New CMS Prior Authorization Final Rule: Is Your Technology and Operations Ready?

The healthcare landscape is constantly evolving, and the Centers for Medicare & Medicaid Services (CMS) Interoperability and Prior Authorization Final Rule (CMS-0057-F) introduces significant changes, particularly in streamlining prior authorization (PA) processes for medical services. This rule primarily impacts Medicare, Medicaid, and certain health insurance issuers under the Affordable Care Act, and commercial health plans are excluded from these mandates.

However, it is worth noting that there is a compelling case for commercial plans to voluntarily adopt the CMS-mandated PA timelines. By aligning with these standards, commercial plans can significantly streamline PA and care management processes, advancing care and quality outcomes for all members served.

Setting the Stage for Change

This new rule brings a wave of changes, impacting technology, operations, and overall workflow for healthcare payers, but the transition is staged across 2026-2027:

• 2026: Operational provisions kick in, requiring faster PA decisions (72 hours for urgent, 7 days for standard) and specific denial reasons for easier resubmission.
• 2027: API development ramps up, with payers building functionalities to share patient data across platforms and provide patients with access to their information through the Patient Access API.

While adapting can seem daunting, it also presents an opportunity to embrace innovative solutions like core administrative processing systems (CAPS) and streamline PA processes.

Understanding the Challenges

The CMS-0057-F rule sets forth mandates that significantly affect the prior authorization landscape, introducing both opportunities and hurdles:

• Stricter Timeframes: The rule demands quick turnaround times for prior authorization decisions—72 hours for urgent requests and 7 days for standard ones, challenging payers to ensure efficiency in processing.
• Enhanced Transparency and Accountability: Alongside requiring detailed reason codes for denials, CMS mandates payers to publicly report specific PA process-related compliance metrics annually, starting January 1, 2026. These metrics, including the percentage of requests approved and denied, the percentage approved post-appeal, and the average time from submission to decision, must be posted on their websites by March 31, 2026. This not only promotes better communication but also enables providers to expedite resubmissions for approval.
• Data Sharing Expansion: The inclusion of prior authorization data in Patient Access APIs underscores the need for advanced data management and ensures that information is readily accessible, further enhancing patient care coordination.

These mandates aim to enhance patient care but pose significant operational challenges for payers, especially where manual processes are prevalent. Adapting to these changes is crucial to avoid compliance issues and improve stakeholder satisfaction.

Optimizing Your Technology Tools

In response to the CMS Final Rule, healthcare payers are tasked with a comprehensive reassessment of their PA, CAPS, and care management systems. Aligning technology, workflows, policies, and procedures with the mandated timelines for both urgent and non-urgent care requests is critical. This thorough review is pivotal in ensuring your operations meet new regulatory demands, thereby boosting efficiency and enhancing patient care.

CAPS technology is fundamental within the infrastructure of healthcare payers, ready to meet the challenges presented by the evolving regulatory environment. The transition to standardized APIs and the requirement for real-time data exchange necessitate extensive updates to existing CAPS frameworks.

Key focus areas include:

• Integration Capabilities: To ensure compliance with standardized API requirements and facilitate interoperability across various healthcare platforms, CAPS systems must feature advanced integration capabilities.
• Automation and Efficiency: The demand for immediate decision-making necessitates the incorporation of heightened automation within CAPS systems, which will minimize manual processes and expedite the prior authorization procedure.
• Data Security and Compliance: With an increase in data exchange, CAPS technology must include stringent security protocols to safeguard sensitive patient information, in line with HIPAA and other regulatory guidelines.
• Care Management: The Final Rule emphasizes the importance of advanced care management technologies and tools within CAPS systems, aimed at improving care coordination and enabling healthcare payers to offer more tailored and effective care management strategies, thereby enhancing patient health outcomes.

Additionally, with the CY 2027 reporting requirements on the horizon for both the MIPS payment year and the Medicare Promoting Interoperability Program, healthcare payers must adapt to the simplified Electronic Prior Authorization Measures. Transitioning from a complex numerator/denominator framework to a straightforward yes/no format, these measures necessitate either a positive report or an exemption claim. This change highlights the need for payers to refine their systems not only for operational efficiency and improved care delivery but also to ensure their reporting capabilities meet these streamlined requirements, aligning with the Final Rule’s objective to boost healthcare efficiency and patient outcomes.

Operational Impacts for Healthcare Payers and Members

The final rule’s mandates will have far-reaching impacts on the operational dynamics of healthcare payers and the experiences of their members.

• Operational Efficiency: Healthcare payers will need to streamline their operational workflows to accommodate the faster, more efficient prior authorization processes mandated by the rule. This includes investing in CAPS and care management technology upgrades and training staff on new protocols.
• Member Experience: Members stand to benefit from quicker prior authorization decisions and increased transparency in their care journey. The enhanced data-sharing capabilities will enable better coordination of care, improved access to necessary treatments, and a more informed healthcare experience.
• Compliance and Strategic Planning: Healthcare payers must carefully plan to meet the January 1, 2026, implementation deadline for key provisions, with an extended deadline of January 1, 2027, for API requirements. This involves strategic investments in CAPS technology, compliance efforts, and potential partnerships with technology providers.

Taking the First Step

The CMS Interoperability and Prior Authorization Final Rule heralds a new era in healthcare administration, demanding agility, foresight, and a commitment to enhance patient care from healthcare payers. Navigating these changes requires not just compliance, but a strategic overhaul of existing systems and processes to embrace the efficiencies offered by advanced technological solutions.

At HealthAxis, we understand the complexities and challenges this new rule presents. With our industry-leading CAPS technology, AxisCore™, we are uniquely positioned to guide healthcare payers through this transformative period. Our extensive expertise in the healthcare domain, combined with the sophisticated capabilities of AxisCore™, ensures that we can offer solutions that are not only compliant with the new mandates but also tailored to meet the specific needs of our clients.

Learn more about our technology solution and how we can help you navigate the new landscape of prior authorization, improve operations, and ultimately, deliver better care for your members.

Author:

Lisa Hebert
Senior Vice President of Product Strategy and Management
HealthAxis