The healthcare system in the United States has had problems with sharing patient information quickly between payers, providers, and patients. This is especially true for prior authorization, which is when health insurers approve or deny payment for certain services before the care happens. This process has been slow and complicated. It often involves fax machines, phone calls, and long wait times. These delays add extra work for medical office staff and cause care to be slower, which can upset both providers and patients.
To improve this, the Centers for Medicare & Medicaid Services (CMS) made the Interoperability and Prior Authorization Final Rule (CMS-0057-F) on January 17, 2024. This rule wants healthcare data to be shared better. It also wants prior authorizations to be handled more easily by using new technology, especially API (Application Programming Interface) standards. Medical practices, especially those dealing with Medicare, Medicaid, CHIP, and Qualified Health Plans, will need to follow this rule over the coming years. It is important to know the flexibility the rule gives and how it will change daily work.
The CMS rule says that all affected payers must use Health Level 7® (HL7®) Fast Healthcare Interoperability Resources® (FHIR®) APIs by January 1, 2027. These APIs help payers, providers, and patients share information faster. They reduce the need for slow manual steps.
Before these APIs, practices had to follow different and complicated prior authorization rules from many payers. This slowed down work and used up resources. The CMS rule sets clear standards to make this easier and help patient care.
The CMS rule also gives covered entities like hospitals, clinics, and health plans some freedom in how they follow the new rules. In the past, healthcare used older standards like the X12 278 transaction for prior authorization, based on HIPAA rules. These older standards worked but became outdated and slowed down new technology use.
The National Standards Group (NSG) and CMS understand this problem. They said covered entities do not have to keep using the old X12 278 transaction if they switch to the new FHIR-based Prior Authorization APIs. There will be no penalties for not using the old method. This gives covered entities a chance to move faster to newer and better technology without being held back by old rules.
Organizations can use either only FHIR APIs or a mix of FHIR and X12 APIs. This helps them switch at a comfortable speed based on their technology, money, and needs. This is very helpful for many practices and health plans because they are ready for change at different levels.
Allowing a mix of API standards lets work change slowly without sudden interruptions. It helps avoid problems in care and billing that could happen if the switch is done too fast.
Medical practice administrators and owners have found prior authorization to be a big problem. Before this CMS rule, the process often meant:
These problems increase the work for staff, reduce time spent with patients, and can hurt money flow because of denials or slow approvals.
The CMS rule wants to fix these by automating prior authorization using standard APIs. The rule says:
This new way reduces the time administrators spend on old communication methods and lets them focus on scheduling and documentation better.
The Provider Access API makes it easier for in-network providers to get patient data. This helps medical practices by:
The Payer-to-Payer API helps patients who change insurance plans by making sure their health information moves with them. This keeps care going without gaps. For areas with many Medicaid clinics, like Baltimore, this makes managing patients and insurance easier.
These APIs help reduce delays and extra work, while improving the quality of care.
Artificial Intelligence (AI) and automation are becoming more important with the new interoperability APIs. Some companies, like Simbo AI, focus on AI tools for front-office phone work and answering services. They help healthcare offices handle communication better.
Prior authorization talk often happens over the phone. Staff need to explain complicated information about approval, documentation, and denials. AI can help by:
When AI works with the FHIR-based APIs from the CMS rule, practices can make their internal work and patient talks smoother. This lowers staff work, improves communication accuracy, and meets new rules better.
Automation also helps clinical staff by making sure authorization requests are sent correctly and on time, lowering denials due to mistakes or missing paperwork.
For healthcare IT managers, adding AI automation with CMS APIs can make operations run better and keep up with new tech changes.
The CMS rule expects big savings in the long run. It estimates about $15 billion saved over ten years by cutting down admin costs and delays in prior authorization. For medical offices, this means:
Payers must also report prior authorization data yearly, including reasons for denials. This makes things more open. Admins can find patterns in delays or denials, which helps fix problems or work with payers better.
Hospitals and bigger practices involved in CMS programs, especially those under the Merit-based Incentive Payment System (MIPS), will benefit. They must report electronic use of payer APIs. This pushes more use of digital technology and gives extra rewards.
Medical organizations working in Medicaid clinics or health exchanges in the U.S., like in Baltimore and other cities, gain several benefits from the CMS rule:
Since technology and money vary across regions, this flexibility helps healthcare groups adopt API standards in line with what they can handle. It also helps smaller practices by letting them use outside vendors or AI services like Simbo AI to manage parts of prior authorization calls, which might be too costly to handle inside.
CMS offers materials to help with learning the new standards. There are fact sheets, guides, and templates on prior authorization data. These help payers and providers improve their systems and talk clearly with patients and staff.
CMS also works on simple and clear educational resources for all involved, including patients. Patients can now see more of their health data through Patient Access APIs. This helps them understand their care and insurance approvals better.
In summary, the CMS Interoperability and Prior Authorization Final Rule gives covered entities freedom in how they use new API standards. By encouraging HL7 FHIR-based Prior Authorization APIs and allowing delays on older standards, the rule meets different organizations’ needs and tech readiness.
Medical administrators, owners, and IT managers should know this flexibility well. The healthcare field is moving toward automated, faster workflows that cut down admin work and improve patient care. AI tools like Simbo AI can help offices handle patient contact and prior authorization tasks better as the rules change.
The CMS Interoperability and Prior Authorization Final Rule CMS-0057-F aims to enhance interoperability and streamline prior authorization processes for Medicare, Medicaid, and CHIP by requiring the implementation of specific APIs, including Patient Access, Provider Access, Payer-to-Payer, and Prior Authorization APIs.
The compliance dates for the new interoperability requirements generally begin on January 1, 2026, with various provisions, including implementation of certain APIs, required by January 1, 2027.
The Patient Access API allows patients to access their health data, including prior authorization information, facilitating better understanding of their healthcare and the authorization processes involved.
The Provider Access API allows in-network providers to access necessary patient data for treatment, which aids in better care coordination and retrieval of claims data essential for billing.
The Prior Authorization API must include a list of covered items and services, documentation requirements for approvals, and status updates on prior authorization requests—whether approvals, denials, or requests for additional information.
The rule mandates that payers send prior authorization decisions within 72 hours for urgent requests and within seven calendar days for standard requests, improving response times and patient care.
Beginning January 1, 2026, impacted payers must report annual metrics on Patient Access API usage and prior authorization processes to promote transparency and efficiency.
Payers are required to provide plain language educational resources to explain the benefits of API data exchanges and to inform patients about their options to opt-out or opt-in.
The rule introduces a new measure for MIPS eligible clinicians to electronically request prior authorizations through the Prior Authorization API starting in the 2027 performance period.
Covered entities may utilize FHIR-only or FHIR and X12 combination APIs, allowing limited flexibility in compliance with previously established HIPAA transaction standards.