New Federal Rules Aim to Speed Up Prior Authorization: What Patients Should Know in 2026

Key takeaway: If you’re enrolled in Medicare Advantage, Medicaid managed care, CHIP managed care, or a federally facilitated Marketplace plan, new federal rules now limit how long your insurer can take to decide certain prior authorization requests and require clearer explanations when care is denied. Some changes are in effect in 2026, with additional technical requirements coming in 2027. Traditional Medicare is not directly affected.

Why prior authorization matters

Prior authorization is when your health plan requires approval before you can receive certain services, medications, imaging tests, or procedures. Your doctor submits a request explaining why the care is medically necessary. The insurer then decides whether to approve or deny it.

For patients, delays can mean postponed surgeries, interrupted cancer treatment, delayed mental health services, or waiting longer for advanced imaging like MRIs. Providers have long reported that the process is time-consuming and largely paper-based.

In Medicare Advantage alone, prior authorization is widely used. A KFF issue brief found that millions of prior authorization requests are submitted each year in Medicare Advantage plans, with a portion denied — and only a small share of denials appealed. That scale helps explain why federal regulators stepped in.

What the new CMS rule does — in plain language

The Centers for Medicare & Medicaid Services (CMS) finalized the Interoperability and Prior Authorization Final Rule (CMS-0057-F) to make the process faster, more transparent, and more electronic.

According to CMS fact sheets and press materials, the rule requires certain health plans to:

Shorten decision timelines for prior authorization requests.
Provide specific reasons when they deny a request.
Publicly report certain prior authorization metrics.
Build electronic systems (known as APIs, or application programming interfaces) to streamline requests and data sharing.

The goal is not to eliminate prior authorization. Instead, it is to set clearer guardrails around how quickly decisions must be made and how transparent insurers must be.

Who is covered — and who is not

Covered plans include:

Medicare Advantage plans
Medicaid managed care plans
CHIP managed care plans
Qualified Health Plans offered on the federally facilitated Marketplace (HealthCare.gov states)

Not directly covered:

Traditional Medicare (also called fee-for-service Medicare)
Many employer-sponsored group health plans
Some state-based Marketplace plans that operate outside the federal platform

If you are in traditional Medicare, prior authorization rules for most services remain unchanged under this particular regulation.

New decision timelines: standard vs. expedited requests

Under the CMS rule, affected plans must meet federal timelines for making decisions.

Standard (non-urgent) requests:
Plans generally must issue decisions within 7 calendar days.

Expedited (urgent) requests:
If your provider indicates that waiting could seriously jeopardize your life, health, or ability to regain function, plans generally must decide within 72 hours.

These timeframes apply once a complete request is received. Plans may extend timelines in limited circumstances, but they must follow CMS rules and document the reason.

It’s important to understand that these timelines set maximum limits — they do not guarantee instant approval. They also do not eliminate denials. The rule focuses on speed and transparency, not on mandating approval rates.

Clearer denial explanations and public reporting

One of the most patient-facing changes is the requirement that plans provide specific reasons for denials. Instead of a vague statement, insurers must explain the clinical or coverage basis for their decision.

This matters for appeals. When patients and doctors understand exactly why a request was denied, they are better positioned to submit additional documentation or challenge the decision.

Plans must also publicly report certain prior authorization metrics, including how often requests are approved or denied. Health policy analysts, including those writing in Health Affairs, note that this transparency could make patterns more visible to regulators, employers, and consumers — but it may take time before reporting translates into measurable behavior changes.

Electronic prior authorization: what it means

A major part of the rule involves requiring plans to build standardized electronic systems (APIs) so providers can submit prior authorization requests digitally and track their status.

Today, many requests still rely on fax machines, phone calls, and manual data entry. CMS says electronic processing is intended to reduce administrative burden and speed information exchange.

For patients, the effects may be indirect at first. You may not see a new portal immediately, but your provider’s office could experience fewer paperwork delays over time. Analysts caution that building and testing these systems is complex, and operational improvements may vary by plan and region.

What takes effect in 2026 — and what’s coming in 2027

As of 2026, key patient-facing elements — including decision timelines and clearer denial explanations — are in place for the covered plans.

Additional technical requirements, including expanded electronic prior authorization and data-sharing standards, are scheduled to phase in during 2027. According to CMS, these phased deadlines give insurers and providers time to upgrade systems.

This staggered rollout means improvements may not feel immediate everywhere. Implementation will depend on how quickly individual plans operationalize the requirements.

How common is prior authorization?

Data summarized by KFF show that Medicare Advantage plans process millions of prior authorization requests annually. While most are approved, a meaningful share are denied — and relatively few denials are appealed.

That gap suggests some patients may not know they have appeal rights or may find the process burdensome. The new transparency requirements are designed in part to make those next steps clearer.

What you can do if care is delayed or denied

If you are affected by a delay or denial, here are practical steps:

Ask if the request qualifies as expedited. If waiting could seriously affect your health, your provider can request urgent review.
Request the written denial reason. Plans must explain the basis for their decision.
File an appeal. Appeal rights vary by program, but Medicare Advantage and Medicaid managed care plans have formal processes.
Contact your state insurance department or Medicaid office for assistance if you believe timelines were not followed.
Use official resources such as Medicare.gov or HealthCare.gov for guidance specific to your coverage.

What this means for patients and families

The new CMS rule does not eliminate prior authorization. It does not guarantee fewer denials. And it does not apply to all types of insurance.

But it does create clearer federal guardrails: faster required decision timelines, more specific explanations for denials, public reporting of metrics, and a shift toward electronic processing.

For families navigating cancer treatment, surgery approvals, specialty drugs, behavioral health services, or even certain dental or oral procedures covered under managed care plans, knowing these timelines and rights can make a difference.

As implementation continues into 2027, the real-world impact will depend on how plans, providers, and regulators carry out the rule. For now, the most important step is awareness: if you are in a covered plan, you have defined timelines and a right to clearer answers.

Sources

This article is for general informational purposes only and is not medical advice. Research findings can be early, limited, or subject to change as new evidence emerges. For personal guidance, diagnosis, or treatment, consult a licensed clinician. For current outbreak or public health guidance, follow your local health department, the CDC, or another relevant public health authority.