Prior authorization is when healthcare providers must get approval from health payers before giving some medical treatments or medicines. This check makes sure the care meets the rules of the payer and controls costs by cutting down on treatments that might not be needed.
But prior authorization often causes delays in patient care. It also adds extra work for providers and raises costs for healthcare offices. Waiting a long time for approval or denial can push back treatments and upset both patients and providers. Sometimes, these delays have caused serious health problems, like hospital stays or dangerous situations. A 2022 survey by the American Medical Association (AMA) found about one out of three doctors said prior authorization delays caused big problems for their patients.
The process is slow mostly because there is little real-time communication, data is not shared well, and reasons for denial are not clear. For medical offices, this means a lot of manual work, many phone calls, following up again, and sending the same information multiple times. All of this takes time away from caring for patients and costs more money.
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), released on January 17, 2024, tries to fix these problems. It requires more openness, better data sharing, and standardized reporting. These rules start in January 2026, with some deadlines for technical parts pushed until 2027.
This rule applies to public payers like Medicare Advantage, Medicaid, Children’s Health Insurance Program (CHIP), and some health plans on federal exchanges. The goals are to cut down on paperwork, speed up decisions, and make payer performance clear to providers and patients.
A main rule is that payers must answer authorization requests quickly. They have to reply to urgent requests within 72 hours and regular ones within seven calendar days. This is faster than before and helps stop care delays.
Payers must now give clear reasons when they deny a request. This helps providers understand what is missing or why the treatment was rejected. If providers know the exact reason, they can fix the problem faster. This cuts down on extra appeals and resubmissions, which lowers the work for everyone.
Starting in 2026, payers must share important prior authorization data on their websites every year. This includes how many requests they get, their approval and denial rates, how many approvals happen after appeals, and how fast they decide. Sharing this information makes payers more responsible and helps providers choose and work better with insurance plans. It also lets people see payer performance over time.
CMS’s rule makes payers use standard electronic tools called application programming interfaces (APIs) based on the FHIR standard. APIs help different healthcare computer systems, like electronic health records (EHRs) and payer systems, talk to each other easily.
These APIs help data move freely between all parts of healthcare. This improves communication, lowers errors, and stops slowdowns.
For office managers and IT staff, using these APIs means less typing and easier workflows. Providers can send requests and check them inside their EHR systems. This cuts down wait times and helps care move faster.
Automation and artificial intelligence (AI) work with CMS rules and can change how prior authorization is done. Automation can handle requests, check paperwork, and look at clinical facts. AI can predict outcomes and suggest steps to improve approvals.
AI and automation do jobs like:
This tech lowers the need for slow manual work, cuts costs, and helps meet CMS deadlines.
CMS needs urgent authorizations done in 72 hours and regular ones in seven days. AI helps process requests quickly and in the right order. This supports payers to meet deadlines without mistakes.
While AI speeds things up, there are worries about bias and clear decision-making. AI trained on incomplete or biased data can make unfair choices. It is important to watch and check AI tools so they work fairly and openly in healthcare.
Making public the prior authorization data changes how payers must act. By publishing approval rates, denial reasons, appeal results, and speed of decisions, CMS sets new rules for open and responsible payers.
Standardized reports also help regulators and health groups find system problems and plan fixes. With uniform data, they can compare payer work, spot differences, and create better rules. This clarity makes different payer policies easier to understand and use.
Prior authorization reform has support from both political parties. The Seniors’ Timely Access to Care Act of 2024, for example, requires Medicare Advantage plans to use electronic PA systems that follow CMS rules. States like California have their own rules with set response times, trial automation projects, and better public reports.
Programs like Humana’s pilot for musculoskeletal care processed 95% of requests instantly in some states. These successes show that automation and transparency can make prior authorization workflows much faster.
Medical offices should get ready by doing the following:
The CMS Interoperability and Prior Authorization Final Rule changes how prior authorization works in the U.S. It moves the system toward better openness, digital tools, and faster decisions. Providers, office managers, and IT staff who learn these changes—and use APIs and automation—will find workflows fit new standards better, cut down extra work, and provide better patient care.
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), released on January 17, 2024, aims to improve health information exchange and prior authorization processes to ensure patients have timely access to their health records and care. It enhances data sharing among patients, providers, and payers while reducing administrative burdens.
The rule mandates improvements to prior authorization policies and technology, streamlining and automating approval processes. This reduces delays, administrative workload, and helps keep patients at the center of their care by facilitating faster, more transparent access to necessary authorizations.
The rule enhances provisions from the prior CMS Interoperability and Patient Access Final Rule (CMS-9115-F) by requiring payers to implement APIs for better data sharing. This accelerates access to health records and prior authorization information between patients, providers, and payers.
The rule primarily affects payers who must comply by January 1, 2026. However, regarding API implementation requirements, payers have until January 1, 2027, due to stakeholder feedback and resulting timeline adjustments.
The rule endorses using Fast Healthcare Interoperability Resources® (FHIR®)-based APIs to modernize prior authorization transactions, replacing older standards like X12 278, promoting faster and standardized electronic data exchange.
The National Standards Group declared enforcement discretion for HIPAA covered entities adopting FHIR-based Prior Authorization APIs, meaning no HIPAA Administrative Simplification penalties will be enforced for declining use of the X12 278 standard in favor of FHIR.
CMS offers fact sheets, FAQs, best practice documents for patient/provider education, and templates for prior authorization metrics reporting to support stakeholders in adopting and complying with the rule efficiently.
This document guides the development of effective educational materials and messaging about Provider Access APIs and Payer-to-Payer APIs to ensure stakeholders understand and utilize interoperability tools correctly.
CMS provides sample reports and templates, such as the Prior Authorization Metrics Report and Medicare FFS Prior Authorization Statistics, encouraging payers to publicly disclose performance to foster accountability and improvements.
By streamlining prior authorization and enhancing data interoperability, the rule is expected to reduce administrative costs for payers and providers, decrease delays in care, and improve patient outcomes, collectively leading to significant cost savings and operational efficiencies throughout the healthcare system.