What Is Prior Authorization? How It Works, Timelines, and How to Speed It Up

I spent years handling coverage inquiries at UnitedHealth Group's Optum division before joining HelpSquad. In that role, I sat on the insurer side of the prior authorization call - verifying billing codes, reviewing eligibility data, fielding calls from provider offices that had been waiting days for a decision they expected in 48 hours. Now, supporting medical practices through HelpSquad's BPO services, I see the same process from the provider side. The friction points are identical. The frustration is just as real, on both ends of the line.

Prior authorization is not going away. Its scope is expanding. The administrative burden it places on medical practices keeps growing - in volume, in complexity, and in the time it consumes. Understanding how it works, what your options are when a request is denied, and how to structure your team's workflow around it is essential for any practice that wants to protect both revenue cycle health and patient access to timely care. This article covers the fundamentals clearly, with current data and practical strategies that make a measurable difference.

What Is Prior Authorization?

Prior authorization - sometimes called prior auth, PA, or pre-certification - is a method health insurers use to review and approve specific medical services, procedures, or prescriptions before they are provided.

The idea is straightforward in concept: before your doctor delivers a specific treatment or prescribes a certain medication, your insurer reviews the clinical justification and decides whether the service qualifies as medically necessary under your plan's terms, as of July 2026.

It's worth noting that an approved prior authorization is NOT a guarantee of payment. Even with a PA in hand, a claim can still be denied for other reasons - incorrect billing codes, coordination of benefits issues, or eligibility problems at the time of service. One of the most common misunderstandings I see is providers treating a PA approval as the end of the billing conversation. It is not. It removes one major hurdle, but the claim still has to be processed correctly to be paid.

In practical terms, prior authorization meaning comes down to this: your insurance company is asserting the right to review clinical decisions before they become covered costs, and your provider carries most of the administrative responsibility for initiating and completing that process.

Why Do Insurers Require Prior Authorization?

Insurers frame prior authorization as a medical necessity tool - a safeguard against unnecessary procedures or inappropriate prescribing. That framing is not entirely wrong. Health benefit costs are rising fast. According to Mercer's 2025 National Survey of Employer-Sponsored Health Plans, average health benefit cost per employee rose 6% in 2025 and is projected to climb another 6.7% in 2026 - which would be the steepest increase in 15 years. In that environment, utilization control is a real and urgent financial priority for payers.

But the data on outcomes tells a different story about what prior authorization actually accomplishes for patients. According to the American Medical Association, 94% of physicians say prior authorization delays essential or necessary care. And 79% of physicians report that PA has led to patients paying out of pocket for medications they were not expecting to pay for. That is not a fringe complaint - it is a documented pattern at scale, with measurable consequences for patients who are waiting on approvals that should take 48 hours and take a week.

The honest answer is that PA serves a dual purpose: clinical appropriateness review AND cost containment. Both are real. Both shape how the system behaves in practice, which is why the same process designed to protect patients can also be one of the most significant bottlenecks in their care.

What Types of Services Require Prior Authorization?

Not every service requires prior authorization, but the list is longer than most patients - and even many providers - expect. Here are the most common categories:

• Diagnostic imaging - MRIs, CT scans, PET scans, and some ultrasounds typically require prior authorization under most commercial plans.
• Non-emergent surgeries - Elective orthopedic procedures, bariatric surgery, joint replacements, and similar services almost always require advance approval.
• Specialty medications - Brand-name drugs, biologics, GLP-1 medications, and other high-cost specialty prescriptions frequently require prior authorization before dispensing.
• Durable medical equipment (DME) - Wheelchairs, CPAP machines, and prosthetics often require PA before the supplier can bill the insurer.
• Radiation and infusion therapy - Oncology treatments and IV medication administration commonly require prior authorization, sometimes causing weeks of delay for patients who need to start therapy promptly.
• Behavioral health services - Intensive outpatient programs, residential treatment, and some therapy modalities may require PA depending on the specific plan.
• Home health services - Skilled nursing visits and post-acute physical therapy often require insurer approval before services begin.

The specific requirements vary by plan, insurer, and patient benefit tier. This is one reason why verifying insurance eligibility and benefits before scheduling is so critical - you need to know what requires PA for this specific patient's plan, not just what typically requires it for a category of service. Getting that information at the scheduling stage, rather than the day before a procedure, is the difference between a smooth workflow and a last-minute scramble.

It's important to note that emergency services generally do NOT require prior authorization under federal rules. In true emergencies, care is delivered first, and a retrospective review - if required at all - happens afterward.

How Does the Prior Authorization Process Work?

The prior authorization process has four core steps. But each step can involve multiple handoffs, and any one of those handoffs can create a delay if information is incomplete, misrouted, or waiting in a queue.

1. The provider identifies the PA requirement. This should happen at the scheduling stage, when billing staff or care coordinators verify whether the ordered service requires prior authorization under the patient's specific plan - not the morning of the procedure.
2. The practice submits the request. The provider's office gathers and submits clinical documentation: ICD-10 diagnosis codes, CPT procedure codes, clinical notes, and records of prior treatments already attempted. Requests can be submitted via phone, fax, online payer portal, or electronic prior authorization (ePA) software.
3. The insurer reviews the request. A clinical review team evaluates whether the requested service meets medical necessity criteria under the patient's benefit plan. This may involve nurse reviewers, physician advisors, or in some cases, automated criteria-matching tools.
4. A decision is issued and communicated. The insurer approves, denies, or requests additional information. The provider's office receives the decision and notifies the patient and the scheduling team.

I saw this process from the insurer's side when I worked at UnitedHealth Group (Optum), handling coverage inquiries and verifying billing codes. What struck me most was how much of the friction was not about bad intentions on either side - it was about incomplete documentation, code mismatches, or requests sitting in a queue while the reviewer waited for clarifying information. A submission that looks complete from the provider's end can be missing a single required field that holds it for days. That is how a "48-hour" PA becomes a week-long delay that impacts the patient's care and the practice's schedule.

A prior authorization specialist on r/pharmacy described the internal handoff chain this way: "MA gets the PA request, forwards to me, I submit chart notes and questionnaire, I get denial letter, forward to MA/nurse in EHR, MA/nurse sends message to head nurse for provider, head nurse informs provider insurance doesn't approve the therapy." That is six handoffs for a single request - and every one is an opportunity for delay, lost documentation, or miscommunication.

How Long Does Prior Authorization Take?

Timelines vary widely - from under an hour on electronic submissions with supported payers to five or more business days on fax-based submissions. Most insurers target 24 to 48 hours for standard requests. The key variable is submission method. Optum and Caremark process electronic prior authorizations through CoverMyMeds and can resolve some requests within minutes. As of 2025, however, 40% of prior authorization requests still arrive by fax - meaning a large share of practices are still experiencing the slower end of the timeline range. Starting in 2026, CMS is requiring urgent Medicare and Medicaid Advantage PA decisions within 72 hours and standard decisions within 7 calendar days, with fully automated electronic systems required by 2027.

What Happens If Prior Authorization Is Denied?

A denial is not the final word - but it does add significant time and administrative effort to the patient's care path. When a PA is denied, the provider has several options:

• Submit additional documentation. If the denial was based on missing or insufficient clinical information, resubmitting with complete records often reverses it. This is the most common and fastest path.
• Request a peer-to-peer review. The treating physician speaks directly with the insurer's reviewing physician. This is often the most effective route when a denial is based on clinical criteria that the insurer's team has interpreted too narrowly.
• File a formal appeal. A written appeal goes through the insurer's formal reconsideration process and typically takes additional days or weeks to resolve.
• Request an expedited review. In urgent clinical situations, providers can request a faster decision - which CMS will require to be resolved within 72 hours starting in 2026.

Here is the number that should change how any practice thinks about denial management: only 56% of prior authorization denials are upheld on appeal, according to Becker's Healthcare analysis. Nearly half of initial denials are reversed when challenged. That is not a sign of a well-calibrated review process - and it is a strong argument for building a systematic appeals workflow rather than accepting initial denials as final decisions.

Prior Authorization for Medication

Prior authorization for medication is one of the most common forms patients and providers encounter.

When a physician prescribes a brand-name drug, a biologic, or a specialty medication, the pharmacy benefit manager (PBM) or insurer may require PA before the medication can be dispensed. The provider must submit documentation showing why the prescribed drug is medically necessary - typically including diagnosis codes, any lower-cost alternatives already tried and failed (a process called step therapy), and clinical notes supporting the treatment decision.

The practical experience for patients is frustrating: they go to the pharmacy and the prescription is listed as "on hold." A prior authorization for medication is usually the reason. Resolution requires the provider's office to initiate the submission - the pharmacy can facilitate communication but cannot submit the PA on the provider's behalf. Medication PA has its own formulary rules and PBM-specific submission processes, which I'll cover in a dedicated post.

What Is Medicare Prior Authorization?

Traditional Medicare (fee-for-service) uses prior authorization only in limited situations - primarily for certain durable medical equipment, some home health services, and specific imaging studies. Medicare Advantage plans, however, use it much more broadly - and that is where most of the administrative friction concentrates for practices serving Medicare-age patients.

In 2023, Medicare Advantage insurers denied 3.2 million prior authorization requests, representing 6.4% of total submissions, according to CMS and KFF data - even as the overall volume of authorization requests was rising. The Medicare prior authorization pilot program and ongoing CMS regulatory reforms are aimed at curbing excessive denials in the Medicare Advantage space. Practices with a high Medicare Advantage patient population need a consistent, well-documented submission process that accounts for plan-specific criteria, which can vary significantly across MA plans - even from the same carrier.

How Practices Reduce the Prior Authorization Burden

The administrative math is sobering. According to Becker's May 2025 analysis, the average medical practice completed 43 prior authorizations per physician per week, requiring about 12 staff hours to manage. That is nearly one-third of a full-time employee's weekly capacity dedicated to a single administrative function - not patient care, not billing, not scheduling. Just prior authorization.

From what I've seen at HelpSquad, the practices that manage this most effectively make a deliberate structural decision about who owns the PA process. Spreading it across general front-desk and billing staff - which is the default at most practices - leads to missed submissions, duplicate efforts, and slower follow-up. Here is what effective PA management looks like in practice:

• Proactive benefits verification at scheduling. Building an insurance eligibility check into the scheduling workflow means PA requirements are identified before the appointment, not the day before a procedure.
• Electronic submission. Moving from fax-based to ePA submissions dramatically reduces turnaround time for supported payer-service combinations.
• Dedicated PA ownership. Assigning specific staff members to prior authorization - rather than rotating the task across general staff - reduces error rates and keeps follow-up timely and consistent.
• Outsourced prior authorization support. Some practices offload the entire PA cycle to a specialist team. HelpSquad's prior authorization support services handle submission, follow-up, and appeal management so clinical staff can stay focused on patient care.

One medical assistant who handled medication PAs for 13 years at a teaching hospital described how her health system eventually addressed the volume: "Slowly over the last year, the health system decided to centralize prior auths for primary and family medicine. There is now a dedicated team, off-site and remote, that handles them all." The relief that structural shift produced for clinical staff was immediate and measurable. Centralized ownership - whether in-house or outsourced - is KEY.

What Is a Prior Authorization Specialist?

A prior authorization specialist is a dedicated administrative professional who manages the PA process on behalf of a medical practice or health system. Their responsibilities include identifying which services require authorization, gathering and submitting clinical documentation, following up on pending requests, tracking decision timelines, and managing appeals when denials occur. The role requires familiarity with medical coding (ICD-10, CPT), insurance benefit structures, payer-specific submission portals, and formulary requirements for medication PAs. As the volume and complexity of prior authorization work continues to grow, demand for qualified specialists - whether employed in-house or contracted through BPO teams - is increasing across every practice size and specialty.

What Will Matter Most in Prior Authorization Over the Next 3 Years

Signal 1: Real-Time Electronic PA Becomes the Standard

The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) requires Medicare Advantage, Medicaid, and CHIP plans to implement real-time electronic prior authorization APIs by January 2027. For practices still submitting by fax, this is a hard deadline that will require workflow and technology changes. The opportunity in this shift is significant: real-time ePA decisions can collapse timelines from days to minutes. CMS has set a target of 80% of PA decisions processed in real time by 2027 - which represents a fundamental redesign of how this administrative process works.

Practices that build submission workflows around electronic tools now will be positioned to benefit from the speed increase. Those that delay will experience the transition as a forced scramble. Given that 40% of PA requests still arrive by fax as of 2025, the gap between where most practices are and where CMS expects them to be by 2027 is real and closing fast.

Signal 2: AI-Powered Automation Starts Reducing Submission Friction

Payers and vendors are increasingly piloting AI-powered prior authorization tools that pre-screen clinical documentation before submission, match cases to insurer criteria automatically, and flag incomplete requests before they reach a reviewer. From the provider side, AI tools embedded in EHR workflows are beginning to identify PA requirements at the point of order - alerting staff before a service is scheduled, rather than after the appointment is already confirmed.

I'd expect this category to mature substantially over the next two to three years. The practical impact for practices will be fewer administrative holds, faster submission cycles, and lower initial denial rates - because more common causes of denial (documentation gaps, code mismatches, missing step therapy records) will be caught automatically before the request leaves the practice. How quickly any given practice benefits depends on their EHR platform and whether their key payers have adopted compatible ePA standards.

Signal 3: Reform Pressure Continues to Build - Unevenly

The bipartisan Improving Seniors' Timely Access to Care Act has advanced in Congress with strong support from physician organizations. The AMA, American Hospital Association, and major specialty societies are aligned in pushing for PA reform at federal and state levels. Even major insurers are responding: UnitedHealth Group announced plans to eliminate prior authorization for hundreds of service categories, reflecting both regulatory pressure and reputational cost from being publicly associated with care delays.

For practices, the trend is in the right direction - but it will move unevenly. Some payers will reduce PA requirements; others will maintain or expand them, particularly for high-cost specialty services, biologics, and GLP-1 medications. The safest assumption for planning purposes is that prior authorization management will remain a significant administrative function for most practices through at least 2028, even as the worst friction points are gradually addressed. Building structured, scalable PA workflows now - not waiting for reform to arrive - is the more effective posture.

In Summary: What Prior Authorization Means for Your Practice

Prior authorization is a structural part of the U.S. healthcare billing system, and the administrative burden it places on medical practices is real and growing. The average practice now spends roughly 12 staff hours per physician per week managing it. Nearly half of all initial denials are reversed on appeal - which means accepting a first denial as final almost always leaves money and access on the table. And CMS regulatory changes starting in 2026 will begin shifting the process toward real-time electronic decisions, creating both opportunity and transition risk for practices still running PA through fax-based workflows.

The practices that handle prior authorization most effectively treat it as a structured, trackable process - not a background task distributed unevenly across general staff. Whether that means designating in-house PA specialists, adopting electronic submission tools, or outsourcing the entire cycle, the investment pays for itself in faster approvals, fewer denials, and less clinical staff capacity lost to follow-up calls and administrative churn.

If prior authorization is consuming your team's time and slowing patient care, HelpSquad's prior authorization support services manage the full cycle - from submission through appeal management - so your clinical staff can focus on patients.