Prior Authorization: The Administrative Burden at the Front of the Revenue Cycle

Prior authorization is the process of obtaining advance approval from a payer before delivering certain services. In theory, it's a utilization management tool — a way for payers to ensure that proposed treatments are medically necessary and cost-effective. In practice, it's one of the most time-consuming, frustrating, and revenue-impacting administrative processes in healthcare.

For independent practices, prior auth is a particular pain point. Large health systems can dedicate staff exclusively to authorization management. Independent practices typically distribute the work across clinical and administrative staff who are already stretched thin — meaning prior auth competes directly with patient care for the team's attention.

What Requires Prior Authorization

The scope of prior auth has expanded significantly over the past decade. What was once limited to high-cost procedures and specialist referrals now covers an increasingly broad range of services:

Advanced imaging. MRIs, CT scans, PET scans, and other advanced diagnostic imaging almost universally require prior auth.
Surgical procedures. Most elective and many non-elective surgical procedures require payer approval.
Specialty medications. High-cost drugs, biologics, and specialty pharmacy medications typically require prior auth, often with step therapy requirements (the patient must try cheaper alternatives first).
Durable medical equipment. CPAP machines, wheelchairs, prosthetics, and other DME frequently require authorization.
Specialist referrals. Many HMO and managed care plans require prior auth for referrals to specialists.
Certain office-based procedures. Even some in-office procedures — injections, biopsies, certain diagnostic tests — now require advance approval from some payers.

The specific requirements vary by payer and plan. What one payer covers without authorization, another requires approval for. This inconsistency means the practice must check authorization requirements for every payer they work with, for every service that might require it.

The Prior Auth Process

The typical prior authorization workflow involves several steps:

1. Identify the Requirement

Before scheduling or performing a service, the practice needs to determine whether the patient's specific plan requires prior auth for the proposed service. This often means checking the payer's portal, calling the payer, or referencing a maintained list of known requirements.

2. Compile Clinical Documentation

The authorization request must include clinical information supporting the medical necessity of the proposed service. This typically includes the patient's diagnosis, relevant clinical history, previous treatments tried, and the clinical rationale for the requested service. The required documentation varies by payer and by service.

3. Submit the Request

Requests can be submitted through payer portals, by fax, by phone, or through electronic prior auth transactions (278). Each payer has preferred submission methods and specific form requirements. Some payers have moved to electronic submission; many still rely on fax-based workflows.

4. Follow Up

After submission, the practice waits for a determination. Standard turnaround times range from 24 hours to 14 days, depending on the payer and the urgency classification (urgent vs. standard). In practice, many authorizations require follow-up — the payer requests additional documentation, routes the case to a peer review, or simply doesn't respond within the expected timeframe.

5. Receive and Record the Determination

The payer approves, denies, or partially approves the request. If approved, the authorization number must be recorded and associated with the claim when the service is billed. If denied, the practice must decide whether to appeal, modify the treatment plan, or proceed without authorization (accepting the financial risk).

The Cost of Prior Auth

Industry surveys paint a consistent picture of the prior auth burden:

Time. Practices report spending an average of 45 minutes per prior authorization, including research, documentation compilation, submission, and follow-up. For practices processing 30 to 50 authorizations per week, that's 22 to 37 hours of staff time — nearly a full-time position dedicated entirely to getting permission to provide care.

Delays. Prior auth creates delays in patient care. Patients wait for approval before procedures can be scheduled. Medications are delayed while step therapy requirements are satisfied. Referrals are held up while authorization is obtained. These delays are measured in days and sometimes weeks.

Denials. When prior auth is missed or the authorization doesn't match the service rendered, the resulting claim denial is among the most difficult to overturn. Prevention — obtaining the correct auth before the service — is far more effective than appealing after the fact.

Staff burnout. Prior auth is consistently cited as one of the top sources of administrative burden and staff dissatisfaction in healthcare. The process is repetitive, often adversarial, and yields no direct revenue — it only prevents revenue loss. It's necessary work that feels unproductive, which takes a toll on the people doing it.

Common Failure Points

Authorization Not Obtained

The most basic failure: the service was rendered without obtaining the required authorization. This typically results in a denial that's very difficult to appeal. Common causes include:

The practice didn't check whether auth was required for the specific payer and plan
The authorization process was initiated but not completed before the service was provided
An emergency service was rendered and the retrospective authorization window was missed

Authorization Mismatch

The authorization was obtained, but it doesn't match the service rendered. The approved CPT code is different from the billed code. The authorized number of visits has been exceeded. The authorization expired before the service was performed. These mismatches result in denials even though authorization was technically in place.

Insufficient Documentation

The payer denies the authorization request because the clinical documentation doesn't meet their medical necessity criteria. This may reflect a genuine clinical disagreement, or it may reflect a documentation gap — the service is medically necessary but the submitted records don't make the case clearly enough.

Managing Prior Auth Effectively

Centralized Authorization Tracking

Every pending and active authorization should be tracked in a single system — not scattered across staff notebooks, fax confirmations, and payer portal printouts. The tracking system should show the authorization status, the approved services, the validity period, and the number of remaining approved units or visits.

Proactive Requirement Checking

Authorization requirements should be checked as early as possible — ideally at the time of scheduling, not at the time of service. This gives the practice maximum time to complete the authorization process before the patient arrives.

Standardized Documentation Templates

For frequently authorized services, the practice should maintain documentation templates that include all the information payers typically require. This reduces the time spent compiling clinical documentation for each request and ensures that common denial reasons (insufficient documentation) are addressed proactively.

Expiration Monitoring

Active authorizations have validity periods. If an authorized service isn't performed within the validity window, the authorization expires and must be re-obtained. Monitoring expiration dates and alerting scheduling staff prevents services from being performed against expired authorizations.

Appeal Protocols

When authorizations are denied, the practice should have a defined appeal process — including who writes the appeal, what clinical documentation to include, and what the payer's appeal deadlines and procedures are. Practices that appeal systematically overturn a meaningful percentage of initial denials.

This article is part of Quill's series on the pillars of medical billing. Quill tracks prior authorization requirements, monitors active authorizations, alerts staff to approaching expirations, and streamlines the documentation and submission process — reducing the administrative burden that makes prior auth one of the most costly steps in the revenue cycle. Learn more.