- What must be included in the impacted payer’s prior authorization decision response via the Prior Authorization API?
The final rule did not include a requirement for impacted payers to use the Prior Authorization API to make real-time decisions on prior authorization requests, but the automation that the API provides could improve decision timeframes. Though we anticipate that some responses or decisions may be made in real-time, other decisions will continue to necessitate review and evaluation by clinical reviewers (the CMS Interoperability and Prior Authorization final rule requires impacted payers, excluding QHP issuers on the FFEs, to send decisions within 72 hours for expedited [i.e., urgent] requests and seven calendar days for standard [i.e., non-urgent] requests). Automating a complex process such as prior authorization will be an ongoing process of continuous improvement.
- How does the rule change the timeframe requirements for responses to prior authorization requests?
We are requiring impacted payers to send prior authorization decisions to providers within 72 hours for expedited (i.e., urgent) requests and seven calendar days for standard (i.e., non-urgent) requests.
- How do impacted payers report Prior Authorization metrics to comply with the reporting requirement? Is there available guidance for format and method for submission of these metrics?
Under the CMS Interoperability and Prior Authorization final rule (CMS-0057-F), beginning in 2026, and annually thereafter, impacted payers (MA organizations, state Medicaid and CHIP programs, Medicaid managed care plans, CHIP managed care entities, and QHP issuers on the FFEs) must post certain aggregated prior authorization metrics from the previous year (89 FR 8889) on their public-facing website. MA organizations will report at the contract level, state Medicaid and CHIP FFS programs will report at the state level, Medicaid managed care plans and CHIP managed care entities will report at the plan level, and QHP issuers on the FFEs will report at the issuer level (89 FR 8897).
Payers must report the following metrics for medical items and services (excluding drugs) subject to prior authorizations each year:
- A list of all items and services that require prior authorization (excluding drugs).
- The percentage of standard prior authorization requests that were approved, aggregated for all items and services.
- The percentage of standard prior authorization requests that were denied, aggregated for all items and services.
- The percentage of standard prior authorization requests that were approved after appeal, aggregated for all items and services.
- The percentage of prior authorization requests for which the timeframe for review was extended, and the request was approved, aggregated for all items and services.
- The percentage of expedited prior authorization requests that were approved, aggregated for all items and services.
- The percentage of expedited prior authorization requests that were denied, aggregated for all items and services.
- The average and median time that elapsed between the submission of request and a determination by the payer, plan, or issuer, for standard prior authorizations, aggregated for all items and services.
- The average and median time that elapsed between the submission of a request and a decision by the payer, plan, or issuer, for expedited prior authorizations, aggregated for all items and services.
(89 FR 8889 - 8890)
As we discuss in the final rule, CMS has developed a Prior Authorization Metrics Reporting Template (PDF) for impacted payers regarding recommended content and format for use in their public reports of prior authorization metrics as well as best practices about the website locations for the prior authorization metrics (89 FR 8892 - 8893). In addition, it may be helpful for impacted payers to review how the Medicare FFS program publicly reports prior authorization metrics and presents those metrics on its website (see Prior Authorization and Pre-Claim Review Initiatives) (89 FR 8892).
- Are impacted payers required to make real-time decisions on prior authorization requests?
The final rule did not include a requirement for impacted payers to use the Prior Authorization API to make real-time decisions on prior authorization requests, but the automation that the API provides could improve decision timeframes. Though we anticipate that some responses or decisions may be made in real-time, other decisions will continue to necessitate review and evaluation by clinical reviewers (the CMS Interoperability and Prior Authorization final rule requires impacted payers, excluding QHP issuers on the FFEs, to send decisions within 72 hours for expedited [i.e., urgent] requests and seven calendar days for standard [i.e., non-urgent] requests). Automating a complex process such as prior authorization will be an ongoing process of continuous improvement.
- Does the March 31, 2026, compliance date for the Prior Authorization metrics reporting requirements in the CMS Interoperability and Prior Authorization final rule reflect the date on which reporting must begin, or the date on which metric data collection must begin for the purpose of being subsequently reported?
The CMS Interoperability and Prior Authorization final rule (CMS-0057-F) requires impacted payers (MA organizations, state Medicaid and CHIP programs, Medicaid managed care plans, CHIP managed care entities, and QHP issuers on the FFEs) to publicly report certain prior authorization metrics for the previous calendar year (89 FR 8897). Accordingly, the first year this requirement goes into effect, impacted payers must post prior authorization metrics for calendar year 2025 on their websites by March 31, 2026. Please note that this means that impacted payers are required to collect prior authorization metrics in 2025.
Each program office will send out a letter with program-specific information for complying with these requirements.