Key Takeaways
- 01There is no single Medicaid prior authorization process. Each state runs its own program, and managed care plans set requirements on top of the state rules.
- 02Since January 1, 2026, federal rules require Medicaid fee-for-service, Medicaid managed care and CHIP to decide expedited requests within 72 hours and standard requests within seven calendar days.
- 03Those rules also require a specific reason for every denial, which changes what an appeal can be built on.
- 04The timeframes do not cover prior authorization for drugs. Drug requests are the subject of a separate proposed rule.
- 05Retroactive eligibility is the trap unique to Medicaid: care is delivered before enrollment, coverage is backdated, and the authorization nobody could have requested was never requested.
Why Medicaid Prior Authorization Is Its Own Problem
Commercial prior authorization is hard because every payer has its own rules. Medicaid is hard for a different reason: it is not one payer at all.
Each state administers its own program within federal requirements. What needs authorization in one state may not in the next, and the same service can carry different documentation standards either side of a state line. A practice that treats Medicaid as one payer with one ruleset will be wrong somewhere.
Fee-for-Service vs Managed Care
Before asking whether a service needs authorization, you have to know which arrangement the patient is in. It changes who decides and where the request goes.
The two arrangements
Medicaid fee-for-service
- The state program, or a contracted vendor, decides
- Requirements come from state policy, published by the state agency
- One ruleset for that state, which at least makes it learnable
Medicaid managed care
- A managed care organization decides, under contract with the state
- The plan sets requirements within that contract, so two plans in one state can differ
- A patient can move plans, and the new plan may not honor the old authorization
What Federal Rules Now Require
The CMS Interoperability and Prior Authorization Final Rule, CMS-0057-F, set requirements that took effect on January 1, 2026. The decision deadlines below apply to state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities and Medicare Advantage plans. Exchange plans on HealthCare.gov must give denial reasons but are not bound by the new deadlines.
- Expedited prior authorization decisions must be sent within 72 hours.
- Standard prior authorization decisions must be sent within seven calendar days.
- A denial must state a specific reason, whatever method was used to submit the request.
The denial-reason requirement is the one that changes daily work. An appeal built against a stated reason is a different exercise from an appeal built against a guess.
Retroactive Eligibility
This is the problem with no real commercial equivalent. A patient is treated while uninsured, or while an application is pending. Coverage is later approved with an effective date before the visit.
The care is now covered on paper. But the authorization that would have been required was never requested, because at the time of service there was no plan to request it from.
- 01Identify the retroactive span when the coverage decision arrives, not when the claim denies.
- 02Check the state and plan policy on retroactive authorization. This is one of the areas that varies most.
- 03Assemble the clinical documentation that would have supported the request at the time of service.
- 04Submit inside whatever window the plan allows, and record the date, because that window is often short.
Where Practices Lose the Money
The losses are rarely dramatic. They come from a small number of repeating situations.
| What goes wrong | What prevents it |
|---|---|
| Nobody checked whether the service needed authorization | Requirement checked at scheduling, against the specific plan |
| The request went to the state when the patient is in managed care | Plan identified at intake, before the request is drafted |
| An approval expired before the course of care finished | Expiry dates tracked, renewals raised before the last covered visit |
| A plan change mid-treatment voided the existing approval | Coverage rechecked periodically for ongoing care, not only at intake |
| A denial was written off because the reason was unclear | Denials now carry a stated reason, so the appeal has something to answer |
Billing Medicaid in More Than One State
Telehealth has made this ordinary. A practice licensed in several states now bills several Medicaid programs, each with its own requirements, portals and timelines.
The failure mode is predictable. A process built around the first state gets applied to the second, and it mostly works, which is what makes it dangerous. The exceptions surface as denials weeks later.
A Process That Holds Up
- 01Identify the exact plan at scheduling, not the program. Medicaid is the category; the plan is the payer.
- 02Check the authorization requirement against that plan before the appointment is confirmed.
- 03Submit with the documentation the plan asks for, in the format it asks for, the first time.
- 04Diary the decision deadline. Federal rules now give you 72 hours or seven calendar days to hold the plan to.
- 05Track expiry and visit counts for anything ongoing, and raise renewals before the last covered visit.
- 06When a denial arrives, read the stated reason and appeal against that reason specifically.
Medtransic runs prior authorization for practices as part of the revenue cycle, including Medicaid and managed care. If authorizations are being missed, or denials go unappealed because nobody has the hours, request a free billing review.