If your practice has noticed more prior authorization denials landing on desks this year, that’s not a coincidence and it’s not just your billing team having a rough stretch. Prior auth denials rose an estimated 31% year over year in 2026, and the timing lines up almost exactly with a federal rule that was supposed to make the process faster, not harder. For practices without a dedicated prior authorization and referral management workflow, that shift has been especially disruptive.
That rule is CMS-0057-F. It went into effect January 1, 2026, and on paper it looks like good news for providers: faster decisions, clearer denial reasons, and public reporting that finally holds payers accountable. In practice, a lot of practices are getting hit with more denials, not fewer, because the rule changed how payers operate faster than most billing teams updated their own workflows around it.
Here’s what actually changed, why denials went up anyway, and what to do about it before more appeal deadlines slip past unnoticed.
What CMS-0057-F Actually Requires
CMS-0057-F is the Interoperability and Prior Authorization Final Rule. It was finalized back in early 2024, but its operational requirements kicked in on January 1, 2026, and its biggest transparency provision landed even more recently.
New Decision Timelines Payers Must Follow
Starting this year, payers covered by the rule (Medicare Advantage plans, Medicaid fee-for-service, CHIP, and Qualified Health Plans on the ACA exchanges) have to issue prior authorization decisions within specific windows: 72 hours for urgent requests, seven calendar days for standard ones. Payers also have to give a specific reason for any denial, regardless of how the request was submitted.
That sounds like a win, and in some ways it is. But a faster decision clock cuts both ways. Payers under pressure to decide within seven days aren’t necessarily taking more time to review borderline cases carefully. Many are leaning harder on automated, AI-assisted review to hit the deadline, which means more claims get an automatic first-pass denial instead of a nuanced look from an actual reviewer.
Payers Now Have to Publish Their Denial Data
The other major shift: as of March 31, 2026, impacted payers were required to publicly report their prior authorization metrics for the first time, including approval rates, denial rates, appeal outcomes, and average decision times. This data used to be a black box. Now it isn’t, and early numbers are giving practices a clearer picture of which payers are the most aggressive about denying requests.
That transparency is genuinely useful. It just hasn’t translated into fewer denials yet.
Why Denials Went Up Instead of Down
Three things are driving the 31% increase, and none of them are going away on their own.
Payers are leaning on AI to make faster decisions. The same technology payers are using to process requests within the new deadlines is also flagging and denying more claims for smaller documentation mismatches than a human reviewer might have caught, or let slide. A missing modifier, a slightly outdated diagnosis code, an authorization that doesn’t match the exact billed service date: these used to sometimes get approved with a quick follow-up call. Now they’re more likely to trigger an automatic denial.
The list of services requiring prior authorization keeps growing. Practices that haven’t updated their PA checklists since last year are running into denials for procedures they’ve been ordering for years without a hitch, not because the procedure changed, but because the payer quietly added a prior auth requirement around it sometime in the last twelve months.
Appeal windows got shorter, and a lot of practices haven’t noticed. This is the part catching people off guard. UnitedHealthcare cut its peer-to-peer review request window from 30 days down to 14. Humana Medicare Advantage plans reduced the window for urgent PA appeals from 72 hours to 48. Several Blue Cross Blue Shield state plans dropped their standard appeal window from 60 days to 30. If your billing team is still reviewing denials on a weekly or biweekly cycle, which used to be perfectly reasonable, some of those appeal windows are now closing before anyone even looks at the denial.
Which Payers Are Denying the Most
With the new public reporting requirement, this is no longer a guessing game. Medicare Advantage plans are currently leading the surge in prior auth denials, with major commercial payers like UnitedHealthcare and Humana close behind. That tracks with what billing teams have been reporting anecdotally for the past year, but now there’s actual published data to confirm it instead of relying on gut feeling.
This matters for a practical reason: if a large share of your patient volume runs through a payer with a known high denial rate, that’s exactly where a tighter, more proactive prior auth workflow will pay off fastest. It also means the old approach of applying one general PA process across every payer stops working well. A workflow tuned for a payer with a 7 percent denial rate doesn’t need the same level of scrutiny as one tuned for a payer sitting well above the industry average. Sorting your payer mix by risk, using the newly published data instead of memory or assumption, is a fairly quick exercise that most billing teams haven’t done yet simply because the data didn’t exist until this year.
It’s also worth watching how this reporting requirement plays out over the next few reporting cycles. The first public numbers, covering calendar year 2025, came out at the end of March. A second round covering partial 2026 data is expected later this year, and that’s when patterns will start to become clearer rather than being a single snapshot. Payers know their numbers are now visible, which in theory should create some pressure to bring outlier denial rates down. Whether that pressure actually changes behavior, or just changes how the numbers get reported, remains to be seen.
A Related Shift Worth Knowing About: The WISR Model
Separately from CMS-0057-F, CMS also launched the Wasteful and Inappropriate Service Reduction model, or WISR, on January 1, 2026. It’s narrower in scope: it only applies to providers in six states, New Jersey, Ohio, Oklahoma, Texas, Arizona, and Washington, and it requires prior authorization for a specific list of targeted services, or the claim goes through pre-payment medical review instead.
If your practice operates in one of those six states, this isn’t optional paperwork. Under WISR, a missing prior authorization for a targeted service doesn’t just risk a standard denial you can appeal quickly. It triggers pre-payment review, which means the claim sits in limbo until CMS completes that review, with no clear timeline attached. That’s a meaningfully different situation than a standard denial, since there’s no straightforward appeal clock to track, just an open-ended wait. Practices in those states need to map their service lines against the WISR targeted procedures list now, not after the first claim gets stuck in review.
What a Missed Appeal Actually Costs a Practice
It’s easy to treat a single missed appeal deadline as a minor administrative slip. Multiplied across a full patient panel, it isn’t.
The frustrating part is that most of these losses are preventable. Roughly 65% of denials are recoverable through a timely, well-documented appeal, which is exactly the kind of work a structured denial management process is built to catch. That’s not a small number. It means the majority of denied claims were never actually lost causes, they just needed someone to file the appeal before the window closed. When that window closes unfiled, a recoverable denial quietly becomes a permanent write-off, and nobody ever finds out it could have gone the other way.
Reworking a single denied claim costs a practice somewhere between $25 and $60 in staff time alone, even before factoring in the revenue at stake. When an appeal window closes before anyone files, that cost doesn’t disappear, it just converts from “recoverable with effort” into “gone for good.” A service that would have been paid at $400 doesn’t become a $400 loss and nothing else. It becomes a $400 loss plus whatever staff time was already spent scheduling the service, documenting it, and initially submitting the claim.
Scale that across a mid-sized practice processing a few hundred prior authorizations a month, with even a modest percentage falling into missed-deadline territory, and the number stops looking like an administrative footnote. It starts looking like a real, recurring hole in monthly revenue, one that’s easy to miss because it doesn’t show up as a single dramatic event. It shows up as a slow, steady leak that only becomes obvious when someone finally adds up a full quarter’s worth of expired appeal windows.
What Practices Can Actually Do About This
None of the above is a reason to panic, but it is a reason to update how prior authorization gets handled day to day. A few things make a real difference.
Audit Your Prior Auth Checklist Against Current Payer Rules
If your list of which services require prior authorization hasn’t been reviewed in the last six to twelve months, it’s probably out of date. Payers add requirements quietly and rarely announce them clearly. A service that didn’t need authorization last year might need it now, and the first sign of that change is usually a denial, not a notice.
Build Appeal Deadlines Into the Workflow, Not Just Denial Tracking
Tracking that a denial happened isn’t enough anymore. Each denial needs its specific appeal deadline attached the moment it’s logged, based on the payer and the type of request, since those windows now vary significantly by payer and by urgency. A denial reviewed on a routine weekly cycle can easily miss a 14-day or 48-hour window that used to be 30 days or 72 hours.
Use the New Public Payer Data
Since payers are now required to report their approval rates, denial rates, and turnaround times, that data is worth actually looking at. It can show which payers in your mix are the biggest source of friction, and it can help set realistic expectations for how long a given payer typically takes to decide, so staff aren’t following up too early or, worse, too late.
Get Real-Time Eligibility and Authorization Checks in Place
A lot of these denials trace back to something that could have been caught before the claim was ever submitted: an authorization that doesn’t quite match the billed code, a coverage detail that changed since the last visit, a service that quietly picked up a new PA requirement. Catching that at the front end, through real-time eligibility and benefits verification, before submission, is a fraction of the cost of catching it after a denial and a compressed appeal window.
Document Medical Necessity More Thoroughly, Not Just More Often
Part of why AI-assisted review is denying more claims is that automated systems are pattern-matching against documentation completeness, not just checking a box that a request was submitted. A prior authorization request supported by clear, specific clinical documentation, and coded correctly by a team that understands medical coding requirements for your specialty, is less likely to trigger an automatic denial in the first place. This isn’t about writing more for the sake of it. It’s about writing the specific details that a system scanning for medical necessity is actually looking for.
Know When Outsourcing the Heavy Lifting Makes Sense
For high-volume service lines like imaging, infusion therapy, or specialty procedures, where authorization requirements are complex and change often, a dedicated team that lives in this process daily is often faster to adapt than an internal team juggling PA alongside a dozen other responsibilities. That’s not a knock on internal staff. It’s simply a lot to track well when the rules are shifting this fast, across this many payers, at the same time.
Frequently Asked Questions
Why are prior authorization denials rising if CMS just made the process faster?
Because a faster decision requirement pushed payers toward more automated, AI-assisted review to meet the new deadlines, and that automation is catching smaller documentation and coding mismatches that a human reviewer might have previously let through with a quick clarification. Speed and accuracy aren’t the same thing, and 2026’s numbers reflect that gap.
What is CMS-0057-F in simple terms?
It’s a federal rule requiring certain payers, including Medicare Advantage, Medicaid, CHIP, and ACA marketplace plans, to decide standard prior authorization requests within seven days, urgent ones within 72 hours, provide specific denial reasons, and publicly report their approval and denial metrics starting in 2026.
How do I know if my state or payer mix is affected by the WISR model?
WISR currently applies only to providers in New Jersey, Ohio, Oklahoma, Texas, Arizona, and Washington, and only for a specific list of targeted services. If you practice outside those six states, WISR doesn’t apply to you directly, though CMS-0057-F’s broader requirements still do.
Is it too late to appeal a denial if the window has already passed?
In most cases, yes, once a formal appeal deadline passes, that specific avenue is closed, which is exactly why catching denials fast and tracking payer-specific deadlines matters more now than it used to. Some payers do allow limited exceptions for extenuating circumstances, but that’s the exception, not something to plan around.
Should my practice change its prior authorization workflow because of these new rules?
If your current process reviews denials on a weekly or biweekly cycle, or if your PA requirement checklist hasn’t been updated recently, yes. The rules didn’t just change what payers have to do; they changed how much time practices realistically have to respond.
Will these rules eventually reduce denials once payers catch up?
That’s the intent behind the transparency requirement, since payers with visibly high denial rates now face more scrutiny than they did a year ago. Whether public pressure actually brings denial rates down, or whether payers simply get better at explaining denials without reducing how many they issue, is something worth watching over the next few reporting cycles rather than assuming either way.
Prior authorization was never anyone’s favorite part of running a practice, and 2026 hasn’t made it simpler. But the practices adapting fastest aren’t the ones with the most staff. They’re the ones who’ve rebuilt their workflow around the actual deadlines payers are working with now, not the ones from a year ago.
Ready to see where your practice’s prior authorization workflow stands?
RCM First’s Prior Authorization & Referral Management team tracks payer-specific deadlines, catches authorization mismatches before submission, and works denials while appeal windows are still open.