captured coverage in practices that never re-screened their self-pay panels.
The 2026 story is work requirements. Under the 2025 federal budget law, expansion adults must document 80 hours a month of qualifying activity to keep coverage, phasing in state by state — Nebraska first (from May 2026), Montana close behind (July 2026), with the CBO projecting millions could lose coverage nationally as the rules roll out. For practices, this is redetermination churn at a new scale: members documenting, lapsing, re-qualifying. The countermeasures are procedural — verify eligibility at every visit rather than annually, re-screen lapsed members quickly, and capture retroactive windows when coverage is restored. The revenue difference between practices that do this and practices that don't will be one of the defining billing gaps of 2026–2027.
Surprise billing: state laws under the federal umbrella
The federal No Surprises Act set a national floor for out-of-network emergency and facility-based billing — but several states built their own regimes first, and those still govern many state-regulated claims. New York's 2015 surprise-bill law and New Jersey's 2018 arbitration act both predate the NSA with their own dispute processes; California's AB 72 set a payment standard for out-of-network care at in-network facilities back in 2017. The practical question on every out-of-network dispute is jurisdiction: state-regulated plans generally route through the state process where one exists, self-funded ERISA plans through the federal IDR — and the two paths carry different deadlines, different payment standards and different win rates. Choosing the wrong one wastes the dispute.
The multi-state playbook
Everything above compresses into five operating rules for any practice or group billing across state lines:
1. Set submission cycles to the shortest clock in your mix. If any of your payers runs a 90-day window, run the whole shop at same-week submission — the generous states don't reward slowness, and the strict ones punish it permanently.
2. Bill the plan manual, not the state headline. For managed care members — most of American Medicaid — the MCO manual is the controlling document. State windows are backstops.
3. Verify eligibility at the visit level, everywhere. Redetermination churn, work-requirement documentation, snowbird seasons, hybrid-state category shifts — every 2026 trend increases the odds that last month's coverage is gone.
4. Collect the interest you're owed. Prompt-pay statutes turn payer delay into provider revenue — but only for practices that timestamp submissions, track aging against the statute and actually invoice it.
5. Trust manuals over lists. North Dakota's 180 days is on the internet as 365 in a dozen places. Primary sources are the only sources.
Or skip the spreadsheet entirely: this is what we do. ImmediCare Solutions bills for practices in all 50 states from our Philadelphia base, to each state's actual rulebook — start with a free billing audit benchmarked against your state's rules, or find your state's full guide below.
State-by-state billing guides
Billing to 50 rulebooks so you don't have to
Free audit of your denials, aging and payer mix — benchmarked against your state's filing windows and prompt-pay rights.
Get my free audit