VoiceIQ · Compliant Patient Collections

Every VoiceIQ call clears three legal layers before it ever asks for a dollar.

The short answer: an AI voice agent that dials a patient balance is governed by TCPA consent, FDCPA Regulation F, and HIPAA minimum-necessary at the same time. VoiceIQ treats each as a gate. Fail one, the call does not go out. Here is exactly what the agent may say, and when it may call.

7-in-7Reg F call-frequency ceiling per debt
8a-9pLocal-time calling window, consumer's zone
1xHIPAA minimum-necessary: least data to collect

The layered stack

What governs the call, layer by layer

A collections call is not one rule. It is a stack. VoiceIQ evaluates each layer in order, and only a call that survives all three reaches the balance conversation.

L1

May we dial this number at all?

TCPA · CONSENT

The Telephone Consumer Protection Act treats a prerecorded or AI-generated voice as an "artificial voice." The FCC's February 2024 Declaratory Ruling confirmed AI-generated voices fall squarely under that definition, so a VoiceIQ agent calling a cell needs the right consent on file before it dials.

  • Cell / wireless numbers require prior express consent for an artificial-voice call.
  • Consent is scoped and revocable at any time, by any reasonable method, on the call itself.
  • Do-not-call and revocation flags are honored before the dialer ever fires.

TCPA, 47 U.S.C. § 227(b) · FCC Declaratory Ruling on AI-generated voices (Feb 8, 2024) · FCC 47 CFR § 64.1200 revocation rules

L2

When, and how often, may we call?

REG F · TIMING

The CFPB's Regulation F under the FDCPA puts hard limits on frequency and time of day. VoiceIQ counts every contact per debt and refuses to place a call that would breach the window or the cap.

  • No more than 7 calls in a rolling 7-day period per particular debt, and no call within 7 days of a phone conversation with the consumer.
  • Calling window limited to 8:00 a.m. to 9:00 p.m. in the consumer's local time.
  • Known inconvenient times and places are suppressed, not just logged.

Regulation F, 12 CFR § 1006.14(b) (7-in-7 presumption) · 12 CFR § 1006.6(b) (inconvenient time / 8a-9p) · FDCPA § 1692c

L3

What may the agent actually say?

HIPAA · MIN-NECESSARY

The HIPAA minimum-necessary standard means the agent discloses the least protected health information needed to accomplish collection. On a voicemail, or when a third party answers, the script narrows automatically.

  • No diagnosis, procedure, or service detail volunteered to reach a payment outcome.
  • Voicemail and third-party answers drop to a limited-content message with callback details only.
  • Identity is verified before any account specifics are shared.

HIPAA minimum-necessary, 45 CFR § 164.502(b) & § 164.514(d) · Reg F limited-content message, 12 CFR § 1006.2(j)

$

Only now does the agent ask for the dollar.

THE ASK

Consent verified, timing legal, disclosure minimized. The balance conversation happens inside the boundary the three layers drew, and every step is logged for audit.

The gate sequence

One call, four checkpoints

Each checkpoint can stop the call. Nothing downstream runs until the check upstream passes.

1

Consent check

Prior express consent on file, no revocation flag
TCPA · PASS
2

Window check

8a-9p local time, under the 7-in-7 count
REG F · PASS
3

Script check

Minimum-necessary path, third-party fallback ready
HIPAA · PASS
$

Balance ask

Payment conversation, opt-out honored, logged
AUDIT · LOG

Reg F frequency, made visible

The 7-in-7 counter every agent respects

Calls placed on this debt, rolling 7 days

Regulation F presumes a violation once a caller exceeds seven calls in seven days on a particular debt. VoiceIQ tracks the count and blocks call eight.

1
2
3
4
5
6
7
8
7 permitted · call 8 blocked before it dials

Frequency is counted, not estimated

A separate 7-day cooldown also applies after any telephone conversation with the consumer about a debt. VoiceIQ carries both clocks per debt and per consumer so a busy queue never quietly pushes an account past the line.

12 CFR § 1006.14(b)(2)(i) 7-in-7 · § 1006.14(b)(2)(ii) 7-day post-conversation rule

HIPAA minimum-necessary on voice

What the agent may say, and what it never volunteers

Inside the boundary

  • Practice or provider name and callback number
  • That an account balance exists and needs attention
  • Payment options, plans, and how to resolve the balance
  • Identity-verification questions before account specifics
  • The Reg F opt-out and dispute rights on request

Never volunteered

  • Diagnosis, condition, or clinical detail to prompt payment
  • Procedure or service descriptions on a voicemail
  • Account balance to an unverified third party who answers
  • PHI beyond what the collection outcome requires
  • Anything the consumer flagged as an inconvenient disclosure

Cited by name

The rules behind the layers

TCPA

Telephone Consumer Protection Act

47 U.S.C. § 227 and FCC 47 CFR § 64.1200. The February 2024 FCC ruling brings AI-generated voices under the artificial-voice consent regime.

Reg F

FDCPA Regulation F

12 CFR Part 1006, in force since Nov 30, 2021. Sets the 7-in-7 frequency presumption, the 8a-9p window, e-communication and limited-content messaging, and opt-out.

HIPAA

Minimum-Necessary Standard

45 CFR § 164.502(b) and § 164.514(d). Limits PHI disclosed on a voice call to the least needed to accomplish the collection purpose.

VoiceIQ builds the compliance into the call, not the audit after it

Most collection stacks check compliance in a report the next morning. VoiceIQ checks it before the dialer fires, so the calls that go out are already inside TCPA, Reg F, and HIPAA. That is how a voice program scales patient balances without scaling regulatory exposure.

  • Per-debt 7-in-7 and post-conversation clocks enforced live
  • Local-time 8a-9p windowing on every account
  • Consent and revocation checked before each dial
  • Minimum-necessary scripting with voicemail fallback
Walk a compliant call flow with our team

This page summarizes federal rules for general education and is not legal advice. Confirm your obligations, and any applicable state collection and calling laws, with qualified counsel before deploying voice collections.