CMS-0057-F, explained for small practices

In January 2024, CMS finalized the Interoperability and Prior Authorization Final Rule, known by its docket number, CMS-0057-F. If your practice spends hours a week on prior auth, it's the most important payer rule in years. It's also easy to misread as "prior auth is fixed." It isn't.

Who it applies to

The rule covers what CMS calls impacted payers:

• Medicare Advantage organizations
• State Medicaid and CHIP fee-for-service programs
• Medicaid managed care plans and CHIP managed care entities
• Qualified Health Plan issuers on the Federally-facilitated Exchanges

It doesn't reach most employer-sponsored commercial plans. And the prior authorization provisions don't apply to drugs.

What changed on January 1, 2026

• Decision deadlines. Medicare Advantage, Medicaid, and CHIP payers must decide expedited (urgent) requests within 72 hours and standard requests within 7 calendar days. Exchange plans aren't held to these timeframes under this rule.
• Specific denial reasons. When a request is denied, the payer has to tell you why, specifically.
• Public metrics. Payers must publish prior authorization data each year, such as approval and denial rates and average decision times.

What arrives on January 1, 2027

Impacted payers must have a FHIR-based Prior Authorization API live. It's meant to tell your systems whether an item or service needs prior auth, what documentation the payer wants, and to let you submit and track the request electronically. The rule also requires Provider Access and Payer-to-Payer APIs, plus additions to the existing Patient Access API.

What it doesn't fix

A faster answer isn't a better one. The rule speeds up the decision and makes the denial reason clearer, but the decision still depends on whether your documentation meets the payer's criteria. If the note doesn't say the patient completed six weeks of conservative therapy, the payer can now tell you "no" within seven days, with a specific reason attached.

The practical effect: documentation becomes the bottleneck. The fastest path to an approval is a note that meets the criteria before it's submitted.

What to do now

• Track decision times for your Medicare Advantage and Medicaid patients. If a payer misses the 72-hour or 7-day window, escalate.
• Read every denial reason closely. They're now specific enough to fix patterns, such as the same missing criterion denied over and over.
• Get the payer's actual policy for your highest-volume procedures and build those criteria into how you document.
• Ask your EHR vendor what they plan to support for the 2027 APIs.

Source: CMS fact sheet, CMS-0057-F.