CMS just cut prior authorization decision windows by 50%. Most US practices are still scheduling like it's last year.

Three concrete shifts went into effect on January 1, 2026. Each one has a direct revenue impact.

• The standard decision window dropped from 14 days to 7. Under CMS-0057-F, the Interoperability and Prior Authorization Final Rule, payers now have 7 calendar days to return a standard non-urgent decision and 72 hours to return an expedited one. The rule applies to Medicare Advantage, Medicaid managed care, state Medicaid fee-for-service, CHIP managed care, and Qualified Health Plans on the federally facilitated Marketplace. If you bill any of those, the 7-day clock is yours.
• Denials have to come with a specific, fixable reason. Not medically necessary with no detail is gone. The payer has to identify what was missing or what failed coverage criteria. A vague denial used to cost you a full appeal cycle. A specific denial costs you one correction.
• Electronic prior authorization APIs are coming, but not until 2027. CMS-0057-F requires payers to build standardized APIs that connect to provider systems directly. Those don't go live until January 1, 2027. For all of 2026, you're running under the new rules with the old plumbing. Faster clocks. Stricter denial standards. Same portals, faxes, and phone calls.

The trap is the mismatch. New rules, old workflow.

The bigger shock for practices in six states isn't CMS-0057-F. It is WISeR, the Wasteful and Inappropriate Service Reduction model.

Original Medicare has historically not used prior authorization. That's one of the defining differences between Original Medicare and Medicare Advantage, and most billing operations are built around that assumption. WISeR breaks it.

The model went live January 1, 2026 in Arizona, New Jersey, Ohio, Oklahoma, Texas, and Washington. It runs as a pilot through December 31, 2031.

• Scope. The model covers roughly 17 select services CMS flagged as high-risk for waste or inappropriate use.
• Timeline. Medicare Administrative Contractors began accepting prior authorization requests on January 5, 2026. The requirements apply to dates of service on or after January 15, 2026.
• Validity. An approved authorization is valid for 120 calendar days from the approval date.
• Two paths, both gated. Providers can submit a prior authorization request before the service, or perform the service and let the claim go through pre-payment medical review. Either way, payment depends on complete clinical documentation that maps to coverage criteria.

The model is officially voluntary. In practice it isn't. You either submit the authorization or you submit the claim to a slower review queue. If you're in Texas, this matters more than the rest of the rule combined.

Talk to billing leads at small and mid-sized US practices right now and you hear the same gaps over and over.

• The 14-day reflex is still in the building. Front-office and billing staff who learned the old window keep scheduling against it. A biller who joined last month won't catch an authorization aging past day 7 unless a system tells them to. Procedures get booked before approvals clear. Claims get held. Cash slips a month.
• WISeR is being treated as paperwork to skip. In the six model states, practices that skip the up-front authorization aren't getting around the model. They're picking the slow lane. Pre-payment review holds the claim, demands the same documentation, and pushes the deposit out by weeks.
• Denial reasons aren't being captured by payer. Payers now have to give specific reasons. Those reasons are data. Most practices don't log them. When the same gap appears three times from the same plan, nobody connects the dots. The same appeal gets written every month.
• There's no pre-submission scrub. Most denials aren't exotic. Wrong code. Missing element. Stale eligibility. Unsigned note. Under the old vague-denial system, these errors were hard to see. Under the new specific-reason system, they're visible. Ignoring that signal is leaving money on the floor.

If any of this sounds familiar, the problem isn't your team's effort. It is that the rules moved faster than the workflow did.

You don't need to rebuild the revenue cycle in 90 days. You need to close the highest-risk gaps now and put a sustainable process behind them.

1. Put the 7-day and 72-hour clocks into your practice management system. Hard rules. Alerts before expiry. Not someone's memory, not a sticky note, not a senior biller's spreadsheet. Billing turnover is constant, and any rule that lives in one person's head walks out when they do.
2. Log every denial reason against the payer that issued it. Build a simple table by payer and reason code. When the same reason hits three times from the same plan, you have a workflow gap upstream, not an appeals problem. Fix the gap. The appeal was always the symptom.
3. Add a pre-submission documentation scrub. Before any authorization request or claim goes out, check it: correct CPT and ICD-10 codes, required clinical elements, current eligibility, signatures in place. This is the single highest-leverage step in the whole revenue cycle right now, because it converts denials into corrections before they reach a payer.
4. If you're in a WISeR state, schedule against the WISeR calendar. Arizona, New Jersey, Ohio, Oklahoma, Texas, Washington. Map which of the roughly 17 services your providers actually perform. Build a 120-day authorization window into your scheduling logic. Stop treating Original Medicare as a no-auth payer.
5. Brief every scheduler, coder, and biller in 30 minutes. Decision windows. Affected payers. WISeR if applicable. Specific-reason denial requirement. This is a half-hour standup. It prevents weeks of delayed cash.

The 2026 rules aren't the finish line. On January 1, 2027, the electronic prior authorization APIs required under CMS-0057-F go live. Portals and faxes get replaced by direct system-to-system requests. CMS has signaled that prior authorization performance will eventually feed into the Medicare Promoting Interoperability Program for hospitals and MIPS for clinicians. That means it will start touching your quality scores and payment adjustments, not just your aging report.

WISeR carries its own forward risk. CMS has been clear that the model is a test. Gatekeeping programs that work on the regulator's terms tend to expand. A practice in one of the six current states should treat this year's workflow changes as permanent. A practice in the other forty-four states should treat them as a preview.

The practices that come out of 2026 financially stronger aren't the ones that worked harder at appeals. They are the ones that rebuilt the front of the revenue cycle so denials stopped happening.

• What is CMS-0057-F? CMS-0057-F is the CMS Interoperability and Prior Authorization Final Rule. It went into operational effect on January 1, 2026 and applies to Medicare Advantage, Medicaid managed care, state Medicaid fee-for-service, CHIP managed care, and Qualified Health Plans on the federally facilitated Marketplace.
• What is the new prior authorization decision window in 2026? Payers covered by CMS-0057-F must return a standard, non-urgent prior authorization decision within 7 calendar days. Expedited or urgent requests must be decided within 72 hours. The old standard was 14 calendar days.
• Which states are in the WISeR model? The WISeR model covers Arizona, New Jersey, Ohio, Oklahoma, Texas, and Washington. The model began January 1, 2026 and runs through December 31, 2031.
• Does WISeR apply to Medicare Advantage? No. WISeR applies to Original Medicare only. Medicare Advantage plans have always used prior authorization and are governed separately under CMS-0057-F and other rules.
• How long is a WISeR prior authorization valid? An approved WISeR prior authorization is valid for 120 calendar days from the approval date.
• When do the electronic prior authorization APIs go live? The standardized payer-to-provider prior authorization APIs required under CMS-0057-F go live on January 1, 2027. For all of 2026, prior authorization runs on the existing channels: portals, faxes, and phone calls.
• What changed about prior authorization denials in 2026? Payers covered by CMS-0057-F must now give a specific reason for any prior authorization denial. Generic language like "not medically necessary" without further detail no longer meets the standard.

The 2026 prior authorization rules aren't a minor compliance update. They reshape the front of the revenue cycle. Practices that adjust now close out 2026 with fewer denials, faster cash, and a workflow that's already ready for the 2027 electronic mandate. Practices that don't spend the year explaining held claims to leadership.

At Medonix, we run prior authorization, denial management, and full revenue cycle workflows for US and Canadian practices. The workflows are built around the 2026 rules as they actually are, with the documentation discipline these changes require. If the 7-day window or the new WISeR requirements are starting to bite, we can run a 30-minute review of your current workflow and tell you, plainly, where you stand.