What the rule actually requires
CMS-0057-F requires impacted payers, Medicare Advantage, Medicaid and CHIP, and exchange plans, to give a specific denial reason and return urgent decisions within 72 hours and standard decisions within 7 calendar days, from January 1, 2026 (CMS fact sheet, 2024-01-17).
The FHIR Prior Authorization API is required from January 1, 2027, and decisions may still arrive by portal, fax, email, mail or phone (CMS fact sheet, 2024-01-17). The deadline moves for the API, not for your intake desk.
What the API does not cover
The mandate covers the impacted payers only, and it does not reach drug prior authorizations, so those keep arriving on the channels they use today. Payers outside the impacted list are not covered at all.
Even for impacted payers, decisions may still arrive by portal, fax, email, mail or phone (CMS fact sheet, 2024-01-17). Paper does not disappear because an API exists.
What stays manual either way
Attachments that exist only on paper, pages a scanner cannot read, and anything that needs a person judgment. Those arrive as an image, and someone still has to read it and decide where it goes.
The Exception Queue is built for them: a reason code, the source page, and a named person. Nothing is guessed, and nothing is keyed from memory.
Clinical and coding decisions stay with your clinicians, and payer submissions stay with your team in every version of this.
What to do now
Count the work that happens today, whatever channel it arrives on. Practices complete 39 prior authorization requests per physician per week, and staff spend about 13 hours a week on them (AMA, 2025-04-24); that volume does not pause for a mandate.
Automate the keying that is already happening: reading the packet, filling the form, attaching pages, keying the decision back. The channels stay the same; the retyping is what changes.
Bring your count to a teardown and get a Rekey Map and Field Rulebook that work over fax and portal today, with a fixed build quote at the end.
How to decide
If all four hold, the wait or build decision is a budget conversation, not a guess.
- Check: the payer in front of you is on the impacted list or it is not, and you found out before planning.
- Check: your volume count includes fax and portal requests, not only electronic ones.
- Check: the build quote names the channels it keys from.
- Check: exceptions carry a reason code and a named person in either case.