Prior Authorization Is Changing in 2027. Payer Administration Isn’t Going Away.

Federal interoperability rules will move prior authorization for certain payers toward standards-based electronic exchange. That will remove some manual transaction work. It will not remove the documentation, follow-up, exceptions, denials, appeals, and escalation that surround each request.

What is changing, and for whom

The Centers for Medicare & Medicaid Services finalized the Interoperability and Prior Authorization rule, CMS-0057-F, for a defined set of payers: Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and qualified health plan issuers on the federally facilitated exchanges. It does not govern commercial plans outside those categories, and its prior authorization provisions do not apply to drugs. Whether a particular request falls under the rule depends on the payer, the product, and the service.

Two sets of requirements matter for practices. Beginning in 2026, and on a schedule that varies by payer type and program, the impacted payers other than exchange issuers must decide expedited requests within 72 hours and standard requests within seven calendar days, must give a specific reason when they deny a request, and must publish prior authorization metrics each year. CMS prior-authorization API requirements generally begin in 2027, with specific compliance timing varying by payer type and program; implementation timing differs among the applicable Medicare Advantage organizations, Medicaid and CHIP programs, and qualified health plan issuers on the federally facilitated exchanges. The required interface lists the items and services requiring authorization, identifies the documentation each requires, accepts requests and returns responses, and reports whether a request is approved, denied with a reason, or pending more information.

On the provider side, clinicians in the Merit-based Incentive Payment System will report an Electronic Prior Authorization measure beginning with the 2027 performance period, and eligible hospitals beginning with the 2027 reporting period.

What electronic exchange reduces

For the payers the rule covers, some of the most repetitive manual steps become machine-readable: finding out whether a service needs authorization, finding the payer’s documentation requirements, sending the request, and checking on its status. Where the practice’s systems and the payer’s systems both support the standard, those steps can move out of fax queues and portal sessions. That is a real reduction in transaction burden, and practices should plan for it.

What it does not eliminate

Electronic submission changes how a request travels. It does not change what the request has to contain, who decides it, or what happens when the answer is not yes. The work that remains includes:

• Documentation requirements, which the payer still sets and the practice still has to meet
• Payer-specific rules, which differ by plan, product, and service
• Additional-information requests, which still have to be read, answered, and tracked
• Clinical review, which remains a decision by the payer’s reviewer and a conversation for the treating clinician
• Status management across every open request, whatever channel it traveled
• Exceptions: urgent cases, retroactive requests, services the standard does not cover, and payers outside the rule
• Expirations and renewals, which arrive on the payer’s schedule rather than the practice’s
• Denials, and the reconsiderations and appeals that follow them, each with its own deadline
• Administrative escalation when a request stalls and the routine channel produces nothing

Payers outside the rule

The rule does not reach every payer. A specialty practice’s commercial contracts, workers’ compensation carriers, and other plans outside the impacted categories keep their own processes for as long as they choose, and a practice’s authorization queue will hold requests traveling by every channel at once for years to come.

The question is no longer who fills out the form

When the transaction is manual, the natural question is who has time to complete it. When part of the transaction is automated, that question fades and a better one takes its place: who owns the workflow from the requirement check to the recorded determination, including everything that goes wrong along the way? Automation moves a step. Ownership is what makes sure the step, and the several around it, reach an outcome.

Practices that answer the ownership question will get more from the 2027 changes than practices that only reassign the typing. The record of what was requested, what the payer asked for, what was sent, when the determination arrived, when it expires, and what happened on the claim is the same record whether the request traveled by fax or by standard interface, and someone still has to keep it.

What this is not

This is not an argument against electronic prior authorization, and it is not a prediction about how quickly payers outside the rule will follow. It is a reminder that the administrative workflow around a request is larger than the request itself.

Ellery Health Partners is built around workflow ownership rather than form completion. Within a written scope, it determines requirements, coordinates documentation, submits through whatever channel the payer accepts, follows status, answers additional-information requests, tracks determinations and expirations, escalates stalled requests, and routes clinical questions and peer-to-peer discussions back to the treating clinician, with the record kept in the practice’s own systems.

Related services

• Prior Authorization
• Denials & Appeals
• Eligibility, Benefits & Financial Clearance
• Medication Access & Pharmacy Benefits

Sources

• CMS, CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) fact sheet. Impacted payers are Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and qualified health plan issuers on the federally facilitated exchanges. Beginning January 1, 2026, impacted payers other than exchange issuers must send decisions within 72 hours for expedited requests and seven calendar days for standard requests, must give a specific reason for denials, and must publicly report prior authorization metrics annually. The Prior Authorization API requirement begins January 1, 2027, applied to each impacted payer type on the basis the rule specifies; the interface must be populated with covered items and services, identify documentation requirements, support a request and response, and communicate approval with the end date, denial with a specific reason, or a request for more information. MIPS eligible clinicians report the Electronic Prior Authorization measure beginning with the calendar year 2027 performance period, and eligible hospitals and critical access hospitals beginning with the calendar year 2027 reporting period. The rule’s prior authorization provisions do not apply to drugs.
• CMS, CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) overview. The rule’s operational provisions take effect for impacted payers beginning January 1, 2026, and its Prior Authorization API requirements primarily beginning January 1, 2027.

Sources are cited for the substantive factual statements above. Payer-specific rules vary by plan, product, contract, and state.

Last updated September 2026. Educational reference, not legal or clinical advice.