Written and maintained by CASRAI Editorial Board
Last updated
Prior authorization is a utilization management requirement in which a health care provider must obtain advance approval from a health plan or payer before delivering a specified medical service, diagnostic procedure, durable medical equipment item, or prescription medication for the service to qualify for coverage and payment. Under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F, 89 FR 8758), impacted federal and state payers must return medical prior authorization determinations within 72 hours for expedited requests and 7 calendar days for standard requests.
What Is Prior Authorization? Definition and Scope
In hospital operations, ambulatory care, and clinical trial billing compliance, prior authorization meaning centers on prospective review of medical necessity, coverage policy alignment, and site-of-care appropriateness. Payers apply prior authorization rules to verify that a planned intervention satisfies published clinical coverage criteria—such as Medicare Local Coverage Determinations (LCDs), National Coverage Determinations (NCDs), or health plan medical policies—before the clinical team performs the procedure or dispenses the therapy.
While the terms are frequently used interchangeably on payer portals, healthcare revenue cycle teams distinguish between related utilization checks (see prior authorization vs. precertification):
- Prior authorization (prospective medical necessity review): Evaluates clinical documentation (diagnoses, prior conservative therapy, lab or imaging values) against payer medical policy criteria to approve coverage for a specific CPT, HCPCS, or National Drug Code (NDC) item.
- Prior authorization for medications (drug prior authorization): Applies formulary management criteria—such as step therapy (requiring trial of a preferred generic or first-line agent first), quantity limits, or biomarker confirmation—to outpatient pharmacy drugs (e.g., Medicare Part D) or clinician-administered infusion drugs (Medicare Part B).
- Clinical trial routine cost pre-authorization: In Medicare Advantage and commercial plans, study coordinators submit prior authorization requests accompanied by the NCT clinical trial identifier and protocol summary so the payer authorizes routine care items and services associated with a qualifying clinical trial.
How Long Does Prior Authorization Take? Federal Decision Timeframes
How long a prior authorization takes depends on the payer type, whether the request concerns a medical service or an outpatient prescription drug, and whether the ordering clinician designates the request as standard or expedited (urgent)—where waiting for the standard timeframe could seriously jeopardize the patient’s life, health, or ability to regain maximum function.
Beginning January 1, 2026, the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F, amending 42 CFR Parts 422, 431, 438, 440, and 457) standardized turnaround timelines across Medicare Advantage (MA) organizations, state Medicaid and CHIP Fee-for-Service (FFS) programs, Medicaid managed care plans, and CHIP managed care entities. The table below summarizes the binding federal decision timeframes by program and category.
| Regulated Program & Item Category | Standard Decision Timeframe | Expedited (Urgent) Decision Timeframe | Governing Federal Citation |
|---|---|---|---|
| Medicare Advantage (MA) — Medical items & services (including Part B clinician-administered drugs) | No later than 7 calendar days after receipt of request | No later than 72 hours after receipt of request | 42 CFR § 422.568(b)(1) & § 422.572(a) (per CMS-0057-F) |
| Medicaid Managed Care & CHIP Managed Care — Medical items & services | No later than 7 calendar days after receipt of request | No later than 72 hours after receipt of request | 42 CFR § 438.210(d)(1)–(2) & § 457.1230 (per CMS-0057-F) |
| State Medicaid & CHIP Fee-for-Service (FFS) — Medical items & services | No later than 7 calendar days after receipt of request | No later than 72 hours after receipt of request | 42 CFR § 440.230(d) & § 457.495(d) (per CMS-0057-F) |
| Medicare Part D — Outpatient prescription drug coverage determinations | No later than 72 hours after receipt of request (or supporting prescriber statement) | No later than 24 hours after receipt of request (or supporting prescriber statement) | 42 CFR § 423.568(b) & § 423.572(a) |
Under 42 CFR §§ 422.568 and 438.210, if the patient requests an extension or if the payer documents that additional clinical information is needed and the extension is in the enrollee’s interest, the timeframe for medical items and services may be extended by up to 14 additional calendar days. In addition, CMS-0057-F mandates that for all prior authorization decisions (whether submitted via portal, fax, or API), impacted payers must provide a specific reason for any denial so providers and patients can submit targeted clinical appeals or modify care plans.
How Prior Authorization Works in Practice: Manual Forms vs. HL7 Da Vinci FHIR APIs
Historically, completing a prior authorization form required clinic staff to check payer PDF lists manually, fill out payer-specific fax forms or proprietary web portals, attach exported EHR progress notes, and track pended determinations by phone. To replace fragmented manual workflows, federal interoperability standards establish two electronic pathways:
- HIPAA Administrative Simplification Transaction Standard (ASC X12N 278): Under 45 CFR § 162.1302, the adopted HIPAA transaction standard for referral certification and authorization is the ASC X12N 278 (Version 5010 / 005010X217) Health Care Services Review — Request for Review and Response.
- HL7 FHIR R4 Prior Authorization API (CMS-0057-F compliance by January 1, 2027): CMS-0057-F requires impacted payers to implement an HL7 Fast Healthcare Interoperability Resources (FHIR) Release 4 Prior Authorization API calibrated to US Core FHIR profiles. To enable end-to-end FHIR exchange without violating HIPAA transaction rules, HHS announced enforcement discretion under HIPAA Administrative Simplification permitting covered entities to use all-FHIR prior authorization transactions without translating to X12 278.
The Three HL7 Da Vinci Burden-Reduction Implementation Guides
CMS-0057-F recommends three paired HL7 Da Vinci Project Implementation Guides (IGs) that integrate prior authorization directly into the clinician’s EHR ordering workflow:
- Coverage Requirements Discovery (CRD): Triggered via CDS Hooks (such as
order-selectororder-sign) when a clinician places an order in the EHR. The EHR queries the payer’s CRD service and returns real-time cards stating whether prior authorization is required and linking to documentation templates. - Documentation Templates and Rules (DTR): Launches a SMART on FHIR app or native EHR Questionnaire engine that fetches the payer’s FHIR
Questionnaireand uses Clinical Quality Language (CQL) expressions to auto-populate required clinical data elements (ICD-10 diagnoses, LOINC lab values, prior medications) directly from the patient’s EHR chart into aQuestionnaireResponse. - Prior Authorization Support (PAS): Bundles the order and completed clinical documentation into a FHIR
Claimresource and invokes the$submitoperation against the payer’s Prior Authorization API endpoint, returning a structuredClaimResponsewith an immediate determination (approved, denied with specific reason code, or pended with follow-up polling via$inquire).
Where Prior Authorization Matters for Clinical Operations, Trials, and Patient Safety
In hospital quality and CMS Conditions of Participation for hospitals, delays in prior authorization directly affect care transitions, post-acute discharge placement, and time-to-treatment in oncology, rheumatology, and rare disease protocols. In clinical research administration, prior authorization intersects with coverage analysis whenever a study utilizes standard-of-care imaging, specialty biologics, or investigational devices subject to CMS Coverage with Evidence Development (CED) or FDA Investigational Device Exemption (IDE) billing rules.
Notice also that clinical payer prior authorization is distinct from two similarly named research governance terms: HIPAA Authorization for research (a patient’s signed permission under 45 CFR § 164.508 allowing a covered entity to use or disclose PHI for a study) and NIH prior approval (written permission from a federal grants management officer before making specified post-award budget or scope changes).
Common Misunderstandings
- Assuming a Prior Authorization Guarantees Payment: Payers explicitly state that prior authorization confirms medical necessity based on submitted clinical information at the time of review, but final claim payment still depends on patient eligibility on the date of service, benefit maximums, and accurate CPT/HCPCS coding.
- Applying Medical Service Turnaround Times to Medicare Part D Drugs: CMS-0057-F’s 7-calendar-day standard and 72-hour expedited rules govern medical items and services (including Part B drugs), whereas Medicare Part D outpatient prescription drug coverage determinations remain on the faster 72-hour standard / 24-hour expedited clock under 42 CFR §§ 423.568 and 423.572.
- Submitting a Prior Authorization Form Without Policy-Specific Clinical Criteria: Most initial prior authorization denials stem from missing documentation of step-therapy failure dates, quantitative lab/biomarker values, or conservative therapy duration required by the payer’s published medical policy.
Frequently Asked Questions
What is a prior authorization?
A prior authorization is a requirement set by a health insurance plan or government payer that a healthcare provider obtain formal approval before delivering a specific medical service, diagnostic test, medical device, or prescription drug in order for the item or service to be covered under the patient’s plan.
What is prior authorization for medications?
Drug prior authorization is a formulary utilization management process where the prescriber must submit clinical documentation—such as diagnosis codes, biomarker test results, or records showing that preferred step-therapy medications were tried or contraindicated—before the pharmacy benefit or medical benefit covers a prescription medication.
How long does prior authorization take?
Under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F, effective January 1, 2026), Medicare Advantage, Medicaid, and CHIP payers must decide medical prior authorization requests within 72 hours for expedited (urgent) requests and within 7 calendar days for standard requests. For Medicare Part D outpatient prescription drugs, decisions are required within 24 hours for expedited requests and 72 hours for standard requests.
How long does a prior authorization take when additional information is needed?
For Medicare Advantage and Medicaid managed care medical requests (42 CFR §§ 422.568 and 438.210), a payer may extend the 7-calendar-day or 72-hour decision timeframe by up to 14 calendar days if the enrollee requests the extension or if the payer justifies a need for additional clinical information and documents how the extension is in the enrollee’s interest.
Sources
- Centers for Medicare & Medicaid Services (CMS) — CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) Fact Sheet (https://www.cms.gov/newsroom/fact-sheets/cms-interoperability-prior-authorization-final-rule-cms-0057-f)
- HL7 International / Da Vinci Project — Da Vinci Prior Authorization Support (PAS) FHIR Implementation Guide (https://hl7.org/fhir/us/davinci-pas/)
- Electronic Code of Federal Regulations (eCFR) / Legal Information Institute — 45 CFR § 162.1302 (Referral Certification and Authorization Transaction Standard) & 42 CFR §§ 422.568, 423.568, 438.210 (https://www.law.cornell.edu/cfr/text/45/162.1302)
