The deadlines that matter
7 calendar days — standard prior authorization requests
Impacted payers must send prior authorization decisions within 7 calendar days for standard (non-urgent) requests, starting with the 2026 compliance dates.
72 hours — urgent requests
Urgent prior authorization requests are capped at 72 hours. For a PT patient in acute pain, a cardiology workup, or a behavioral health placement, that is the difference between treatment starting this week or next month.
Specific denial reasons — no more generic "denied"
Payers must give a specific reason for a prior authorization denial. A specific reason is an actionable reason: it tells your team exactly what documentation, code, or clinical evidence to send back.
Public reporting — approval and denial rates become visible
Payers must publish their prior authorization metrics, including approval rates and response times. For the first time, practices can see which payers are slow, which deny the most, and walk into conversations with data instead of anecdotes.
What this changes for a 5–100 provider practice
The rule only helps if you can prove the clock ran out. Most small practices can't — today, prior auths for a typical specialty practice live in a mix of payer portals, faxes, spreadsheets, and one staff member's memory. When a payer answers on day 12 for a standard request, nobody notices, because nobody recorded day 0.
Three habits turn CMS-0057-F from a regulation into leverage:
- Log every request the day it's sent — patient, payer, procedure, date submitted, standard vs. urgent. The deadline math is impossible without a submission date you trust.
- Flag breaches automatically — a request sitting at day 6 with no answer should be on someone's screen that morning, with the payer's number next to it. Under the new rule, that call is short: the deadline is theirs, and it's published.
- Track denial reasons by payer — now that reasons must be specific, patterns become visible fast: one payer denying the same procedure for the same documentation gap is a fixable submission problem; one payer denying everything is a data point you'll soon be able to compare against their published rates.
The connection to denials
Prior auth failures are 12% of denials for the average specialty practice — missed windows, expired authorizations, incomplete documentation. Every expired auth that reaches billing becomes a CO-197 denial, and most of those are written off. Deadline tracking is denial prevention: the cheapest denial to fix is the one that never happens.
If you don't know your current prior-auth denial count, that's the first number to get. It's one of the patterns a denial audit surfaces from your last 90 days of claims.