By the VerifyDoc team
Always ask for the itemized statement — never pay or dispute a hospital bill based on a summary statement alone.
This post explains exactly what each document is, what federal law says about your right to obtain them, and how to use the itemized statement to catch the most common billing errors before you pay a single dollar. It also shows you a worked example of what line items to look for and a decision tree for what to do once you have the document in hand.
1. What each document actually is
When a hospital sends you a bill, it typically arrives in one of two formats. A summary statement (sometimes called a patient statement or account summary) groups charges into broad department buckets: "Room & Board," "Pharmacy," "Lab," "Radiology," and so on, each with a single dollar total. It tells you what you owe. It does not tell you what you were charged for.
An itemized statement (also called an itemized bill or itemized receipt) breaks every single charge into its own line: a specific procedure code, a description of the service, the date it was performed, the number of units, and the price per unit. Each line on an itemized statement includes a billing code, a short text description, the date the service was performed, and the dollar amount charged. The codes fall into a few categories you'll see repeatedly:
- CPT codes — Current Procedural Terminology (CPT) codes identify the specific medical service a provider performed.
- HCPCS Level II codes — Healthcare Common Procedure Coding System (HCPCS) Level II codes cover products and supplies not captured by CPT codes, such as durable medical equipment, ambulance services, and certain drugs.
- ICD-10 codes — International Classification of Diseases (ICD) codes link each service to a diagnosis, which is how insurers verify that a treatment was medically necessary.
- Revenue codes — Hospital bills also include Revenue Codes, which identify where in the facility a service took place, such as the emergency department or operating room.
If you only have the summary statement, you cannot verify a single one of those line items. That is why the summary is fine for writing a check — and nearly useless for catching errors.
2. Your federal right to obtain an itemized statement
There is no single federal law that requires every hospital to automatically hand every patient an itemized bill. Instead, transparency requirements often depend on whether you have insurance and which state you are in. But federal law gives you two powerful tools to get one on demand.
HIPAA Privacy Rule — 45 CFR § 164.524. Under 45 CFR § 164.524, you have the right to inspect and obtain a copy of your protected health information (PHI) maintained by a covered entity in a designated record set. This typically includes medical and billing records, enrollment and payment information, and other records a provider or health plan uses to make decisions about you. The covered entity must act on a request for access no later than 30 days after receipt of the request. If they cannot meet that deadline, the covered entity may extend the time for such actions by no more than 30 days, provided that it provides the individual with a written statement of the reasons for the delay and the date by which the covered entity will complete its action; and the covered entity may have only one such extension of time for action on a request for access. On fees: the HIPAA Privacy Rule at 45 CFR § 164.524(c)(4) permits a covered entity to charge a reasonable, cost-based fee that covers only certain limited labor, supply, and postage costs. They cannot charge you for searching, retrieving, or reviewing records, and they cannot charge administrative overhead.
No Surprises Act — 45 CFR § 149.610. The No Surprises Act requires healthcare providers to give uninsured or self-pay patients a good faith estimate of medical costs. This estimate is generally required if care is scheduled at least three business days in advance or if the patient specifically asks for it. The estimate must be in writing (paper or electronic, your choice) and should include the expected charges for your scheduled service. Critically, if your actual bill exceeds the good faith estimate by more than $400, you have the right to use the federal Patient-Provider Dispute Resolution process. The good faith estimate requirement is codified at 45 CFR § 149.610, which also covers the patient-provider dispute resolution (SDR) process for disputes about the estimate.
State law. Most states have additional statutes requiring itemized bills, often with shorter timelines than federal law. Some states — including California, New York, and Texas — have specific patient billing rights statutes that go further than federal requirements. Check your state's patient bill of rights for specifics.
3. Why the itemized statement is the only document that catches errors
HHS OIG routinely audits hospital Medicare billing and consistently finds billing errors. In one recent 2026 HHS OIG audit, the hospital complied with Medicare billing requirements for 74 of 100 inpatient and outpatient claims reviewed; however, the hospital did not fully comply with Medicare billing requirements for the remaining 26 claims, resulting in net overpayments. That is a 26% non-compliance rate in a single targeted audit. In a broader 2026 HHS OIG report on Sarasota Memorial Hospital, OIG recommended the hospital refund to the federal government $12.1 million in estimated net overpayments.
HHS OIG has also documented systemic patterns suggesting hospitals inflate severity codes. HHS OIG stated that hospitals billing Medicare for inpatient stays at the highest severity codes increased by 20% from fiscal years 2014 through 2019. Simultaneously, the average length of hospital stays at the highest severity level decreased — a pattern HHS OIG said is strongly indicative of upcoding. If you only hold a summary statement showing a single DRG-level charge, you cannot detect this. If you hold an itemized statement, you can cross-check the procedure codes against your actual medical records. You can learn more about this pattern in our post on what upcoding is and how hospitals inflate your bill.
A summary statement that says "Pharmacy: $4,200" tells you nothing actionable. An itemized bill listing 40 separate drug entries — with NDC codes, units, and per-unit prices — gives you something you can actually check. The same logic applies to duplicate charges, charges for services you don't remember receiving (phantom charges), and unbundled lab panels. For a deeper look at phantom charges specifically, see our guide on phantom charges on your hospital bill and how to dispute them.
4. Worked example: what to look for on an itemized statement (illustrative)
The following is an illustrative example only. Patient names, dates, and charge amounts are fictional and are used solely to demonstrate how to read a real itemized statement.
Suppose you receive a summary statement after a two-night hospital stay that shows:
- Room & Board: $8,400
- Pharmacy: $3,100
- Lab: $950
- Total billed: $12,450
That summary is useless for error detection. You request the itemized statement and find the following:
| Line | Code | Description | Date | Units | Charge | Flag |
|---|---|---|---|---|---|---|
| 1 | 99223 | Initial hosp. care, high complexity | Day 1 | 1 | $420 | ✅ Cross-check complexity level vs. your records |
| 2 | 80053 | Comprehensive metabolic panel | Day 1 | 1 | $185 | ✅ OK if also no individual panel components listed |
| 3 | 80048 | Basic metabolic panel | Day 1 | 1 | $142 | ⚠️ Potential unbundling — 80048 is included in 80053 |
| 4 | J0696 | Ceftriaxone sodium injection, 250mg | Day 1 | 4 | $880 | ⚠️ Verify 4 units administered vs. your medication records |
| 5 | 99232 | Subsequent hosp. care, moderate | Day 2 | 2 | $560 | ⚠️ 2 units = billed twice — only 1 provider visit per day expected |
Lines 3, 4, and 5 in this illustrative example each represent a different error type: potential unbundling (see our detailed explainer on lab panel unbundling with CPT 80053 and 80048), a possible quantity overcount on a drug, and a duplicate daily visit charge. None of these are visible on the summary statement. All three are immediately visible on the itemized statement.
5. Decision tree: what to do once you have the itemized statement
6. How to actually request the itemized statement
Don't ask at the front desk and hope for the best. Put your request in writing. Most hospitals have a Patient Financial Services or Medical Records department — either can fulfill billing record requests. Under HIPAA, the covered entity must permit an individual to request access to obtain a copy of the protected health information maintained in a designated record set. The covered entity may require individuals to make requests for access in writing, provided that it informs individuals of such a requirement.
Your written request should include: your full name, date of birth, account number (from any statement you've received), date(s) of service, and a specific request for the itemized statement — not just the bill or the summary statement. State explicitly that you are requesting this under 45 CFR § 164.524 and that you expect a response within 30 calendar days. On fees: the HIPAA Privacy Rule at 45 CFR § 164.524(c)(4) permits a covered entity to charge a reasonable, cost-based fee that covers only certain limited labor, supply, and postage costs. They cannot charge you a per-page flat fee for electronic records. For electronic copies of electronically maintained PHI, HHS guidance permits a maximum flat fee of $6.50, inclusive of all labor, supplies, and postage.
If the hospital refuses or fails to respond within 30 days, file a complaint with HHS Office for Civil Rights at hhs.gov/ocr. The right of access under 45 CFR § 164.524 is one of the most actively enforced provisions in HIPAA today, and OCR has made it the centerpiece of an ongoing enforcement initiative that has produced dozens of settlements since 2019. Citing this enforcement record — and the specific regulation — in your follow-up letter often resolves delays quickly.
Once you have the itemized statement, check it against your Explanation of Benefits (EOB) from your insurer. The EOB shows what your insurer was billed and what it allowed. If the itemized statement shows charges that don't appear on the EOB, that may indicate charges billed directly to you that bypassed your insurance — a pattern relevant to your rights under the No Surprises Act. You can read more about how an in-network hospital can still generate out-of-network charges in our post on in-network hospitals and out-of-network bills. For a side-by-side on Medicare Summary Notices versus commercial EOBs, see how to read each correctly in 2026.
7. What to do if you find an error
Write down every suspected error before you call anyone. For each one, note the line number, the code, the charge, and the specific reason you believe it is wrong (e.g., "CPT 99232 billed twice on the same date," or "I was never administered 4 units of Ceftriaxone — my discharge notes show 2 units"). A list keeps you from being talked out of a legitimate dispute in a fast-moving phone call.
Send a dispute letter to the hospital's billing department — certified mail or with a read receipt if sent electronically. Include your itemized statement with the disputed lines highlighted, and reference your medical records or discharge summary if the error involves a service you didn't receive. You may be able to dispute your bill if it's at least $400 more than any estimate you received. You can submit a complaint if you believe that your facility, provider, or insurer isn't following these rules. The federal complaint line for billing rights violations is 1-800-985-3059.
If your bill has already been sent to a collections agency, that does not eliminate your right to dispute the underlying charges. For the specific federal rules governing when hospitals can send bills to collections and what protections apply, see our post on when a hospital can send you to collections under 2026 CFPB rules. If you're uninsured and the balance is large, review your options under charity care before disputing individual line items — you may qualify for a write-off of the entire balance.
About VerifyDoc: We help patients identify errors and overcharges on medical bills. We publish guides on hospital billing, the No Surprises Act, and disputing medical charges, updated as federal and state rules change.
Verify your hospital bill in 60 seconds
We help patients identify errors and overcharges on medical bills. We publish guides on hospital billing, the No Surprises Act, and disputing medical charges, updated as federal and state rules change.
Get started →Frequently asked questions
Can a hospital charge me a fee to provide my itemized bill?
Yes, but only a limited, cost-based fee. Under 45 CFR § 164.524(c)(4) of the HIPAA Privacy Rule, a hospital may charge only for the actual labor of copying, supplies, and postage — not for searching, retrieving, or administrative overhead. For electronic records, HHS guidance sets the permissible maximum flat fee at $6.50. Some states go further and prohibit any fee for the first copy. If a hospital quotes you a large per-page flat fee or demands payment before producing the document, cite 45 CFR § 164.524(c)(4) in writing and ask for a fee itemization. That request alone often resolves the issue.
What is the difference between a good faith estimate and an itemized statement?
A good faith estimate (required under 45 CFR § 149.610 of the No Surprises Act) is a document given to you before care is delivered, showing the expected charges for a scheduled service. An itemized statement is produced after care is delivered and lists every charge that was actually billed. The two documents serve different purposes: the good faith estimate protects you before the bill is generated, while the itemized statement lets you audit the bill after the fact. If your final itemized statement shows charges $400 or more above the good faith estimate you received, you can trigger the federal Patient-Provider Dispute Resolution process under 45 CFR § 149.620.
My insurer already paid the hospital — do I still need to request the itemized statement?
Yes, especially if you have any remaining patient balance, a deductible amount applied, or coinsurance. Your Explanation of Benefits (EOB) shows what your insurer was billed and what it allowed, but it does not show individual CPT codes in detail for most plans. The itemized statement lets you verify that the charges sent to your insurer were accurate, which matters for two reasons: first, errors inflate your insurer's costs and can affect your plan's future premiums and prior authorization decisions; second, if a charge was incorrectly denied or applied to your deductible, you need the itemized statement to file an appeal. Your right to the itemized statement exists independently of whether your insurer already paid.
How long does a hospital have to respond to my request for an itemized bill?
Under 45 CFR § 164.524(b)(2)(i), the hospital must act on your written request no later than 30 calendar days from the date of receipt. "Acting on" the request means either fulfilling it or providing a written denial with your appeal rights. If the hospital cannot meet the 30-day deadline — for example, because records are archived offsite — it may take a single 30-day extension, but must notify you in writing within the initial 30-day window, stating the reason and a specific completion date. That makes the maximum permissible timeline 60 calendar days. If you receive no response or no written notice of extension by day 30, you can file a complaint with the HHS Office for Civil Rights at hhs.gov/ocr.