You’re sitting in your doctor’s office. She says you need an MRI. You leave, schedule the appointment, show up, and then three weeks later get a bill for $1,400 because your insurance denied the claim. The reason? You didn’t have prior authorization. This scenario plays out thousands of times every day across the country, and it’s almost always preventable if you know what prior authorization is and how it works before you need care.
Prior authorization, also called preauthorization or precertification, is a process where your health insurance company must review and approve certain medical services, procedures, or medications before they’re provided. The name sounds like a formality. It isn’t. If a service requires prior authorization and you receive it without getting that approval first, your insurer can deny the claim entirely and leave you responsible for the full bill. For a high-cost specialty medication or an inpatient hospital stay, that can mean tens of thousands of dollars of exposure.
Prior authorization is now pervasive in American health insurance, particularly in Medicare Advantage plans and commercial managed care plans. It applies most often to non-emergency inpatient hospital admissions, elective surgeries and procedures, MRI and CT scans, specialty and high-cost medications, durable medical equipment, home health services, skilled nursing facility admissions, and certain specialty referrals. Emergency services cannot be conditioned on prior authorization by law, which is the one area where you don’t need to worry about this step.
Why Insurers Require Prior Authorization
Insurers say prior authorization is a medical necessity review, a checkpoint that ensures the service is appropriate for your condition, evidence-based, and not more expensive than an equally effective alternative. When a physician orders a $3,000 MRI when a $400 X-ray might answer the same clinical question, the insurer argues that review is warranted. When a doctor prescribes a $8,000-per-month biologic when a generic is available at $40, the insurer wants to know why.
That’s the stated rationale. The practical reality is messier. Prior authorization also functions as a cost-control mechanism that creates friction around expensive services. The friction works. Physicians abandon authorization requests when they’re too cumbersome. Patients give up when the process takes too long or they don’t understand it. Some treatments that should be approved get delayed long enough that the clinical moment passes. Whether that outcome is a benefit depends heavily on your perspective.
Critics, including physicians, patient advocates, and health policy researchers, argue that prior authorization causes real harm. The American Medical Association conducts annual surveys of physicians, and the numbers are consistently stark: most physicians say prior authorization has led to serious adverse events for patients in their practices, and nearly all say it has caused care delays. Physicians report spending multiple hours per week on prior authorization requests, time taken directly away from patient care. These aren’t abstract concerns. They represent delayed diagnoses, patients stopping medications because the authorization process is too burdensome, and hospitalizations that result from treatment delays.
Which Services Typically Require It
The list of services requiring prior authorization varies by plan, and it’s not always intuitive. Your plan’s formulary documentation and the prior authorization requirements list are available in your plan documents and on your insurer’s website. You should check these before scheduling any non-routine care, not after.
Specialty medications, especially biologics for conditions like rheumatoid arthritis, Crohn’s disease, psoriasis, and cancer, almost universally require prior authorization. The monthly costs of these medications range from $3,000 to over $20,000, so insurers review them carefully. Step therapy requirements, discussed below, are commonly attached to these authorizations. If you’re being started on a specialty medication, assume authorization is required and confirm with your prescriber’s office that it’s underway.
Imaging studies, particularly MRI and CT scans, are increasingly subject to prior authorization requirements. A plan might cover MRI for certain indications without authorization but require it for others. Outpatient surgery that’s elective, meaning it can be scheduled in advance, is often subject to authorization even when performed at an in-network facility by an in-network surgeon. Inpatient hospital stays require authorization in most commercial plans, and some plans require authorization for observation status stays as well.
How the Prior Authorization Process Actually Works
Your doctor or their office initiates the prior authorization request. They submit your diagnosis, the proposed service, the clinical rationale, and supporting documentation to your insurer. The insurer’s medical staff reviews the request against clinical criteria, typically proprietary guidelines the insurer developed or licensed from a third-party medical guidelines company. This is an important detail: the criteria used to evaluate your authorization request may not match the clinical practice guidelines your physician is following.
Response timelines are defined by regulation. For non-urgent prior authorization requests, the insurer generally has three to five business days to respond. For urgent requests where waiting would adversely affect your health, the requirement is faster, often within 24 to 72 hours. These timeframes have been a major focus of regulatory attention. CMS issued rules in 2024 requiring Medicare Advantage and Medicaid managed care plans to improve turnaround times and implement electronic prior authorization systems, with further requirements phasing in through 2026 and 2027.
When authorization is approved, it comes with parameters. The approved procedure, approved facility, authorized provider, and a validity window are all specified. An authorization for surgery might be valid for 90 days. If the procedure doesn’t happen within that window, you may need to reapply. Keep the authorization number. Your provider’s billing team needs it when submitting the claim after the service is performed, and if it’s missing or incorrect, the claim may be denied even though authorization was in place.
Common Reasons Prior Authorization Is Denied
Medical necessity denials are the most common type. The insurer’s reviewer determines that the service doesn’t meet their clinical criteria for your diagnosis, that the documentation submitted wasn’t sufficient to support the need, or that a less expensive alternative should be tried first. These denials are also the most frequently overturned on appeal, particularly when your physician can supplement the original request with additional clinical documentation or speak directly with the insurer’s reviewer.
Step therapy denials are a specific subtype worth understanding separately. Step therapy, also called “fail-first” requirements, requires you to try and fail a less expensive treatment before the insurer will authorize the one your doctor actually prescribed. A rheumatologist prescribes a specific biologic for your rheumatoid arthritis. Your insurer’s step therapy policy requires you to first try and fail one or two conventional disease-modifying drugs. The biologic is denied until you document that trial and failure. This can delay effective treatment by months, and it’s one of the most contentious practices in managed care. Many states have enacted step therapy reform laws requiring exceptions when the step therapy protocol is clinically inappropriate for a specific patient.
Non-covered service denials are different from medical necessity denials and can’t be resolved through clinical appeals. If the service simply isn’t covered under your plan, the denial is based on your plan’s benefit structure, not a clinical judgment. Before pursuing a lengthy appeal, review your Summary of Benefits and Coverage and your plan documents to confirm whether the service is actually excluded. If it’s excluded, your options are limited to a coverage inquiry (confirming the exclusion is being applied correctly) rather than a medical necessity appeal.
Your Right to Appeal a Denial
You have the right to appeal every prior authorization denial, and you should use it, especially for medical necessity denials. The internal appeal process requires the insurer to conduct a new review of your case. The external review process, available after a failed internal appeal, gives you access to an independent reviewer whose decision is binding on the insurer. Neither process is as daunting as it sounds, and success rates on appeal are meaningful. Studies of external review decisions have found overturn rates of 40 to 60 percent on denials that reached that stage.
For medical necessity denials, the most effective appeal strategy involves your physician taking the lead. Ask your doctor’s office to request a peer-to-peer review, which is a direct conversation between your treating physician and the insurer’s medical reviewer. Peer-to-peer reviews have notably high reversal rates for initial denials, because they allow your physician to provide clinical context that written documentation alone doesn’t always capture. Supplement the appeal with published clinical guidelines from relevant specialty associations, peer-reviewed literature supporting the treatment, and documentation of your specific clinical history and why the insurer’s preferred alternative isn’t appropriate for your situation.
Expedited Review When You Can’t Wait
Standard prior authorization timelines aren’t fast enough when you’re facing a genuinely urgent situation. Insurers are required to offer expedited review for requests where the standard timeline would seriously jeopardize your health. Expedited review must be completed faster than standard review, with the specific timeframe depending on plan type and regulatory requirements, but generally within 24 to 72 hours.
To qualify for expedited review, you or your physician must document the urgency. Your physician’s statement that waiting for the standard timeline would adversely affect your health or safety is the typical basis for an expedited request. Don’t assume expedited review will be granted automatically. Request it explicitly, document the request, and follow up if you don’t have a response within the required timeframe. If you’re already in the hospital and authorization for a service is being denied or delayed, ask your physician to request concurrent review with the insurer’s medical director.
Protecting Yourself Before You Need a Service
The best protection against prior authorization surprises is asking about it before you need care, not after. When your doctor recommends a test, procedure, or specialty medication, ask two questions: Does this require prior authorization from my insurer? And has the authorization been requested yet? Most physician offices will handle the authorization as part of their billing workflow, but don’t assume it’s happening. Ask for confirmation, and ask for the authorization number once it’s approved.
Don’t schedule elective procedures without confirming authorization is in place. Don’t pick up a specialty medication from the pharmacy expecting it to be covered if you haven’t confirmed the authorization. These are simple verification steps that cost you five minutes on the phone and can save you from a $6,000 bill that lands in your mailbox six weeks after the care was provided. Your insurer’s member services line can tell you whether a specific service requires authorization under your plan. Use that resource proactively.
The Regulatory Landscape Is Changing
Prior authorization has drawn significant congressional and regulatory attention in recent years, and the rules are actively evolving. CMS implemented rules in 2024 requiring Medicare Advantage plans to reduce unnecessary prior authorization requirements and ensure that authorization criteria are based on clinical evidence. The Improving Seniors’ Timely Access to Care Act, passed in 2022, targets prior authorization abuses in Medicare Advantage specifically. The PAHPA (Protecting American Health Act for Patients) and similar state-level legislation are pushing for broader reforms across commercial insurance.
These regulatory changes don’t eliminate prior authorization, and they don’t resolve every abuse. But they do establish stronger patient rights, faster timelines, and stronger requirements that denials be clinically grounded rather than administratively convenient. If you believe a denial violates the regulatory requirements that apply to your plan, your state insurance commissioner (for state-regulated plans) and CMS (for Medicare Advantage and federal marketplace plans) both have complaint processes. Use them. Regulatory pressure on insurance companies’ prior authorization practices is in part driven by the complaints they receive, and filing a complaint when you’ve been wrongly denied costs you nothing.