For six years, hospital price transparency has been a file-posting exercise. Build the machine-readable file, publish the shoppable services, keep the estimator tool working, and wait for the CMS letter that says you're out of compliance. Plenty of hospitals got that letter; more than 500 received warning notices or corrective action requests between April and early June of this year. An August review of 2,000 hospitals found only 49.4% fully complied.
On October 5, 2026, a second regulator showed up, and it only cares about consumers.
What did the FTC actually do?
The Federal Trade Commission sent warning letters to 24 of the nation's largest health systems about their pricing practices. The agency hasn't said which 24. The letter template is public, and the core message fits in one sentence from it: "CMS rules do not provide a safe harbor from liability under the FTC Act."
The letters call the CMS requirements "a regulatory floor." FTC Chair Andrew Ferguson said the FTC has already opened price transparency investigations against hospitals and will take providers to court if they don't disclose prices.
The same day, CMS finalized its own update to the transparency rules: quarterly data files instead of monthly, more context on in-network prices, executive attestation of payer data accuracy, and personalized pricing available to health plan members by phone. That rule makes the data easier for outside companies to use. CMS Administrator Mehmet Oz predicted "an explosion of independent, innovative price transparency applications."
Put those together and you have two agencies, two legal theories and a lot more people with access to your prices.
Why isn't CMS compliance a safe harbor?
Because the FTC isn't enforcing the CMS rule. It's enforcing Section 5 of the FTC Act, which prohibits unfair or deceptive practices. Those are different questions.
CMS asks: did you post the required data in the required format?
The FTC asks: was the patient misled?
According to the warning letters, healthcare prices are a "material term," so disclosures may need to be clear and conspicuous. A price can be deceptive if it leaves out physician fees, facility fees or other costs that would lead a patient to believe they had the total price. Inaccurate information can be deceptive too. And the FTC says a practice can be unfair when patients don't get complete, accurate pricing far enough in advance to compare providers, especially for nonemergency services scheduled ahead of time.
A hospital can have a perfect machine-readable file and still hand a patient an estimate that skips the anesthesia group, the pathology read and the facility fee. CMS might never notice. The FTC is telling you it will.
What does a "deceptive" estimate look like in real life?
Here's the scenario I'd worry about. A patient schedules a screening colonoscopy and uses your online estimator. It quotes the facility charge. It says nothing about the separately billed anesthesia professional, or the pathology fee if a polyp is removed. Three weeks later, the patient gets three bills that add up to twice the estimate.
Under the old way of thinking, that was a patient satisfaction problem. Under the FTC's letter, it's a potential Section 5 problem. And under the No Surprises Act, if that patient was uninsured or self-pay, it may also be a good faith estimate problem.
That patient is also the one making TikTok videos right now. Posts about refusing or negotiating medical bills hit 426,000 in three months this summer, up 36,000% from the year before. Regulators read the internet too.
Which hospitals are most exposed?
The FTC targeted "the nation's largest healthcare services," so big systems with heavy scheduled outpatient volume are first in line. In my experience, exposure is highest where:
Estimates are generated by a tool that pulls only facility charges.
Physician groups bill separately and aren't integrated into the estimate.
Self-pay discounts or cash prices are posted but not reflected in the estimate.
The estimator and the final bill come from different systems that nobody reconciles.
Nobody can say who owns price accuracy across the organization.
That last one is the most common. Price transparency usually lives somewhere between compliance, revenue integrity, patient access and marketing. When everybody owns it, nobody owns it.
What should CFOs and revenue cycle leaders do in the next 30 days?
You don't need a consultant to start. You need a spreadsheet and some honesty.
Name one accountable executive. Put it in board minutes. The FTC letter is addressed to the organization, not to the compliance department.
Pull 25 estimates from the last 90 days for scheduled, nonemergency services. Match each to the final patient responsibility. Calculate the variance and sort by size.
Look at what was missing from the worst ones. Professional fees, facility fees, ancillary services and anesthesia are the usual suspects.
Read your estimator's disclaimer language as if you were a regulator. If it says "this is an estimate" in 8-point font under a big bold number, ask whether a patient would reasonably think the bold number was the total.
Check your posted cash prices against what self-pay patients were actually charged. Discrepancies here are the easiest thing for an outside app to find now that CMS made the data more usable.
Bring your employed and affiliated physician groups into the estimate. If they can't be included, say so clearly and tell the patient who else will bill them.
Document what you fixed and when. If the FTC calls, a dated remediation log is a much better conversation than a shrug.
None of this is legal advice; talk to your counsel about your specific exposure. But you don't need a lawyer to know whether your estimates match your bills.
What does this mean for 2030?
I've been forecasting for a while that price transparency would stop being a compliance task and become a competitive one. This month moved it faster than I expected. CMS made the data easier for apps to use. The FTC made accuracy enforceable as a consumer protection issue. Epic announced a tool that will show patients cash prices versus insurance prices before a prescription leaves the doctor's office, starting next summer.
By 2030, I expect a patient's first look at your prices will come through somebody else's app, an AI assistant or a payer's portal, not your website. The hospitals that win that moment will be the ones whose estimates hold up when they're compared side by side, line by line, to the bill.
The ones that treated the CMS file as the finish line are going to learn it was the starting line.
Sources
FTC sends price transparency warning letters to 24 large hospital systems (Fierce Healthcare, Oct 5, 2026)
FTC warns health systems against 'deceptive' pricing practices (Becker's Hospital Review)
CMS finalizes updates to price transparency regulations (Fierce Healthcare, Oct 5, 2026)
'Don't pay that hospital bill': Influencers rally followers (Becker's Hospital Review)
Epic teams with Amazon, Mark Cuban on prescription price tool (Becker's Hospital Review)
