CMS sets 2027 deadline as electronic prior auth pilot launches
MARYLAND, UNITED STATES — The Centers for Medicare & Medicaid Services (CMS) launched its electronic prior authorization pilot, recruiting 29 health care organizations as early adopters ahead of a mandatory January 1, 2027 federal deadline.
According to a report from American Hospital Association, the deadline, rooted in CMS’s Interoperability and Prior Authorization Final Rule (CMS-0057-F), requires FHIR (Fast Healthcare Interoperability Resources) API-based authorization interfaces across Medicare Advantage, Medicaid, CHIP, and Health Insurance Marketplace plans, affecting virtually every major payer in the United States market.
For providers and payers still running authorizations by fax and manual portal entry, the window to comply is narrowing.
Health systems, EHR vendors lead adoption
The 29 participants span the full prior authorization workflow chain — health systems, electronic health record developers, payers, physician practices, and digital health developers — representing the first coordinated coalition to test electronic prior authorization at system scale.
Provider participants include Cleveland Clinic, Providence, Ochsner Health, Rush University System for Health, and Sanford Health. EHR vendors Epic, Oracle, athenahealth, eClinicalWorks, and MEDITECH signed on alongside payers Aetna, Cigna, Humana, UnitedHealthcare, and Elevance Health.
“Prior authorization won’t be fixed by technology alone. It requires the entire healthcare system to work together to solve real-world challenges,” said CMS Administrator Dr. Mehmet Oz.
Working sessions will focus on closing workflow gaps and improving technical handoffs between providers, insurers, and technology platforms before the rule takes effect.
2027 mandate reshapes prior auth workflows
For hospitals and physician practices, the mandate means replacing fax-based workflows and payer portal submissions with FHIR API-enabled exchanges embedded directly into clinical systems.
Most provider organizations still run the bulk of their authorizations manually.
The practical goal: real-time authorization visibility at the point of care, with decisions issued before patients leave the encounter.
Under the final rule, payers must issue decisions within 72 hours for urgent requests and seven calendar days for standard prior authorization — a hard shift from the multi-day delays that have historically interrupted care.
Public reporting of payer authorization activity is also required, adding an accountability layer providers have long sought.
Health systems not yet aligned on FHIR integration face a compressed runway. January 1, 2027 is seven months away.
Prior authorization has become one of the most outsourced administrative functions in U.S. health care — a multibillion-dollar market spanning dedicated prior authorization support, medical coding, revenue cycle management, and claims processing.
Health systems managing parallel EHR upgrades, staff retraining, and payer contract alignment ahead of the 2027 deadline are increasingly turning to outsourced prior authorization support to maintain workflow continuity through the transition.
