The short answer: on May 29, 2025, the Government Accountability Office published GAO-25-107342, Medicare Advantage: CMS Oversight of Prior Authorization Criteria Should Target Behavioral Health Services. GAO reviewed nine MA organizations covering about 45% of MA enrollment and found that CMS had audited no behavioral health prior authorization requests, despite naming behavioral health access a priority. GAO recommended that CMS target behavioral health in the annual reviews of MA internal coverage criteria that began in 2026 under the CY 2024 MA final rule, CMS-4201-F. That recommendation is now the single most useful federal citation a behavioral health provider can attach to an MA prior authorization dispute.
- 9MA organizations reviewed by GAO
- ~45%of MA enrollment covered by those nine
- 0behavioral health PA requests audited by CMS
- 2026annual internal-coverage-criteria reviews begin, per CMS-4201-F
Every figure above comes directly from GAO-25-107342 (gao.gov, May 29, 2025) and the CY 2024 Medicare Advantage final rule, CMS-4201-F. No other statistics appear on this page.
Why this report matters more than the usual oversight letter
Prior authorization complaints in Medicare Advantage are common. What is not common is the federal government's own audit arm documenting that the agency responsible for MA oversight looked at zero behavioral health prior authorization requests while publicly treating behavioral health access as a priority. That is a gap between stated policy and audit practice, stated in a numbered GAO product, with an open recommendation attached to it.
For behavioral health organizations, IOP and PHP programs, SUD treatment providers, and ABA practices whose BCBAs and RBTs live inside MA plan authorization queues, this changes the posture of an appeal. You are no longer arguing that a plan's internal coverage criteria feel restrictive. You are citing a standing federal recommendation that these exact criteria deserve targeted CMS scrutiny.
The oversight picture, before and after GAO-25-107342
The matrix below is the fastest way to see what actually changed and what is still pending. Read each row left to right: the state of play GAO documented, what GAO formally recommended, and where things stand in 2026 now that CMS's annual reviews of MA internal coverage criteria are underway.
| Oversight dimension | What GAO found (as of May 29, 2025) | What GAO recommended | Where it stands in 2026 |
|---|---|---|---|
| CMS audit coverage of behavioral health PA | GapCMS had audited no behavioral health prior authorization requests, even though behavioral health access was a named priority. | RecommendationTarget behavioral health services within CMS oversight of MA prior authorization criteria. | OpenThe recommendation stands. Providers can cite it in appeals and complaints until CMS demonstrates targeted behavioral health review. |
| Review of MA internal coverage criteria | GapPlans applied internal coverage criteria to behavioral health PA without targeted federal examination of those criteria. | RecommendationUse the annual internal-coverage-criteria reviews to look specifically at behavioral health. | ActiveAnnual CMS reviews of MA internal coverage criteria began in 2026 under CMS-4201-F. The vehicle GAO pointed to now exists and is running. |
| Evidence base GAO built | FindingGAO reviewed nine MA organizations covering about 45% of MA enrollment. This was not a fringe sample, it was the core of the market. | ImplicationFindings at that scale support market-wide scrutiny, not plan-by-plan exceptions. | UsableThe scale of the sample is itself an appeal argument: the criteria your denial rests on belong to the population GAO examined. |
| Plan behavior to expect | BaselineInternal coverage criteria for behavioral health PA operated with little targeted federal attention. | PressureFederal attention on the criteria themselves, not just on denial rates. | TighteningExpect plans to tighten their documentation of clinical criteria in response. Sloppier criteria get rewritten, not necessarily loosened. |
The timeline in four stops
CMS-4201-F establishes the framework, including annual CMS reviews of MA internal coverage criteria beginning in 2026.
GAO-25-107342 publishes: nine MA organizations reviewed, about 45% of MA enrollment, zero behavioral health PA requests audited by CMS.
Annual criteria reviews begin. The oversight vehicle GAO told CMS to aim at behavioral health is now live.
Recommendation open. Behavioral health providers hold a standing federal citation that these exact criteria deserve scrutiny.
What this means for a live denial on your desk
A GAO recommendation does not overturn a denial by itself. What it does is shift the burden of credibility. When an MA plan denies behavioral health services based on internal coverage criteria, the plan is now defending criteria that the federal audit community has flagged, by category, as under-examined. In peer-to-peer reviews, reconsiderations, and complaints, that context matters, and appeal writers should use it explicitly, citing GAO-25-107342 by number and date.
The second-order effect cuts the other way. Plans reading the same report will tighten the documentation of their clinical criteria before CMS's annual reviews reach them. That means behavioral health providers should expect prior authorization packets to be judged against more precisely worded criteria over the next cycles, which raises the cost of thin clinical documentation on the provider side too.
Operator to-do list
- Add the citation to your appeal templates. Reference GAO-25-107342 (May 29, 2025) by name in MA behavioral health PA appeals where the denial rests on the plan's internal coverage criteria.
- Request the criteria in writing, every time. The annual reviews under CMS-4201-F examine internal coverage criteria. Your appeal is stronger when you can quote the exact criteria language the plan applied.
- Track denials by criteria, not just by CPT code. Build a log that maps each MA behavioral health denial to the specific internal criterion cited. Patterns across denials are exactly the kind of evidence a targeted review is designed to surface.
- Harden your own clinical documentation now. As plans tighten criteria wording, medical necessity narratives, treatment plans, and progress documentation from your BCBAs and RBTs need to anticipate the tightened language, not react to it.
- Escalate systematically. Where a plan's criteria produce repeated denials for the same service, route the pattern into formal complaint channels rather than absorbing it as one-off write-offs.
Sources
- GAO-25-107342, Medicare Advantage: CMS Oversight of Prior Authorization Criteria Should Target Behavioral Health Services, gao.gov, May 29, 2025.
- CMS-4201-F, CY 2024 Medicare Advantage final rule, establishing CMS annual reviews of MA internal coverage criteria beginning 2026.
Turn a federal recommendation into recovered revenue
ASP-RCM Solutions runs denial management and appeals for behavioral health organizations, including ABA practices staffed by BCBAs and RBTs, and we build the criteria-level denial logs and citation-backed appeal narratives this GAO recommendation rewards. If Medicare Advantage prior authorization denials are sitting in your AR, we will show you which ones this report helps you fight.
Talk to our denial management teamRelated reading
Medicare now pays MFTs and mental health counselors. Here is how to actually get paid.
Marriage-and-family therapists and mental health counselors can bill Medicare directly in 2026. An operator wa
Read →Case studyStanding up Collaborative Care billing (99492-99494) in a primary-care-embedded team
How a community behavioral health clinic stands up CoCM billing with 99492, 99493, 99494 and G2214, including
Read →InsightBehavioral health telehealth after 2025. The dated timeline your intake team can actually rely on.
A dated timeline of which behavioral and mental health telehealth and audio-only Medicare allowances became pe
Read →