The 2026 prior authorization rule shortened the decision clock for many government plans. Most practices are not seeing faster approvals yet, because the clock only helps if someone is tracking it.
Practice managers searching “prior authorization requirements 2026” want to know whether Medicare Advantage, Medicaid, and commercial plans now have to answer in a week. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) did change decision times and denial notices for specific payers. It did not cover every plan, and it does not cover drugs. A September 2026 MGMA poll found that only 7% of medical group leaders said prior authorization turnaround had become faster than in 2025.
This guide explains who must follow the new timelines, what a usable denial reason looks like, and the tracking steps that turn the rule into fewer delayed visits and fewer auth-related claim denials.
Quick Answer
Under CMS-0057-F, impacted payers other than Qualified Health Plan issuers on the Federally-facilitated Exchanges must decide prior authorization requests for medical items and services, not drugs:
- Standard requests: within 7 calendar days
- Expedited (urgent) requests: within 72 hours
- Decisions must arrive as fast as the patient’s condition requires. These numbers are maximums, measured in calendar time, not business days.
- A denial must include a specific reason, whether the request was sent by portal, fax, phone, mail, or an electronic API.
- Some programs allow an extension of up to 14 additional calendar days when the regulation’s conditions are met.
- Electronic prior authorization APIs are generally due January 1, 2027, not 2026.
Auth follow-up still eating the week? Radiant RCM can take eligibility, authorization tracking, and claim status off your front desk. Book a free 30-minute demo or see Virtual Assistant services.
Table of Contents
- Which Payers Must Follow the 2026 Clock
- What the Rule Does Not Change
- Why Turnaround Still Feels Slow
- How to Track the Clock
- How to Use a Specific Denial Reason
- When the Decision Is Late or Vague
- 2026 Prior Authorization Checklist
- FAQs
Which Payers Must Follow the 2026 Clock
CMS set the 7-day and 72-hour maximums for prior authorization of medical items and services, excluding drugs. The payers in scope are:
- Medicare Advantage organizations
- State Medicaid fee-for-service programs
- Medicaid managed care plans
- State CHIP fee-for-service programs
- CHIP managed care entities
Compliance timing is not identical for every program. Medicare Advantage organizations and state Medicaid and CHIP fee-for-service programs were due by January 1, 2026. Medicaid and CHIP managed care follow the rating period that begins on or after January 1, 2026. Confirm the plan in front of you before you quote a deadline to a patient.
Qualified Health Plan issuers on the Federally-facilitated Exchanges are impacted payers for other parts of the rule, including a specific denial reason and public prior authorization metrics. CMS did not apply these new decision timeframes to them.
Commercial plans that are not in those categories can still use their own turnaround rules. Do not assume a self-funded employer plan now has a 7-day federal clock.
What the Rule Does Not Change
- Drugs. These decision times and the specific-reason requirement in this rule do not apply to prior authorization for drugs.
- Whether auth is required. The rule speeds up a decision. It does not remove prior authorization for imaging, surgery, therapy, or equipment.
- Your documentation standard. An incomplete request can still be denied, or the payer can ask for more information. That request can also affect the clock.
- Electronic submission. Payers must build a Prior Authorization API that lists covered services, documentation needs, and a request-and-response path. That API requirement begins January 1, 2027. Fax and portal work continues through 2026.
- Claim payment. An authorization is not a guarantee of payment. Eligibility, coding, medical necessity, and timely filing still apply. Related: prior authorization workflow.
Why Turnaround Still Feels Slow
In a September 1, 2026 MGMA Stat poll of 178 medical group leaders, 44% said payer prior authorization turnaround was slower than in 2025. Forty percent said it was about the same. Seven percent said it was faster.
Groups that reported slower decisions most often pointed to status checks, peer-to-peer reviews, and heavier documentation requests. Groups that reported faster decisions most often pointed to fewer services requiring auth, electronic submission, and a tighter internal workflow.
The rule sets a maximum after the payer has the request. It does not start the clock while a packet sits in a fax queue, a portal draft, or a peer-to-peer that nobody scheduled. That gap is why a federal deadline and a long patient wait can both be true.
How to Track the Clock
Give every request one owner and one log. A shared inbox is not a clock.
- Record the send time. Date, time, channel (portal, fax, phone), confirmation or reference number, and who submitted it.
- Mark the request type. Standard or expedited, and whether the service is a drug. Drug requests follow a different set of rules.
- Name the payer category. Medicare Advantage, Medicaid, CHIP, Federally-facilitated Exchange, or commercial. Only then apply the 7-day or 72-hour maximum.
- Set the due date in calendar days. A standard request sent Monday is due the following Monday, including the weekend. An expedited request sent at 1:00 a.m. Sunday is due no later than 1:00 a.m. Wednesday, and sooner if the patient’s condition requires it.
- Log every pause. Additional-information requests, peer-to-peer dates, and any extension notice. Do not reset the due date unless the payer’s notice says the clock was extended.
- Store the decision on the encounter. Auth number, start and end dates, units or visits, rendering provider, and the exact service approved. Put that number on the claim.
Review open requests daily. Anything inside 24 hours of its due date, and anything already late, should be on a same-day follow-up list. For how missing auth becomes a claim denial, see why prior authorization requests get denied.
How to Use a Specific Denial Reason
Beginning in 2026, impacted payers must give a specific reason when they deny a prior authorization for a medical item or service. “Not medically necessary” with no criteria is not useful. The reason should tell the team which gap to close.
Sort the reason before you resubmit:
- Wrong patient, plan, provider, or code: correct the request and send it again. Do not appeal a clerical error.
- Missing record or failed conservative-care criterion: attach the named document and resubmit if the payer allows it.
- Service not covered by this plan: stop the auth loop. Check benefits and discuss alternatives with the patient.
- Criteria not met and the record already supports the service: use the payer’s appeal or peer-to-peer path, and quote the criterion the denial named. See how to appeal denied claims when the problem reaches the claim.
Save the denial text with the request. When the same reason repeats for one payer and one service, fix the template. Repeating the same incomplete packet will not get faster just because the decision clock is shorter.
Need the denial worked after the auth fails? See Medical Billing Services and denial management.
When the Decision Is Late or Vague
- Confirm the request was complete and that you have the submission timestamp and reference number.
- Check whether the payer sent an extension or a request for more information. An extension of up to 14 calendar days is allowed only when that program’s rules are met.
- Call or message the payer with the reference number and the due date. Ask for the decision or the specific denial reason, and record the name and time.
- Do not hold the patient with “the insurance company has a week” if the request was never successfully submitted.
- If you render the service without approval, flag the claim before it is billed. A late auth decision and a payable claim are not the same thing.
Impacted payers must also publish prior authorization metrics, which gives practices a public reference for how that payer says it performs. Your own log is still the number that matters for scheduling.
2026 Prior Authorization Checklist
- Identify whether this payer is Medicare Advantage, Medicaid, CHIP, an Exchange plan, or commercial
- Confirm the service is not a drug before you apply the 7-day or 72-hour maximum
- Submit a complete request and save the timestamp and reference number
- Calculate the due date in calendar time, including weekends
- Follow up before the due date, not after the visit is already delayed
- Require a specific reason on every denial from an impacted payer
- Resubmit clerical gaps and appeal criteria gaps through the correct path
- Put the auth number, dates, and units on the claim
- Review repeats by payer and service every month
Final Thoughts
The 2026 rule gives many Medicare Advantage, Medicaid, and CHIP medical-service requests a clearer maximum: 7 calendar days for a standard decision, 72 hours for an urgent one, plus a specific reason when the answer is no. It does not cover drugs, it does not cover every commercial plan, and electronic prior authorization APIs are a 2027 requirement. Practices that log the send time, the payer type, and the due date will feel the change. Practices that keep auth in a fax pile will keep waiting.
If you want that follow-up handled with your billing workflow, book a free 30-minute demo or read the medical billing FAQs.
Frequently Asked Questions
What is the CMS prior authorization rule for 2026?
CMS-0057-F requires impacted payers to decide prior authorization requests for medical items and services within 7 calendar days for standard requests and 72 hours for expedited requests, and to give a specific reason for a denial. Drug prior authorization is excluded. Electronic prior authorization APIs are generally required beginning January 1, 2027.
Does the 7-day prior authorization rule apply to every insurance plan?
No. The new decision times apply to Medicare Advantage, Medicaid fee-for-service, Medicaid managed care, and CHIP, with program-specific start dates. They do not apply to drug requests, and CMS did not apply these timeframes to Qualified Health Plan issuers on the Federally-facilitated Exchanges. Other commercial plans follow their own rules unless a separate law applies.
Are the 7 days business days or calendar days?
Calendar days, including weekends. An expedited request is measured in hours. A request received at 1:00 a.m. Sunday is due no later than 1:00 a.m. Wednesday, and sooner if the patient’s condition requires a faster decision.
What should a prior authorization denial reason include?
Impacted payers must provide a specific reason for denying a medical item or service, no matter how the request was submitted. Use that reason to correct the request, send the missing record, or appeal. A vague statement with no criterion does not tell the practice which step to take.
Did prior authorization get faster in 2026?
Not for most groups. In a September 1, 2026 MGMA poll, 44% of medical group leaders said turnaround was slower than in 2025, 40% said it was about the same, and 7% said it was faster. Status checks, peer-to-peer reviews, and documentation requests were the common bottlenecks.
Sources
- CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) fact sheet — decision times, denial reasons, and 2027 API date
- CMS FAQ: Improving prior authorization processes — payer-by-payer timeframes, calendar-time measurement, and extensions
- MGMA Stat, September 1, 2026 — medical group leaders on whether prior authorization turnaround improved in 2026
Privacy Notice: Please do not submit patient records, insurance information, medical details, claim files, or other protected health information through the public website form. Review the Radiant RCM Privacy Policy before submitting an inquiry.
This article provides general operational information about CMS-0057-F. Payer type, state Medicaid policy, and plan manuals can change how a deadline applies. Confirm the current rule for the patient’s plan before you rely on a turnaround time.
