What is prior authorization?
Prior authorization is a utilization-management review in which a health plan evaluates a proposed service, procedure, drug, or piece of equipment and decides whether it will be approved before the care is delivered. It sits between scheduling and billing: a request is submitted with supporting clinical information, the payer applies its coverage and medical necessity criteria, and an approval or denial is issued. An approval is not itself a promise of payment, but a missing or expired prior authorization is a common and often preventable reason a claim is later denied.
Updated 8 min read
On this page
Key takeaways
- Prior authorization is a payer's advance review of a planned service, drug, or item before it is provided.
- It is used to confirm the service meets the plan's medical-necessity and coverage rules, not to guarantee payment.
- Which services require it, how requests are submitted, and how long a decision takes all vary by payer, plan, and state.
- An approval usually carries an authorization number tied to specific services, date ranges, and unit limits.
- A service delivered without a required authorization is frequently denied, and the balance may become a write-off rather than patient responsibility.
What prior authorization is
At its core, prior authorization is the payer's answer to a question asked in advance: will this specific service, for this specific patient, be considered covered and clinically appropriate under the plan's rules? A provider or their staff submits a request that identifies the patient, the ordering and rendering clinicians, the diagnosis, and the proposed service, along with clinical documentation that supports it. The plan reviews that request against its published criteria and returns a decision. When the answer is yes, the plan typically issues an authorization number that ties the approval to particular services, date ranges, and quantities.
Prior authorization is a requirement attached to certain services, not to every claim. Payers apply it selectively — often to higher-cost imaging, elective surgeries, specialty drugs, durable medical equipment, and some outpatient procedures — while routine visits generally proceed without it. The specific list is set by each payer and plan and changes over time, so the authoritative source is the current payer policy rather than any fixed catalog. Which services require prior authorization examines how those lists are structured.
An approval is not a payment guarantee
Why payers require it
Payers use prior authorization as a form of utilization management — a way to review certain care before it happens rather than paying for it and reviewing afterward. From the plan's perspective, the review is meant to confirm that a service is medically necessary, matches evidence-based criteria, and is delivered in an appropriate setting, and that any required lower-cost or first-line alternatives have been considered.
- Confirming medical necessity against the plan's clinical criteria before the service is rendered.
- Directing care to a covered, appropriately intensive setting.
- Applying step therapy and other sequencing rules, particularly for specialty medications.
- Managing utilization and cost for high-dollar procedures, imaging, and equipment.
Whether any of these apply to a given service depends entirely on the payer and plan. The same procedure may require authorization under one plan and none under another, and Medicare, Medicaid, and commercial products each set their own rules.
How the process works
The mechanics differ by payer and submission channel, but the process follows a recognizable arc from request to decision. The prior authorization workflow covers each stage in depth; the summary below shows the shape.
Confirm the requirement
Before scheduling, staff check whether the planned service requires authorization under the patient's current plan, since the answer varies by payer, product, and date.Gather documentation
The request is assembled with the diagnosis, the proposed service, ordering and rendering provider details, and the clinical records that support medical necessity.Submit the request
The request is sent through the payer's channel — a portal, an electronic transaction, fax, or phone — and logged so its status can be tracked.Track the decision
The payer reviews and returns an approval, a denial, or a request for more information; turnaround times are set by payer and plan and by whether the request is standard or expedited.Record the outcome
An approval, its authorization number, covered date span, and any unit limits are recorded so the eventual claim can be matched to what was authorized.
Related but distinct terms
Prior authorization is often confused with neighboring terms that describe different things. Some payers use precertification or pre-approval as near-synonyms, while predetermination and referral describe distinct processes. Precertification, predetermination, and prior authorization and prior authorization vs. referral draw the full distinctions; the table below summarizes the core differences.
| Dimension | Prior authorization | Referral | Predetermination |
|---|---|---|---|
| What it is | A payer's advance review that decides whether a service is covered and medically necessary | A referring provider's authorization for a patient to see another provider, often a specialist | A voluntary, advance estimate of how a service might be covered |
| When it happens | Before the service, for services the plan flags as requiring it | Before a specialist visit, when the plan or product requires one | Before the service, when a provider wants an estimate |
| Typically results in | An approval or denial, usually with an authorization number when approved | A referral record linking the patient to the specialist | A non-binding indication of likely coverage |
| Binding on payment | No — payment still depends on eligibility, correct billing, and plan rules | No — it authorizes the visit, not payment for every service | No — it is explicitly an estimate, not a guarantee |
Terminology varies by payer; the same word can mean different things across plans, so the payer's own definition governs.
- Precertification
- A term many payers use interchangeably with prior authorization for advance approval of a service; the exact meaning is defined by each payer.
- Step therapy
- A rule requiring a patient to try a preferred or first-line option before the plan authorizes an alternative, common in medication authorizations.
- Peer-to-peer review
- A discussion between the ordering clinician and the plan's reviewer, often used to contest a denied authorization request.
When authorization is missing or denied
When a required authorization is missing, invalid, or does not match the service billed, the claim is typically denied. These authorization-related denials behave differently from clinical denials: the issue is usually not whether the care was appropriate but whether the administrative approval was obtained and billed correctly. Depending on the payer contract, the resulting balance often cannot be billed to the patient and becomes a provider write-off.
A denial of the authorization request itself can frequently be challenged. A peer-to-peer review is a common next step, and a formal appeal may follow; approvals, denials, and peer-to-peer review walks through those paths. Payers also define processes for retroactive and urgent authorizations, where care must proceed before a standard review is possible — for example in an emergency — though the availability and rules for these paths vary.
A denial is not always the end
Where the rules come from and how they vary
There is no single national list of what requires prior authorization. Each payer and plan sets its own rules, and those rules differ across Original Medicare, Medicare Advantage, Medicaid, and commercial coverage. In Original Medicare, prior authorization applies to a limited, defined set of items and services published by CMS. Under prior authorization under Medicare Advantage and Medicaid managed care, plans run their own authorization programs within federal and state frameworks.
Federal policy is also reshaping how the process works. The CMS Interoperability and Prior Authorization rule sets requirements aimed at making certain payers' authorization processes more transparent and electronic, and electronic prior authorization standards continue to evolve. Because requirements, timeframes, and covered-service lists change over time and vary by jurisdiction, the reliable approach is to check the current payer policy and the authoritative federal or state source rather than rely on a fixed rule.
Verify at the source
Common questions
Is prior authorization the same as a referral?
No. A referral is a referring provider's authorization for a patient to see another provider, usually a specialist. Prior authorization is a health plan's advance approval of a specific service, procedure, drug, or item. A given service can require one, both, or neither depending on the plan.
Does an approved prior authorization guarantee the claim will be paid?
No. An authorization confirms the plan reviewed the service in advance, but payment still depends on the patient being eligible on the date of service, the claim being billed as authorized, and the plan's other rules being met.
Who is responsible for obtaining prior authorization?
Responsibility is set by the payer's rules and the provider's contract, but in practice the ordering or rendering provider's staff typically submit the request. The specific process and channel vary by payer.
What happens if a service is provided without a required authorization?
The claim is commonly denied as an authorization-related denial. Depending on the payer contract, the balance often cannot be billed to the patient and becomes a provider write-off, though some payers allow retroactive or urgent requests in defined situations.
How long does a prior authorization decision take?
Turnaround times are set by each payer and plan and differ for standard versus expedited requests. Government programs and some state rules impose specific timeframes that change over time, so the current payer policy or regulation is the authoritative source.
Key terms in this article
Defined once, on their own pages.
Continue learning
Where to go next in the prior authorization cluster.
Prior authorization vs. referral
How an advance service approval differs from a referral to another provider.
Which services require prior authorization
How payers build and publish the lists of services that need advance approval.
The prior authorization workflow
A stage-by-stage look at moving a request from requirement check to decision.
Prior authorization under Medicare Advantage
How plans run their own authorization programs within federal rules.
Authorization-related denials
Why claims are denied for missing or mismatched authorizations and what follows.
Authoritative sources
- Centers for Medicare & Medicaid Services (CMS) (opens in a new tab)
Administers Medicare and Medicaid and publishes prior authorization, coverage, and claims-processing rules.
- CMS Medicare Learning Network (MLN) (opens in a new tab)
CMS's provider-education program with booklets and fact sheets on Medicare billing and coverage.
- Healthcare Financial Management Association (HFMA) (opens in a new tab)
Professional association publishing guidance on revenue cycle and authorization practices.
