Prior Authorization in Healthcare: How It Works and Why It Matters

Prior authorization — sometimes called "pre-auth," "prior approval," or "pre-certification" — is the process by which a health insurer decides, before a service is rendered, whether it will cover that service for a specific patient. It sits at one of the most contested intersections in American medicine: the point where clinical judgment meets insurance policy. For patients, a denial can mean delayed surgery, switched medications, or bills that arrive without warning. For providers, it represents one of the most time-consuming administrative burdens in the system.

Definition and scope

Prior authorization is a utilization management tool used by health insurance plans — including private commercial insurers, Medicaid, and Medicare Advantage plans — to evaluate whether a proposed treatment, drug, procedure, or specialist visit meets the plan's criteria for coverage before that service is delivered.

The scope is wider than most patients expect. A 2022 survey by the American Medical Association found that physicians complete an average of 45 prior authorization requests per week, per physician — a figure that translates into roughly 16 hours of administrative work. The practice applies across specialty care, mental health services, high-cost imaging like MRI and PET scans, brand-name and specialty pharmaceuticals, long-term care, and durable medical equipment.

Traditional Medicare (Parts A and B) uses prior authorization selectively — primarily for certain outpatient procedures and durable medical equipment — while Medicare Advantage plans, which are administered by private insurers, apply it far more broadly. This distinction matters enormously to the 32 million Americans enrolled in Medicare Advantage plans as of 2024 (CMS Medicare Advantage Enrollment Data).

How it works

The mechanism follows a recognizable sequence, though the speed and outcome vary widely by plan and service type.

1. Identification — A provider determines that a patient needs a service subject to prior authorization. This is often discovered only after the prescription is written or the referral is placed.
2. Submission — The provider submits a request to the insurer, typically through an online portal, fax, or phone call. The request includes clinical notes, diagnosis codes (ICD-10), procedure codes (CPT), and sometimes peer-reviewed literature supporting the recommendation.
3. Review — The insurer's clinical staff — or, in some cases, an algorithm — evaluates the request against the plan's coverage criteria and clinical guidelines. Standard reviews must be completed within 14 calendar days under federal Medicaid rules (42 CFR § 438.210). Urgent reviews have a 72-hour deadline.
4. Decision — The insurer approves, denies, or requests additional information. An approval typically carries an authorization number and an expiration window — often 90 days.
5. Appeal — A denial triggers appeal rights. Internal appeals, external independent reviews, and in some cases state insurance commissioner complaints are all available pathways, depending on the plan type and state.

The process sounds orderly. In practice, the AMA reports that 93% of physicians have experienced care delays due to prior authorization, and 34% say a denial has led to a serious adverse event for a patient (AMA 2023 Prior Authorization Physician Survey).

Common scenarios

Prior authorization applies most visibly in four areas:

Specialty pharmaceuticals. A rheumatologist prescribes a biologic for rheumatoid arthritis. Before the pharmacy dispenses it, the insurer requires documentation of step therapy — proof that the patient first tried and failed on at least one less expensive drug, such as methotrexate. This step-therapy requirement is among the most common sources of friction in chronic disease management.

Imaging. A primary care physician orders an MRI for a patient with persistent lower back pain. The insurer requires prior authorization and may instead approve a plain X-ray series first, citing clinical appropriateness guidelines from organizations like the American College of Radiology.

Inpatient and post-acute care. A hospital admission for a non-emergency condition, or a transfer to a skilled nursing facility following surgery, often requires advance approval — or concurrent authorization as the stay progresses. This intersects directly with decisions around palliative and hospice care.

Mental health and substance use treatment. Despite federal parity requirements under the Mental Health Parity and Addiction Equity Act of 2008, plans continue to apply prior authorization more aggressively to behavioral health services than to comparable medical services — a pattern documented repeatedly by the U.S. Department of Labor (MHPAEA Enforcement Reports).

Decision boundaries

Not every denial means the treatment is inappropriate. Not every approval means the cost is covered in full. Understanding where prior authorization ends and other coverage rules begin matters for anyone navigating the healthcare system.

Approved ≠ paid in full. Prior authorization confirms only that a plan will cover the service in principle. Deductibles, coinsurance, and out-of-network cost-sharing still apply. This distinction surprises patients who assume approval means no additional cost.

Denied ≠ final. A denial is the beginning of a negotiation, not the end of a road. Internal appeals succeed at meaningful rates — particularly when a physician submits a peer-to-peer review call with the insurer's medical director. External independent medical reviews, available in all 50 states, reverse insurer decisions roughly 40% of the time, according to a Kaiser Family Foundation analysis of state external review data (KFF Health Policy Analysis).

Emergency care is categorically exempt. Federal law prohibits prior authorization requirements for emergency services. The No Surprises Act of 2022 and pre-existing ERISA regulations both reinforce this boundary. Emergency care cannot be withheld pending insurer approval.

Plan type determines the rules. Employer-sponsored plans governed by ERISA follow federal timelines. State-regulated individual and small-group plans follow state insurance law, which varies substantially. Medicaid managed care plans follow CMS regulations, while fee-for-service Medicaid operates under state plan rules. The Affordable Care Act added appeals requirements for non-grandfathered plans, but grandfathered plans retain older standards. Knowing which regulatory regime applies to a specific plan is the first step in any appeal.