CMS-0057-F changed how fast insurers have to respond to prior authorization requests, forced them to explain every denial, and made them publish their approval and denial rates publicly for the first time.
What it did not change is the volume of requests landing on your desk, the manual submission methods most practices still use, or the clinical criteria insurers apply when they decide to deny.
That split defines where your team stands today. Your staff is still spending 13 hours a week on a process that got faster on the payer side but no lighter on yours.
But where does the operational value actually sit, and what should your team be doing differently right now? Here’s what you need to know.
What CMS-0057-F Changed on January 1, 2026
The CMS interoperability and prior authorization final rule, finalized in January 2024 and shortened to CMS-0057-F, split its requirements into two phases. The first phase landed on January 1, 2026, targeting operations and not technical infrastructure.
Three requirements are now in effect: expedited prior authorization requests must receive a decision within 72 hours, standard requests must receive one within seven calendar days, and every denial must include a specific, documented reason.
Expedited requests
Impacted payers must return a decision within 72 hours.
These requirements apply to Medicare Advantage prior authorization plans, Medicaid and CHIP managed care entities, state Medicaid and CHIP fee-for-service programs, and Qualified Health Plan issuers on the federally facilitated exchanges. Commercial and self-funded employer plans remain outside the rule entirely.
A fourth requirement followed close behind. By March 31, 2026, every impacted payer had to publicly report prior authorization metrics for 2025, including approval rates, denial rates, and response times.
What the First Metrics Reports Revealed
The transparency requirement did what it was designed to do: it made the numbers visible. And those numbers tell a story most revenue cycle management teams already suspected.
A KFF analysis of the first public reports found that Medicare Advantage insurers denied 12% of standard prior authorization requests in 2025, while Medicaid managed care insurers denied 14%. ACA Marketplace insurers denied 18%.
Medicare Advantage: 12% denied
The first public reports show a meaningful denial burden—and a strong recovery signal once those denials are appealed.
66% overturned on appealThis showcases that denial rates varied widely by insurer, ranging from 2% to 25%.
The appeal numbers expose the real cost. Two-thirds of Medicare Advantage denials were overturned on appeal, 47% in Medicaid managed care, and 43% in the ACA Marketplace.
Most denied revenue was recoverable, but only if someone had the capacity and the clinical documentation to pursue it.
What CMS-0057-F Did Not Change
The 2026 provisions addressed speed and transparency, but they left the structural reasons prior authorization remains one of the most labor-intensive processes in healthcare completely intact.
Drug Prior Authorizations Are Excluded
The rule covers medical items and services only. Practices handling specialty pharmacy referrals or high-cost prescriptions will see no change. The fax machine, somehow, continues to outlive every wave of healthcare modernization. At this rate, it deserves a lifetime achievement award from CMS.
Commercial and Employer-Sponsored Plans Are Not Covered
Most physician practices serve a mixed payer panel. Even after every government-regulated plan complies, a significant share of authorization volume will still flow through manual channels with no federal timeline.
The Rule Standardizes the Transaction While Clinical Criteria Stay With Payers
Payers still write their own medical necessity policies. The 72-hour and seven-day windows guarantee a response, but they do nothing to reduce the likelihood that the response is a denial.
Electronic Prior Authorization Adoption Is Still Low
According to the 2024 CAQH Index, only 35% of prior authorization transactions were conducted fully electronically. The 2025 CAQH Index identified more than $20 billion in potential savings from broader automation across all administrative transactions, including prior authorization.
The rule created deadlines for decisions, but portal logins, phone calls, and fax cover sheets remain in play.
Enforcement Mechanisms Are Undefined for Providers
The rule places legal obligations on payers. If a payer misses the 72-hour window or omits a denial reason, compliance enforcement runs through CMS oversight of plan participation, and not through any channel a billing manager can access.
What Your Team Can Actually Do With This Right Now
The 2025 AMA Prior Authorization Physician Survey found that practices complete an average of 40 prior authorization requests per physician per week, spending approximately 13 hours on the process.
Forty percent of practices employ someone dedicated entirely to prior authorization. And only one in three physicians believe recent insurer reform pledges will produce meaningful change.
Those numbers have not moved because the 2026 provisions changed the rules around decisions. However, there are two elements that did change that your operation should be acting on today.
Denial reason data is now required on every decision: If your denial management process does not capture, categorize, and feed this data back into submission quality, you are leaving recoverable revenue on the table.
Structured denial tracking turns individual losses into pattern-level corrections across your payer mix.
Public payer metrics are now available for benchmarking: Your eligibility verification and authorization teams can compare insurer behavior at the plan level, informing payer contracting decisions, appeal prioritization, and workforce management planning.
The 2027 API Deadline Moves Work
The API deadline on January 1, 2027, will bring four FHIR-based connections between payer and provider systems. Those connections will shift submission work from manual to automated, but the exception handling, appeals, and denial management workload will grow rather than shrink.
Frequently Asked Questions
What is CMS-0057-F?
A federal rule finalized in January 2024 requiring impacted payers to improve prior authorization decision timelines, provide denial reasons, report metrics publicly, and implement standardized API connections by January 2027.
What changed on January 1, 2026?
Impacted payers must now decide expedited requests within 72 hours, standard requests within seven calendar days, and include a specific reason with every denial.
Does CMS-0057-F apply to commercial insurance or drug prior authorizations?
No to both. The rule covers Medicare Advantage, Medicaid and CHIP managed care, and Qualified Health Plan issuers on the federally facilitated exchanges. Commercial plans are excluded. The rule applies to medical items and services only, not prescription drugs.
Where can I find payer prior authorization metrics?
Impacted payers publish these on their public-facing websites annually. The first reports, covering 2025, were due March 31, 2026.
When does the Prior Authorization API go live?
January 1, 2027. Four FHIR-based API connections will be required for all impacted payers.
Your Prior Authorization Workflow Changed on Paper. Centro Can Change It in Practice
The 2026 provisions gave your team faster answers and better denial data. They did not reduce the volume, simplify the submissions, or staff the appeals queue.
Centro runs prior authorization operations for physician practices, clinics, and hospitals across the country.
With 15+ years in healthcare, five delivery countries, and a team model built on continuity, our staff works inside your EHR, maintains direct contact with insurers, and stays on your account for the long term.
We bring HIPAA compliance, structured denial management, and service level agreements built around the metrics that drive your revenue cycle.
Ready to turn faster payer decisions into recovered revenue?
Reach out to usCentro is a healthcare BPO and revenue cycle management partner founded in 2009 in Virginia. With 15+ years in healthcare and five delivery countries, Centro supports physician practices, clinics, and hospitals across prior authorization, eligibility verification, claims, and denial management.