Home / ASP Insights / Payer intelligence
Insight · Prior authorization and payer intelligence

Payer prior authorization metrics are now public: what the postings must contain and how to use them

Short answer: since March 31, 2026, MA organizations, Medicaid and CHIP programs and exchange issuers must post nine prior-authorization measures on their own websites. Turn a payer’s own approval, denial and turnaround figures into deadlines and denial defenses.
CMS-0057-F · 42 CFR 422.122(c) 72 hours expedited · 7 days standard Prior Authorization API · Jan 1, 2027 Posted on the payer site, not at CMS

October 27, 20266 min readASP-RCM Solutions

Edition
Insight · Oct 2026
Focus
Prior auth metrics
Payers
MA · Medicaid · CHIP · QHP
Metric
9 measures
Effective date
Mar 31, 2026
Length
6 min read
Mar 31each year
Deadline to post the previous year’s metrics [1]
9measures
Approval, denial, appeal reversal, turnaround [1]
72hours / 7 days
Expedited and standard decision clocks [2]
Jan 1, 2027
Prior Authorization API required [1]
The CMS-0057-F clock

Six dates, two already passed

Operational provisions from January 1, 2026, APIs from January 1, 2027 [2] [3]; impacted payers: MA, Medicaid and CHIP, exchange QHP issuers [2].

  1. 1
    Jun 2025Payer pledge: real-time approvals by 2027 [4]
  2. 2
    Jan 1, 202672-hour and 7-day decision clocks; reason on every denial
  3. 3
    Mar 31, 2026First public metrics posting, covering 2025
  4. 4
    Jan 1, 2027Prior Authorization, Provider Access, Payer-to-Payer APIs
  5. 5
    CY 2027Electronic Prior Authorization measure, MIPS clinicians and hospitals
  6. 6
    Mar 31, 2027Second posting, covering 2026
Decision clocks
72 hours expedited, 7 calendar days standard [2]
Public postings
Nine measures, contract level, by March 31
APIs
Approval with end date, denial with reason, or more-information request [1]
Operational provisionsAnnual postingsAPI provisions
What the rule requires

The nine measures an MA organization must post, 42 CFR 422.122(c)

Previous year, excluding drugs, contract level, by March 31 [1]; parallel provisions for the other payers.

#MeasureAggregation
1A list of all items and services that require prior authorizationContract level
2Percentage of standard requests approvedAll items and services
3Percentage of standard requests deniedAll items and services
4Percentage of standard requests approved after appealAll items and services
5Percentage of requests where the review timeframe was extended and the request approvedAll items and services
6Percentage of expedited requests approvedAll items and services
7Percentage of expedited requests deniedAll items and services
8Average and median time from submission to determination, standard requestsAll items and services
9Average and median time from submission to decision, expedited requestsAll items and services
The shape of a posting

What the nine measures cover, and the clocks behind them

Nine measures by type; two decision clocks

[1] [2]

Approval and denial ratesmeasures 2, 3, 6, 7
444% of nine
Turnaround, average and medianmeasures 8, 9
222%
Reversals and extensionsmeasures 4, 5
222%
Services listmeasure 1
111%
01234 measures
Expedited clocknot exchange issuers
72 hours43% of standard
Standard clockcalendar days
7 days168 hours
02467 days
Rates and listsTime and reversalsDecision clocks
Three details for a denial team

What else the rule fixes in writing

Reason on every denial

  • Applies regardless of how the request was sent [1]

What the API returns

  • Approval with end date, denial with specific reason, or a request for more information [1]

X12 278 enforcement

  • Not enforced against payers running an all-FHIR Prior Authorization API [2]
  • Ask your PM vendor about its path
Reading a posting

How to use the postings: what each figure tells the denial team

The figures sit on each payer’s website, replaced every March: collect with URL and date, compare with your log, use as the follow-up trigger, bring to renewal.

Posted figureIf it is highWorklist consequence
Standard denial percentageMore CARC 197 and 50 linesPre-visit check for every service on the payer’s list
Approved after appeal percentageFirst denials often reversedAppeal by default; shorter time to first appeal
Timeframe extended and approved percentagePayer buys timeFollow up at the median, not the regulatory maximum
Average well above median turnaroundLong tail of slow decisionsDaily follow-up past the median
Expedited denial percentageUrgent requests refused oftenUrgency criteria at intake; same-day escalation

In Work Genie the posted figures sit beside the authorization ledger, so a CARC 197 line from a payer that often reverses ranks higher for appeal; see the denial worklist white paper and the Denial Prediction Engine.

Takeaway

The payer has now told you, in its own numbers, how often it says no, how often it reverses itself on appeal, and how long it takes. That is a negotiating document.

What to do this week

Four moves before the March 2027 postings

Build the payer metrics registerPayer, contract, URL, posting date, nine figures, your own turnaround.
Open a request-to-decision log from todayPlan, standard or expedited, sent, decided; to check the March 2027 postings against.
Ask payers and your PM vendor, in writingHow you connect to the Prior Authorization API on January 1, 2027 [1].
Tag authorization CARCs by payer in the worklistCompare posted rates with what you see. See the clean claim rate guide, the Work Genie Brief, the RCM Command Center and the free denial audit.
FAQ

Frequently asked questions

Which payers must publish prior authorization metrics?

Under CMS-0057-F the impacted payers are Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities and Qualified Health Plan issuers on the federally facilitated exchanges. Commercial employer plans outside the exchanges are not covered.

What exactly must be posted?

For Medicare Advantage, 42 CFR 422.122(c) lists nine items from the previous calendar year, at the contract level, posted on the organization's website by March 31: the list of items and services requiring prior authorization; the percentage of standard requests approved, denied and approved after appeal; the percentage of requests where the review timeframe was extended and the request approved; the percentage of expedited requests approved and denied; and the average and median time from submission to decision for standard and for expedited requests. Drugs are excluded.

What decision timeframes apply?

Impacted payers other than exchange issuers must send prior authorization decisions within 72 hours for expedited requests and seven calendar days for standard requests, and since January 1, 2026 must give a specific reason for every denial. The Prior Authorization API that lets systems submit and track requests is required from January 1, 2027.

Where can we find a payer's posting?

On the payer's own website; the rule does not create a central CMS database. Search the payer's provider or transparency pages for prior authorization metrics or data, and record the URL and the posting date, because the figures are replaced each March.

Sources
  1. 42 CFR 422.122, Prior authorization requirements (eCFR, current as of October 22, 2026): denial reasons, Prior Authorization API, public reporting of metrics
  2. CMS fact sheet: CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), January 17, 2024
  3. CMS, Interoperability and Prior Authorization Final Rule (CMS-0057-F) overview
  4. CMS, Electronic Prior Authorization overview (page updated October 21, 2026)

Checked October 25, 2026. Rules change; confirm against the source before relying on them.

Related

Want the payer metrics register built for you?

We collect every payer’s posting, compare it with your turnaround and denial yield, and hand you the register with the payers to escalate first.