Prior authorization (PA) is a utilization management process requiring healthcare providers to obtain approval from a health insurance payer before delivering a specific service, procedure, or medication. It serves as a regulatory checkpoint to verify that the proposed treatment is medically necessary and meets the plan’s coverage criteria before costs are incurred.

Also known as pre-authorization or coverage determination, this process is a foundational component of healthcare administration, acting as the primary gatekeeper between clinical decision-making and financial reimbursement.

Purpose and objectives of prior authorization

While often viewed by providers as an administrative hurdle, prior authorization serves specific strategic objectives for payers. The primary goals of this control mechanism include:

Cost containment: It prevents unnecessary or low-value services, ensuring healthcare dollars are spent on evidence-based treatments.
Patient safety: It checks against unsafe drug interactions or duplicative procedures (e.g., repeating a CT scan performed recently at another facility).
Fraud prevention: It validates that the service is being performed for a legitimate medical condition rather than for cosmetic or non-essential reasons.
Network utilization: It directs care to in-network facilities and preferred providers to manage costs under value-based care models.

How prior authorization works

Prior authorization workflow cycle

Step 1: Prescription/order
- Actor: Physician
- Action: Prescribes medication or orders procedure triggering PA requirement.
Step 2: Submission
- Actor: Provider administrative staff
- Action: Submits request via portal, fax, or electronic prior authorization (ePA).
- Attachments: Clinical notes and documentation.
Step 3: Clinical review
- Actor: Payer (nurses or medical directors)
- Action: Evaluates request against medical necessity guidelines.
Step 4: Determination
- Actor: Payer
- Action: Issues final outcome.

Outcomes:

Approved (certified)
Denied (adverse determination)
Pended (request for information)

The Standard Prior Authorization Workflow involves a structured exchange of clinical data between the provider and payer to verify medical necessity before services are rendered.

The workflow involves a structured exchange of clinical and administrative data between the provider and the payer, typically following these four steps:

Prescription/Order: A physician prescribes a medication or orders a procedure that triggers a PA requirement.
Submission: The provider’s administrative staff submits a request via portal, fax, or electronic prior authorization (ePA) standard, attaching clinical notes.
Clinical review: Payer nurses or medical directors evaluate the request against medical necessity guidelines.
Determination: The payer issues an outcome—Approved (Certified), Denied (Adverse Determination), or Pended (Request for Information).

Services and treatments requiring prior authorization

Not all services require approval. Payers typically reserve PA for high-cost, high-risk, or elective interventions, which most commonly include:

Specialty pharmaceuticals: High-cost biologics, cancer therapies, and non-formulary drugs.
Advanced imaging: These include MRI, CT, and PET scans.
Elective surgeries: Joint replacements, bariatric surgery, and cosmetic reconstruction.
Durable Medical Equipment (DME): Home oxygen systems, powered wheelchairs, and prosthetics.
Inpatient admissions: Non-emergency hospital stays and skilled nursing facility transfers.

Roles of payers, providers, and patients

Each stakeholder carries a specific responsibility in the authorization triangle.

{table 1}

Stakeholder	Primary role
Provider	Identifies the need for PA, gathers clinical documentation, and submits the request to the payer.
Payer	Establishes payer policies, reviews medical necessity, and issues the final coverage determination.
Patient	Often acts as the messenger when delays occur, though they are ultimately financially liable if care is received without approval.

Prior authorization vs. pre-certification vs. referrals

These terms are often used interchangeably but represent distinct administrative concepts.

Term	Definition	Primary use case
Prior authorization	Approval for a specific clinical service or drug based on medical necessity.	Surgery, MRI, Specialty Drugs.
Pre-certification	Notification to the payer of an admission to verify length of stay coverage.	Inpatient Hospitalization.
Referral	Official permission from a primary care physician (PCP) to see a specialist.	HMO Plan Specialist Visits.

Medical necessity criteria

Medical necessity is the objective, evidence-based standard used by payers to verify that a service is reasonable and appropriate for a diagnosis. Decisions are rarely subjective; they are governed by rigorous protocols, including:

Standardized guidelines: Most plans utilize nationally recognized clinical criteria (such as InterQual or MCG) to validate treatment requests.
Step therapy: For pharmaceuticals, approval often requires proof that lower-cost, standard treatments (e.g., generics) failed before an advanced therapy is authorized.
Clinical thresholds: Criteria evaluate both the Severity of Illness (how sick the patient is) and Intensity of Service (whether the care requires a hospital setting).

Clinical documentation requirements

Clinical documentation acts as the burden of proof. To satisfy medical necessity, providers must submit specific, tangible evidence rather than generic notes:

Objective data: Quantifiable evidence such as specific lab values, imaging reports (MRI/CT), or pathology results.
Conservative treatment history: For surgical requests, documentation must explicitly prove that non-invasive treatments (e.g., physical therapy) were tried and failed.
Current status: A recent history and physical (H&P) note detailing the diagnosis, comorbidities, and the physician's immediate rationale for the order.

Approval, denial, and appeal processes

The outcome of a PA request triggers one of three specific workflows:

Approval: Providers receive an authorization number, which allows them to schedule the service and ensures that the claim will not be denied due to a lack of authorization.
Denial: The payer rejects the request due to a lack of medical necessity or missing information. This triggers the denial management workflow.
Appeal: If denied, the provider or patient can challenge the decision through the appeals process, submitting new evidence or requesting a peer-to-peer review with a payer medical director.

Timeframes and turnaround standards

Regulatory bodies enforce strict turnaround times to prevent delays in care. While state laws vary, the standard benchmarks for decision-making are:

Standard review: Typically, 14 calendar days (Medicare) or 15 days (Commercial).
Expedited (Urgent) review: Required within 72 hours when the standard timeframe could seriously jeopardize the patient’s life or health.

Electronic prior authorization (ePA)

The industry is shifting from manual fax-based workflows to Electronic Prior Authorization (ePA). ePA integrates directly with the provider’s Electronic Health Record (EHR) to deliver the following advantages:

Automation: Automatically populates patient data from the EHR into the PA form.
Real-time transparency: Provides instant visibility into coverage requirements at the point of prescribing.
Efficiency: Reduces processing time from days to minutes, significantly lowering the administrative burden for staff.

Impact on patient access and care delivery

Prior authorization can inadvertently create significant barriers to care. When approvals are delayed, patient access to care is directly compromised in several ways:

Treatment abandonment: Patients often fail to fill prescriptions or schedule procedures due to administrative delays.
Delayed intervention: Waiting for coverage determination can cause conditions to worsen, leading to more complex and costly downstream treatments.
Continuity of care: Authorization requirements for chronic medications can disrupt therapy, potentially compromising patient safety and stability.

Administrative burden for healthcare providers

The operational cost of compliance is high. Healthcare administration teams face significant challenges due to manual workflows, including:

Resource drain: Medical practices spend an average of 14 hours per week on PA requests, diverting staff from direct patient care.
Provider burnout: The frustration of navigating complex payer policies and frequent denials contributes significantly to clinician burnout.
Financial strain: The overhead costs associated with claims management and authorization follow-ups reduce the overall financial viability of small practices.

Regulatory and policy considerations

Governments are increasingly scrutinizing PA practices to protect patients. Healthcare compliance now requires adherence to evolving state and federal rules, such as:

CMS mandates: The Centers for Medicare & Medicaid Services (CMS) sets strict timelines for decision-making (e.g., 72 hours for urgent requests) and requires specific reasons for denials.
Transparency laws: Many states now require payers to publicly disclose their approval rates and the specific clinical criteria used for denials.
Interoperability rules: New regulations compel payers to adopt API standards that allow data to flow freely between provider Electronic Health Records (EHRs) and payer systems.

Efforts to streamline and reform prior authorization

The industry is moving toward systemic reform to strike a balance between cost containment and efficiency. Key strategies currently being adopted include:

Gold-carding: A value-based care initiative where payers exempt providers with a history of high approval rates from PA requirements for specific services.
Automation and AI: Leveraging machine learning to instantly review clinical notes against medical necessity guidelines, enabling "touchless" approvals.
Standardization: Adoption of national standards (like HL7 FHIR) to replace proprietary payer portals with a single, unified submission method.

Services

Industries

Insights

Careers

About