Prior authorization has been slow and opaque for so long that most practices have simply built their workflows around the pain. The federal government is now trying to change that for the payers it regulates. The CMS Interoperability and Prior Authorization Final Rule, finalized in 2024, sets new expectations for speed, transparency, and electronic exchange, and the first requirements are already in effect.
What the rule actually does
The rule, referenced as CMS-0057-F, applies to a specific set of payers: Medicare Advantage plans, state Medicaid and CHIP fee-for-service programs, Medicaid and CHIP managed care, and Qualified Health Plan issuers on the federally facilitated exchanges. It does not directly cover most commercial or employer plans, though many are expected to move the same direction over time as this becomes the industry norm.
For those covered payers, the direction is clear. Prior authorization has to get faster, denials have to be explained, and the whole process is meant to move from faxes and phone calls toward structured electronic exchange.
What changes first
The operational pieces came first, taking effect at the start of 2026. Impacted payers must make prior authorization decisions within set timeframes for standard and expedited requests, must give a specific reason for every denial regardless of whether the request arrived by API, portal, or fax, and must publicly report prior authorization metrics such as approval and denial rates and average decision time.
For a practice, that is immediately useful. A specific denial reason is something you can act on and appeal, and predictable decision timeframes make it easier to plan care instead of waiting in the dark.
What is coming next
The bigger shift is technical and lands in 2027. Impacted payers must stand up standards-based APIs, including a Prior Authorization API that lets providers check whether a service needs authorization, see the documentation required, submit the request, and receive the decision electronically. Alongside a Provider Access API and payer-to-payer data exchange, the goal is to replace the fax-and-phone routine with a structured electronic workflow. Prior authorizations for drugs are excluded from the rule.
The practices that benefit most will be the ones whose documentation and intake are already clean, because that is what plugs neatly into an electronic workflow. It is also exactly where automation and AI earn their place, carrying the routine checking and submission so staff handle only the cases that need judgment.
