CMS Proposes Extension of Prior Authorization Rule to Cover Drugs: 6 Notes

Why It Matters

The expansion accelerates digital exchange for drug coverage decisions, improving speed and transparency for providers and patients while increasing payer accountability.

Key Takeaways

• CMS proposes drug prior‑auth APIs effective Oct 1 2027
• Medicaid/CHIP and ACA plans must support three pharmacy data standards
• Decision windows cut to 24 hours for standard Medicaid drug requests
• Payers must publicly report drug prior‑auth metrics starting 2028
• Insurers already cut 11% of prior‑auth requirements, easing burden

Pulse Analysis

The Centers for Medicare & Medicaid Services (CMS) is building on its 2024 interoperability rule, which forced medical‑service providers to adopt standardized APIs for prior authorization, by now targeting prescription drugs. This shift reflects a broader federal push toward seamless electronic data exchange, leveraging HL7 FHIR standards that have become the backbone of modern health‑IT ecosystems. By mandating real‑time formulary queries and electronic prior‑auth submissions, CMS aims to reduce administrative friction that has long plagued pharmacies and prescribers.

Under the proposal, Medicaid, CHIP fee‑for‑service and managed‑care programs, as well as ACA marketplace plans, must implement three specific pharmacy data standards by October 1, 2027. The rule tightens decision timelines—standard requests from state Medicaid plans must be resolved within 24 hours, while ACA plans face a 72‑hour window for standard and 24‑hour window for expedited requests. In addition, payers will be required to disclose the specific reason for any denial, and to publish annual drug‑specific prior‑auth metrics starting in 2028, adding a new layer of transparency that stakeholders have long demanded.

The timing coincides with a notable industry trend: insurers have already voluntarily trimmed prior‑authorization requirements by roughly 11%, eliminating about 6.5 million requests since mid‑2025. By codifying electronic standards and public reporting, CMS not only reinforces that downward trajectory but also sets the stage for future rulemaking on care‑coordination notifications, cybersecurity, and step‑therapy processes. For providers, the expected outcome is faster drug access and reduced paperwork; for payers, the mandate promises clearer performance benchmarks and potential cost savings through streamlined workflows.