Prior authorization goes digital in 2027: what your practice needs to do
CMS is mandating FHIR-based electronic prior authorization for major payers starting January 2027. Faster decisions mean faster revenue, but only if your systems are ready.
What the mandate requires
Starting January 1, 2027, Medicare Advantage plans, Medicaid fee-for-service and managed care organizations, CHIP fee-for-service and managed care plans, and qualified health plans on the federally facilitated exchanges must support a FHIR-based Prior Authorization API under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F). This means prior auth requests can be submitted and decisions received electronically through standardized interfaces.
The turnaround time requirements in the rule — 72 hours for urgent requests and 7 calendar days for standard (non-urgent) requests — are already in effect as of January 1, 2026, regardless of whether a payer has implemented the API yet. In practice, many payers still exceed these windows, but the enforceable floor is now in place. The January 1, 2027 deadline is specifically for the FHIR API infrastructure that makes these decisions electronic.
Payers must also provide a reason for any denial through the API, making appeals faster and more targeted. No more calling a payer phone tree to find out why a request was rejected.
Why this matters financially
Prior authorization is a persistent drag on revenue cycle operations in outpatient practices. Per the AMA 2022 Prior Authorization Physician Survey, practices complete an average of 45 prior authorizations per physician per week, and physicians and staff spend roughly 14 hours per week processing them. High-volume specialties can spend meaningfully more.
Faster decisions mean faster scheduling, which means faster revenue. If your average time from prior auth submission to patient visit drops from 21 days to 7 days, you are collecting revenue two weeks earlier on every auth-dependent service.
Denied auths that currently take 45-60 days to appeal can be resubmitted with specific denial reasons within hours. Your appeal success rate should increase because you are addressing the exact issue rather than guessing.
EHR integration requirements
Your EHR or practice management system needs to support FHIR R4 API connections. Most major EHR vendors (Epic, athenahealth, eClinicalWorks, NextGen) have announced FHIR prior auth capabilities, but timelines vary.
Contact your EHR vendor now. Ask specifically: Will your system support the CMS Prior Authorization API by January 1, 2027? If the answer is vague, escalate. You do not want to discover in December that your vendor is behind schedule.
- Confirm your EHR supports FHIR R4 prior authorization APIs
- Ask your vendor for their specific go-live date for this feature
- Identify which payers in your mix are covered by the mandate
- Test the API connection with at least one payer before year-end
Which payers are compliant
Medicare Advantage plans are required to comply. Fee-for-service Medicare does not use prior authorization for most services, so this primarily affects MA patients. Medicaid managed care plans must also comply, though state-by-state timelines may vary.
Commercial payers are not yet mandated but many are voluntarily adopting the standard. Check with your top 5 commercial payers about their FHIR prior auth timelines. Early adoption means you get the speed benefit sooner.
Workflow changes to plan for
Your prior auth staff workflows will change fundamentally. Instead of faxing forms and calling payer phone lines, staff will submit requests through your EHR and receive responses electronically. This requires retraining, but once the API workflow is stable, practices should expect meaningfully less per-request staff time than the AMA survey baseline.
Plan to reallocate staff time. If your practice currently dedicates 1.5 FTEs to prior auth, you may be able to reduce that to 0.5 FTEs within 6 months of the API going live. That is $40,000-$60,000 in annual labor savings for a mid-size practice.
What to do now
Contact your EHR vendor and confirm their FHIR prior authorization API will be live by January 1, 2027.
Identify what percentage of your prior auths involve MA or Medicaid managed care plans (these are covered by the mandate).
Calculate your current staff time and cost for prior authorization processing.
Train prior auth staff on the new electronic workflow in Q4 2026.
Set up tracking to measure time-to-decision before and after the API launch.
Evaluate whether you can reduce prior auth staffing by Q2 2027 once the system is stable.
Who this affects
Founder of Sorso. 18 years in corporate finance. Managed a $450M loan portfolio before building a fractional CFO firm exclusively for healthcare clinics.
Want help preparing for these changes?
Take the 4-minute financial assessment. It is free, and it will show you where your practice needs attention.