Your doctor says you need an MRI. Your insurer says you need permission first.

That's prior authorization — a requirement that your insurance company sign off on a treatment before they agree to pay for it. It's one of the most frustrating parts of having health insurance in America. It delays care, creates administrative nightmares for doctors, and leaves patients stuck in the middle.

About 25% of all prescription drugs and 35% of elective procedures require prior authorization. The vast majority of those requests are eventually approved — but the process itself can take days or weeks, during which you wait, your condition potentially worsens, and your provider's office spends hours on the phone with your insurer.

This guide explains exactly how prior authorization works, what to do when it blocks your care, and how to fight back when it gets denied.

82%

of physicians say prior authorization delays patient access to necessary care, and 79% say the burden has increased over the past five years. (American Medical Association)

What Prior Authorization Actually Is

Prior authorization (sometimes called pre-authorization or pre-certification) is a utilization management tool that insurance companies use to verify whether a treatment or service is "medically necessary" before agreeing to cover it. It's a financial gate — not a clinical one.

The key thing to understand: your doctor orders a treatment because they believe you need it. Your insurer then reviews that order to decide if they want to pay for it. These two parties have different incentives, and the gap between them is where prior authorization lives.

Insurers argue prior auth controls costs and prevents overutilization. Critics — including a growing number of state legislatures — argue it primarily serves to delay or deny payment on valid claims while creating enormous administrative burden for doctors. Both can be true simultaneously.

Prior auth vs. referral — not the same thing

It's easy to confuse these two, but they serve different purposes:

Some plans require both (HMO plans often require referrals and prior auth for specialist treatments). PPO plans typically don't require referrals but still have prior auth requirements for high-cost services.

What Services Typically Require Prior Authorization

Requirements vary by insurer, plan type, and state regulation. Here's what commonly triggers a prior auth requirement across most major insurers:

Surgeries and inpatient admissions

Most elective surgeries — knee replacements, spinal fusions, bariatric procedures, hysterectomy — require prior authorization before the insurer will pay. Emergency surgeries are exempt. The prior auth for surgery also typically covers the hospital stay.

Advanced imaging

MRI, CT scans, PET scans, and some ultrasound studies often require prior authorization. Standard X-rays typically do not. The rationale is that imaging is overutilized — insurers want a clinical gatekeeper between you and a $3,000 MRI.

Specialty medications

Biologics, chemotherapy agents, specialty injectables (Humira, Enbrel, Rituxan), and some oral chemotherapy or autoimmune drugs almost always require prior authorization. Insurers often have a preferred drug list and require you to "fail first" on a cheaper alternative before approving the more expensive one.

Step therapy (fail-first): Many insurers require you to try and fail a cheaper medication before covering a more expensive one. This is called step therapy. If you've already tried the required drug and it failed, your doctor can request an exception — document this clearly in the prior auth request.

Durable medical equipment (DME)

Wheelchairs, scooters, hospital beds, CPAP machines, and other equipment above a certain cost threshold require prior authorization. Your doctor typically needs to document the medical necessity and why a simpler option won't suffice.

Home health and skilled nursing

Home health visits, skilled nursing facility stays, and physical therapy above a certain number of visits often require prior authorization. This is a common area of denial — insurers may approve only a fraction of the visits your doctor orders.

Out-of-network services

Seeing an out-of-network provider almost always requires prior authorization or a referral from your in-network primary care physician. Without it, you're typically responsible for the full cost.

Check your plan's requirements

Your insurer's website has a prior authorization list specific to your plan. The Benefits Navigator on ClaimSage explains which services typically require authorization for different plan types.

Use Benefits Navigator Insurance Glossary

The Prior Authorization Process — Step by Step

Here's what actually happens when your doctor orders a service that requires prior auth:

Step 1

Your doctor submits a prior auth request

The doctor's office sends a prior authorization request to your insurer — typically through an electronic portal or fax. The request includes: your member ID, the specific procedure or drug code (CPT or NDC), diagnosis codes (ICD-10), clinical notes, and supporting documentation for why the service is medically necessary.

Step 2

The insurer reviews the request

A utilization review nurse (or sometimes an automated algorithm) reviews the request against the insurer's medical policies and clinical criteria. They may request additional information from your doctor. If your doctor's documentation is incomplete, the insurer may deny for "lack of information" rather than on the merits.

Step 3

The insurer issues a decision

Standard requests: insurers must typically respond within 2–5 business days under state regulations (some states require 2 days, others 5). Expedited requests for urgent care: 72 hours by federal ACA rules. If the insurer doesn't respond in time, the request is considered approved by default in most states.

Step 4

If approved — scheduling proceeds

The prior auth is typically valid for a specific time window (30–90 days depending on the insurer). If the procedure isn't performed within that window, you may need to request a new authorization.

Step 5

If denied — appeal rights apply immediately

A prior authorization denial is an adverse benefit determination — the same classification as a claim denial. That means you have full appeal rights under the ACA: internal appeal, then external review by an independent organization. The insurer must accept external review decisions.

Standard turnaround timelines by major insurer

Insurer Standard Prior Auth Expedited / Urgent Auto-Approval (no response)
Aetna 2 days 72 hours After deadline expires
Blue Cross Blue Shield 2 days 72 hours Varies by state plan
Cigna 2 days 72 hours After deadline expires
UnitedHealthcare 2–3 days 72 hours After deadline expires
Humana 5 days 72 hours After deadline expires

Timelines vary by state regulation and your specific plan. Always verify with the member services number on your insurance card.

Don't wait on approvals. If your doctor's office says they submitted the prior auth, follow up yourself. Call the member services number on your card and ask: (1) is a request in our system? (2) what's the decision date? (3) has the decision been made? Insurers lose submissions. Being your own advocate here can save weeks.

What to Do When Prior Authorization Is Denied

A prior authorization denial isn't the end. It's the beginning of the formal appeals process — the same one that applies to any other insurance denial. And remember: denials on appeal succeed 40–60% of the time.

First — understand why it was denied

The denial letter should state the specific reason. Common ones:

Appeal the denial — here's how

The prior auth denial letter is your instruction manual. It tells you how to appeal and how long you have. The process is identical to appealing a claim denial:

  1. Internal appeal: Ask your doctor to write a letter of medical necessity and request a peer-to-peer review with the insurer's medical director. A peer-to-peer call — where your doctor discusses the case directly with the insurer's physician reviewer — resolves many denials without a formal appeal.
  2. Submit additional documentation: Include clinical guidelines, peer-reviewed studies, your doctor's treatment history with your condition, and any prior authorizations for similar cases you've had approved before.
  3. External review: If internal appeal is denied (or the insurer doesn't respond in time), request an external review by an Independent Review Organization (IRO). The insurer must accept the external reviewer's decision.

Denied a prior authorization?

ClaimSage's Appeal Letter Generator creates a formal letter citing your state's insurance regulations and the specific denial reason — ready in about 2 minutes.

Generate Appeal Letter Full Appeals Guide

Expedited Prior Authorization — When You Can't Wait

If your condition is urgent — a physician determines that waiting for a standard prior auth decision timeline would seriously jeopardize your life, health, or ability to regain maximum function — you can request an expedited review.

Urgent/expedited prior auth must be decided within 72 hours under federal ACA rules (some states require 24–48 hours for certain cases).

What qualifies for expedited review

The standard is clinical, not administrative: "serious threat to life, health, or ability to function." Your doctor must specifically request the expedited designation — they cannot assume it applies. Common qualifying situations:

Your doctor submits the request with a statement of clinical urgency. The insurer then has 72 hours to approve or deny. They cannot require you to use the standard timeline if clinical urgency is documented.

Parallel processing for urgent care: If you're already receiving ongoing urgent care and need an authorization to continue, you can often file both an expedited internal appeal and an expedited external review at the same time — you don't have to wait for the internal process to resolve before escalating to external review when urgency is documented.

The No Surprises Act — What It Does (and Doesn't) Do to Prior Auth

The No Surprises Act (effective January 1, 2022) provides specific patient protections around surprise billing and prior authorization. Here's what it means for prior authorization specifically:

What the No Surprises Act protects against

What the No Surprises Act does NOT eliminate

The No Surprises Act is not a prior authorization reform law. It doesn't ban prior authorization requirements. It specifically addresses:

Scheduled surgeries, routine imaging, specialty drugs, and non-emergency services still commonly require prior authorization. For those situations, state-level prior authorization reform laws (growing in number) are what actually change the process.

Several states have passed prior authorization reform laws — including requirements for faster turnaround, gold-carding (doctors who get approvals frequently get automatic approval for future requests), and transparency on denial reasons. Check your state's insurance department website for current regulations.

How to Avoid Prior Authorization Delays in the First Place

Most prior authorization problems happen not because the request was denied, but because it was incomplete, submitted to the wrong place, or lost in the insurer's system. Here's how to reduce friction:

Prior Authorization for Prescription Drugs — A Separate Track

Drug prior authorization works slightly differently than medical service prior authorization. The pharmacy or your doctor's office submits a prior auth to the insurer's pharmacy benefit manager (PBM) rather than the medical insurer.

Common drug prior auth triggers:

Your pharmacist typically notifies you at the pharmacy counter if a prior auth is needed. They contact your doctor's office, the doctor submits the auth request, and you wait. This process can take 1–3 days. In the meantime, some pharmacies will dispense a short-term supply while the auth processes (typically for an urgent medication).