The prior-auth clock, 2026 edition
Since January, most government-program payers have had to answer within days and tell you why they said no. Here's how to use the clock instead of waiting on it.
Since January 1, 2026, Medicare Advantage, Medicaid, and CHIP plans must decide urgent prior authorizations within 72 hours and standard ones within 7 calendar days, with a specific reason for any denial. Drugs are excluded. Write down when you submitted, and make them name the reason.
Prior authorization used to run on the payer's clock. For a big slice of patients, it now runs on a federal one.
The rule, in one table
Under CMS-0057-F, starting January 1, 2026: (CMS)
| Urgent (expedited) | Standard | |
|---|---|---|
| Medicare Advantage, Medicaid, CHIP | 72 hours | 7 calendar days |
| Every denial | Specific reason required | Specific reason required |
Two limits matter as much as the clock:
- Drugs are out. The timeframes cover medical items and services, not drugs — whether the drug runs through the medical or the pharmacy benefit.
- Not every payer. Plans on the federal marketplace kept their older timelines under this rule, and employer plans aren't covered by it at all.
On January 1, 2027, the payers come due for APIs — including a Prior Authorization API that reports approved, denied with a reason, or needs more information. (CMS fact sheet)
Using the clock
- Write down the submission time. The clock starts at receipt. You can't hold anyone to a deadline you can't date.
- Mark urgent when it's urgent. "Waiting could seriously jeopardize life, health, or function" is the standard. Use it when it's true; don't use it to jump the line.
- Make them name it. "Not medically necessary" alone isn't the specific reason the rule requires. Ask which criterion wasn't met. That's the sentence your peer-to-peer or appeal has to answer.
- Read the metrics. Payers now post their approval rates and turnaround times publicly. Know which plans in your panel are slow before the patient is in the chair.
The resident version
You will not run a prior-auth department. You will write the note it depends on. The note that clears prior auth is the note that states the indication, what was tried, why it failed, and why this next step — in that order.
Check yourself
0 / 4 revealedAnswer in your head first, then tap. Recall beats rereading.
© 2026 TRENCHWORK · Dr. Hemanshu Patel · caremd.ai · Educational use only