Prior Authorization Enters Its Infrastructure Era

The Centers for Medicare & Medicaid Services is using its 2026 proposed rule on interoperability and drug prior authorization to do more than shorten approval timelines. In the agency’s April 2026 proposal, prior authorization is treated as a data exchange and accountability problem, not simply a dispute between payers and providers over utilization management. That distinction matters because opaque workflows can survive for years when they remain fragmented across portals, fax queues, and plan-specific rules.

The policy ambition is straightforward. CMS wants more prior authorization activity to move through standardized APIs, more decisions to be made within defined timeframes, more denial reasons to be visible, and more performance data to be reported publicly. The result, if implemented well, would be a system in which prior authorization becomes easier to inspect, benchmark, and challenge. The result, if implemented poorly, would be a cleaner digital shell wrapped around the same delays.

The burden is no longer anecdotal

Public frustration has already outgrown the usual policy language. In KFF’s February 2026 health tracking poll, 69 percent of insured adults said prior authorization was at least a minor burden, and 34 percent identified it as the single biggest non-cost burden they face in getting care. That level of dissatisfaction suggests a process no longer experienced as a narrow administrative inconvenience. It is now part of how patients understand access itself.

The clinical workforce has been sending the same signal. According to the American Medical Association’s 2024 prior authorization physician survey, physicians complete 39 prior authorization requests per week on average, a workload that consumes staff time well beyond the physician alone. That number matters less as a talking point than as an operating indicator. It reflects a workflow that has become embedded in routine care delivery, pharmacy management, specialty referrals, and revenue cycle operations.

Why drugs change the stakes

The 2024 federal framework already established the direction of travel. In the 2024 CMS Interoperability and Prior Authorization final rule, the agency required impacted payers to support a set of interoperability APIs covering patient access, provider access, payer-to-payer exchange, and prior authorization for non-drug items and services. The new proposal extends much of that logic to drugs, where the administrative and clinical risks are often sharper.

That extension is significant because drug prior authorization sits at the intersection of pharmacy benefit design, medical benefit coverage, step therapy, specialty distribution, and disease progression. A delayed imaging study is serious. A delayed oncology infusion, biologic, or specialty medication can become something else entirely. By proposing electronic prior authorization for drugs under the medical benefit, along with required support for pharmacy-benefit transactions using NCPDP standards for SCRIPT, Formulary and Benefit, and Real-Time Prescription Benefit, CMS is trying to intervene where clinical urgency and administrative complexity often collide.

Transparency may matter more than speed

The headlines will focus on the proposed turnaround times, and for good reason. CMS says affected programs would face shorter and more aligned decision windows, including 24-hour determinations for some urgent drug requests and 72-hour timeframes for standard requests in several settings, as described in the proposed rule fact sheet. Faster answers can prevent treatment delays, reduce abandonment, and give clinicians a more predictable operating environment.

Even so, the stronger reform lever may be transparency rather than speed. CMS is proposing more public reporting on prior authorization metrics, more reporting of API endpoints and usage, and more detailed communication of denials. That matters because prior authorization has often functioned as a system that generates work without generating insight. A denial may be issued, appealed, reversed, and forgotten, with no durable public record of whether the original barrier served a legitimate clinical or financial purpose.

Early reporting experience helps explain why CMS is pressing harder. In KFF’s April 2026 review of newly posted insurer prior authorization data, the organization found that the information available so far offers limited visibility into what services are being approved or denied and why. Aggregated percentages can create the appearance of accountability while obscuring the operational reality. A system cannot be meaningfully improved if no one can tell which services trigger denials, which denials are overturned, and which delays are clinically consequential.

Digital burden can still be burden

That does not mean digitization alone will fix the problem. Converting prior authorization from fax traffic into API traffic can reduce labor, but it can also relocate burden into standards management, vendor testing, integration costs, and exception handling. For health systems and plans, the work shifts from document chasing to infrastructure governance. For smaller organizations, that shift may prove just as painful, especially when internal teams depend on external software road maps that do not move at the pace of federal policy.

That is one reason the technical standards language in the proposal deserves executive attention. CMS is proposing to align required standards more directly with versions adopted by the Secretary through 45 CFR 170.215 in the federal health IT standards framework. The ONC Health IT Certification Program overview makes clear that interoperability policy increasingly depends on certified functionality, implementation discipline, and predictable standards lifecycles. In practice, that means compliance will hinge not only on payer readiness, but also on whether EHR vendors, pharmacy technology vendors, clearinghouses, and provider organizations can keep the same versions, guides, and workflows aligned.

The patient experience remains the real test

For patients, none of this will be experienced as architecture. It will be experienced as time. The same KFF polling from February 2026 found that many insured adults who encounter denials or delays report meaningful harm to physical health, mental health, or finances. That is the context in which every technical promise should be judged. Cleaner interoperability without faster therapy initiation would be administrative modernization without practical access reform.

The payer side of the equation also raises hard questions about decision quality. In KFF’s January 2026 analysis of Medicare Advantage prior authorization activity in 2024, insurers made nearly 53 million determinations, denied 7.7 percent of requests, and overturned 80.7 percent of appealed denials. Those numbers do not prove that every initial denial was unwarranted, but they do suggest a process in which persistence, documentation quality, and administrative capacity still play too large a role in who ultimately receives care.

What leaders should watch now

Healthcare executives should read this proposal as an infrastructure rule with financial, clinical, and compliance consequences. It will affect payer operations, provider workflows, pharmacy processes, vendor product strategy, and the quality of reporting available to boards and regulators. The organizations that benefit most will likely be those that treat prior authorization as a cross-functional operating issue rather than a narrow utilization management or revenue cycle task.

The most important indicator to watch is not whether the required APIs go live on schedule. It is whether the new reporting, standards adoption, and denial transparency requirements begin to narrow the gap between administrative process and clinical need. A prior authorization system that becomes faster, clearer, and more measurable could reduce waste on both sides of the transaction. A system that becomes merely more digital could preserve the same friction with better formatting. The infrastructure era of prior authorization is arriving either way. The remaining question is whether that infrastructure will be built to expedite care or simply to document delay.