5 Prior Authorization Best Practices (2026 RCM Guide)

Published on

April 30, 2026

by

The Prosper Team

TL;DR

Prior authorization best practices center on five strategies: verifying PA requirements before scheduling, front-loading complete documentation, submitting electronically, tracking requests proactively, and standardizing workflows through automation. Clinicians currently spend an average of 13 hours per week on PA tasks, and 94% of physicians say the process negatively impacts patient outcomes. A 2025 JAMA study found that PA software providing real-time payer transparency reduced denial rates by 65.4%. With the CMS-0057-F rule taking effect in 2026, the shift toward electronic, standardized prior authorization is no longer optional.


Prior authorization accounts for more administrative friction than almost any other process in healthcare operations. According to the AMA’s 2024 Prior Authorization Physician Survey, clinicians and their staff complete an average of 39 prior authorizations per week, spending roughly 13 hours on the process. That is not a rounding error. It is a part-time job embedded inside every practice, every week.

The consequences go beyond wasted hours. The same survey found that 94% of physicians said PA has a significant negative impact on patient clinical outcomes, 82% reported patients abandoning recommended treatment due to PA delays, and 29% said the process had caused serious adverse events including hospitalization or permanent bodily damage.

This guide defines the essential prior authorization terminology you need to know, then walks through the best practices that actually reduce denials, speed up turnaround, and lower per-transaction costs. Each recommendation is grounded in current data, regulatory requirements, and the operational realities that PA coordinators and revenue cycle management teams face daily.


Core Prior Authorization Terminology

Before jumping into workflow optimization, it helps to have a shared vocabulary. These terms show up throughout payer communications, EHR systems, and the CMS regulations that now govern PA timelines.

Prior Authorization (PA)

Also called preauthorization or precertification. This is the process of obtaining approval from a health plan before delivering a specific service, procedure, or medication. The payer evaluates whether the requested care meets their coverage criteria. Without approval, the provider risks a denied claim and the patient may face the full cost.

Medical Necessity

The clinical standard payers apply when deciding whether to approve or deny a prior authorization request. Payer-specific medical necessity criteria are often opaque, buried in clinical policy bulletins that change without clear notification. A 2025 study published in JAMA Network Open found that this opacity is a hidden root cause of denials, because staff cannot meet criteria they cannot see.

Electronic Prior Authorization (ePA)

Submitting PA requests through electronic systems (payer portals, EHR integrations, or FHIR-based APIs) rather than by fax, phone, or mail. Despite the obvious efficiency gains, only 31% of medical PA transactions were fully electronic last year, while 37% remained entirely manual.

Prior Authorization API (PARDD)

A FHIR-based application programming interface mandated under the CMS-0057-F final rule. Impacted payers must build and maintain this API so that providers can check PA requirements, submit requests, and receive decisions electronically. This is the regulatory mechanism pushing the industry toward full ePA adoption.

Clinical Decision Support (CDS)

Software integrated into the EHR that flags PA requirements at the point of order entry. When a physician orders a service, CDS tools check the patient’s insurance and alert staff if prior authorization is needed, what documentation is required, and which medical necessity criteria apply. Effective CDS is the single most impactful tool for preventing PA-related denials.

Letter of Medical Necessity (LOMN)

A document submitted alongside the PA request that explains why the proposed service is clinically appropriate for the specific patient. Strong LOMNs reference the payer’s own medical necessity criteria and include supporting clinical evidence (lab results, imaging reports, prior treatment history).

Gold Carding

A program that exempts providers with consistently high PA approval rates from submitting prior authorizations for specific services. Texas pioneered gold card legislation in 2021, and states including Arkansas and West Virginia are expanding similar programs. The concept sounds like a silver bullet, but the reality is more complicated (covered in detail below).

Peer-to-Peer Review

A physician-to-physician conversation that occurs when an initial PA request is denied. The treating physician explains the clinical rationale directly to the payer’s medical director. This step is often the last opportunity to overturn a denial before entering the formal appeals process.

Expedited (Urgent) PA

A prior authorization request for care that cannot be delayed without risking the patient’s health. Under the CMS-0057-F rule, payers must return decisions on expedited requests within 72 hours.

Standard PA

A non-urgent prior authorization request. CMS now requires payers to respond within seven calendar days.

Appeal

The formal process for contesting a PA denial. Most payers offer multiple levels: an internal appeal reviewed by the payer, followed by an external appeal reviewed by an independent third party. Knowing the appeal deadlines and documentation requirements for each payer is critical, because missed deadlines forfeit the right to contest.

Utilization Management (UM)

The broader cost-control framework that prior authorization falls within. UM includes concurrent review (monitoring ongoing inpatient care), retrospective review (evaluating care after delivery), and prospective review (which is PA). Understanding where PA fits within UM helps practices anticipate which services trigger additional scrutiny.


The Five Foundational Prior Authorization Best Practices

1. Verify PA Requirements Before Scheduling

The most common and most preventable PA failure is discovering that authorization is needed after the patient is already on the schedule, or worse, after the service has been delivered. Every practice needs a reliable process for checking whether a specific CPT code requires prior authorization for a specific payer before committing to a date.

This starts with benefits verification. Confirming active coverage and PA requirements should happen at the earliest point of patient contact, not the day before the appointment.

CDS tools embedded in the EHR are the most effective way to catch PA requirements at the point of order entry. The 2025 JAMA study on clinically integrated PA software found that providing real-time transparency into payer-specific requirements at the moment a physician places an order was associated with a 65.4% reduction in prior authorization denial rates. The software didn’t just speed up submissions. It showed clinicians exactly what each payer needed, so requests were complete and accurate from the start.

What to implement: Maintain an internal matrix of high-volume CPT codes and corresponding payer PA requirements. Update it quarterly. Use EHR alerts to flag orders that require authorization. Never schedule a PA-dependent service without confirming authorization status first.

2. Front-Load Complete Documentation

Incomplete submissions are the primary driver of PA delays and denials. Payers reject or pend requests when clinical notes are missing, when lab results are outdated, or when the letter of medical necessity doesn’t address the payer’s specific criteria.

The fix is straightforward but requires discipline: gather all supporting documentation before submitting. This means recent clinical notes, relevant lab and imaging results, prior treatment history showing that conservative options have been tried, and a letter of medical necessity that maps directly to the payer’s published (or unpublished) criteria.

The AMA survey found that 40% of practices have hired staff to work exclusively on prior authorization. A significant portion of those FTEs spend their time chasing missing documentation after an initial submission is returned. Front-loading eliminates that rework loop.

What to implement: Build payer-specific documentation checklists for your most common PA requests. Train clinical staff to complete documentation at the time of the patient encounter, not retroactively. Include the LOMN as a standard component of every submission.

3. Submit Electronically Whenever Possible

The cost difference between electronic and manual PA transactions is stark. According to the CAQH Index, a manual PA transaction costs providers an average of $10.97, while payers pay just $3.52 for the same manual transaction. This cost asymmetry explains why payers have had little incentive to streamline the process on their own. If all medical PA transactions were fully electronic, the industry would save an estimated $494 million annually.

With the CMS-0057-F rule requiring impacted payers to stand up Prior Authorization APIs by January 2026, the infrastructure for electronic submission is expanding. Practices that still rely on fax machines and phone calls for PA are paying a premium in both dollars and staff time.

Use payer portals, EHR-integrated ePA tools, and clearinghouse connections wherever they exist. For payers that still require phone-based submissions, AI voice agents and call center solutions can handle the IVR navigation, hold times, and data capture that consume staff hours.

What to implement: Audit your current PA submission methods by payer. Identify which payers accept electronic submissions and route those requests through your EHR or clearinghouse. For phone-based payers, explore AI-powered tools that automate prior authorization calls and status checks. Ensure your systems support the integrations needed for electronic workflows.

4. Track, Follow Up, and Escalate Proactively

Submitting a PA request and waiting for a response is a recipe for missed deadlines and patient delays. The AMA survey data showing that 68% of physicians report average treatment delays of five days or longer reflects a system where requests routinely stall without active follow-up.

Practitioners frequently describe PAs as falling into a “black hole” after submission. Without structured tracking, pending authorizations pile up, urgent cases get lost in the queue, and denials arrive too late to meet appeal deadlines.

What to implement: Use a dashboard or tracking system (whether built into your EHR, a standalone PA tool, or even a well-maintained spreadsheet) to monitor every pending authorization. Set follow-up intervals: 24 to 48 hours for urgent requests, 3 to 5 days for standard. Assign clear ownership so that every PA has a named person responsible for seeing it through. When a request stalls, escalate to a peer-to-peer review rather than waiting for the payer to act.

5. Standardize and Automate Recurring Workflows

Prior authorization is repetitive by nature. The same CPT codes, the same payers, the same documentation requirements come up week after week. Practices that treat every PA as a one-off task are burning hours on work that should be templated, batched, and partially automated.

Standardization means creating payer-specific templates, checklists, and submission protocols that any trained staff member can follow. Automation means using technology to handle the parts of the process that don’t require clinical judgment: status checks, reminder alerts, data entry, and outbound calls to payers.

The JAMA study noted that the overall median time to authorization decreased by 33.9% (from 4.2 to 2.8 days) when clinically integrated PA software was implemented. That reduction came not from working harder but from removing manual steps that technology handles more reliably.

With 89% of physicians reporting that PA contributes to burnout, the human cost of manual workflows is unsustainable. Health systems looking to standardize PA across departments should evaluate where automation can absorb the highest-volume, lowest-complexity tasks first.

What to implement: Identify your top 10 PA requests by volume. Create standard operating procedures for each, including payer-specific documentation checklists and expected turnaround times. Automate status checks and follow-up reminders. Consider AI agents for claims follow-up and denial management downstream from the PA process.


The CMS-0057-F Regulatory Shift

The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) is the most significant regulatory change to prior authorization in years. It applies to Medicare Advantage organizations, Medicaid managed care plans, CHIP managed care entities, and Qualified Health Plan issuers on the federal exchange. Here is what it requires:

Prior Authorization API: Impacted payers must implement a FHIR-based API that lists covered items and services, documentation requirements, and supports request/response workflows electronically.

Decision timeframes: Payers must return decisions within 72 hours for expedited (urgent) requests and seven calendar days for standard requests.

Denial transparency: Beginning in 2026, payers must provide a specific reason for every denied prior authorization decision. This is a major shift from the vague denial language that has frustrated providers for years.

Public reporting: Impacted payers must publicly report certain prior authorization metrics annually, with initial metrics due by March 31, 2026.

Compliance timeline: Operational provisions take effect January 1, 2026. The Provider Access API is required by January 1, 2027.

For providers, these changes mean two things. First, the pressure to submit PA requests electronically will intensify as payers build out their APIs. Practices still relying on fax and phone will increasingly be the bottleneck. Second, the denial transparency requirement gives providers better data to challenge inappropriate denials and to understand where their submissions fall short.

Practices implementing prior authorization best practices now should align their workflows with these deadlines. Map your highest-volume payers against CMS-0057-F requirements and identify which electronic pathways are already available.


Gold Carding: Promise vs. Reality

Gold card programs represent one of the most appealing ideas in PA reform: if a provider consistently gets approved, stop making them ask for permission. Texas passed the first gold card law in 2021, and Arkansas and West Virginia are now expanding similar programs to cover group practices, not just individual providers.

For high-volume, high-approval specialties, gold carding genuinely reduces submission burden. A radiation oncologist who gets approved 98% of the time for a specific treatment should not be spending staff time on authorization paperwork for that treatment.

But practitioners who have lived through gold card implementation report a more complicated picture. Analysis from Valer Health describes gold carding as something of an illusion, arguing that it often replaces portal submissions with complex tracking requirements, confusing notification rules, and ongoing administrative work to maintain gold card eligibility. The burden shifts rather than disappearing.

States are also starting to regulate the intersection of AI and prior authorization decisions. Maryland now requires that AI-driven PA decisions use patient-specific data rather than group-level datasets, and multiple states require new health plans to honor prior authorizations from previous insurers for 90 days to one year under continuity of care provisions.

Gold carding is worth pursuing where available, but it should not be treated as a substitute for building strong PA workflows. The best practices outlined above remain essential even for practices that qualify.


Where AI and Automation Fit

AI in prior authorization is a double-edged sword, and most discussions about it ignore one side entirely.

On the provider side, AI tools are reducing the manual burden of PA work. The JAMA study documenting a 65.4% denial reduction involved software that gave clinicians real-time visibility into payer criteria and automated portions of the submission process. The time savings were significant: median authorization time dropped from 4.2 to 2.8 days.

Voice AI agents represent another provider-side application. Since 37% of PA transactions still happen by phone, practices spend enormous amounts of staff time calling payers, navigating IVR systems, waiting on hold, and relaying information to representatives. AI voice agents can handle these calls, capturing structured data and writing results back to the practice management system. For medical billing companies managing PA for multiple clients, this kind of automation is particularly impactful at scale.

On the payer side, the picture is darker. According to the AMA survey, 61% of physicians reported that AI was increasing prior authorization denials. Several states, including Texas, have introduced legislation to restrict or prohibit health plans from using AI to make PA decisions without adequate physician oversight.

This creates a tension that the prior authorization best practices conversation needs to acknowledge: AI is simultaneously making PA easier for providers and harder for patients, depending on who deploys it and how. The regulatory landscape around AI-driven PA decisions is evolving rapidly, and practices should track both provider-side tools and payer-side restrictions. For a deeper look at the regulatory and ROI dimensions, see this analysis of AI prior authorization risks, rules, and return on investment.


Measuring PA Performance: Key Metrics

You cannot improve what you do not measure. These are the metrics that matter most for evaluating whether your prior authorization best practices are working:

First-pass approval rate: The percentage of PA requests approved on the initial submission, without appeals or resubmissions. This is the single best indicator of documentation quality and submission accuracy.

Average turnaround time: How long from submission to decision. Benchmark against the CMS-mandated timeframes: 72 hours for urgent, 7 days for standard. If your averages exceed these, your follow-up process needs attention.

Cost per PA transaction: The CAQH benchmark for manual transactions is $10.97 per transaction on the provider side. Track your blended cost (including staff time, technology costs, and outsourcing fees) and compare.

Denial rate by payer: Not all payers are equal. Tracking denial rates by payer reveals which relationships need targeted improvement, whether that means better documentation for Payer A or escalating systemic issues with Payer B.

Staff hours per week on PA: The AMA benchmark is 13 hours per physician per week. If your numbers are higher, workflow redesign and automation should be priorities. If lower, your current practices are performing well relative to the national average.

Treatment delay days: Track the number of days between a PA submission and when the patient actually receives care. This metric captures the real-world impact of PA friction on clinical outcomes and patient satisfaction.

PA-related abandonment rate: The AMA found that 82% of physicians report patients abandoning treatment due to PA obstacles. Tracking how many of your patients drop out of recommended care pathways because of authorization delays reveals the clinical cost of a broken PA process.


Frequently Asked Questions

What is the difference between prior authorization and precertification?

In practice, these terms are used interchangeably. Both refer to the process of getting payer approval before delivering a service. Some payers use “precertification” for inpatient admissions specifically and “prior authorization” for outpatient procedures or medications, but there is no universal distinction. Check your specific payer contracts for the terminology they use and any procedural differences.

How long does a prior authorization take?

It varies by payer and request type. Under the CMS-0057-F rule, impacted payers must respond within 72 hours for urgent requests and 7 calendar days for standard requests starting in 2026. In practice, many authorizations currently take longer. The JAMA study found a median turnaround of 4.2 days before intervention, reduced to 2.8 days with integrated PA software.

What happens if a prior authorization is denied?

The provider can appeal. Most payers offer an internal appeal process where additional documentation or a peer-to-peer review can overturn the denial. If the internal appeal fails, patients and providers can request an external review by an independent third party. Starting in 2026, payers covered by CMS-0057-F must provide a specific reason for every denial, which should make appeals more targeted and effective.

Is prior authorization the same as a referral?

No. A referral is a recommendation from one physician to another (typically from a primary care doctor to a specialist). Prior authorization is approval from the insurance company to cover a specific service. Some services require both a referral and a prior authorization, but they are separate processes with different purposes.

Does Medicare require prior authorization?

Traditional fee-for-service Medicare requires prior authorization for a limited set of services, including certain durable medical equipment, repetitive scheduled non-emergent ambulance transports, and some procedures identified through the Repetitive Prior Authorization program. Medicare Advantage plans, however, use prior authorization much more broadly and are now subject to the CMS-0057-F transparency and timeline requirements.

What is an ePA?

Electronic prior authorization (ePA) refers to submitting PA requests through digital channels rather than by phone, fax, or mail. This can include payer portals, EHR-integrated submission tools, clearinghouse connections, or FHIR-based APIs. Only 31% of medical PA transactions are currently fully electronic, which means the majority of the industry is still paying the higher cost and longer turnaround times associated with manual processes.

How can AI help with prior authorization?

AI can assist on multiple fronts: checking PA requirements in real time, auto-populating submission forms with clinical data, placing and managing phone calls to payers, tracking request statuses, and flagging denials for appeal. A peer-reviewed 2025 study found that PA software with clinical decision support reduced denial rates by 65.4%. Voice AI agents specifically address the phone-based workflows that still account for over a third of all PA transactions. Explore how AI voice agents handle prior authorization and other RCM workflows.


Prior authorization is not going away. But the combination of regulatory pressure from CMS-0057-F, growing state-level reform, and maturing AI tools means the process is changing faster than it has in years. Practices that adopt structured prior authorization best practices now, backed by real data and built for electronic workflows, will spend less per authorization, get faster decisions, and keep patients in treatment rather than losing them to administrative delays.

If your team is spending hours each week on payer phone calls for PA submissions and follow-ups, see how AI voice agents can reduce that burden.

Related Articles

Related articles

Discover how healthcare teams are transforming patient access with Prosper.

April 30, 2026

Healthcare Contact Center Automation: 10 Best in 2026

Compare 10 HIPAA-ready, EHR-aware tools for healthcare contact center automation in 2026. See pricing, integrations, ROI, and how to choose.

April 30, 2026

AI Scheduling for Clinics: 10 Best Tools for 2026

Discover 10 best AI scheduling for clinics tools in 2026—HIPAA-ready, EHR-integrated, voice-first options with ROI and pricing. Compare picks to choose yours.

April 30, 2026

10 Best AI Insurance Verification Tools (2026 Healthcare)

Compare 10 AI Insurance Verification tools for 2026—voice agents and portal/API engines. See pricing, HIPAA/SOC 2, EHR integrations, and best fits. Read now.