The payer clock covers one part of the path to care
The CMS decision clock starts when the payer receives the request. Preparing the request and arranging care after the decision fall outside it, so leaders need to measure each interval.
Order-to-care time, measured locally
Clinical order to payer receipt
Determine requirements, prepare the request, and submit it.
Provider
Payer receipt to decision
Turnaround, information requests, and any permitted extension.
Payer decision clock
- Expedited
- Up to 72 hours
- Standard
- Up to 7 calendar days
Decision to next patient action
Communicate the outcome and arrange the next step.
Provider
Decision to completed care
Reach completed care or a documented alternative.
Provider
The CMS prior authorization rule creates a reason for healthcare executives to examine more than payer response times. A faster authorization decision matters, but it does not tell a health system whether a patient received care sooner.
Prior authorization is a payer's review of a request before authorizing a medical item or service. For operations leaders, the request is one stage in a longer pathway that includes preparing documentation, communicating with the patient, handling exceptions, and arranging care after a decision.
The executive task is to measure that full pathway while keeping regulatory obligations separate from local improvement goals.
What changes in 2026, and what waits until 2027
CMS-0057-F applies to specified payers, including Medicare Advantage organizations, state Medicaid and Children's Health Insurance Program fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and Qualified Health Plan issuers on federally facilitated exchanges. It is not a blanket rule for every US insurer.
Under the CMS final-rule fact sheet, operational requirements generally began in 2026, while application programming interface requirements generally begin in 2027. Exact compliance dates vary by payer type.
The CMS process guidance sets the decision limits for applicable medical items and services, excluding drugs. Impacted payers other than those Qualified Health Plan issuers must send decisions as expeditiously as the patient's condition requires. The maximum is 72 hours for expedited requests and seven calendar days for standard requests, subject to permitted program-specific extensions. These are calendar-time limits, not business-hour limits. They are not targets that justify waiting when the patient's condition requires an earlier response.
Specific denial reasons and public prior-authorization metrics are also part of the rule. The initial public metrics due March 31, 2026 cover calendar year 2025. They provide a baseline, not evidence that the 2026 requirements improved access.
The separate 2026 CMS drug-authorization proposal remains described by CMS as proposed as of October 6, 2026. Its provisions should not be treated as enacted requirements.
What recent patient research does, and does not, show
A July 2026 study in JAMA Network Open surveyed US adults about patient and caregiver experiences with prior authorization. Among 286 respondents reporting authorization experience for their own care, 169, or 59.1%, reported care delays. The study also examined 182 respondents with caregiver authorization experience.
These are not national prevalence estimates. The online convenience-panel survey was conducted from December 2024 through January 2025 and relied on self-report. It included medications and medical services, and patient and caregiver groups overlapped. Its findings cannot establish the effect of the 2026 reforms or isolate non-drug authorization experiences.
The study nevertheless gives leaders a reason to examine the work patients and caregivers perform during authorization. It does not prove that their involvement caused delays. More difficult cases or prior denials may have prompted that involvement.
Prior authorization turnaround time is not the complete patient pathway
Current CMS guidance states that the decision clock begins when the payer receives a prior-authorization request. An electronic check to determine whether authorization is required does not, by itself, start that clock.
That distinction matters for provider measurement. Time spent assembling the request occurs before the payer receives it. Time spent arranging care after the decision occurs outside payer turnaround as well.
A health system could see faster payer decisions without shorter order-to-care time. That is an operating possibility to investigate locally, not a finding established by the survey. Leaders need measures that distinguish the intervals rather than assigning every delay to the payer or the access team.
Build a patient-access scorecard around the handoffs
Start with one service line and define a consistent set of timestamps. A useful local scorecard can separate the following intervals.
| Interval | What to measure | Management question |
|---|---|---|
| Clinical order to payer receipt | Time required to determine requirements, prepare the request, and submit it | Which preparation tasks or handoffs need attention? |
| Payer receipt to decision | Turnaround, information requests, decision, and any permitted extension | Which cases need follow-up or escalation under applicable rules? |
| Decision to next patient action | Time to communicate the outcome and arrange the appropriate next step | Does the patient know what happens next? |
| Decision to completed care or documented alternative | Time and outcome after authorization review | Did the pathway reach an appropriate resolution? |
These are proposed provider improvement measures, not additional CMS reporting requirements or validated universal benchmarks. Define urgency, denominators, exceptions, and closure rules with clinical and compliance leaders.
Do not automatically treat a denial as a failed workflow or an approval as completed care. A denial may require clinical review, an appeal, or another appropriate action. An approval still needs a usable next step for the patient.
Assign an accountable owner to each status. Patient-facing teams should know who owns the request, what they can accurately communicate, and when a clinician or specialist must intervene. Where a caregiver is involved, communication must follow the organization's permission and privacy requirements.
Measure labor without assuming savings
Alongside elapsed time, track staff effort spent on documentation rework, status inquiries, repeat contacts, and post-decision coordination. Segment findings by service line and payer rather than relying on one enterprise average.
If a redesigned workflow releases staff time, identify how that time is redeployed before describing it as financial savings. Additional completed care, lower overtime, and reduced staffing expense are different outcomes and require their own evidence.
The same discipline applies to patient experience. Fewer internal transactions are not an improvement if the patient must make more calls to understand the next step.
The PEC360 perspective on authorization-related communication
PEC360 approaches patient experience as a connected healthcare operating model, combining AI, automation, enterprise knowledge, and human expertise. Authorization-related communication fits that perspective because patients need consistent information while different teams retain distinct responsibilities.
The appropriate starting question is where approved knowledge and workflow guidance can support staff, not whether an AI system can take over the authorization decision. PEC Central provides context-aware institutional knowledge and workflow guidance for healthcare call-center agents. Sherlock EKOL connects governed enterprise knowledge to employees, AI agents, and workflows.
A disciplined operating review should test whether staff can explain the current status using approved information, identify the responsible team, and escalate without making clinical or coverage promises. Automated messages should not imply approval before the payer has issued it. Complex clinical questions and disputed decisions need appropriate human review.
This is a practical extension of patient experience as an operations discipline. The goal is to make the work around care visible and accountable without confusing communication support with clinical judgment or insurance authority.
Start with the interval your organization can change
Electronic prior authorization can improve information exchange, but CMS does not require every API response to be an immediate decision. Technical readiness and operational readiness should therefore be assessed separately.
For the next executive review, choose one pathway and ask which interval consumes time, who owns it, and how resolution is confirmed. Faster payer decisions are valuable. The provider's responsibility is to turn a decision into a clear, appropriate next step toward care.
Authoritative sources
- CMS. CMS Interoperability and Prior Authorization Final Rule CMS-0057-F. January 17, 2024. https://www.cms.gov/newsroom/fact-sheets/cms-interoperability-and-prior-authorization-final-rule-cms-0057-f
- CMS. Improving Prior Authorization Processes. Last modified September 21, 2026; opened live October 6, 2026. https://www.cms.gov/initiatives/burden-reduction/overview/interoperability/frequently-asked-questions/prior-authorization-api/improving-prior-authorization-processes
- Thom B and colleagues. Patient and Caregiver Involvement With Prior Authorization and Care Delivery and Delays. JAMA Network Open. July 23, 2026. DOI 10.1001/jamanetworkopen.2026.24901. https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2851978
- CMS. 2026 CMS Interoperability Standards and Prior Authorization for Drugs Proposed Rule (CMS-0062-P). Status checked live October 6, 2026. https://www.cms.gov/initiatives/burden-reduction/overview/interoperability/policies-regulations/cms-interoperability-standards-prior-authorization-drugs-proposed-rule-cms-0062-p