Guide · Published Nov 11, 2026 · Updated Nov 2026

Medicare Advantage Prior Authorization: The Rules That Changed in 2026

Since January 1, 2026, a Medicare Advantage plan has 7 calendar days to answer a standard prior auth request, half the old 14. Most follow-up calendars still wait two weeks.

Last verified: November 2026. Sources: the CMS-0057-F fact sheet, 42 CFR Part 422 as current on eCFR, CMS materials on the CY2026 and CY2027 Medicare Advantage rules, and KFF (January 28, 2026). CMS revises MA rules every year, so re-check before relying on a deadline. Operational guidance, not legal advice.

Medicare Advantage prior authorization is the plan's approval before a service, under federal rules that override state law. Since January 1, 2026, MA plans must decide standard requests within 7 calendar days and expedited requests within 72 hours, give a specific reason for every denial, and post their prior auth metrics publicly each year.

Key takeaways

  • Standard MA decisions dropped from 14 to 7 calendar days on Jan 1, 2026; expedited stays at 72 hours (CMS-0057-F).
  • MA plans made 52.8 million prior auth determinations in 2024 and denied 7.7% in full or part (KFF, Jan 2026).
  • Only 11.5% of those denials were appealed, and 80.7% of appeals were overturned at least in part (KFF).
  • An approved MA authorization cannot later be denied for medical necessity, except for good cause or fraud (42 CFR 422.138(c)).
  • MA plans must follow Traditional Medicare coverage rules and post any internal criteria with their evidence (42 CFR 422.101(b)).

The clock changed on January 1, 2026, and most follow-up calendars did not. Medicare Advantage plans now have 7 calendar days to decide a standard prior authorization request, down from 14, under CMS-0057-F. A request still pending on day eight is not slow. It is late.

What changed for Medicare Advantage prior authorization on January 1, 2026

CMS-0057-F, the Interoperability and Prior Authorization final rule, set most of the 2026 changes for MA, Medicaid, and CHIP. The CY2026 MA rule, released in April 2025, added two inpatient protections.

Medicare Advantage prior auth rules in force since Jan 1, 2026
RuleWhat it requiresSource
Standard decision7 calendar days (was 14)CMS-0057-F
Expedited decision72 hoursCMS-0057-F
Denial reasonA specific reason for every denied requestCMS-0057-F
Public metricsPosted annually; first set due Mar 31, 2026CMS-0057-F
Decisions during an inpatient stayTreated as organization determinations, with appeal rightsCY2026 MA rule
Approved inpatient admissionsNo reopening on later clinical information; fraud or obvious error onlyCY2026 MA rule

CMS's fact sheet is blunt about the limit: the provision “does not apply to prior authorization decisions for drugs.” Part D and drug requests keep their own rules. Everything else on an MA patient now runs on the shorter clock.

When to ask for the 72-hour clock

Expedited is not a courtesy the plan grants. When a physician indicates that the standard timeframe could seriously jeopardize the patient's life, health, or ability to regain maximum function, the plan must expedite (42 CFR 422.570(c)). Put that statement, signed by the physician, on the request. It is the physician's attestation, so use it only when it is true.

Put the 7-day clock on every request

The free Rescue Kit includes the prior auth tracker with a payer-deadline column, so day eight shows up red instead of slipping by.

Get the free Rescue Kit

The 2024 rules still doing the work

The CY2024 MA rule (CMS-4201-F), in force since January 1, 2024, set the coverage rules that make most MA appeals winnable. They get used far less than they should.

CMS-4201-F protections in force since 2024
RuleWhat it means for your request
Follow Traditional Medicare coverage (42 CFR 422.101(b))Plans must apply national and local coverage determinations and Medicare benefit rules
Internal criteria only where coverage is not fully establishedCriteria must rest on current evidence and be posted publicly with that evidence
Prior auth only to confirm diagnosis or medical necessityNot a tool for criteria beyond Medicare's own
90-day transitionNo new prior auth for an active course of treatment for at least 90 days after a plan switch (coordinated care plans)
Approval lasts the courseAn approved course of treatment stays valid as long as medically necessary
Annual committee reviewPlans review prior auth policies yearly against Traditional Medicare

Under 42 CFR 422.101(b)(6), a plan using its own criteria must publicly post them, a summary of the evidence, the sources, and its rationale. When a denial cites internal criteria, ask where they are posted. When a local coverage determination covers the service, quote it.

Once approved, it stays approved

Under 42 CFR 422.138(c), an MA plan that approved a service through prior auth may not later deny it for lack of medical necessity, and may reopen only for good cause or reliable evidence of fraud or similar fault. The CY2026 rule extended the same logic to inpatient admissions. Keep the approval with the claim, and attach it to any appeal.

Step therapy for Part B drugs

MA plans may apply step therapy to Part B drugs only for new administrations, with a 365-day lookback (42 CFR 422.136). A patient who received the drug within the past year is not a new start.

What the denial numbers say

Medicare Advantage prior auth outcomes
MeasureValueSource
Determinations, 202452.8 millionKFF, Jan 28, 2026
Denied in full or part4.1 million (7.7%)KFF
Denials appealed11.5%KFF
Appeals overturned in full or part80.7%KFF
Median MA plan denial rate, posted CY2025 metrics7.2%Forvis Mazars, Aug 2026, citing AuthDenied
Denials appealed; appeals overturned at the median plan7.3%; 52.6%Forvis Mazars, Aug 2026, citing AuthDenied
80.7%
of appealed Medicare Advantage prior auth denials were overturned in full or in part in 2024. Only 11.5% of denials were appealed. KFF, January 28, 2026

Most denials do not survive a challenge, and almost nobody challenges them. The appeal is the cheapest recovery tool in MA, and it sits unused nearly nine times in ten. Your plans' posted metrics show the pattern payer by payer; here is how to read them.

Appealing an MA denial

MA reconsideration deadlines
StepDeadlineSource
Request reconsideration60 days from receipt of the notice (receipt presumed 5 days after its date)42 CFR 422.582(b)
Standard pre-service decision30 calendar days42 CFR 422.590(a)
Payment reconsideration60 calendar days42 CFR 422.590(b)
Expedited decision72 hours42 CFR 422.590(e)

A treating physician may request a standard pre-service reconsideration on the patient's behalf after notifying the patient (42 CFR 422.578). Start with the specific denial reason the plan now owes you, and answer it with the coverage determination or the plan's posted criteria. The appeal letter template has the structure; a peer-to-peer call can be faster when offered.

Build the packet in this order: the denial notice and its stated reason; the approval, if the plan is denying something it already approved; the coverage determination or posted criteria with the matching lines marked; the visit notes that meet them; and a one-page letter tying each criterion to a page. Reviewers decide faster when they never have to hunt.

Picture a Wednesday at a three-physician practice. An MA patient's lumbar MRI is denied on day six: “documentation does not support medical necessity.” The coordinator pulls the coverage determination, finds the criteria met in the visit note, and files the reconsideration that afternoon. Before 2026, that would have started with a phone call and a guess.

The MA workflow for a small practice

Four habits cover most of it. Log every MA request with a due time 7 calendar days out, or 72 hours if expedited. Follow up on day five, before the deadline. Read the denial reason the day it lands, and appeal by default when the reason is answerable.

A follow-up cadence built on the 7-day clock
DayAction
0Submit; log the submitted time and the due date
2Confirm receipt; answer any request for information the same day
5Call if still pending; record the reference number
7Past due: escalate through provider services and record it
Denial dayRead the reason; decide on appeal within two business days

Prior auth tracker, filtered to Medicare Advantage (demo board)

ChartPlanServiceSubmittedDue (7 days)StatusDenial reason
A-60958MA Plan CPhysical therapy, 12 visitsDec 29Jan 5Past due, alarm
A-61011MA Plan ADME: CPAPDec 30Jan 6Past due, alarm
A-61204MA Plan AMRI, lumbar spineJan 5Jan 12Approved
A-61377MA Plan BCardiac stress testJan 6Jan 13Pending, day 5: follow up
A-61402MA Plan BInfusion, 6 cyclesJan 7Jan 14Denied, appeal draftedRecords requested, not received
Sample data, illustrative. Every MA request gets a due date seven calendar days from submission. Past-due rows turn red and top the coordinator's morning list. Chart numbers only.

Monthly payer review, demo board (sample data)

PlanPosted CY2025 approval ratePosted average decision timeOur median decision time (tracker)Review note
MA Plan A91%2.1 days2 daysMatches posted
MA Plan B84%4.3 days6 daysSlower than posted: follow up day 3
MA Plan C95%1.2 days1 dayMatches posted
MA Plan D88%3.0 days3 daysMatches posted
Sample data, illustrative. Each plan's posted metrics beside the practice's own decision times, reviewed monthly by the practice manager.

Chart numbers are medical record numbers, which HIPAA lists as identifiers (45 CFR 164.514(b)(2)(i)(H)), so a chart-number board is minimized data, not de-identified data. Keep cards minimal and confirm BAA needs with a compliance advisor. When volume outgrows one coordinator, the Zero-Slip Prior Auth System installs this pipeline for $1,250.

What comes next

The Prior Authorization API that CMS-0057-F requires is due January 1, 2027; the CMS prior auth API guide covers it. CMS's CY2027 MA rule, finalized April 2, 2026, dropped the requirement that plans run and post annual health equity analyses of their utilization management. Its fact sheet lists no change to decision timeframes.

State law does not alter any of this. Federal MA standards supersede state rules except licensing and solvency, as the state law table explains. For payer detail, use the payer-by-payer hub and the Humana guide.

Do this in the next hour
  1. Filter your tracker to Medicare Advantage and add a due date 7 calendar days after each standard submission.
  2. Call on every MA request older than five days.
  3. Pull your last five MA denials and write down the specific reason each notice gave.
  4. Draft a reconsideration for the denial with the clearest answer.

Find your leak before you fix it

Two ways to start, both free. Take the tracker and denial log and run it yourself, or get a 20-minute Leak Audit where we put a real number on what your operations are costing, using your own practice.

Frequently asked questions

How long does a Medicare Advantage plan have to decide a prior authorization?

Since January 1, 2026, 7 calendar days for standard requests and 72 hours for expedited requests, under CMS-0057-F. The standard window was 14 calendar days before 2026.

Can a Medicare Advantage plan deny a claim after approving the prior authorization?

Not for medical necessity. Under 42 CFR 422.138(c), a plan that approved a service through prior authorization may reopen only for good cause or reliable evidence of fraud or similar fault.

Do Medicare Advantage plans have to follow Medicare coverage rules?

Yes. Since 2024, MA plans must follow national and local coverage determinations and may use internal criteria only where coverage is not fully established, with the criteria and evidence posted publicly (42 CFR 422.101(b)).

How do I appeal a Medicare Advantage prior authorization denial?

Request a reconsideration within 60 days of receiving the denial notice. Standard pre-service reconsiderations are decided within 30 calendar days and expedited ones within 72 hours, and a treating physician may file on the patient's behalf after notifying them.

What share of Medicare Advantage prior authorization denials are overturned?

In 2024, 80.7% of appealed denials were overturned in full or in part, but only 11.5% of denials were appealed (KFF, January 2026).

Does CMS-0057-F apply to prescription drugs?

No. Its timeframes, denial-reason, and API requirements cover medical items and services only. Drug prior authorization follows separate rules.