CMS Prior Authorization Rule: Deadlines and Next Steps

The CMS prior authorization rule gives practices clearer expectations for certain payer decisions, denial explanations, and public reporting.

However, the requirements do not apply equally to every health plan or request. Your team needs to identify the patient’s plan, confirm the applicable rules, and track each request through a decision.

A deadline is useful only when staff know when the payer received the request and what action comes next.

This guide explains the main requirements of CMS-0057-F and practical changes your practice can make.

What Is the CMS Prior Authorization Rule?

CMS-0057-F is the CMS Interoperability and Prior Authorization Final Rule.

Its operational prior authorization requirements generally began in 2026. Several technology requirements, including the Prior Authorization API, begin in 2027.

The operational changes address:

• Decision timelines for certain impacted payers
• Specific reasons for denied requests
• Public reporting of prior authorization metrics

These provisions concern medical items and services. They exclude prior authorization decisions for drugs. Review the official CMS fact sheet for the requirements and implementation dates. CMS

Which Payers Does the Rule Cover?

The rule identifies these impacted payer groups:

• Medicare Advantage organizations
• State Medicaid fee-for-service programs
• Medicaid managed care plans
• State Children’s Health Insurance Program, or CHIP, fee-for-service programs
• CHIP managed care entities
• Qualified Health Plan issuers on the Federally Facilitated Exchanges

However, the decision timeline requirements exclude Qualified Health Plan issuers on the Federally Facilitated Exchanges.

Do not apply this rule’s deadlines to every commercial plan. Confirm the specific plan and requirement before setting an alert or escalating a delay. CMS lists the impacted payer groups and the timeline exception in its guidance. CMS

Understand the Decision Timelines

For covered requests subject to these timeline provisions, the general maximums are:

Payers must respond sooner when the patient’s condition requires it. These limits use calendar time, rather than business days or business hours.

Also, certain program rules permit extensions when specified conditions are met. Therefore, staff should check the applicable requirement and any extension notice before treating a request as overdue.

The CMS prior authorization FAQs explain the timelines and extension provisions. CMS

1. Record Submission and Confirm Receipt

Start with a tracker that shows where each request stands.

Useful fields include:

• Patient and plan
• Requested service
• Assigned staff member
• Submission date and method
• Confirmed payer receipt date and time
• Request or reference number
• Standard or expedited status
• Missing information
• Applicable deadline
• Next follow-up date

Keep submission and receipt separate. Staff may send a request without confirming that it reached the correct payer team.

Since the timeline runs from receipt, that distinction matters.

Save portal confirmations, fax records, or other available evidence where authorized staff can find them. If receipt remains unclear, make confirmation the next action.

2. Reduce Delays Before Submission

Payer timelines do not address delays inside your practice.

A request may wait because staff need an order, a signed note, a code, or other information. Review those delays separately from payer review time.

For example, track:

• Time from the provider’s order to preparation
• Time spent waiting for practice documents
• Time from submission to confirmed receipt
• Time from receipt to the payer’s decision

This helps your team identify where work stalls.

For practices with frequent requests, a daily queue review may help. However, choose a schedule that fits your volume and patient needs.

The goal is to prevent requests from waiting simply because nobody owns the next step.

3. Use Expedited Review Appropriately

Expedited review should follow the applicable urgency criteria.

A specialty name alone does not establish that a request qualifies. Staff should involve the treating provider when urgency depends on the patient’s clinical condition.

Build a process that shows:

• Who identifies a potentially urgent request
• Who confirms the clinical basis
• Which submission route applies
• What supporting information is needed
• Who monitors the response

Do not use expedited review merely to compensate for a late submission.

Administrative staff can organize and track the request. The clinical team should remain responsible for medical judgments and supporting clinical information.

4. Respond Directly to Denial Reasons

The CMS prior authorization rule requires impacted payers to provide a specific reason for denied requests for covered non-drug items and services.

That requirement applies regardless of the submission method. CMS identifies portals, fax, email, mail, and phone among the communication channels. CMS

When a denial arrives, read the stated reason before deciding how to respond.

The next step may involve:

• Correcting administrative information
• Supplying an existing record
• Asking the payer to clarify its decision
• Routing a clinical question to the provider
• Following the applicable appeal process

For example, a denial may identify missing treatment history. Ask the clinical team for the relevant existing records rather than resending an unchanged packet.

Do not create clinical details to satisfy a requirement. The response must accurately reflect the patient’s care.

5. Follow Up Before Requests Become Overdue

Set alerts according to the applicable deadline and the patient’s needs.

Your tracker should identify requests approaching their deadline, not just those that have already passed it.

If a decision appears late:

1. Confirm the payer’s receipt date.
2. Check the applicable timeline.
3. Review any extension notice.
4. Contact the payer through its escalation process.
5. Record the response and next action.

Keep reference numbers and copies of relevant communications.

Also, involve the clinical team when a delay may affect care. Administrative follow-up should not replace clinical assessment of what the patient needs.

Do not treat a missed deadline as automatic approval. Verify any separate rule or policy that could apply before proceeding on that basis.

6. Give Each Request a Clear Owner

Prior authorization should not depend on whoever happens to have time.

Assign one person to coordinate each request from preparation through the decision and any required handoff.

That owner should know:

• What remains missing
• Who must provide it
• Whether receipt is confirmed
• When follow-up is due
• Whether a clinical review is needed
• What scheduling and billing staff need to know

For a closer look at these responsibilities, read our Prior Authorization Specialist Guide.

Clear ownership helps staff avoid duplicate calls and unanswered requests.

Use Denial Patterns to Improve Future Requests

Keep a record of recurring denial reasons.

For each pattern, note:

• The payer and plan
• The service involved
• The stated reason
• The relevant policy
• The response taken
• Any change needed before the next submission

Then share the findings with the team responsible for that step.

For example, repeated missing-document denials may show that the preparation checklist needs an update. They may also reveal a handoff problem between administrative and clinical staff.

Review patterns regularly. Use the findings to improve the process rather than correcting the same issue claim by claim.

Measure Your Practice’s Workflow

Payer reporting can provide context, but your practice also needs its own measures.

Track:

• Requests awaiting practice documents
• Requests without confirmed receipt
• Pending requests by age
• Follow-ups completed on time
• Requests with no assigned owner
• Denials requiring correction or clinical review
• Decisions awaiting scheduling or billing updates

Keep internal preparation time separate from payer review time.

Also, use consistent definitions. An approval rate alone does not show the quality of administrative work because decisions depend on coverage, clinical information, and payer criteria.

Put the CMS Prior Authorization Rule Into Practice

The CMS prior authorization rule provides a clearer framework for certain requests. Your practice still needs accurate submissions, confirmed receipt, appropriate follow-up, and clear responsibility.

Start by reviewing a sample of pending requests.

Can your team identify the applicable deadline, current status, owner, and next action for each one?

If not, improve the tracker and handoffs before adding more tools.

Prior Authorization Support From CMT

Capitol Medical Technologies supports practices with eligibility and benefits verification, prior authorization tracking, payer follow-up, and related billing workflows.

Your providers retain responsibility for clinical decisions and clinical documentation.

Need help managing pending requests? Contact CMT to discuss the tasks your team needs support handling.

Website: capitolmedicaltech.com
Email: info@capitolmedicaltech.com
Phone: 571-410-3703