CMS Moves to Mandate Electronic Prior Authorization for Drugs by 2027
CMS unveiled a proposed rule requiring electronic drug prior authorization by October 2027.
Why it matters: Healthcare legal and compliance teams must prepare for sweeping regulatory shifts affecting how payers and providers authorize prescription drugs. New transparency and reporting rules heighten oversight and accountability, with tight deadlines for adaptation.
- CMS released the 2026 prior authorization reform rule on April 10, 2026.
- Electronic prior authorization for drugs would be mandatory for impacted payers by October 1, 2027.
- State Medicaid, CHIP, and QHPs on the FFEs face new 24- to 72-hour decision deadlines.
- Reporting requirements would begin in 2028, forcing public disclosure of key prior authorization metrics.
The Centers for Medicare & Medicaid Services is proposing a major overhaul of prior authorization procedures for prescription drugs. The draft regulation, announced April 10, 2026, would require payers—including Medicaid, CHIP, and ACA marketplace plans—to implement electronic prior authorization for pharmacy and medical benefits by October 1, 2027.
- To address long-standing provider complaints about delays, impacted payers must decide on prior authorization requests for all drugs within 24 hours for Medicaid and CHIP, and within 72 hours (standard) or 24 hours (expedited) for QHPs on FFEs.
- The new rules extend electronic authorization already required for Medicare Part D, aiming to replace outdated fax and paper-based systems. As CMS Administrator Dr. Mehmet Oz noted, the proposal “moves prior authorization into the digital age.”
- Transparency will increase as payers must publicly disclose approval and denial rates, appeal outcomes, and response times beginning in 2028 for 2027 data.
- CMS also proposes adopting HL7 FHIR interoperability standards for electronic transactions, applying to all HIPAA-covered entities exchanging prior authorization requests and decisions electronically.
Industry response has been favorable. Anders Gilberg of the Medical Group Management Association highlighted the proposal as building “positive momentum to hold... insurers accountable for abusive prior authorization tactics.” But legal and compliance teams should note that significant system and process changes may be required to meet the new electronic workflow, reporting, and data exchange mandates.
The public comment period for the proposed rule is open through June 15, 2026.
By the numbers:
- October 1, 2027 — Mandated implementation date for electronic drug prior authorization
- 24 hours — Maximum time for Medicaid and CHIP to decide on drug prior authorization requests
- 2028 — First year impacted payers must report prior authorization metrics publicly
Yes, but: Implementation details and transition costs for new electronic systems are not yet spelled out.
What's next: Comments on the proposed rule are due by June 15, 2026. Final rules and further implementation guidance are expected later in 2026.