Prior Authorization Reform: What Medical Oncology Practices Need to Know Now

Executive Summary

Prior authorization reform has moved from policy discussion to active implementation. In 2024, CMS finalized a rule designed to streamline prior authorization for medical items and services, excluding drugs, across Medicare Advantage, Medicaid fee-for-service, Medicaid managed care, CHIP fee-for-service, CHIP managed care and Qualified Health Plans on the Federally Facilitated Exchanges.[2] The rule established shorter decision timeframes for many impacted payers beginning January 1, 2026, required public reporting of prior authorization metrics and set 2027 compliance dates for major API-related infrastructure requirements.^[2-4]

Those changes do not fully resolve the oncology burden because drug prior authorization was largely outside the scope of the 2024 final rule.² In April 2026, CMS proposed a separate rule that would extend prior authorization reforms to drugs covered under the medical benefit and, in certain cases, the pharmacy benefit.^[6[

For medical oncology practices, the issue is practical, not theoretical. These reforms may improve timeliness, increase visibility into payer behavior and strengthen appeal workflows. But their practical value will depend on enforcement, payer readiness and whether electronic workflows actually displace fragmented manual processes.

Why This Matters in Oncology

Prior authorization is a material operational burden in oncology because treatment planning often depends on time-sensitive decisions involving imaging, procedures, supportive care and drug access. The burden is also shaped by documentation quality. Prior authorization requests are more vulnerable to delay or denial when diagnosis coding lacks required specificity or when related clinical conditions are documented without clear linkage to the underlying cancer, treatment, or complication being addressed.

CMS’s reforms matter because they begin to impose more standardized expectations around response times, denial specificity, transparency and electronic exchange.[1-4] For oncology, however, the largest unresolved issue remains prior authorization for drugs.^[2,6] From an operational perspective, that is where the burden is often greatest and where delay can most directly disrupt treatment sequencing and continuity.

Scope

This article addresses federal CMS reforms. Commercial payer workflows, delegated review arrangements and state-level requirements may evolve separately.^[2,6]

1. What CMS Has Already Finalized

In the 2024 CMS Interoperability and Prior Authorization final rule, CMS finalized new policies intended to improve data exchange and streamline prior authorization processes for specific impacted payers.^[2]  These requirements are not tied to Medicare Administrative Contractor regions and do not apply to traditional Medicare fee-for-service by MAC jurisdiction.^[2]

Instead, the rule applies to:^[2]

• Medicare Advantage organizations nationwide

• State Medicaid and CHIP fee-for-service programs

• Medicaid managed care plans and CHIP managed care entities

• QHP issuers on the Federally Facilitated Exchanges

The practical relevance of the rule varies by state and by the types of plans operating there. In Georgia, the most directly relevant federal categories are Medicare Advantage and Georgia Medicaid/CHIP arrangements. The Qualified Health Plan provisions tied specifically to Federally Facilitated Exchanges are less central because CMS lists Georgia as a State-based Exchange for Plan Year 2026, not an FFE or SBM-FP state.^[7]

Key Requirements Taking Effect in 2026

Decision timeframes. Beginning January 1, 2026, Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans and CHIP managed care entities must send prior authorization decisions within 72 hours for expedited requests and 7 calendar days for standard requests, unless a shorter timeframe applies under state law or other governing requirements.^[2] These standards apply to medical items and services excluding drugs.^[2]

Specific denial reasons. CMS finalized a requirement that impacted payers provide a specific reason when denying a prior authorization request for non-drug items and services.^[2] Although some payers already provide relatively detailed denial rationales, the significance of the rule is that it moves this expectation toward a more standardized and enforceable federal requirement across impacted payer categories.^[2]

Public reporting of prior authorization metrics. Starting in 2026, impacted payers must publicly report prior authorization metrics from the previous calendar year on their websites, including approval and denial rates and average response-time measures for medical items and services excluding drugs.^[2,4]

Electronic prior authorization infrastructure. CMS also finalized API-related requirements to support more automated exchange of prior authorization information. The major compliance dates for these infrastructure requirements generally begin in 2027, not 2026.^[2,3]

Practical Significance for Oncology

These finalized requirements should help oncology practices most directly when the authorization request involves non-drug services, such as diagnostic imaging, procedures, or other services subject to utilization management. More specific denial explanations should also improve appeal preparation by making it easier to identify whether the problem is medical necessity, missing documentation, benefit limitations, or another coverage issue.^[2]

That said, the 2024 final rule did not fully solve the oncology problem because prescription drug prior authorization remains a major source of friction and delay.^[2]

2. What CMS Has Proposed for Drug Prior Authorization

Recognizing that drug access remains a major burden, CMS proposed a separate framework in April 2026 to extend prior authorization reform to drugs.[6] The proposal would require impacted payers to incorporate coverage and documentation requirements into prior authorization APIs for drugs covered under the medical benefit beginning in 2027.[6] CMS also proposed related requirements for certain drugs covered under the pharmacy benefit.^[6]

If finalized substantially as proposed, the rule would establish:^[6]

• 24-hour decisions for urgent drug prior authorization requests

• 72-hour decisions for standard drug prior authorization requests

• Expanded API capabilities for drugs

• Public reporting of drug-specific prior authorization metrics

• Reporting and implementation timelines extending into 2027 and 2028, depending on the requirement and payer type

Why This Matters More to Oncology Than the Earlier Rule

For most medical oncology practices, the largest administrative and clinical burden of prior authorization comes from drugs, not non-drug services. That includes infused therapies, supportive drugs and oral oncolytics, depending on benefit design and payer structure.

The burden is compounded when payer processes do not clearly distinguish whether an oncology drug must be authorized under the medical benefit or the pharmacy benefit, a problem that can delay treatment even before a clinical coverage decision is reached. In practice, that ambiguity can disrupt treatment initiation, regimen continuity, medically integrated dispensing workflows and pharmacy or infusion operations.

If CMS finalizes the proposed drug rule in substantially similar form, it will likely be more consequential to oncology operations than the 2024 non-drug final rule because it targets the part of prior authorization that most directly affects treatment access.^[6]

3. What We Still Do Not Know

The reform direction is meaningful, but the operational results remain uncertain.

Enforcement

A rule does not guarantee behavior change. The practical question is whether payers will comply with the new timeframes, post usable metrics and provide denial reasons detailed enough to improve resubmissions and appeals.^[2,4]

An additional operational question is how these requirements will function when payers delegate utilization management activities to third-party review vendors. From a provider perspective, outsourcing does not solve timing or accountability problems if delay persists.

Technology Readiness

CMS finalized electronic prior authorization infrastructure requirements, but many of the core API obligations do not begin until 2027.^[2,3] That means the system is still in transition. Faster decision standards alone will not produce full operational benefit if submissions, attachments, clinical documentation and responses remain partly manual.

Operationally, payer capabilities also remain uneven. Some plans and platforms offer more mature electronic submission and document-tracking tools, while others still create friction through fragmented workflows and limited visibility.

Scope

The 2024 final rule addressed medical items and services excluding drugs.^[2] For oncology, that leaves a large portion of the burden unresolved unless the separate drug proposal is finalized and implemented effectively.^[6]

Reporting Usefulness

CMS now requires public reporting of prior authorization metrics for non-drug items and services and it has proposed additional reporting for drugs.^[1,4,5,6] That should improve transparency, but the value to practices will depend on whether the reported data are timely, comparable, and granular enough to identify problematic payer behavior.

4. What Medical Oncology Practices Should Do Now

Operationally, oncology groups should focus on the following actions.

A. Track payer turnaround performance

Measure actual payer response times for urgent and standard prior authorization requests. Separate drug and non-drug requests. A rule is only useful if the practice can document when payers are missing required timeframes.^[2]

B. Build denial intelligence

Track denials by payer, service type, drug class, diagnosis and denial rationale. CMS’s denial-specificity requirement and reporting framework create more leverage only if practices convert payer responses into usable internal data.^[1,2,4]

C. Tighten appeal workflows

When a denial explanation identifies missing documentation, unmet criteria, or plan-specific coverage limits, the appeal process should be structured to address that reason directly. The more specific the denial language, the more targeted and efficient the resubmission or appeal can be.^[2]

D. Prepare for electronic prior authorization

Practices should assess whether current workflows can support electronic prior authorization, documentation exchange, status tracking and reporting. CMS has finalized the Prior Authorization API framework for non-drug prior authorization and proposed additional requirements for drugs.^[2,3,6]

Practices with practice-affiliated medically integrated dispensing pharmacies should also begin evaluating how prescribing, dispensing, benefit investigation and authorization workflows may need to adapt if the drug proposal is finalized.

E. Distinguish authorization success from coverage certainty

Practices should not confuse a granted authorization with guaranteed payment. Eligibility and premium-payment issues can still create downstream financial exposure even when authorization has been obtained.

F. Strengthen data integrity and governance

As workflows become more automated, EHR data accuracy becomes more consequential. Practices should strengthen documentation discipline, data-integrity review and clinical governance so flawed information is not transmitted rapidly through electronic gateways or relied on downstream in coverage decisions.

G. Provide timely feedback to clinicians

Provide timely feedback to clinicians on prior authorization denials and delay patterns so they can improve documentation, refine ordering decisions and strengthen appeal support to help these reforms translate into more timely patient treatment.

5. Takeaways for Medical Oncology Practices

Several conclusions follow from current CMS action.

• Prior authorization reform is real, but it remains incomplete.^[2,6]

• The 2024 final rule matters primarily for non-drug items and services, not drugs.^[2]

• The 72-hour and 7-calendar-day standards beginning in 2026 are important, but they do not by themselves create a fully electronic prior authorization environment because major API requirements generally begin in 2027.^[2,3]

• The proposed drug rule is the more consequential next step for oncology because it directly addresses prior authorization for drugs under the medical benefit and, in some cases, the pharmacy benefit.^[6]

• Practices that benefit most will be those that treat prior authorization as a measurable operating process, with payer-specific tracking, denial analytics, disciplined appeal management and rapid clinician feedback.^[2,4]

Conclusion

CMS has moved prior authorization reform into the implementation phase. The 2024 final rule established new standards for timeliness, denial specificity, public reporting and electronic infrastructure for non-drug items and services.^[2-4] CMS is now proposing a second phase that would extend similar discipline to drug prior authorization.^[6]

For medical oncology, the first rule matters, but the second one matters more. The real operational burden in oncology remains concentrated in drug access. Until that issue is addressed in a finalized and enforceable way, prior authorization reform will remain only a partial solution.

For oncology practices, the immediate task is not to wait for the system to mature. It is to build internal visibility into payer behavior now and be ready to use the new CMS framework as leverage.

References

1. Centers for Medicare & Medicaid Services. CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) Fact Sheet. Published January 17, 2024. Accessed April 29, 2026.

2. Centers for Medicare & Medicaid Services. Medicare and Medicaid Programs; Patient Protection and Affordable Care Act; Advancing Interoperability and Improving Prior Authorization Processes for Medicare Advantage Organizations, Medicaid Managed Care Plans, State Medicaid Agencies, Children’s Health Insurance Program Agencies and CHIP Managed Care Entities, Issuers of Qualified Health Plans on the Federally-Facilitated Exchanges, Merit-Based Incentive Payment System Eligible Clinicians, and Eligible Hospitals and Critical Access Hospitals in the Medicare Promoting Interoperability Program. Final rule. Fed Regist. 2024;89:8758-8988. Published February 8, 2024.

3. Centers for Medicare & Medicaid Services. Prior Authorization API Frequently Asked Questions. Accessed April 29, 2026. Updated April 15, 2026.

4. Centers for Medicare & Medicaid Services. Prior Authorization Metrics Reporting: Overview and Template. Accessed April 29, 2026.

5. Centers for Medicare & Medicaid Services. 2026 CMS Interoperability Standards and Prior Authorization for Drugs Proposed Rule Fact Sheet. Published April 2026. Accessed April 29, 2026.

6. Centers for Medicare & Medicaid Services. Medicare and Medicaid Programs; Patient Protection and Affordable Care Act; Interoperability Standards and Prior Authorization for Drugs for Medicare Advantage Organizations, Medicaid Managed Care Plans, State Medicaid Agencies, Children’s Health Insurance Program Agencies and CHIP Managed Care Entities, and Issuers of Qualified Health Plans on the Federally-Facilitated Exchanges. Proposed rule. Fed Regist. 2026;91:19890-20062. Published April 14, 2026.

7. Centers for Medicare & Medicaid Services. Marketplace 2026 Open Enrollment Period Report: National Snapshot; and States by Marketplace Type (FFM/SBM-FP/SBM) for Plan Year 2026. Published January 12, 2026. Accessed April 29, 2026.