CMS Prior Authorization Rule: What Took Effect January 1, 2026

The operational piece of the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) took effect January 1, 2026, and it is the biggest federal change to prior authorization timelines in a decade. Medicare Advantage, Medicaid and CHIP fee-for-service, Medicaid and CHIP managed care, and Qualified Health Plans on the Federally Facilitated Exchange all must now make prior authorization decisions inside much shorter windows, and they must publicly report how they are doing. For practices that have spent years fighting opaque PA processes, this is a genuine shift — but only if you know how to use it.

72 hours

New urgent PA response limit

What Changed

Beginning January 1, 2026, affected payers must:

Respond to standard prior authorization requests within 7 calendar days.
Respond to expedited/urgent prior authorization requests within 72 hours.
Provide specific reasons for any denial, regardless of how the request was submitted.

These deadlines apply to non-drug items and services. A separate proposed rule (CMS-0062-P) would extend similar requirements to drugs, but it is not yet finalized.

Payers must also begin public reporting of prior authorization metrics — including volume, approval and denial rates, and decision timeframes. Initial reporting deadlines:

Payer type	First reporting deadline
Medicare Advantage (contract level)	March 31, 2026
Medicaid / CHIP fee-for-service (state level)	March 31, 2026
Medicaid / CHIP managed care	90 days after rating period end
QHPs on FFE	By FFE QHP certification deadline

The API pieces of the rule — the Patient Access API, Provider Access API, and Payer-to-Payer API, all built on FHIR — have a January 1, 2027 compliance date, not 2026. Do not confuse the two deadlines.

Why It Matters

Providers are not directly regulated by CMS-0057-F. Payers are. But the indirect impact on practice revenue cycles is significant:

Cash flow should improve. Practices that routinely wait 10 to 14 days for PA decisions on Medicare Advantage patients have a new ceiling: 7 days for standard, 72 hours for urgent. That compresses the time between service and payment and reduces the drag on accounts receivable.
Denials need specific reasons. Generic "not medically necessary" denials without documentation are harder to defend when the rule explicitly requires specific reasons. This creates much stronger footing for appeals.
Public metrics create leverage. When payer PA approval rates, denial rates, and decision times are published, you have real data to bring to payer relations conversations and credentialing negotiations. Plans that run consistently slow on PAs are now easier to identify and escalate.
Your PA workflow assumptions are outdated. Any staff training, cheat sheet, or turnaround expectation your billing team built in 2024 or 2025 needs a refresh against the new response windows.

What to Do

Update your PA tracker with the 7-day and 72-hour clocks. Every open PA for an affected payer now has an enforceable deadline. Flag anything that blows past it so you can escalate or appeal with the regulatory citation in hand.
Template a follow-up letter citing CMS-0057-F. When a Medicare Advantage or Medicaid managed care plan misses the window, a calm written follow-up that references the final rule and the missed deadline resolves most cases faster than another phone call.
Pull the payer's public PA metrics starting in Q2 2026. MA and Medicaid FFS first reports are due March 31, 2026. Once published, add your worst-offender payers to a quarterly review of approval, denial, and timeliness rates.
Challenge every denial that lacks a specific reason. The rule explicitly requires specific denial reasons. An appeal that points to a non-compliant denial letter is stronger than a clinical-only appeal.
Start planning for the 2027 API deadline now. Ask your EHR vendor what FHIR Provider Access API integration will look like and whether it will be included in your current license or billed as an add-on.

Talk to Us

If your practice is still averaging more than 7 days on Medicare Advantage prior auths in the first quarter of 2026, something is wrong — and it is probably fixable without new technology. DeltaRCM audits PA workflows for independent practices, maps delays to specific payers, and helps you put the new CMS-0057-F deadlines to work. Reach out for a prior authorization exposure review.