Prior Authorization in 2026

Prior authorization has become one of the most resource-intensive, clinically disruptive, and financially consequential pain points in American healthcare revenue cycle management. In 2026, payers are expanding the services that require prior authorization, tightening approval criteria, and deploying AI to scrutinize authorization requests more aggressively. At the same time, a landmark CMS rule effective this year is changing how prior authorization works for millions of patients — and creating both compliance obligations and efficiency opportunities for providers who are prepared.

What Is Prior Authorization and Why Is It Such a Significant Revenue Cycle Challenge?

Prior authorization (also called prior auth, pre-authorization, or precertification) is the process by which a healthcare provider must obtain advance approval from a patient’s insurance plan before delivering certain services, procedures, or medications. Payers use prior authorization to manage utilization — ensuring that the services they cover meet their medical necessity criteria before payment is committed.

In theory, prior authorization is a reasonable cost management tool. In practice, it has become one of the most administratively burdensome and clinically disruptive processes in healthcare. Payers have steadily expanded the list of services requiring prior authorization — adding procedures, medications, and even diagnostic tests that previously required no advance approval — while the administrative requirements for obtaining authorization have grown more complex.

The result is a system in which providers spend enormous resources seeking permission to deliver care, patients experience delays and denials that affect their health outcomes, and revenue cycles are strained by a process that generates significant unpredictability in claims payment.

The Scale of the Prior Authorization Problem in 2025 and 2026

The administrative burden of prior authorization is quantifiable and substantial. Survey data from Health Affairs indicates that 92% of physician practices report experiencing delays due to prior authorization requirements. In the most burdensome cases — affecting 14% of providers — approvals take more than two weeks, creating clinical delays that affect both patient care and practice cash flow.

Staff time devoted to prior authorization has reached levels that directly impact practice economics. Studies of physician practices have documented an average of 13 hours per week per physician spent on prior authorization activities — the equivalent of a part-time or full-time staff position devoted entirely to seeking permission to deliver care already ordered by a physician.

Denials that occur because prior authorization was not obtained — or was obtained but didn’t precisely match the services delivered — are among the most common and most preventable revenue cycle losses. They are also among the most time-consuming to appeal, because retroactive authorization requests involve a different, more complex process than prospective ones.

The CMS Interoperability and Prior Authorization Final Rule: What Changed in 2026

CMS finalized its Interoperability and Prior Authorization Final Rule (CMS-0057-F) in early 2024, with key provisions taking effect for applicable payers in 2026. The rule applies to Medicare Advantage organizations, Medicaid managed care plans, CHIP plans, and plans on the Affordable Care Act marketplaces. It does not directly apply to commercial plans outside these categories, though some commercial payers are voluntarily adopting similar standards.

The rule’s major provisions include:

• API-enabled prior authorization: Covered payers must implement FHIR-based APIs that allow providers to submit prior authorization requests electronically, check authorization status programmatically, and receive decisions through their existing EHR or practice management workflows.
• Specific denial reasons: Payers must provide specific reasons when they deny a prior authorization request — not generic denials — enabling more targeted appeals.
• Response time requirements: Payers must respond to urgent prior authorization requests within 72 hours and to standard (non-urgent) requests within seven calendar days.
• Transparency reporting: Payers must publicly report prior authorization approval rates, denial rates, and appeal rates by service category.

High-Risk Service Categories for Prior Authorization Denials

Prior authorization requirements and denial rates are not evenly distributed across service types. The highest-risk categories — where prior auth requirements are most burdensome and denial rates are highest — include:

• Advanced imaging (MRI, CT, PET scans): Among the most frequently prior-authorized diagnostic services, with high rates of medical necessity denials. Documentation of clinical indication must align precisely with payer-specific criteria.
• Surgical procedures: Authorization obtained before surgery does not guarantee payment after surgery if the operative report documents a procedure that differs from the authorized procedure. Scope changes and intraoperative decisions must be handled with awareness of authorization boundaries.
• Specialty medications and infusion therapies: Complex prior authorization requirements with payer-specific step therapy and medical necessity criteria. High individual claim values make denials particularly costly.
• Behavioral health and substance use disorder services: Disproportionately affected by parity compliance gaps and inconsistent authorization standards across payers. Federal mental health parity requirements are increasingly enforced, creating both opportunities for appeal and compliance obligations for payers.
• Post-acute care (skilled nursing, home health, inpatient rehabilitation): Authorizations obtained at discharge frequently require modification during the course of care, creating ongoing authorization management demands and mid-stay denial risks.

Strategies for Reducing Prior Authorization Denials and Administrative Burden

Healthcare providers and revenue cycle teams that have most effectively managed prior authorization challenges share several operational characteristics:

1. Front-end eligibility and authorization verification: Confirming authorization requirements at the time of scheduling — not at check-in — for all services that may require prior auth. This creates enough lead time to obtain authorization before the appointment or procedure.
2. Service-specific authorization workflows: Developing payer-specific authorization protocols for high-volume, high-auth-risk service categories. Generic workflows produce generic outcomes; payer-specific workflows address the specific documentation and criteria each payer applies.
3. CDI integration: Ensuring that clinical documentation submitted with authorization requests explicitly addresses the medical necessity criteria in each payer’s coverage policy. Payers using NLP to review authorization requests will flag requests where documentation doesn’t clearly satisfy their criteria.
4. Retrospective authorization strategy: Developing a protocol for the inevitable cases where prior authorization was not obtained — including understanding which payers offer retroactive authorization processes, what documentation is required, and how to structure an appeal for services delivered without authorization.
5. API adoption under the CMS rule: For providers serving Medicare Advantage, Medicaid managed care, CHIP, and ACA marketplace patients, configuring EHR and practice management systems to use API-enabled prior authorization channels reduces submission errors and speeds response times.

How Coding & Billing Solutions Addresses Prior Authorization-Related Revenue Loss

Coding & Billing Solutions works with hospitals, physician practices, emergency departments, and specialty facilities to identify prior authorization-related denial patterns, trace them to their upstream process origins, and implement systemic corrections. Our Revenue Recovery, Denial Reviews & Prevention service addresses prior authorization denials specifically — including retrospective authorization appeal strategies for services delivered without proper authorization or where authorization criteria weren’t clearly met at the time of submission.

CBS’s Clinical Documentation Improvement services strengthen medical necessity documentation for high-authorization-risk service categories, addressing the documentation quality issues that cause authorization requests to be denied before care is even delivered. Our team understands the specific language and clinical detail that payer utilization management systems look for — and works with clinical teams to ensure documentation reflects that standard.

Our billing and coding team maintains current knowledge of the CMS prior authorization rule and its implications for applicable payer types, ensuring that clients’ workflows are configured for compliance and efficiency under the new standards.

Coding & Billing Solutions has served hospitals, physician practices, emergency rooms, urgent care facilities, addiction treatment centers, and specialty practices since 2010. Our 100% domestic team is available seven days a week, including holidays, with no additional cost for weekend or holiday coverage.

Frequently Asked Questions: Prior Authorization in Healthcare Billing

What is the CMS Interoperability and Prior Authorization Final Rule?

The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) is a federal regulation that took effect in 2026 for applicable payer types including Medicare Advantage, Medicaid managed care, CHIP, and ACA marketplace plans. Key provisions require covered payers to implement API-enabled prior authorization submission and status-checking, provide specific reasons for denials, respond to urgent requests within 72 hours and standard requests within 7 calendar days, and publicly report prior authorization statistics. Providers serving patients in these plan types should ensure their workflows take advantage of the new API-enabled processes.

What happens if a procedure is performed without prior authorization?

If a procedure is performed without required prior authorization, the resulting claim is likely to be denied on authorization grounds. Some payers offer a retrospective authorization process — allowing providers to request authorization after the fact under specific circumstances (such as emergency situations or cases where the payer failed to respond within required timelines). For non-emergency cases where prior auth was simply not obtained, a retrospective authorization appeal is often the only recourse, and its success depends heavily on the clinical documentation supporting medical necessity. Not all payers offer retroactive authorization, and denial of payment can be permanent for non-emergency services delivered without required pre-authorization.

How is prior authorization different from referral authorization?

Prior authorization (pre-authorization) is approval from the patient’s insurance plan before a specific service, procedure, or medication is provided. Referral authorization is approval from a patient’s primary care physician — required by some HMO and gatekeeper-model plans — to see a specialist. Some plans require both: a referral from the PCP and a separate prior authorization from the insurer for the specific procedure or service the specialist recommends. Billing without required referral authorization can also result in claim denial.

Can a provider appeal a prior authorization denial?

Yes. Both prospective prior authorization denials (before care is delivered) and retrospective denials (after care is delivered) can generally be appealed. Federal regulations require payers to have a formal appeals process, including an external review option for certain denials. For prospective denials, an expedited appeal requesting urgent reconsideration is often available when delay would seriously jeopardize the patient’s health. Successful appeals typically require additional clinical documentation specifically addressing the payer’s stated denial reason — which is why the CMS rule’s requirement for specific denial reasons (rather than generic denials) is significant for providers.

To learn how CBS can help your organization with the full spectrum of medical billing & coding and HIM issues, please call us at 610-428-9034 or fill out our Contact Form.