An MRI is approved for a patient's lumbar spine. The imaging center schedules it three weeks out, the patient reschedules once, and by the time the scan happens, the authorization window has closed. Nobody noticed until the denial arrived, and now the practice is trying to explain to a payer why a service that was clearly approved should still be paid.

Most authorization problems look like this. The request itself was handled correctly. What failed was everything around it: tracking, timing, and connecting the approval to the claim. Here is how practices can manage prior authorizations as a process rather than a series of one-off phone calls.

Why Authorizations Slip Through the Cracks

Prior authorization touches more people than almost any other billing task. A provider orders the service, a medical assistant or referral coordinator submits the request, the payer responds days later through a portal, fax, or phone call, and a scheduler books the appointment. Then a coder or biller has to attach the authorization number to the claim. Each handoff is a chance for information to get lost.

The rules also vary widely. Requirements differ by payer, by plan within the same payer, by CPT code, and sometimes by site of service. A procedure that needs approval when performed in a hospital outpatient department may not need it in an office setting, or the reverse. Medicare Advantage plans in particular tend to require authorization for services that traditional Medicare does not.

When all of this lives in individual inboxes and personal memory, authorizations become fragile. One staff member on vacation can leave a week of pending requests unmonitored.

Building a Workflow That Actually Tracks Status

The foundation of reliable prior authorization management is a single, shared tracking system. It does not need to be expensive software. What matters is that every request is logged in one place with the same fields:

• Patient, payer, and plan

• CPT and ICD-10 codes requested

• Date submitted and method of submission

• Current status (pending, approved, denied, more information needed)

• Authorization number, approved units, and valid date range

• Scheduled date of service

That last field is what prevents the MRI scenario above. When the scheduled date and the authorization window sit side by side, anyone reviewing the log can see when an appointment has drifted outside the approved range. A weekly review of upcoming procedures against their authorization dates catches most of these problems while there is still time to request an extension.

It also helps to build a requirements reference for the services your practice orders most often. A short table listing which payers require authorization for each high-volume CPT code, and how long approvals typically remain valid, saves staff from checking portals for every order and makes it easier to spot when a payer's rules have changed.

Ownership matters too. Every pending request should have a named person responsible for following up, with a set number of days before the next check if the payer has not responded. Without that, pending authorizations tend to sit until someone notices a scheduled patient has no approval.

Regulatory Changes Practices Should Know

Federal policy has been moving toward faster, more transparent prior authorization. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), finalized in early 2024, applies to Medicare Advantage organizations, Medicaid and CHIP programs, and qualified health plans on the federal exchanges. Starting in 2026, those payers are expected to issue decisions within 72 hours for expedited requests and seven calendar days for standard requests, and to provide a specific reason when they deny one. The rule also requires payers to build electronic prior authorization interfaces, with those API requirements phasing in through 2027.

Several states have also passed "gold carding" laws that exempt providers with high approval rates from certain authorization requirements. Rules differ by state and by payer type, so it is worth checking whether any apply to your practice.

These changes do not remove the need for good internal tracking. Faster payer responses only help if someone on the practice side is watching for them and acting on them promptly.

Connecting the Authorization to the Claim

An approved authorization does nothing for revenue unless it is matched correctly to the claim. Common breakdowns at this stage include:

• Missing authorization numbers on the claim, often because the number was recorded in the scheduling system but never carried into billing.

• Code mismatches, where the provider performed a slightly different procedure than the one authorized. A request approved for one CPT code does not automatically cover a related code.

• Unit overruns, common with therapy visits and injections, where the patient receives more sessions or doses than the approval allowed.

• Wrong rendering provider or location, since some payers tie the authorization to a specific NPI or facility.

A pre-billing check that compares the claim against the authorization record catches most of these. For procedures where the code might change during the visit, some practices request authorization for the likely alternatives up front, where payers allow it, rather than seeking a retroactive approval afterward.

Retroactive authorization is possible with some payers, but it is not guaranteed and usually requires a strong explanation of why the service could not wait. It works better as a safety net than a strategy.

Handling Denials and Peer-to-Peer Reviews

When a payer denies an authorization request, the clock starts immediately. Many payers offer a peer-to-peer review, where the ordering provider can discuss the case with the payer's medical reviewer, but these windows are often short. Practices that route authorization denials straight to the ordering provider, along with the payer's stated reason, give themselves the best chance of a reversal.

Preparation makes these calls far more productive. A provider who walks into a peer-to-peer review with the relevant notes, prior treatments tried, imaging results, and the payer's own clinical policy criteria in hand is much better positioned than one recalling the case from memory between patients. A one-page summary prepared by the authorization coordinator saves the provider time and keeps the conversation focused on the criteria the reviewer is actually applying.

If the peer-to-peer does not change the outcome, the next step is usually a formal appeal of the authorization decision, and that appeal should address the specific reason the payer gave rather than restating the original request.

Tracking denial reasons over time is equally useful. If one payer repeatedly denies the same service for "insufficient documentation," that points to a specific gap in how notes are written or what clinical information is sent with the request.

For practices refining their process, this guide to tracking authorizations offers a useful checklist, and the challenges specific to Medicare Advantage plans are worth reviewing separately, since those plans generate a large share of authorization volume. Practices that want outside support can learn how one billing team approaches this as part of a broader revenue cycle service.

What Good Authorization Management Looks Like

Strong prior authorization management is mostly invisible. Patients get scheduled without last-minute cancellations, claims carry the right numbers, and denials for "no authorization on file" become rare. Getting there takes a shared log, clear ownership, and a habit of checking approvals against the schedule before the patient arrives, not after the claim comes back.