Prior Auth Requirements That Changed Without Practice Notice

What the major payers changed in 2025 and 2026, and what they promised

Prior authorization requirements change on a payer's calendar, not a practice's, and the denials that follow aren't billing mistakes so much as evidence of a gap in information. A checklist that got a claim approved in March can turn into a liability by June, and nobody at the practice necessarily knows the rule moved. That's the operational reality practices are working under through 2026, and it comes with a price tag.

In June 2025, more than 50 major health insurers, among them UnitedHealthcare, Aetna, Cigna, Humana, Elevance Health, and the plans under the Blue Cross Blue Shield Association, pledged publicly to simplify prior authorization. The commitments had specifics attached: reduce PA requirements for certain services starting January 1, 2026, honor existing authorizations for 90 days when a patient switches plans mid-treatment, and process 80% of electronic PA approvals in real time by January 1, 2027.

Some of that occurred on schedule. UnitedHealthcare dropped 231 procedures from its authorization list in December 2025, with more cuts committed through the rest of 2026. Cigna eliminated close to 100 services. Humana removed roughly a third of its outpatient authorization requirements effective January 1, 2026. AHIP's progress report called this a win, claiming leading insurers had eliminated 11% of prior authorizations across a range of medical services, translating to 6.5 million fewer authorizations for patients.

An operational trap underlies that framing, and it's the one that actually matters for a billing office. A removal from a PA list is exactly as unannounced as an addition to one. If a service no longer requires authorization and the practice hasn't heard, staff keep sending it through the PA queue anyway, burning hours and delaying care for a step that no longer needs to happen. The industry marks this down as a reduction in friction. For the practice still running last quarter's checklist, the friction never left.

The gap between what payers report and what physicians are experiencing in 2026

AHIP's numbers and the numbers coming out of physician surveys describe two different worlds, and both are true at once. AHIP claims 93% of medical claims and 96% of prescription drug claims never touch prior authorization. KFF, looking specifically at Medicare Advantage, found that 99% of MA enrollees are required to obtain prior authorization for at least some services. Aggregate PA volume can shrink industry-wide while the specific services that drive a practice's revenue stay locked behind the same gate they've always been behind.

Physician surveys found denials still climbing, with the June 2025 pledge sitting in the background the entire time and doing little to bend that curve. UnitedHealthcare topped the "high burden" list, with 75% of physicians reporting extreme difficulty navigating its PA process. Humana followed at 65%, with other major insurers also drawing high burden reports from physicians. Reductions in overall PA volume are not distributing evenly across the services physicians actually order, and that unevenness is the whole story.

The explanation isn't complicated, even if the industry prefers to talk around it. High-cost, high-stakes categories, imaging, specialty drugs, surgical procedures, are exactly where insurers have the strongest financial incentive to keep the gate shut tight, and exactly where a practice can least afford to eat the revenue loss. UnitedHealthcare states that PA currently applies to about 2% of its medical services, and that roughly 92% of submitted authorizations clear in under 24 hours. Take that at face value. It still leaves an 8% that doesn't clear quickly, and the physician-reported burden data says that sliver lands disproportionately on the most clinically urgent, most expensive requests, which is exactly where a denial does the most damage.

How payer AI adjudication systems and compressed appeal windows turned a slow problem into a fast one

UnitedHealthcare, Humana, Aetna, and the Blue Cross Blue Shield plans have all deployed AI systems that check PA requests against internal clinical criteria databases before a human physician advisor ever opens the file. Two proprietary guideline sets, InterQual (owned by Optum, which sits under UnitedHealth) and MCG (formerly Milliman Care Guidelines), dominate that layer, and several insurers stack their own internal criteria on top of it. None of it is published anywhere in plain language a practice can actually go read.

Decisions that used to take a human reviewer several business days now come back in hours. That sounds like progress until you weigh what it does to the margin for error: 60% of physicians surveyed said they're concerned AI is increasing denial rates outright, not just processing the same denials faster. A wrong answer that arrives in three hours instead of three days doesn't hand a practice more time to catch the mistake and resubmit. It hands them less. The appeal clock doesn't stretch to match the speed of the system that triggered it, so a faster denial engine shortens the runway a billing team has to notice anything changed.

What these silent changes cost in lost revenue

The dollar consequences aren't hypothetical, and they run in one direction only. Experian Health's State of Claims survey found 41% of providers reporting that more than 10% of their claims were denied, up from 38% in 2024 and 30% in 2022. That's a slope, not a plateau, and it gets steeper with every year the survey runs.

Medicare Advantage shows the sharpest edge of it. MA insurers made close to 53 million prior authorization determinations in 2024, denying 7.7% in full or in part, up from 6.4% the year before. Only 11.5% of denied MA PA requests got appealed at all, even though more than 80% of the appeals that were filed ended in the denial getting overturned. The gap between an 80%-plus success rate on appeal and an 11.5% appeal rate is an operational problem. It's an operational one, and it sits there as recoverable revenue that most practices simply never collect.

The compounding happens for a specific mechanical reason: a rule moves and a practice keeps filing the same technically correct paperwork against that moved rule. One unannounced PA policy change doesn't produce one denial. It produces a wave, because the front office has no way to know the checklist is stale, and nobody notices until the denials have stacked up enough to look like a pattern instead of an accident.

What CMS-0057-F and the 2026 regulatory framework require, and what they leave unaddressed

CMS-0057-F stopped being a future concern on January 1, 2026. The rule was released in January 2024, giving payers a two-year runway to prepare, and that runway has now run out. It applies to Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and Qualified Health Plans sold on the Federal Exchange, which together cover the bulk of most private practices' patient panels.

The rule tightens timelines that had gone slack for years. Standard PA requests now have to be decided within 7 calendar days. Urgent or expedited requests get a 72-hour clock. Every denial now has to carry a specific reason code, replacing the generic "does not meet criteria" that left a billing team guessing at what actually went wrong. Starting in 2026, payers also have to publish aggregated PA metrics, approval rates, denial rates, decision times, appeal overturn rates, on public websites every year. CMS estimates the rule saves $15 billion over ten years in reduced administrative burden.

None of that forces a payer to give advance notice before changing what actually requires authorization, and that's the gap that matters most. Faster decisions and clearer denial codes help, but they arrive after a practice has already submitted the wrong request under an outdated assumption. CMS-0057-F fixes the back half of the problem: how fast a decision comes back, and how legible the reason is once it does. The front half, the moment a requirement quietly shifts and nobody at the practice hears about it, is still entirely on the practice to manage.

How practices can build a workflow that catches PA changes before they generate denials

The fix starts with a mental shift more than a technical one. A PA requirement list isn't a static reference document a practice checks once and files away. It behaves like a live feed, and it has to get watched the way a trading desk watches a price ticker. Treating it as fixed means the practice keeps generating the same "technically correct paperwork against an outdated rule" problem month after month.

Practically, that means re-verifying PA requirement lists for every active payer on a quarterly schedule, because payer notices often just don't arrive. It also means using the CMS-0057-F public reporting data now that it exists. For the first time, practices have access to payer-level benchmarks on approval rates, denial rates, and appeal overturn rates, and those published numbers point straight at which payers deserve the closest watch. A payer whose denial rate climbs in its own public report is a payer whose requirement list probably just moved.

Denial code tracking matters just as much, and CMS-0057-F makes it possible in a way it wasn't before, since every denial now carries a specific reason code instead of a vague catch-all. A practice that tracks denial codes by payer and by service will see a rule change appear as a spike in one specific code well before it turns into a revenue trend line worth worrying about. Catch that spike in real time, rather than at month's end when the batch finally gets reconciled, and the fix is one clean resubmission instead of a write-off on a quarter's worth of the same mistake.