Prior Authorization Turnaround Time by Payer: The 72-Hour and 7-Day Rules in Practice

Direct answer: Since January 1, 2026, the CMS Interoperability and Prior Authorization Final Rule, CMS-0057-F, requires impacted payers to send prior authorization decisions within 72 hours for urgent requests and seven calendar days for standard requests, and to give a specific reason when they deny one. Impacted payers are Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, and Medicaid and CHIP managed care plans. Qualified Health Plans on the federally facilitated exchanges are exempt from the 72-hour and 7-day deadlines and generally have 15 days for a standard request. Fully insured commercial plans regulated solely at the state level are not directly covered by the rule, though many states have adopted parallel requirements, so commercial turnaround times still depend on the plan and the state. The deadline is only useful if the practice tracks it, escalates the day it passes, and keeps proof of every submission.
WHAT THE RULE CHANGED
Before 2026, many plans routinely took two to six weeks to respond to a prior authorization, sometimes longer, and provided minimal rationale for a denial. CMS-0057-F, published January 17, 2024, compressed the federal deadlines and added two further requirements: a denied request must now carry a specific clinical or administrative reason, not a one-line rejection, and impacted payers must implement FHIR-based prior authorization APIs by January 1, 2027, and publicly report authorization approval rates, denial rates, average response times, and appeal overturn rates. The rule regulates payers, not providers, but its value to a practice is entirely operational: a deadline the payer must meet is a deadline the practice can hold them to, provided the practice can prove when the request was received.
TURNAROUND TIME BY PAYER TYPE
The table below is the working reference for the front desk and the authorization team. Verify the current requirement in the payer's provider manual and the applicable state law before relying on it, because state rules change and payer manuals are updated.
| Payer type | Urgent request | Standard request | Source of the deadline |
|---|---|---|---|
| Medicare Advantage | 72 hours | 7 calendar days | CMS-0057-F, effective January 1, 2026 |
| Medicaid / CHIP fee-for-service | 72 hours | 7 calendar days | CMS-0057-F, effective January 1, 2026 |
| Medicaid / CHIP managed care | 72 hours | 7 calendar days | CMS-0057-F, effective January 1, 2026 |
| Qualified Health Plan, federal exchange | Varies by plan | Generally 15 days | Earlier federal regulation; exempt from CMS-0057-F deadlines |
| Fully insured commercial, state-regulated | Varies by state and plan | Varies by state and plan | State law where adopted; otherwise the plan's own terms |
Two cautions belong on the wall next to this table. First, the clock runs from receipt, not from when the practice sent the fax or clicked submit, so keep the submission confirmation for every request: portal confirmation number, fax confirmation page, or the reference number from the call. Second, the 72-hour and 7-day deadlines do not apply to prior authorization for drugs under this rule; the rule covers medical items and services.
THE TRACKING SHEET THAT MAKES THE DEADLINE REAL
A deadline nobody watches is a deadline nobody meets. Build one tracker with one row per authorization and columns for patient, service, payer, submission date and time, submission channel and confirmation number, urgency level, deadline date and time, status, and escalation date. Set automated alerts at 48 hours for expedited requests and 5 calendar days for standard requests, so the team acts before the deadline rather than discovering it after. Check the portal, not the fax machine: portal submission gives a timestamped confirmation and a status trail, while fax gives a confirmation page that proves transmission, not receipt. Review the tracker every morning, and treat any request past its alert date as the day's first job.
WHEN THE DEADLINE PASSES
If a payer misses the 72-hour deadline on an urgent request or the 7-day deadline on a standard request, that is grounds for immediate escalation. Call the payer's provider-relations team, cite the request, the submission date and confirmation number, and the missed deadline, and ask for the decision and a reference number for the call. If the request was denied, use the specific reason the payer is now required to give: a denial with a real reason can be fixed and resubmitted, or taken to peer-to-peer review with the clinical documentation that answers it. Peer-to-peer is the escalation that most often overturns a denial, because it puts the treating clinician in front of the payer's reviewer with the record open. For repeated delays from the same payer, a complaint to CMS is available for impacted payers, and state insurance departments take complaints on state-regulated plans. Keep every escalation in the tracker, because a pattern of missed deadlines is evidence in a contract renegotiation and in a gold-carding application.
GOLD CARDING AND OTHER WAYS OUT OF THE QUEUE
Some states exempt practices with a strong approval history from routine prior authorization for specific services, a process often called gold carding, and several payers run their own exemption programs. The qualification is usually a sustained approval rate on a service, so the tracker doubles as the application: it is the proof of the approval history. Where gold carding is not available, the practical wins are smaller: standing authorizations for recurring services, authorization templates with the clinical documentation attached the first time, and payer-specific checklists that stop the back-and-forth for missing information, which is the most common cause of a request sitting untouched.
WHAT THE RULE DOES NOT DO
CMS-0057-F does not cover every payer, it does not cover drugs, and it does not make authorization disappear. A practice that submits incomplete requests will still wait, because the clock and the escalation both depend on a clean submission. The rule also does not guarantee approval; it guarantees a timely decision with a reason. That is still a large improvement over a silent queue, but only for a practice that submits complete requests, tracks the clock, and escalates on the day the deadline passes.
PRIOR AUTHORIZATION TURNAROUND CHECKLIST
- Request submitted through the portal where possible, with a timestamped confirmation saved.
- Urgency level recorded, with the correct deadline calculated from receipt: 72 hours urgent, 7 calendar days standard, for impacted payers.
- Tracker reviewed every morning, with alerts at 48 hours and 5 calendar days.
- Denial reason captured in full and answered with clinical documentation.
- Peer-to-peer requested promptly when the denial is clinical.
- Missed deadline escalated the same day to provider relations, with a reference number recorded.
- Gold-carding eligibility tracked per payer and per service.
- State law checked for commercial plans not covered by CMS-0057-F.
FREQUENTLY ASKED QUESTIONS
How fast must a payer decide a prior authorization?
For impacted payers under CMS-0057-F, 72 hours for urgent requests and 7 calendar days for standard requests, effective January 1, 2026.
Does the rule cover my commercial plan?
Not directly, if the plan is fully insured and state-regulated. Check your state's law and the plan's provider manual, because many states have adopted parallel deadlines.
What about marketplace plans?
Qualified Health Plans on the federally facilitated exchanges are exempt from the 72-hour and 7-day deadlines and generally have 15 days for a standard request.
When does the clock start?
From the payer's receipt of the request, which is why the submission confirmation matters.
What do I do when the deadline passes?
Escalate the same day to provider relations, cite the request and confirmation number, and record a reference number.
What if the request is denied?
The payer must give a specific reason. Fix the deficiency, resubmit, or request peer-to-peer review with the clinical documentation that answers the reason given.
A note on verification: Prior authorization requirements, deadlines, and state laws change, and payer manuals are updated. Always confirm the current requirement in the specific payer's provider manual and the applicable state law before submitting or escalating. This article is educational information about billing workflows, not legal or compliance advice.
Need help with prior authorizations, denials, or peer-to-peer preparation? Neximed Billing provides prior authorization and revenue cycle support for practices of every size. Contact us at info@neximedbilling.com or +1-406-2251570.
Related reading: The Prior Authorization Process · How Long Does Medical Credentialing Take · How to Reduce Claim Denials · Timely Filing Limit in Medical Billing · How to Appeal a CO-29 Timely Filing Denial · What Is Revenue Cycle Management