Medicaid Prior Authorization: How It Works and What Changed in 2026
By Medtransic Team | August 12, 2026 | 10 min read | Updated: August 12, 2026
Quick Summary: Medicaid prior authorization is not one process. It is fifty-one programmes, each with its own rules, plus managed care plans layered on top. Here is how it works, what federal rules now require, and where practices lose money.
Why Medicaid Prior Authorization Is Its Own Problem
Commercial prior authorization is hard because every payer has its own rules. Medicaid is hard for a different reason: it is not one payer at all.
Each state administers its own programme within federal requirements. What needs authorization in one state may not in the next, and the same service can carry different documentation standards either side of a state line. A practice that treats Medicaid as one payer with one ruleset will be wrong somewhere.
Fee-for-Service vs Managed Care
Before asking whether a service needs authorization, you have to know which arrangement the patient is in. It changes who decides and where the request goes.
The two arrangements
Medicaid fee-for-service
- The state programme, or a contracted vendor, decides
- Requirements come from state policy, published by the state agency
- One ruleset for that state, which at least makes it learnable
Medicaid managed care
- A managed care organisation decides, under contract with the state
- The plan sets requirements within that contract, so two plans in one state can differ
- A patient can move plans, and the new plan may not honour the old authorization
What Federal Rules Now Require
The CMS Interoperability and Prior Authorization Final Rule, CMS-0057-F, set requirements that took effect on January 1, 2026. They apply to state Medicaid and CHIP fee-for-service programmes, Medicaid managed care plans, CHIP managed care entities, Medicare Advantage organisations, and qualified health plans on the Federally Facilitated Exchanges.
- Expedited prior authorization decisions must be sent within 72 hours.
- Standard prior authorization decisions must be sent within seven calendar days.
- A denial must state a specific reason, whatever method was used to submit the request.
The denial-reason requirement is the one that changes daily work. An appeal built against a stated reason is a different exercise from an appeal built against a guess.
Retroactive Eligibility
This is the problem with no real commercial equivalent. A patient is treated while uninsured, or while an application is pending. Coverage is later approved with an effective date before the visit.
The care is now covered on paper. But the authorization that would have been required was never requested, because at the time of service there was no plan to request it from.
- Identify the retroactive span when the coverage decision arrives, not when the claim denies.
- Check the state and plan policy on retroactive authorization. This is one of the areas that varies most.
- Assemble the clinical documentation that would have supported the request at the time of service.
- Submit inside whatever window the plan allows, and record the date, because that window is often short.
Where Practices Lose the Money
The losses are rarely dramatic. They come from a small number of repeating situations.
| What goes wrong | What prevents it |
|---|---|
| Nobody checked whether the service needed authorization | Requirement checked at scheduling, against the specific plan |
| The request went to the state when the patient is in managed care | Plan identified at intake, before the request is drafted |
| An approval expired before the course of care finished | Expiry dates tracked, renewals raised before the last covered visit |
| A plan change mid-treatment voided the existing approval | Coverage rechecked periodically for ongoing care, not only at intake |
| A denial was written off because the reason was unclear | Denials now carry a stated reason, so the appeal has something to answer |
Billing Medicaid in More Than One State
Telehealth has made this ordinary. A practice licensed in several states now bills several Medicaid programmes, each with its own requirements, portals and timelines.
The failure mode is predictable. A process built around the first state gets applied to the second, and it mostly works, which is what makes it dangerous. The exceptions surface as denials weeks later.
A Process That Holds Up
- Identify the exact plan at scheduling, not the programme. Medicaid is the category; the plan is the payer.
- Check the authorization requirement against that plan before the appointment is confirmed.
- Submit with the documentation the plan asks for, in the format it asks for, the first time.
- Diary the decision deadline. Federal rules now give you 72 hours or seven calendar days to hold the plan to.
- Track expiry and visit counts for anything ongoing, and raise renewals before the last covered visit.
- When a denial arrives, read the stated reason and appeal against that reason specifically.
Medtransic runs prior authorization for practices as part of the revenue cycle, including Medicaid and managed care. If authorizations are being missed, or denials go unappealed because nobody has the hours, a free revenue audit will show you what it is costing.
Frequently Asked Questions
How long can a Medicaid plan take to decide a prior authorization?
Since January 1, 2026, federal rules require impacted payers, which include Medicaid fee-for-service, Medicaid managed care and CHIP, to send expedited decisions within 72 hours and standard decisions within seven calendar days. The timeframes do not cover requests for drugs.
Does a Medicaid managed care plan have to follow the state rules?
A managed care plan operates under contract with the state, but sets its own requirements within that contract. Two plans in the same state can require different things for the same service, which is why the plan matters more than the programme.
What happens if Medicaid coverage is backdated after we treated the patient?
That is retroactive eligibility, and the authorization that would have been needed was never requested. Whether a retroactive request is accepted varies by state and by plan, so check the policy and submit quickly, with the documentation that would have supported the request at the time of service.
Does a Medicaid authorization move with the patient to a new plan?
Not reliably. A patient who changes plans mid-treatment may need a new authorization from the new plan, so ongoing care should have coverage rechecked rather than assumed.
Do we have to be told why a prior authorization was denied?
Yes. Federal rules now require impacted payers to give a specific reason for a denied prior authorization decision, whatever method was used to submit it. That reason is what an appeal should answer.