Prior Authorization: Why Insurers Make Doctors Ask Permission

Forty Percent of Physicians Report a Serious Adverse Event from PA Delays

In a 2022 survey conducted by the American Medical Association, 94% of physicians reported that prior authorization causes treatment delays for patients. More alarming: 40% said those delays had led to a serious adverse event—a patient whose condition worsened significantly, required hospitalization, or experienced a permanent injury or death while waiting for insurance approval. Prior authorization began as a cost-control mechanism in the 1980s and has expanded dramatically in the decades since. The American Hospital Association estimates that hospital staff collectively spend 10.3 hours per week per physician completing PA requirements—administrative time that does not deliver patient care.

The numbers are stark. And they are getting worse.

What Prior Authorization Is and Why It Exists

Prior authorization (PA), also called pre-authorization, pre-certification, or precertification, is a requirement by health insurers that a healthcare provider obtain approval before providing specific services, medications, procedures, or referrals in order for those services to be covered by the patient's insurance plan. Insurers justify PA as a utilization management tool that prevents medically unnecessary care, ensures adherence to evidence-based treatment guidelines, and controls premium costs by reducing overutilization.

Critics argue that in practice, PA functions primarily as a payment delay and denial mechanism, with denials often overturned on appeal at high rates—suggesting the initial denial was not clinically justified. A KFF analysis of Affordable Care Act marketplace plans found that insurers denied approximately 17% of all in-network claims in 2021, and that enrollees appealed less than 0.1% of denied claims, meaning most denials go unchallenged even when they may be overturnable.

The PA Process Step by Step

The prior authorization process, while varying by insurer and service type, follows a general structure:

• Step 1 — Identification: The provider's office determines that a proposed service requires PA under the patient's specific plan
• Step 2 — Submission: The provider submits a PA request to the insurer with relevant clinical documentation, diagnosis codes, and supporting evidence
• Step 3 — Clinical review: The insurer's clinical review team (nurses and, for complex cases, physicians) evaluates the request against the plan's coverage criteria and medical policy
• Step 4 — Decision: The insurer approves, approves with modifications, or denies the request; federal law sets minimum timeframes for decisions
• Step 5 — Appeals: Denied requests may be appealed internally and, if unsuccessful, through an external independent review organization (IRO)

Approval and Denial Rates by Plan Type

A 2022 Office of Inspector General report on Medicare Advantage found that MA plans denied prior authorization requests at a rate that was "sometimes inappropriate"—specifically, that 13% of denied requests met Medicare coverage criteria and should have been approved. This systemic issue has driven federal regulatory action.

The 2024 CMS Interoperability and Prior Authorization Rule

In January 2024, the Centers for Medicare & Medicaid Services finalized a major rule governing PA in Medicare Advantage, Medicaid managed care, CHIP, and ACA marketplace plans. The rule's most significant provisions require:

• Expedited (urgent) PA decisions within 72 hours for standard requests and 24 hours for urgent requests (down from the previous 7 business days standard)
• Denial notices must include specific clinical reasons, not generic "not medically necessary" language
• Payers must report PA-related metrics publicly, including approval rates, denial rates, and average decision timeframes
• Electronic PA capabilities through HL7 FHIR-based APIs by 2027

The rule applies to federal programs; it does not directly govern fully insured commercial plans regulated by states, though many states have enacted parallel legislation.

Gold Carding: Exempting Physicians Who Demonstrate Compliance

Gold Carding programs exempt physicians from prior authorization requirements for specific services when the physician has a demonstrated history of PA approvals at or above a defined threshold—typically 90% or higher approval rates over a set period. The concept recognizes that requiring blanket PA for all providers imposes administrative costs disproportionate to the oversight value when a particular physician's prescribing or ordering patterns are consistently appropriate.

Several states have passed Gold Carding legislation. Texas enacted a Gold Carding law in 2021 requiring health plans to exempt physicians from PA for specific services if their approval rate meets the threshold. A growing number of states are considering similar legislation. Gold Carding is a significant concession from the insurer perspective; the industry has resisted broader mandatory adoption.

Peer-to-Peer Review and Appeal Rights

When a PA request is denied, the treating physician typically has the right to request a peer-to-peer review—a direct conversation between the treating physician and the insurer's reviewing physician. Peer-to-peer reviews overturn denials in a significant minority of cases; the exact overturn rate is not publicly reported by most insurers but is estimated at 15–40% by physician advocacy organizations.

Beyond peer-to-peer review, patients have the right to a formal internal appeal and, if that appeal is denied, an external review by an independent review organization (IRO) not affiliated with the insurer. Under the ACA, decisions overturned in external review must be implemented by the insurer. External review overturn rates vary by service type but are meaningful—in states that collect this data, external review overturn rates commonly range from 20% to 40% of reviewed decisions.

Despite these rights, most patients do not appeal. Reducing that gap is among the most consequential things a patient or caregiver can do when facing a coverage denial.