Get Practice Insider free
Join independent practice owners reading it every week. Enter your email and the next issue lands in your inbox.
No spam. One email a week. We never sell your address.
Issue 10 · August 2026
One payer is probably a third of your revenue — and the notice clause that turns that into a crisis
Before you act on any number here: Practice Insider gives general operational guidance on running an independent practice. It is not legal, compliance, tax, or financial advice. Confirm any billing, coding, payer-contract, breach-notification, or insurance step with qualified healthcare counsel, a certified professional coder, or your own advisor before acting on it.
The lead: the payer concentration number you have never checked
Payer mix gets looked at once a year, if that — a pie chart buried in a report from the billing service that nobody acts on. The version worth tracking is a single number, and it is a risk number rather than a billing one: the share of net revenue that arrives from your single largest commercial payer.
The working rule is no single commercial payer above roughly 30% of net revenue. Past that line, a mid-contract fee-schedule change stops being a budget variance and starts deciding whether the practice makes payroll. Above 50%, that payer effectively sets your prices, and the negotiation is theirs rather than yours.
Concentration matters because of a clause most owners have never read. Commercial agreements commonly let either side terminate without cause on 90 to 180 days' written notice, and a without-cause exit requires the payer to prove nothing at all. Ninety days is not enough time to replace a third of your revenue. The clause sits quietly behind an evergreen renewal that has rolled over untouched for years, which is exactly why it goes unread until the letter shows up.
What to do with the number
Pull net revenue by payer for the trailing 12 months and rank it by share. Any billing system will produce that report, and a billing service that cannot is telling you something worth hearing. Every payer above 30% then gets a named plan: find the termination and amendment notice periods in that specific contract, put the renegotiation date on a calendar 12 months out instead of 60 days out, and track whether the share is climbing year over year. Give government payers their own line, because Medicare and Medicaid rates move by rule rather than by negotiation — concentration there is a policy exposure you can measure but cannot bargain against.
Quick hits
Access: the scheduling number that predicts new-patient loss
Average wait to the next open slot flatters the schedule, because it counts the cancellation holes that happen to be open today. The measure that tracks real access is third-next-available: calendar days until the third open new-patient appointment with a given provider. The third slot is used precisely because it filters out flukes. Inside 7 days is healthy for most outpatient practices; past 14 days, referring offices and new patients quietly start going elsewhere, and marketing spend does not fix a capacity problem. Measure it the same day each week, per provider, and read the trend rather than any single number.
Compliance: the 60-day clock that starts before the investigation ends
A breach of unsecured protected health information starts a 60-calendar-day clock that runs from discovery, not from the day the investigation wraps up. Affected individuals must be notified without unreasonable delay and no later than those 60 days regardless of how many records are involved — size does not buy you more time with patients. Size changes only the reporting leg: a breach affecting 500 or more individuals goes to HHS on that same 60-day timeline, plus notice to prominent media where more than 500 residents of one state or jurisdiction are affected, while smaller breaches are logged as they occur and submitted to HHS within 60 days after the end of the calendar year in which they were discovered. The failure mode in small practices is rarely the large breach — it is a year of small ones nobody logged, surfaced during an inquiry into something else. Start the running incident log now, and confirm the specifics with healthcare counsel before notifying or filing anything.
EHR contracts: the escalator that reprices year five
Multi-year EHR and practice-management agreements commonly carry an annual uplift clause — a fixed percentage, often in the 3% to 5% range, or a consumer-price-index formula with no ceiling written into it. At 5% compounding, a $600 per provider per month subscription reaches about $730 by year five while the product stays the same. Price any multi-year agreement across its full term rather than off the year-one monthly figure, and ask for the uplift to be capped in writing at renewal, when the vendor still has something to lose.
Putting this issue to work
If the payer-by-payer report is harder to get out of your billing setup than it should be, that is worth testing before the next contract cycle. Compare medical billing and RCM services on GetPracticeHelp and filter by specialty and payer mix.
Compare billing services →On the numbers: the payer-concentration threshold, contract notice windows, access targets, and EHR escalator ranges reflect general medical-practice-management operating norms rather than survey-derived figures, and the HIPAA breach-notification deadlines summarize the federal rule in plain terms rather than reproducing it. Your specialty, payer mix, contracts, and state will move the specifics — treat these as anchors to check against your own data and your own agreements, not as guarantees.