Submitting a prior authorization request means identifying that a specific service requires payer approval, gathering the clinical documentation that supports medical necessity, submitting the request through the payer’s preferred channel, and tracking it until a determination arrives. Since January 1, 2026, payers covered by CMS’s Interoperability and Prior Authorization final rule must decide expedited requests within 72 hours and standard requests within seven calendar days. Our prior authorization services team builds this timeline directly into scheduling.
What Is Prior Authorization?
Prior authorization is a payer’s approval to deliver a specific service before it is rendered; without it, the resulting claim is typically denied regardless of the service’s clinical merit.
How Long Does a Payer Have to Decide on a Prior Authorization Request?
Under CMS’s Interoperability and Prior Authorization final rule, effective 2026, covered payers must decide expedited requests within 72 hours and standard requests within seven calendar days.
Where Does a Prior Authorization Number Go on a Claim?
On the CMS-1500 form, the prior authorization number is entered in item 23, per the NUCC instruction manual.
Can a Denied Prior Authorization Be Appealed?
Yes. A denied prior authorization can be appealed, and federal rules for group health plans set a minimum appeal window, though specific plan and state rules may extend it further.
Key Takeaways
- Prior authorization requirements are specific to the plan and the service code, so check at the eligibility stage, not after the visit is scheduled.
- CMS’s 2026 Interoperability and Prior Authorization rule requires covered payers to decide within 72 hours (expedited) or 7 calendar days (standard).
- A complete submission, order, clinical notes, relevant history, and correct CPT/ICD-10 codes, moves faster than one requiring a follow-up request.
- Every open prior authorization request needs an assigned owner and a follow-up date; silence from the payer is not an answer.
- Approvals carry a specific date range and unit limit, and both expire, so tracking the approval matters as much as getting it.
- Starting in 2027, covered payers must also support a FHIR-based electronic prior authorization API, which will further shorten approval timelines.
Why Does Prior Authorization Matter to a Practice’s Revenue?
A service delivered without required prior authorization is often denied outright, regardless of whether it was medically necessary, turning avoidable non-payment into a direct revenue loss. This shows up constantly in pain management and oncology, where high-cost procedures and imaging are commonly gated behind authorization requirements.
Who Is Responsible for Obtaining Prior Authorization?
The ordering or rendering provider’s practice is typically responsible for initiating the request, though some services performed at a facility may shift that responsibility to the facility depending on payer policy.
What Are the Steps to Submit a Prior Authorization Request?
The five core steps below cover identification through final determination.
Step One: Identify the Requirement
Confirm whether prior authorization is required for the specific service code under the patient’s specific plan, ideally at the same eligibility check that confirms coverage, before the appointment is confirmed rather than after.
Step Two: Gather the Supporting Documentation
Assemble the physician’s order, clinical notes supporting medical necessity, relevant patient history, and the specific CPT and ICD-10 codes for the requested service. An incomplete packet is the single most common reason a request stalls.
Step Three: Submit Through the Payer’s Preferred Channel
Submit via the payer portal, an electronic prior authorization transaction, or fax, depending on what that specific payer supports. Capture the confirmation number and the exact submission timestamp, since this becomes the record of when the decision clock started.
Step Four: Track and Follow Up
Assign every open request an owner and a specific follow-up date rather than letting it sit in a shared inbox. If the payer’s response window under CMS’s rule passes without a determination, that is a documented compliance issue worth escalating.
Step Five: Act on the Determination
An approval should be recorded with its date range and unit limit clearly noted, since both expire and services delivered outside that window may not be covered. A denial should be reviewed for the stated reason and either appealed or the service plan adjusted.
What Are the Key Things to Know About the Prior Authorization Request Process?
The points below cover the 2026 rule changes and prevention tactics.
The 2026 CMS Decision Timeline Rule
CMS’s Interoperability and Prior Authorization final rule (CMS-0057-F) requires impacted payers, including Medicare Advantage, Medicaid and CHIP managed care, and Qualified Health Plans, to decide expedited requests within 72 hours and standard requests within seven calendar days, and to state a specific reason for any denial.
What Happens When Denial Reasons Must Be Specific
The 2026 rule also requires payers to communicate the specific reason a prior authorization is denied, rather than a generic denial notice. This gives the requesting practice a concrete basis to correct the submission or build a targeted appeal.
The Electronic Prior Authorization API Coming in 2027
Beginning in 2027, covered payers must implement a FHIR-based Prior Authorization API, allowing providers to check covered items and services and submit requests directly through their EHR rather than a separate portal or fax.
Reading and Understanding an Approval’s Limits
An approval is not indefinite. It typically carries a specific effective date range and a maximum number of authorized units or visits. Delivering the service outside that window can result in a denial even though authorization was technically obtained.
Building Prior Authorization Into the Scheduling Workflow
The strongest practices identify authorization requirements at the same point they verify eligibility, giving the full regulated decision window to run its course before the appointment date rather than discovering the requirement the day before or after the visit.
When Should a Standard Request Be Used Instead of an Expedited One?
Use a standard request for services that can reasonably wait the full seven-calendar-day decision window. Reserve expedited requests for situations where a standard timeline would seriously jeopardize the patient’s life, health, or ability to regain maximum function.
When Should a Denied Authorization Be Appealed?
Appeal when the clinical documentation genuinely supports medical necessity but the payer’s initial review disagreed, particularly now that payers must state a specific denial reason to respond to directly. A practice handling a high volume of these appeals often routes them through dedicated denial management rather than treating each one as a one-off task.
Best Practices for Submitting Prior Authorization Requests
- Check the authorization requirement at the same time as the eligibility check, not as a separate later step.
- Submit a complete documentation packet the first time to avoid a request for additional information that restarts the clock.
- Capture and log the confirmation number and submission timestamp for every request.
- Assign an owner and follow-up date to every open request rather than leaving it in a shared queue.
- Track approval expiration dates and unit limits as carefully as the initial approval itself.
Mistakes to Avoid With Prior Authorization Requests
- Scheduling a service before confirming whether prior authorization is required for that specific plan.
- Submitting an incomplete documentation packet that triggers an avoidable request for more information.
- Letting an approved authorization’s date range or unit limit lapse before the service is delivered, discovered only after a claims submission and processing denial.
- Treating a payer’s silence past the regulated decision window as a reason to wait rather than escalate.
- Failing to appeal a denial that the clinical documentation actually supports, simply writing off the revenue instead.
Illustrative Documentation Example
The scenario below is a hypothetical example for teaching purposes, not an actual patient billing case.
A practice identifies that an upcoming imaging study requires prior authorization during the eligibility check, two weeks before the appointment. The complete request, order, clinical notes, and codes, is submitted immediately, and the payer approves it within four days, well inside the seven-day standard window, giving the practice time to confirm the approval’s unit limit before the scheduled date.
Conclusion
A prior authorization request moves fastest when it starts early and arrives complete: the requirement identified at scheduling, the documentation gathered up front, and the request tracked with an owner and a follow-up date rather than left to silence. CMS’s 2026 decision-timeline rule gives practices a concrete standard to hold payers to when that silence stretches too long. A practice juggling a high volume of authorization-gated services often centralizes this through dedicated prior authorization services.
FAQs
Does every service require prior authorization?
No. Requirements are specific to the payer, the plan, and the service code; always check rather than assuming based on a similar service or a different plan.
What happens if a service is delivered without required prior authorization?
The resulting claim is typically denied for lack of authorization, regardless of medical necessity, and the balance generally cannot be billed to the patient under most provider contracts.
How long is a prior authorization approval valid?
It varies by payer and service, but every approval carries a specific date range and unit limit that should be confirmed and tracked rather than assumed to be open-ended.
Can a prior authorization be transferred if a patient switches providers mid-treatment?
Generally no, an authorization is typically tied to the specific ordering or rendering provider; a new provider usually needs to submit a new request even for a continuing course of treatment.
What changes with the 2027 electronic prior authorization API requirement?
Beginning in 2027, covered payers must support a FHIR-based Prior Authorization API, letting providers submit requests and receive decisions directly through certified EHR technology.
