What Is Prior Authorization in Medical Billing?
Prior authorization (PA) — also called prior auth, pre-authorization, or pre-certification — is a process required by most health insurance payers before a provider can deliver certain services, procedures, medications, or medical devices and receive reimbursement.
In plain terms: the payer must say “yes” before your practice performs the service. If your practice skips this step, the payer can — and routinely does — deny the claim entirely, regardless of the clinical necessity of the care provided.
Prior authorization is a utilization management tool used by insurance companies to determine medical necessity, appropriateness, and eligibility for coverage before specific healthcare services are rendered. It applies to procedures, diagnostic imaging, specialty medications, durable medical equipment (DME), hospital admissions, and specialist referrals.
Prior authorization exists within the broader Revenue Cycle Management (RCM) workflow. It sits at the front end of the revenue cycle — after scheduling and eligibility verification, but before the service is delivered. Getting it wrong at this stage creates downstream claim denials, delayed reimbursements, and patient dissatisfaction.
Why Do Insurance Payers Require Prior Authorization?
Insurance payers require prior authorization for several stated reasons, each of which directly impacts how your practice manages its revenue cycle:
- Medical necessity review: Payers assess whether the requested service is clinically appropriate for the patient’s diagnosis and condition.
- Cost containment: PA acts as a gatekeeper to prevent overutilization of high-cost services, specialty drugs, and elective procedures.
- Formulary compliance: For medications, PA ensures the prescribed drug is on the payer’s formulary and that step therapy protocols have been followed.
- Fraud, waste, and abuse prevention: CMS and commercial payers use PA as a control mechanism to reduce inappropriate billing for services that may not be medically warranted.
- Care coordination: PA can trigger care management programs or case management referrals for patients with complex conditions.
Beginning January 1, 2026, CMS’s WISeR (Wasteful and Inappropriate Service Reduction) Model requires prior authorization for 17 Medicare services identified as vulnerable to fraud, waste, and abuse. This applies to Traditional Medicare — a significant expansion that affects practices across all specialties. Practices that have not updated their PA workflows for Medicare patients face significant new denial risk in 2026.
What Services Typically Require Prior Authorization?
The list of services requiring PA varies by payer and plan, but common categories include:
| Service Category | Common Examples | PA Required? |
|---|---|---|
| Specialty Medications | Biologics, PCSK9 inhibitors, GLP-1 agonists, biosimilars | ✓ Almost Always |
| Diagnostic Imaging | MRI, CT scan, PET scan, nuclear imaging | ✓ Most Payers |
| Surgical Procedures | Joint replacement, spinal surgery, bariatric surgery | ✓ Almost Always |
| Specialty Referrals | Cardiology, neurology, oncology, rheumatology | ✓ HMO/EPO Plans |
| Durable Medical Equipment | CPAP, power wheelchairs, home oxygen, prosthetics | ✓ Almost Always |
| Inpatient Admissions | Elective hospitalizations, skilled nursing placement | ✓ Most Payers |
| Behavioral Health | Intensive outpatient, residential treatment, TMS, Spravato | ✓ Almost Always |
| Home Health Services | Skilled nursing visits, PT/OT at home, home infusion | ✓ Most Payers |
| Preventive/Office Visits | Annual wellness, E&M visits, immunizations | Generally No |
The Prior Authorization Process: Step by Step
Understanding the exact PA workflow is essential for any practice that wants to reduce denials and accelerate reimbursements. Here is the complete, accurate prior authorization process as it functions in 2026:
Service Identification & PA Requirement Check
Before scheduling, verify whether the planned service requires prior authorization for the patient’s specific plan. This involves checking the payer’s PA list, the patient’s plan type (HMO, PPO, EPO), and any step therapy or clinical criteria requirements. A missed check at this stage is the #1 cause of preventable PA denials.
Insurance Eligibility & Benefits Verification
Confirm the patient is active on the plan, that the requesting provider is in-network, and that the service falls within the plan’s covered benefits. Verify the patient’s deductible, co-insurance, and any prior auth reference numbers already on file for that service category.
Clinical Documentation Compilation
Gather all clinical records required to support medical necessity: physician notes, lab results, imaging reports, prior treatment history, and a Letter of Medical Necessity (LMN) from the treating physician. Incomplete documentation is the #2 cause of PA denials. Each payer has specific documentation requirements that must be met exactly.
PA Request Submission
Submit the PA request to the payer via their designated channel: payer portal, fax, phone, or Electronic Prior Authorization (ePA) via your EHR. Include the correct procedure codes (CPT/HCPCS), diagnosis codes (ICD-10), and all supporting documentation. Errors in coding or missing information trigger immediate pend or denial.
Active Follow-Up & Status Tracking
Most payers take 1–14 business days for standard PA decisions. Active follow-up — checking the payer portal daily, making status calls, and responding immediately to payer requests for additional information — is the difference between a 5-day and 30-day approval timeline.
PA Decision: Approved, Denied, or Modified
The payer issues one of three decisions: Approved (proceed with the service), Denied (must appeal or provide alternative service), or Modified (approved for a lesser or different service than requested). Document the authorization number, effective dates, and any restrictions before scheduling.
Service Delivery & Claim Submission
Attach the approved PA number to the claim when submitting. Confirm the service was delivered within the authorized date range and matches the authorized procedure exactly. Any deviation — different date, different CPT code, additional service — may invalidate the authorization.
Struggling with Prior Authorization Denials?
Gosvizzera’s dedicated PA team handles submission, follow-up, appeals, and peer-to-peer scheduling for your practice — with an average turnaround under 24 hours. HIPAA-compliant. BAA signed on Day 1.
Get a Free PA Assessment →Prior Authorization Denials: Causes & What to Do
A prior authorization denial does not mean the end of the road — but it does mean your practice must act quickly and systematically. Understanding why denials happen is the first step to preventing them.
Most Common Reasons for PA Denials
- Medical necessity not established: The clinical documentation did not sufficiently demonstrate that the service met the payer’s specific criteria.
- Step therapy not followed: The payer requires evidence that less expensive or lower-tier treatments were tried first (common for specialty medications).
- Missing or incomplete documentation: Lab values, imaging reports, physician notes, or the Letter of Medical Necessity were absent or insufficient.
- Incorrect coding: Wrong CPT or ICD-10 code submitted, or codes did not align with the clinical documentation.
- Out-of-network provider: The rendering provider is not contracted with the patient’s plan.
- Service not covered: The requested service is excluded from the patient’s specific plan benefit design.
- Authorization expired: The service was not delivered within the authorized date range.
- Duplicate request: A PA was already submitted or is pending for the same service.
How to Appeal a PA Denial
When a PA is denied, your practice has the right to appeal. The appeal process follows a structured path:
- Level 1 Appeal (Internal Review): Submit a formal written appeal with additional clinical documentation addressing the specific reason for denial. Most payers require this within 30–60 days of the denial date.
- Peer-to-Peer Review: The treating physician requests a direct conversation with the payer’s medical reviewer. This is one of the most effective appeal strategies and often results in an authorization reversal when the clinical case is strong.
- Level 2 Appeal (External Review): If the Level 1 appeal is unsuccessful, request an independent external review. For Medicare Advantage plans, this is a federally mandated right.
- Expedited Appeal: For urgent clinical situations, request an expedited appeal. CMS mandates a 72-hour decision timeframe for expedited Medicare and Medicaid appeals.
Gosvizzera’s PA specialists review every denial within 2 business hours of receipt, identify the specific denial reason, and initiate the appropriate appeal pathway — including scheduling peer-to-peer reviews directly with the treating physician. Our appeal team maintains a written record of all payer communications to support every escalation level.
Types of Prior Authorization
Standard Prior Authorization
The most common type. The provider submits a PA request before a non-urgent service is scheduled or performed. Standard PA timelines range from 1 to 14 business days depending on the payer and complexity.
Urgent / Expedited Prior Authorization
Required when a standard timeline would seriously jeopardize the patient’s health, safety, or life. CMS mandates that payers process urgent PA requests within 72 hours. Commercial payers typically follow similar timelines, though this varies by plan.
Retrospective / Retro Authorization
Sought after a service has already been rendered — most commonly in emergency situations or when the PA requirement was overlooked. Not all payers grant retro authorizations, and those that do often require submission within 24–72 hours of the service date with compelling clinical justification.
Concurrent Review
Ongoing review during an inpatient hospital stay to authorize continued days of inpatient care. The payer’s utilization management team reviews the patient’s clinical status in real-time to determine continued medical necessity for each additional inpatient day.
Prospective Authorization
Authorization obtained before an elective or scheduled service. This is the standard workflow for surgical procedures, specialty medications, and elective imaging studies.
Payer-Specific Prior Authorization Requirements
Each major payer has distinct PA requirements, portals, and clinical criteria. What constitutes sufficient documentation for UnitedHealthcare may not meet Aetna’s standards for the identical procedure. Gosvizzera maintains payer-specific knowledge bases for all major commercial and government payers.
| Payer | PA Portal | Standard Turnaround | Key Requirement |
|---|---|---|---|
| UnitedHealthcare | UHCprovider.com | 3–5 business days | Gold Carding available for high-approval-rate providers |
| Aetna | NaviMedix / Availity | 2–5 business days | Specific clinical criteria per InterQual/MCG guidelines |
| Cigna | CignaforHCP.com | 3–7 business days | Requires detailed treatment history for specialty medications |
| BCBS (varies by state) | State-specific portals | 3–10 business days | Plan-specific; state BCBS affiliates have independent criteria |
| Humana | HumanaProviders.com | 3–5 business days | Strong step therapy enforcement for brand-name medications |
| Medicare (Traditional) | MAC portals / ePA | 3–14 business days | WISeR Model: 17 new services require PA as of Jan 1, 2026 |
| Medicaid (varies by state) | State MCO portals | 3–7 business days | Managed Care Organization-specific; varies widely by state |
CMS 2026 Prior Authorization Changes: What Every Practice Must Know
The prior authorization landscape changed significantly in 2026. Practices that have not updated their workflows face serious reimbursement risk. The two most impactful changes are:
1. The WISeR Model (Effective January 1, 2026)
CMS’s Wasteful and Inappropriate Service Reduction (WISeR) Model introduces prior authorization requirements for 17 Traditional Medicare services identified as high-risk for fraud, waste, and abuse. For the first time, Traditional Medicare — which historically did not require PA for most services — now operates commercial payer-style authorization processes for these specific services. Affected specialties include orthopedics, neurology, cardiology, and home health.
2. CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F)
This rule, which took full effect in 2026, mandates that payers covered under the rule must:
- Respond to standard PA requests within 7 calendar days
- Respond to urgent PA requests within 72 hours
- Provide a specific reason for any PA denial
- Include PA information in patient access APIs so patients can view authorization status
- Report PA metrics publicly, including denial rates by service type
If you serve Medicare patients, you must now have a PA workflow in place for services covered under WISeR. Gosvizzera has updated all Medicare PA protocols to comply with the 2026 mandate and can implement compliant workflows for your practice within 72 hours of onboarding.
Should You Outsource Prior Authorization?
Managing prior authorization in-house is resource-intensive. The average PA takes 2–7 hours of staff time across submission, follow-up, and documentation — time that could be spent on patient care. Here is an honest comparison:
| Factor | In-House PA Team | Outsourced to Gosvizzera |
|---|---|---|
| Average Turnaround | 5–14 days | Under 24 hours (standard) |
| Approval Rate | Industry avg: 75–85% | 94%+ first-submission approval |
| Staff Cost | $48,000–$65,000/yr per FTE + benefits | Fraction of cost, scales with volume |
| Payer-Specific Knowledge | Limited to team’s experience | Dedicated specialists per payer |
| Coverage During Leave | Gaps in coverage during PTO/sick | Continuous coverage, no gaps |
| HIPAA Compliance | Dependent on internal training | BAA signed Day 1, audited annually |
| Appeal Management | Often deprioritized | Dedicated appeal team, P2P scheduling |
| EHR Integration | Dependent on existing setup | Works within your existing EHR |
Frequently Asked Questions About Prior Authorization
Prior authorization and pre-certification are functionally the same process — both require payer approval before a service is delivered. “Pre-certification” is a term more commonly used for inpatient hospital admissions and surgical procedures, while “prior authorization” is the broader term used across all service types. Both carry the same consequence if skipped: claim denial.
Standard prior authorization takes 1–14 business days depending on the payer and procedure type. Urgent or expedited PAs must be processed within 72 hours under CMS’s 2026 Interoperability Rule. Gosvizzera’s dedicated PA team achieves an average turnaround of under 24 hours on standard requests by submitting complete, payer-specific documentation from the first attempt — eliminating the back-and-forth that delays most practices.
If a service requiring PA is performed without an approved authorization, the payer will deny the claim. The provider may attempt a retrospective authorization — but many payers do not grant retro auths, and those that do often have strict 24–72 hour submission windows. In most cases, performing a service without PA results in the provider absorbing the full cost of care, and they cannot legally bill the patient for a service their insurance would otherwise cover if PA had been obtained.
CMS’s WISeR (Wasteful and Inappropriate Service Reduction) Model, effective January 1, 2026, introduces prior authorization requirements for 17 Traditional Medicare services. This is a landmark change because Traditional Medicare historically did not require PA for most services. The model uses AI and ML to evaluate PA requests and applies commercial payer-style authorization processes. If your practice serves Medicare patients and performs any of the 17 covered services, you must now obtain PA before rendering those services. Contact Gosvizzera to confirm whether your specific services are covered under WISeR.
Yes — and for most practices, outsourcing PA is more cost-effective and results in higher approval rates than managing it in-house. A specialized RCM company like Gosvizzera brings payer-specific expertise, dedicated staff, faster turnaround times, and complete HIPAA compliance (including a signed Business Associate Agreement). Gosvizzera works within your existing EHR and integrates seamlessly with your scheduling workflow, so your team’s day-to-day operations are unaffected.
Summary: Key Takeaways for Healthcare Practices
- Prior authorization is a front-end RCM function — get it wrong before the service, and no amount of back-end billing will recover the revenue.
- CMS’s WISeR Model (January 1, 2026) introduces PA requirements for 17 Traditional Medicare services — a major new obligation for practices serving Medicare patients.
- The most common PA denial causes are incomplete documentation, missing step therapy evidence, and incorrect coding — all preventable with the right workflow.
- Appeals work — especially peer-to-peer reviews with the treating physician. Every denial should be evaluated for appeal viability within 48 hours.
- Outsourcing PA consistently produces faster turnaround times, higher approval rates, and lower per-PA cost than in-house management for practices of any size.
- Gosvizzera handles end-to-end prior authorization — submission, follow-up, appeals, peer-to-peer scheduling, and retro auth — across all 8 clinical specialties, all major payers, and all EHR platforms.
Ready to Stop Losing Revenue to PA Denials?
Gosvizzera’s prior authorization specialists are ready to take over your PA workflow from Day 1. No disruption. No renegotiation. BAA signed before we start. HIPAA-compliant. Average approval turnaround: under 24 hours.
Schedule Your Free Consultation →