On this page
Prior authorization is a requirement that health insurers impose before covering certain medical treatments, medications, or procedures. A provider requests approval in advance, the insurer reviews whether the treatment is medically necessary and covered, and the patient cannot proceed with that treatment at the insurer's expense until approval is granted or the denial is appealed.
- Prior authorization is a medical necessity review conducted before treatment delivery, not an arbitrary delay, insurers use it to verify that requested services align with clinical evidence and the member's coverage terms.
- Common treatments triggering prior authorization include specialty medications, certain procedures, and high-cost interventions, but emergency care, primary care visits, and many preventive services are exempt.
- Providers initiate requests electronically or by fax with clinical documentation; insurers must respond within seven calendar days for standard requests and 72 hours for urgent requests.
- A denied authorization is not final, patients have the right to file an internal appeal within 180 days, and if the plan upholds the denial, an external independent review is available.
- Emergency medical conditions bypass prior authorization entirely, and expedited pathways exist when waiting for standard review could jeopardize the patient's health or function.
Prior authorization sits at the intersection of clinical judgment and insurance coverage. It is the process by which a health insurer reviews a requested treatment, medication, or procedure before approving payment, a gatekeeping mechanism that exists in nearly every commercial and government health plan in the United States. For patients and providers, it is often experienced as a bureaucratic delay. For insurers, it is a tool to verify that treatments are medically necessary and appropriate for the patient's condition and coverage.
Understanding prior authorization means understanding how insurers make coverage decisions. It is not a barrier unique to one plan or one provider; it is a structural feature of how health insurance works. This article explains what prior authorization is, why insurers use it, which treatments require it, how the process unfolds, and what happens when a request is denied.
What prior authorization actually is
Prior authorization is a process in which a health insurer reviews a requested service or medication before it is delivered to determine whether it is medically necessary and covered under the patient's health plan. The insurer does not pay for the treatment until this review is complete and approval is granted.
The key distinction is timing. Prior authorization happens before the service is delivered, which separates it from other insurance decisions. A claim review happens after treatment is already provided; prior authorization happens in advance. This advance review is why it affects access: a patient cannot proceed with an authorized treatment at the insurer's expense without first obtaining approval.
Prior authorization is not a clinical judgment made by the insurer's own physicians in isolation. It is a structured review against the patient's coverage terms, clinical evidence, and the specific details of what the provider is requesting. The insurer asks: Does this treatment fit the diagnosis? Is it supported by clinical guidelines? Is it covered under this patient's plan? Does the patient meet any medical criteria the plan has set?
Why insurers require prior authorization
Insurers use prior authorization for three practical reasons: to verify medical necessity, to prevent inappropriate or duplicate treatment, and to manage costs by ensuring treatments align with evidence-based guidelines.
Medical necessity is the core justification. Not every treatment works for every patient, and not every patient needs every available option. A medication that is appropriate for one diagnosis may be inappropriate for another, even if both are covered by the plan. Prior authorization allows the insurer to confirm that the requested treatment matches the patient's documented condition and clinical presentation. If a provider requests a specialty drug for an indication outside the drug's FDA approval, or if clinical guidelines recommend a less expensive first-line treatment before the requested option, prior authorization catches that mismatch before payment occurs.
Cost management is the second driver. Some treatments are significantly more expensive than alternatives. Prior authorization does not deny treatment; it ensures the insurer has reviewed whether the clinical case justifies the expense. In many cases, approval is granted. In others, the insurer may approve a lower-cost alternative first, or may require documentation that standard options have already been tried.
The third reason is preventing duplicative or concurrent treatment. Without prior authorization, a patient could receive the same service from multiple providers simultaneously, or could receive conflicting treatments. Prior authorization creates a checkpoint that prevents waste and ensures coordination.
When prior authorization is needed
Prior authorization is not required for all medical care. It applies to specific categories of treatment, and the exact list varies by plan, by state, and by whether the patient is covered by commercial insurance, Medicare, or Medicaid. Understanding which treatments require it helps patients and providers know when to expect the approval process.
The scope of prior authorization has been the subject of recent regulatory attention. In 2024, the Centers for Medicare and Medicaid Services (CMS) issued a final rule on interoperability and prior authorization that standardizes some requirements across Medicare Advantage and Medicaid managed care plans, with implementation deadlines beginning in 2026.
Treatments and medications that trigger it
Prior authorization most commonly applies to specialty medications, certain procedures, and high-cost interventions. Medical specialty drugs, biologic medications and complex injectables used for conditions like rheumatoid arthritis, psoriasis, and cancer, typically require prior authorization. Hospital specialty drugs, including certain intravenous and injectable medications, also require approval.
Procedures that are expensive, elective, or used for specific indications often trigger prior authorization. Examples include advanced imaging (MRI, PET scans), certain surgical procedures, and mental health or substance abuse treatment in some plans. The exact list depends on the insurer's policies and the state's regulatory requirements.
Some treatments require prior authorization only in specific contexts. Suppose a patient is prescribed a brand-name medication when a generic equivalent is available. The insurer may require prior authorization to confirm that the generic is not appropriate for this patient's case, or the patient may need to try the generic first before the brand-name drug is approved. This is called a step therapy or fail-first requirement.
Treatments that do not require it
Emergency care does not require prior authorization. If a patient arrives at an emergency department with acute symptoms, chest pain, severe injury, difficulty breathing, the hospital treats the emergency condition first and handles authorization afterward, if needed at all. The definition of an emergency medical condition is broad: acute symptoms of sufficient severity that a prudent layperson could reasonably expect the absence of immediate medical attention to result in serious jeopardy to health, serious impairment to bodily functions, or serious dysfunction of any bodily organ or part.
Many other services are exempt. Primary care visits, routine preventive care, and certain mental health and substance abuse treatments are often excluded from prior authorization requirements. Some states have enacted laws that prohibit prior authorization for specific services. Under Texas law, for example, insurance companies cannot require prior authorization for emergency care, urgent outpatient care, primary care visits, outpatient mental health or substance abuse treatment (with limited exceptions for certain drugs), cancer treatments following national guidelines, specific eye treatments to prevent vision loss, certain preventive healthcare services, pediatric hospice care, care for newborns with withdrawal symptoms, and treatments under risk-sharing agreements.
The boundary between services that require authorization and those that do not is set by each plan and by state law. Patients can ask their insurer directly whether a specific treatment requires prior authorization before scheduling it.
Who requests prior authorization and how
Prior authorization is initiated by the provider, the physician, hospital, or clinic that is recommending the treatment. The patient does not submit the request directly; the provider's office handles it. However, patients should understand the process so they can follow up if approval is delayed.
The request process step by step
The workflow begins when a provider determines that a patient needs a treatment that requires prior authorization. The provider's office gathers the necessary clinical documentation, the patient's diagnosis, the specific treatment being requested, clinical notes explaining why this treatment is appropriate, and any relevant test results or imaging.
The provider then submits the request to the insurer. Most requests are submitted electronically through the insurer's provider portal, which is faster and allows real-time status tracking. Some providers still submit requests by fax or phone, particularly in smaller practices. The request includes the diagnosis codes, details of the service or medication, and supporting clinical documentation.
The insurer receives the request and assigns it to a reviewer, often a nurse or physician employed by or contracted with the plan. The reviewer examines the clinical documentation against the plan's coverage criteria and clinical guidelines. They verify that the diagnosis matches the treatment, that the treatment is covered under the patient's specific plan, and that the clinical case supports the request.
The reviewer then makes a decision: approve, approve with conditions, or deny. An approval means the insurer will cover the treatment. An approval with conditions might mean the patient must try a lower-cost option first, or that approval is granted for a limited number of doses. A denial means the insurer will not cover the treatment unless the decision is appealed.
The insurer communicates the decision back to the provider, who then informs the patient. If approved, the patient can proceed with the treatment. If denied, the patient and provider have the right to appeal.
How long approval typically takes
Approval timelines are standardized by regulation for many plans. Under CMS rules, impacted payers must respond to standard prior authorization requests within seven calendar days and to expedited (urgent) requests within 72 hours. Medicare Advantage organizations follow the same timeline, and Medicaid managed care organizations must respond within seven calendar days for standard requests and 72 hours for urgent requests.
These are regulatory minimums. Some insurers respond faster, and some requests may take longer if additional clinical information is needed. If the insurer requests more documentation, the clock may restart or the timeline may be extended.
An expedited request is appropriate when waiting for the standard seven-day timeline could seriously jeopardize the patient's life, health, or ability to regain maximum function. Providers can mark a request as urgent if that is the clinical situation. Urgent pre-service requests must be decided within 72 hours, and urgent concurrent requests (for treatment already underway) must be decided within 24 hours.
Patients should ask their provider's office to confirm that a prior authorization request has been submitted and to provide an expected approval date. If approval is delayed beyond the regulatory timeline, the patient or provider can contact the insurer to inquire about status.
What happens when authorization is denied
A denial of prior authorization is not the end of the process. Patients have appeal rights, and many denials are overturned on appeal.
When an insurer denies a prior authorization request, they must provide the patient with a written explanation of the denial, including the reason and the clinical basis for the decision. The patient then has the right to appeal. Under federal law, consumers have up to 180 days after finding out the claim was denied to file an internal appeal, requesting the health plan to review the denial decision in a fair and complete way.
An internal appeal is a review of the same decision by the insurer. In many cases, a different reviewer examines the request, or additional clinical information is submitted that was not available during the initial review. Some denials are reversed at this stage.
If the health plan upholds the initial denial after the internal appeal, the consumer may be eligible for an external review conducted by an independent third-party reviewer. An external review is conducted by a reviewer who does not work for the insurer, which adds an independent perspective to the decision.
Patients can also work with their provider to appeal. Providers often have experience with the insurer's appeal process and can submit additional clinical documentation or request peer-to-peer review, in which the treating physician speaks directly with the insurer's medical reviewer to discuss the clinical case.
Prior authorization in emergency situations
Emergency care is exempt from prior authorization requirements. If a patient is experiencing an acute medical emergency, severe chest pain, difficulty breathing, serious injury, acute neurological symptoms, they should seek emergency care immediately without waiting for authorization.
The definition of an emergency is broad and patient-centered: an acute condition of sufficient severity that a prudent layperson could reasonably expect the absence of immediate medical attention to result in serious jeopardy to health, serious impairment to bodily functions, or serious dysfunction of any bodily organ or part. This means the patient's perception of urgency matters. If the patient reasonably believes the condition is emergent, they should seek emergency care.
Once the emergency is stabilized, the hospital or emergency department will handle authorization and billing. The insurer cannot deny payment for emergency care that was medically necessary, even if prior authorization was not obtained in advance.
For urgent but non-emergency situations, providers can request expedited prior authorization. If a patient needs treatment soon but not in an emergency department, the provider can submit the request and mark it as urgent. The insurer must respond within 72 hours, which is much faster than the standard seven-day timeline. This pathway allows patients to access time-sensitive care without the delay of standard review.
How prior authorization connects to insurance coverage decisions
Prior authorization is one tool among several that insurers use to manage coverage and costs. Understanding its place in the broader landscape helps explain why it exists and how it interacts with other insurance mechanisms.
Insurance coverage decisions happen at multiple levels. First, the insurer decides which drugs, procedures, and treatments are covered under the plan at all. This is the formulary for medications or the plan's coverage policy for procedures. If a treatment is not on the formulary or is not covered, prior authorization cannot override that decision.
Second, the insurer may set conditions on coverage. A drug might be covered only for specific diagnoses, or only after other treatments have been tried. Prior authorization enforces these conditions by requiring the provider to document that the patient meets them.
Third, the insurer may require prior authorization as a check on whether the treatment is appropriate for this specific patient. Even if a treatment is covered and the patient meets the general conditions, prior authorization allows a clinical review to confirm that the diagnosis and clinical presentation justify the requested treatment.
Fourth, the insurer may use step therapy or fail-first requirements, in which a patient must try a lower-cost or first-line treatment before a more expensive option is approved. Prior authorization documents that the patient has tried the first-line treatment and that it did not work or was not tolerated.
Recent regulatory changes have focused on making prior authorization more efficient and transparent. The CMS Prior Authorization API allows providers to determine whether prior authorization is required, identify documentation requirements, exchange prior authorization requests, and receive payer decisions from within their electronic health records or other health IT systems. This technology reduces administrative burden and speeds up the approval process by automating routine requests and eliminating the need for phone calls and faxes.
Do this automatically
A physician's office managing prior authorization for specialty medications, certain procedures, and high-cost interventions must spend time on each request, multiply that across dozens of patients weekly, and repeat this cycle throughout the year, all while verifying medical necessity and preventing duplicate treatments. Software can automate the submission of these requests to insurers, track approval status in real time, and flag cases requiring human review. Healthcare research runs this kind of analysis end to end and cites every figure back to its original source, across as many subjects as you need, with Mimir attaching a citation to every figure. It will not predict a trial's outcome or advise on anyone's treatment. Those decisions stay with clinicians and regulators, and deliberately so. Every plan includes it, including the free one.
Start your first report and run it on something you already know well.
This article is general information about healthcare and life-sciences topics. It is not medical advice, diagnosis, or treatment guidance, and it is not a substitute for a qualified professional. Any treatment decision should be discussed with a clinician.
