CMS-0057-F: What Payers Must Have Ready by January 2027, and Where AI Agents Fit

CMS-0057-F requires payers to meet prior authorization decision-time, denial-reason and public-reporting rules that began mainly in 2026, and to have FHIR-based APIs for prior authorization and data exchange ready primarily by 1 January 2027. AI agents can support the work, but they need governance and clear audit trails.

What is CMS-0057-F and which payers does it cover?

CMS’s 17 January 2024 press release describes the Interoperability and Prior Authorization Final Rule, CMS-0057-F. Prior authorization is a payer’s review of a requested health service before it is provided. The rule covers Medicare Advantage organizations, Medicaid and CHIP fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and qualified health plan (QHP) issuers on Federally-facilitated Exchanges. The decision-timeframe requirements do not apply to those QHP issuers. The rule was published in the Federal Register on 8 February 2024, at 89 FR 8758.

What is already live in 2026?

CMS says impacted payers must decide expedited, or urgent, requests within 72 hours and standard, or non-urgent, requests within seven calendar days. A denial must include a specific reason. These decision-time, denial-reason and reporting provisions began primarily in 2026; CMS states certain provisions were required by 1 January 2026.

CMS’s Prior Authorization Metrics Reporting Overview says payers must post metrics from the previous calendar year on a publicly accessible website beginning in 2026. Metrics include non-drug services requiring authorization; percentages of standard requests approved, denied and approved after appeal; mean and median response times; and the percentage of requests where the review timeframe was extended and the request was approved.

What must be ready by January 2027?

An API, or application programming interface, allows systems to exchange information. CMS-0057-F requires a Prior Authorization API based on FHIR, or Fast Healthcare Interoperability Resources, a health information exchange standard. Payers must also expand the Patient Access API to include prior authorization information and add a Provider Access API and a Payer-to-Payer API. These requirements apply primarily from 1 January 2027. As of November 2026, that is roughly two months away.

This article is general information, not legal or compliance advice; payers should confirm requirements by line of business with compliance teams and CMS guidance.

Why does prior authorization accuracy matter?

KFF’s analysis of CMS Part C data found that Medicare Advantage insurers made 49.8 million prior authorization determinations in 2023 and denied 3.2 million, or 6.4%. Just 11.7% of denials were appealed; KFF reported that 81.7% of appeals were partially or fully overturned. These figures cover Medicare Advantage only, not Medicaid or other lines of business.

The figures do not explain why decisions were overturned. In Brillio’s view, they reinforce the need for accurate decisions, documented reasons and an audit trail showing how each request was handled.

Where can AI agents fit in prior authorization?

An AI agent is software that takes actions toward an assigned goal within defined permissions. Illustrative, not a Brillio product claim: agents could gather clinical documents, track decision clocks, draft denial rationales for clinician review, and answer status questions.

The CMS-0057-F press release does not mention AI. A 6 February 2024 CMS FAQ memo, as summarized by Reed Smith, says Medicare Advantage organizations may use AI and algorithms in coverage determinations if they follow applicable rules. Decisions should reflect individual patient circumstances, not only broader data; tools may not apply unpublished internal criteria or change established coverage criteria.

In Brillio’s view, clinicians should review denials. Payers considering agentic AI in healthcare should ask how each decision uses the individual member’s record and how agent actions are governed and logged. Conversational AI in healthcare, such as a member assistant, can answer status questions without making decisions. Payers seeking healthcare AI consulting should ask how controls and auditability are built in, and should test AI-powered health solutions against their own workflows before relying on them.

How does Brillio approach agentic AI for payers?

Brillio sells related offerings, so payers should ask us the same questions they ask any provider. Brillio’s healthcare page, which covers agentic AI in healthcare, describes health-plan accelerators for Claims, Payments and Integrity, and lists prior authorization among payer workflows. It describes Trust-centered AI, full-lifecycle agent governance via ADAM (Agentic Data and Application Management), and a PHI-safe architecture. It says Brillio works to keep agents within defined compliance boundaries across payer or pharmacy workflows. The page does not address CMS-0057-F compliance or required APIs.

Frequently asked questions

What is CMS-0057-F?

CMS-0057-F is the Interoperability and Prior Authorization Final Rule. It sets requirements for specified payers on prior authorization decisions, denial reasons, public metrics and health information APIs. API requirements apply primarily from 1 January 2027.

What must payers have ready by 1 January 2027?

Impacted payers must have the FHIR-based Prior Authorization API, expanded Patient Access API, Provider Access API and Payer-to-Payer API in place, with requirements applying primarily from 1 January 2027. Applicability should be checked by line of business.

What should payers ask AI healthcare companies before using AI in prior authorization?

Ask how the system uses individual patient information, what criteria it applies, who oversees denials, how actions are governed and logged, and how exceptions reach staff. Confirm it follows applicable coverage rules and protects sensitive information.

References

CMS, “CMS Finalizes Rule to Expand Access to Health Information and Improve the Prior Authorization Process,” press release, 17 January 2024.

Federal Register, “Medicare and Medicaid Programs; Patient Protection and Affordable Care Act; Advancing Interoperability and Improving Prior Authorization Processes for Medicare Advantage Organizations, Medicaid Managed Care Plans, State Medicaid Agencies, Children’s Health Insurance Program (CHIP) Agencies and CHIP Managed Care Entities, Issuers of Qualified Health Plans on the Federally-Facilitated Exchanges, Merit-Based Incentive Payment System (MIPS) Eligible Clinicians, and Eligible Hospitals and Critical Access Hospitals in the Medicare Promoting Interoperability Program,” 89 FR 8758, 8 February 2024.

CMS, Prior Authorization Metrics Reporting Overview, cms.gov.

KFF, analysis of Medicare Advantage prior authorization determinations in 2023, based on CMS Part C data.

Reed Smith, client alert summarizing the CMS FAQ memo of 6 February 2024 on Medicare Advantage use of artificial intelligence in coverage determinations.