Prior Authorization

Prior authorization (PA), sometimes called preauthorization, is a utilization management process requiring a healthcare provider to obtain a payer's approval before delivering a specific service, procedure, or medication for it to be covered. It is most common for costly, elective, or higher-risk services, including imaging, specialty medications, and certain surgeries.

It functions as a prospective checkpoint: the payer reviews and approves or denies medical necessity before the care is delivered, rather than reviewing it retrospectively after the fact.

That prospective timing is what makes PA both powerful as a cost-control tool and contentious in practice, because the review sits directly between the patient and the care their provider has already recommended.

Why It Matters

Prior authorization sits at the center of a genuine, high-stakes tension in U.S. healthcare: payers use it to prevent unnecessary or low-value care from driving up costs, but the process demonstrably delays care and consumes enormous administrative time on both sides, and that tension has now escalated into direct federal regulatory intervention.

For providers, PA represents a heavy administrative load that pulls clinical staff away from patient care; for payers, it is a core lever for managing spend and enforcing evidence-based criteria. When those interests collide over an individual patient's care, the result is often a delay, an appeal, or a complaint, and the sheer volume of those complaints is precisely what pushed regulators to act.

Denial rates that vary widely by plan type add to the friction, since a service routinely approved under one plan may be denied under another, leaving providers to navigate a patchwork of requirements for the same clinical decision.

94% of physicians report that prior authorization requirements delay necessary patient care, and average standard denial rates run 12% in Medicare Advantage, 14% in Medicaid managed care, and 18% in ACA marketplace plans. (American Medical Association; KFF analysis of 2025 CMS-mandated insurer data)

How It Works

• Identify the requirement. The provider determines whether the planned service requires prior authorization under the patient's specific plan, a requirement that varies significantly by payer and plan type. Getting this step wrong (missing a requirement or misreading a plan's rules) is a common source of downstream denials.
• Submit the request. Clinical documentation supporting medical necessity is submitted to the payer, through a portal, fax, or increasingly a direct EHR-to-payer API connection. The completeness of that documentation is often what determines whether the request is approved on first pass.
• Payer reviews against criteria. A payer reviewer, sometimes AI-assisted, evaluates the request against evidence-based clinical criteria to determine medical necessity and appropriateness. The growing use of automated review at this stage is one of the most scrutinized aspects of the process.
• Approval, denial, or request for more information. The payer approves, denies, or requests additional documentation, with federal rules now mandating specific turnaround windows for each outcome. A denial is not necessarily final, since many are overturned on appeal when supported by complete clinical evidence.

Regulatory & Compliance Considerations

Prior authorization is now under direct, binding federal regulation. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), in effect since January 2026, requires Medicare Advantage, Medicaid, CHIP, and ACA marketplace plans to return urgent PA decisions within 72 hours and standard decisions within 7 days, provide a specific reason for every denial, and publicly report standardized PA metrics annually.

The rule is a direct regulatory response to the volume and severity of documented care-delay complaints, and it converts prior authorization turnaround from an internal operational metric into a public compliance obligation with real reporting consequences. It also raises the stakes on AI-assisted review: with denial reasons and turnaround times now reportable, plans face pressure to show that automation is speeding legitimate approvals rather than denying care at scale.

Firstsource's Patient Access solution ties automated prior authorization checks directly to the scheduling workflow, preventing denials before the first claim is submitted, and its work on appeals and grievances speeds the process that follows many PA denials.

‍