Prior authorization decision deadlines in 2026: CMS, commercial, and California workers' comp

In 2026 the prior authorization decision clock depends on who is paying. Medicare Advantage, Medicaid managed care, CHIP and exchange plans must decide expedited requests within 72 hours and standard requests within 7 calendar days under CMS-0057-F. Employer and ACA commercial plans work to 72 hours urgent and 15 days non-urgent. California workers' comp utilization review under Labor Code 4610 runs to 5 working days from receipt of the needed information, with an outside limit of 14 days from the request, and 72 hours for expedited cases. A payer that misses its clock has given you a procedural win that needs no clinical argument.

Key numbers

• 72 hours expedited, 7 calendar days standard: CMS-0057-F for MA, Medicaid managed care, CHIP and exchange plans. Timeframes partially effective January 1, 2026; API and interoperability provisions effective January 1, 2027.
• 72 hours urgent, 15 days non-urgent: ERISA and ACA commercial plans today.
• 24 hours urgent, 7 days standard: the Improving Seniors' Timely Access to Care Act, still proposed.
• 5 working days, 14-day outside limit, 72 hours expedited: California workers' comp UR under Labor Code 4610.
• 10.2%: the share of California UR denials that Independent Medical Review overturned in 2025 (daisyBill, citing the DWC IMR annual report).
• About 70%: the share of physician-requested treatment California UR historically approves (daisyBill).
• 53 million: prior authorization requests Medicare Advantage plans adjudicated in 2024, about 1.7 per enrollee, against roughly 628,000 in traditional Medicare (AELP, citing KFF).

What are the deadlines, side by side?

Two things about the California row. First, the 5-day clock runs from when the reviewer receives the information reasonably needed to decide, and the regulations give the reviewer a window to ask for more. The 14-day figure is the ceiling regardless. Second, these are the prospective review timeframes. Retrospective and concurrent review follow their own rules. When in doubt, pull the current text of Labor Code 4610 and the DWC regulations rather than relying on a summary, including this one.

Why is a missed clock worth more than a clinical argument?

A clinical appeal is fought on the payer's ground. You gather records, match them to the payer's criteria, and argue medical necessity to a reviewer you did not choose. The AMA's 2025 survey found only 16% of physicians say the peer on a peer-to-peer call is often or always qualified in the relevant specialty. You can write a strong appeal and still lose to someone reading from a different checklist.

A timeliness defect is fought on your ground. It is decided by timestamps. When was the request received? When was the decision issued? Did the reviewer ask for more information, and when did you supply it? Those facts live in your fax confirmations, portal logs and letters. Nobody needs to argue about whether the MRI was indicated.

In California the stakes of a late decision are unusually high. The state Supreme Court in Sandhagen (2008) held that utilization review is the employer's required path for disputing a treatment request. The Appeals Board, sitting en banc in Dubon (2014), then held that when a UR decision is untimely, it is invalid and the Board itself may decide medical necessity. As we read that line of decisions, a late UR denial moves the dispute from Independent Medical Review to a workers' compensation judge. IMR upheld nearly nine in ten UR denials in 2025, overturning only 10.2%, so the change of forum is the whole point. A judge weighs the treating physician's report as evidence. An IMR reviewer you will never meet does not have to.

The law here shifts, and later decisions have narrowed Dubon's reach. Treat the above as a reason to track timeliness, not as legal advice. Confirm the current rule with counsel before you file.

For federal programs the lever is different but real. ERISA claims regulations generally treat a plan's failure to follow its own procedures as grounds for the claimant to be deemed to have exhausted internal remedies, which opens the door to external review or court. Under CMS-0057-F, document the miss and put it in the appeal and in any complaint to the plan or to CMS. A pattern of late decisions by one payer is also exactly the kind of accountability data the AELP report calls for.

How do you run a shot clock on every request?

Knowing when the decision arrived is easy. Proving when the request went out is the part most files cannot do, so fix that first.

1. Timestamp the submission and keep the proof. For a fax, keep the transmission confirmation. For a portal, screenshot the confirmation page or save the reference number. daisyBill notes that California workers' comp requests are still largely faxed, which is exactly why the confirmation matters.
2. Classify urgency at intake. Expedited and standard requests run on different clocks. Write down which one you asserted and why.
3. Compute the deadline from the program rule, not from habit. The table above is the starting point. Put the due date on the case, not in someone's head.
4. Log every information request and every response. In California the 5-day clock keys off receipt of information. If the reviewer asked for a note on day 3 and you sent it on day 4, record both dates. The 14-day ceiling still applies.
5. Log the decision timestamp and compare. Late by a day is late.
6. Escalate on a miss. For commercial plans, cite the missed deadline in the appeal and request the decision be treated as approved or deemed exhausted, as the plan documents allow. For California workers' comp, flag the file for counsel to consider an expedited hearing or a declaration of readiness, since the medical-necessity question may now belong to the Board.

One operational note. California claims take about seven years to close, according to daisyBill. A timeline rebuilt from memory in year three will not hold up. One built at intake is evidence.

How UtilReview runs the decision clock

UtilReview attaches a decision clock to every prior authorization request at intake. The clock is set from the program rule for that payer: 72 hours or 7 days for a Medicare Advantage plan under CMS-0057-F, 72 hours or 15 days for a commercial plan, the Labor Code 4610 timeframes for a California workers' comp carrier. Information requests and responses are logged against the clock.

When a deadline passes with no decision, the case escalates. The overdue request moves to the top of the queue with the full timeline attached: submission proof, information exchanges, and the date the decision was due. That timeline is the first exhibit in whatever comes next, whether that is an appeal citing the missed clock or a file handed to counsel.

The clock is a procedural tool. It does not replace the clinical case, and it does not predict how a judge will rule. It makes sure you know, on the day it happens, that the payer failed to answer on time. Most practices today find out months later, if at all.

Deadline misses are the cleanest denials to work, and they point at a larger problem. The payers that miss clocks tend to be the same ones whose denials go unappealed, so a practice that tracks both will usually find one payer at the top of both lists.