What Is Prior authorization?
Every prior authorization request follows a predictable sequence, but the details matter. Missing a single document or entering the wrong code can add days to the process and increase your denial risk. Here is the step-by-step prior authorization process that works across most commercial and government payers.
The Steps for Submitting a Prior Authorization Request
Every prior authorization request follows a predictable sequence, but the details matter. Missing a single document or entering the wrong code can add days to the process and increase your denial risk. Here is the step-by-step prior authorization process that works across most commercial and government payers.
Step 1: Verify Patient Eligibility
Before you submit a prior authorization request, confirm that the patient’s insurance is active and that the planned service actually requires PA under their specific plan. Log into the payer’s portal, enter the member ID and date of birth, and check the benefits summary.
This step catches problems early. If coverage lapsed, or if the service is covered without PA, you save your team hours of unnecessary work. According to the AMA’s 2024 survey, practices complete an average of 39 PA requests per week. Eliminating requests that were never needed in the first place is the fastest way to reduce that volume.
Check three things during eligibility verification: Is the insurance active as of today’s date? Does the specific service or drug require PA under this patient’s plan? Is the patient enrolled in a plan type (HMO, PPO, Medicare Advantage, Medicaid MCO) that routes to a different PA department or portal? Getting the plan type wrong sends the PA to the wrong queue, adding days to the decision timeline. For Medicaid managed care patients, confirming which MCO the patient is enrolled with is essential because each MCO has its own PA portal, criteria, and processing timeline. Submitting a PA to the state Medicaid fee-for-service system when the patient is enrolled in a managed care plan results in an automatic rejection that requires resubmission to the correct MCO, wasting days and potentially violating payer-specific filing windows. Outsourced insurance eligibility verification handles this front-end check so PA requests only go out for services that actually need authorization.
Step 2: Gather Required Clinical Documentation
Assemble everything the payer will need to make a decision:
| Item | Details |
|---|---|
| Patient demographics: | Member ID, date of birth, full legal name |
| Provider information: | Attending physician name, NPI number, tax ID |
| Procedure details: | CPT code(s), ICD-10 diagnosis code(s), place of service |
| Service dates: | Requested start and end dates for the authorization window |
| Supporting clinical records: | Office visit notes, lab results, imaging reports, treatment history, and any peer-reviewed guidelines that support medical necessity |
The more complete your initial submission, the less likely the payer will come back asking for additional information. MGMA data shows 35% of practices spend more than 35 minutes per PA request. Incomplete submissions are the primary reason PA requests stall. Building a standardized PA documentation folder for each patient that consolidates all relevant records in one place before the PA coordinator begins the submission saves 10 to 15 minutes per request and reduces the chance of submitting an incomplete package.
Step 3: Complete the Authorization Form
Log in to the payer’s prior authorization portal and select the correct request type (outpatient, inpatient, diagnostic, pharmacy, DME). Enter the provider and facility details exactly as they appear in the NPI database. Mismatches between your submission and the NPI registry trigger automatic rejections.
Attach all clinical documentation. Most payer portals accept PDF uploads. Label your files clearly (e.g., “OfficeVisitNotes_2026-04-10.pdf”) so the reviewer can find what they need without delay. A common mistake is submitting the PA form without attachments and then uploading documentation separately hours or days later. Some payer systems close the submission window once the form is submitted, requiring a new request if documentation was not included. Always attach everything before clicking submit. If the portal has a file size limit, compress multi-page clinical notes into a single PDF rather than splitting them across multiple uploads where pages can be missed or separated from the request.
Step 4: Submit the Request and Record the Transaction ID
Double-check every field before clicking submit. Verify CPT codes, ICD-10 codes, dates of service, and patient demographics one final time. The payer portal will generate a transaction ID or reference number. Record this immediately in the patient’s chart and your PA tracking system.
Under CMS-0057-F, which took effect January 1, 2026, impacted payers must return standard PA decisions within 7 calendar days and expedited decisions within 72 hours. If you are submitting to a Medicare Advantage plan, Medicaid MCO, or QHP issuer, these timelines are now enforceable. Track them.
Step 5: Monitor Status and Respond to Payer Requests
Check the payer portal daily for status updates. PA requests typically land in one of four categories: approved, denied, pending review, or additional information requested.
If the payer asks for more documentation, respond the same day. Every day of delay extends the decision clock and pushes the patient further from treatment. If the request requires a peer-to-peer review between the payer’s medical director and your prescribing physician, schedule it as soon as the notification arrives. Peer-to-peer reviews have a high overturn rate when the prescribing physician participates directly, because the clinical nuance that a form cannot capture often resolves the payer’s concern within a 10-minute conversation. The AMA reports that 29% of physicians have seen PA lead to serious adverse events, including hospitalization and permanent harm. Speed matters.
Step 6: Document the Outcome and Notify the Care Team
Whether the PA is approved or denied, record the outcome in the patient’s EHR immediately:
- Save the approval letter with the authorization number, approved units, and expiration date
- If denied, save the denial notice with the specific reason code
- Notify the ordering physician and scheduling team so they can proceed (or appeal)
- Add the transaction ID and reference number to your billing records
For denials, review the reason carefully. Under CMS-0057-F, payers must now disclose the specific reason for denial. Use this information to strengthen your appeal or adjust future submissions to that payer.
Create a denial reason tracking log organized by payer. When the same denial reason appears three or more times from the same payer within a 90-day period, that pattern indicates a systemic gap in your submission workflow for that payer. Common patterns include a specific payer requiring a clinical data element that other payers do not, a payer requiring step therapy documentation that your team is not collecting, or a payer using a different medical necessity standard than the clinical guidelines your physicians reference. Tracking these patterns converts individual denials into process improvements that prevent future denials across all patients with that payer.
The AMA reports that 33 percent of physicians say PA has led to a patient hospitalization that could have been avoided with timely treatment. That hospitalization costs the healthcare system thousands of dollars more than the original service that was awaiting authorization.
Why Prior Authorization Denials Are Rising (And What You Can Do About It)
Prior authorization denial rates have climbed steadily. Industry data from the live Staffingly post shows the PA denial rate rose from 5.7-5.8% in 2019-2021 to 7.4% in 2024, a 30% increase over five years. Meanwhile, 93% of physicians tell the AMA that PA delays necessary care, and 78% say patients abandon treatment because of PA obstacles.
The cost is not just clinical. MGMA reports that practice spending on PA staffing jumped 43% between 2019 and 2024. The average cost per PA transaction has risen from $5 to $6 industry-wide, and total annual PA admin costs now exceed $1.3 billion. For a practice processing 39 PA requests per week, that is over $12,000 per year just in per-transaction administrative costs, not counting the staff hours spent on phone holds, documentation gathering, and payer follow-up. When 40% of practices have hired at least one staff member exclusively for PA work, the total cost per practice easily reaches $50,000 or more annually in salary, benefits, and overhead dedicated to a function that exists solely because payers require it. What drives denials: – Incomplete clinical documentation at initial submission – CPT/ICD-10 code mismatches or outdated codes – Failure to meet payer-specific medical necessity criteria – Submitting to the wrong plan or department (common with Medicaid MCOs) – Missing the payer’s submission deadline
What reduces denials:
- Attach all supporting clinical records on the first submission
- Verify that CPT and ICD-10 codes match current coding guidelines
- Check the payer’s specific PA criteria before submitting (not just general guidelines)
- Use electronic PA submission through your EHR or the payer’s API when available
- Track denial reasons by payer and adjust your workflow for repeat offenders
State-Specific Prior Authorization Requirements: GA, PA, and IL
Each of these three states has its own PA regulatory framework that affects timelines, appeal rights, and payer obligations beyond the federal CMS-0057-F requirements.
Georgia: Georgia Medicaid operates through three Care Management Organizations: Amerigroup, Peach State Health Plan, and CareSource. Each CMO maintains its own PA criteria, submission portals, and documentation requirements. Standard PA decisions must be issued within 14 calendar days for Medicaid, though CMOs often respond faster. Expedited decisions must come within 72 hours when delay could jeopardize the patient’s condition. Georgia does not have a state-level PA reform law comparable to Illinois, so commercial plan timelines default to federal and contractual standards. For commercial plans, Blue Cross Blue Shield of Georgia and Anthem follow their national PA policies with minor state-specific variations.
Pennsylvania: PA HealthChoices Medicaid managed care plans (AmeriHealth Caritas, Geisinger, Gateway, UPMC) must issue PA decisions within 14 calendar days for standard requests and 24 hours for urgent requests. Highmark BCBS, one of the largest commercial payers in the state, transitioned its provider portal to Availity in late 2025. Practices still using the old Highmark portal need to update their submission workflow immediately. UPMC Health Plan accepts PA submissions through their own provider portal and allows 30-day appeal windows. PA Medicaid claims route through the PROMISe system, which has specific formatting requirements that differ from standard commercial claim formats.
Illinois: The Illinois Insurance Code (215 ILCS 5/155.22) provides some of the strongest state-level PA protections in the country for commercial plans. Urgent PA decisions must be issued within 2 business days. Standard PA decisions must be issued within 15 business days. These timelines apply to all state-regulated commercial insurers operating in Illinois. BCBS IL has piloted a gold carding program that exempts high-performing providers from PA requirements for certain services. For Illinois Medicaid, managed care organizations follow federal timelines under 42 CFR 438.210 with state-specific overlay requirements from the Illinois Department of Healthcare and Family Services.
Save 40-70% with dedicated PA specialists
Book a 15-minute call. We will map your current prior authorization workflow, denial rates, and staff hours against what a dedicated team typically delivers in the first 30 days.
CMS-0057-F: How the 2026 Prior Authorization Rule Changes Your Workflow
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) is the most significant change to the prior authorization process in decades. Here is what it means for your practice starting in 2026.
What changed on January 1, 2026:
- Impacted payers must return standard PA decisions within 7 calendar days (down from 14)
- Expedited/urgent PA decisions must come within 72 hours
- Payers must disclose the specific reason for any PA denial
- PA approval, denial, and overturn rates must be publicly reported
What changes on January 1, 2027:
- Payers must implement FHIR-based Prior Authorization APIs
- These APIs will allow providers to check whether PA is required, see documentation requirements, submit requests electronically, and receive decisions through the API
- The Patient Access API must include PA status information
Who is impacted: Medicare Advantage organizations, state Medicaid and CHIP Fee-for-Service programs, Medicaid managed care plans, CHIP managed care entities, and Qualified Health Plan issuers on the federal exchange.
What this means for your practice: If you are still submitting PA requests by fax or phone, the next 12 months are your window to transition to electronic prior authorization submission. Practices that adopt ePA through their EHR will see the biggest gains when FHIR APIs go live in 2027. In the meantime, hold payers accountable to the 7-day and 72-hour decision timelines. Track every request. If a payer misses the deadline, document it.
Build a simple tracking spreadsheet or use your practice management system to log every PA submission with the date submitted, payer name, submission method, the 7-day or 72-hour deadline date, and the actual response date. When a payer consistently misses deadlines, you have documented evidence for payer escalation, contract negotiations, and state insurance department complaints. This tracking data also reveals internal workflow gaps. If your practice consistently submits PA requests 3-5 days after the provider order, the real bottleneck is not the payer response time but the internal lag between clinical decision and administrative action. Practices that track both submission lag and payer response time separately identify which delays they control and which they do not. Several states, including Illinois and Pennsylvania, have their own PA timeline enforcement mechanisms that give providers a formal channel to report payer non-compliance.
Why Practices Outsource Prior Authorization (And How to Choose a PA Company)
When your staff spends 13 hours per week on PA requests and 40% of practices have hired someone just for PA work, the question is not whether outsourcing makes sense. The question is which prior authorization company to trust with your patients’ care access.
For practices that process prior authorization requests across multiple service lines, the workflow complexity multiplies. A cardiology practice submitting PAs for imaging, cardiac catheterization, and device implantation deals with three different sets of payer criteria, three different documentation requirements, and three different approval timelines for the same patient. When that practice also manages PAs for medications like anticoagulants and antiarrhythmics that require pharmacy benefit PA through a separate portal, the administrative staff is essentially running parallel workflows for the same patient encounter. The staffing math becomes clear quickly when one coordinator is juggling several payer portals and timelines at once.
Every payer has specific PA submission requirements that change periodically. Building a standardized submission checklist for your top five payers eliminates the guesswork and reduces the back-and-forth that delays patient treatment. The most efficient practices create payer-specific templates that include required diagnosis codes, supporting documentation checklists, and preferred submission methods for each insurance company they work with regularly.
For practices handling more than 20 PA requests per week, the administrative burden justifies dedicated PA support. Staffingly provides trained PA specialists at $399/week (volume discounts to $299/week) who handle the full authorization lifecycle from initial submission through appeals, serving 800+ providers with a 99.2% clean claim rate. The 15-Day Risk-Free Pilot lets you evaluate the service with zero upfront cost.
