Medicare Advantage prior authorization rules, mandated by CMS-0057-F, establish strict timelines for approval decisions and require human clinical review. MA plans must respond to expedited requests within 72 hours and standard requests within 7 days. Plans cannot issue denials based solely on artificial intelligence; all decisions require documented review by a qualified clinician. Digital APIs must become operational by January 2027, enabling real-time authorization across healthcare systems.
Medicare Advantage plans, medical review departments, clinical nurse reviewers, utilization management staff, and physicians all face these requirements. Patients depend on timely authorizations to access needed care. Hospital systems, specialty practices, and ambulatory surgery centers must submit requests through compliant channels. Administrative staff must track authorization timelines and escalate delayed decisions. Healthcare networks must integrate with plan APIs for seamless authorization exchange.
CMS-0057-F digital prior authorization requirements became effective January 1, 2026. Plans must transition to FHIR APIs by January 1, 2027. CMS enforces compliance through audits, plan oversight, and third-party verification. Non-compliance results in corrective action plans, potential enrollment suspension, and civil monetary penalties. State insurance departments review MA plan authorization performance in annual compliance audits.
Expedited authorization applies when a provider certifies that standard timelines may jeopardize patient health. Examples include urgent surgeries, life-threatening conditions, and emergency care. Standard authorization applies to all other services.
A qualified clinician typically means a physician, nurse practitioner, or physician assistant with relevant specialty expertise related to the authorization request. The reviewer's credentials must be documented with the authorization decision.
Requests approved after 72 hours still require documentation of the delay. CMS considers repeated timeline violations a compliance concern, potentially triggering corrective action requirements and plan oversight.
CMS-0057-F Rule | Prior Authorization Rules | CO-197 Not Authorized | CO-50 Service Denied
Optimize your MA authorization workflows with Altair's compliance tools.