New Medicare Preauthorization Rules Leave Patient Out of Loop

News January 22, 2024 at 03:42 PM
Share & Print

What You Need To Know

  • Plans will have 72 hours to give providers reasons for denials for expedited coverage requests.
  • Patients will see more information about preauthorization requests but will not be able to chime in.
  • When a patient changes Medicare plans, the new plan will be able to pull five years of data from the old plan through an API.

New Medicare Advantage plan rules will give patients more information about plan coverage denials, but they won't give the patients new tools that they and their brokers can use to lobby the plans directly.

Officials at the Centers for Medicare and Medicaid Services talk about the coverage tools patients will, and won't, get in a new batch of final federal preauthorization and electronic health communication regulations.

The regulations will require affected plans to set up prior authorization "application programming interfaces," or APIs, for communicating about preauthorization decisions with providers. Plans will have to get back to providers, and give reasons for any denials, within 72 hours for expedited requests, 7 calendar days for standard requests and 14 days if a patient, provider or plan asks for an extension.

Plans will have to feed preauthorization information into patients' own health apps and plan portals through patient access APIs, but plans won't have to give patients any new ability to participate in the preauthorization discussions. Agents or brokers who are authorized to act as the patients' personal representatives could see the preauthorization information through their own portals or apps.

What it means: Medicare agents and brokers who help clients handle coverage problems might be able to get more information they can use to draft complaints and appeals.

But the new regulations won't create any new systems or appeal programs that Medicare producers can use to speed up the decisionmaking.

The history: Health insurers and managed care providers argue that the preauthorization review is one of the few tools they have to reduce the cost of care and reduce the odds that patients will get unnecessary, potentially harmful or wasteful care.

Physicians have complained bitterly, for years, that plans tie them up with preauthorization reviews for ordinary, obviously needed care.

The mechanics: CMS, an arm of the U.S. Department of Health and Human Services, previously published major patient access API regulations in 2020.

The agency published a draft version of the new regulations in 2022 and received about 900 comments on the 2022 draft.

The regulation packet lists Natalie Albright as the CMS staffer who can answer questions about Medicare Advantage plan provisions and David Koppel as the staffer who knows about patient access API questions.

A preview version is already available on the web, but the official Federal Register publication date is expected to be Feb. 8.

The scope: The new regulations apply to Medicare Advantage plans and several other types of federally regulated private plans, including Medicaid managed care plans and the individual and family major medical policies sold through the Affordable Care Act public exchange system.

The regulations won't apply to small-group ACA exchange plans, original Medicare coverage, stand-alone dental plans or Medicare supplement insurance policies,

Medicare Advantage plans provide coverage for 32 million of the 66 million people who are enrolled in Medicare.

The requirements: The new regulations set detailed standards for the technology behind the patient access API and the provider preauthorization access API, to ensure that patients and providers can see the data through as many different types of portals and apps as possible.

The preauthorization speed requirements are supposed to take effect Jan. 1, 2026. Plans can start out meeting the requirements using paper or online processes that don't comply with all of the standards set out in the new regulations.

Plans are supposed to begin providing regulation-compliant patient and provider access APIs by Jan. 1, 2027.

Some plans can qualify for exemptions from the API requirements, and others can apply for exemptions.

Officials note that they gave plans an extra year to meet the API requirements because of concerns about how quickly they could get the new technology in place.

CMS is also changing the rules to ensure that the new plan can easily get five years of patient information from the old plan through an API when a patient changes plans, and that two plans that cover the same patient can and regularly do exchange data through an API, to help ensure that the patient can get comprehensive coverage information through one portal or one app.

What the requirements leave out: The new requirements don't apply to drug coverage decisions, because other, comparable speed guidelines already apply to plans' communications about drug coverage decisions.

The new requirements also have no provisions that apply directly and clearly to "peer-to-peer reviews" of whether the care requested is medically necessary.

Physicians often complain that the peer reviewers tend to be physicians with no experience in the specialty involved in the discussion.

Officials acknowledge in the preamble, or official introduction, to the regulations that they received multiple comments express "frustration with… painful interactions during lengthy peer-to-peer review of medical necessity assessments with MA organizations."

Medicare program rules for 2024 already require Medicare Advantage plans to set up utilization management committees to make sure Medicare Advantage preauthorization procedures are consistent with those around original Medicare, officials said.

Why no new patient preauthorization communication tools: CMS officials suggested that letting patients send information to plans through the preauthorization API would create confusion about who was responsible for submitting prior authorization requests and documentation.

"Providers are in the best position to understand the clinical requirements to obtain prior authorization and are responsible for using their clinical judgment to decide on the best course of treatment," officials said. "As discussed, it is valuable for patients to have transparency into that process and be able to assist providers to submit necessary information. However, without a clinical understanding, patients may submit extraneous or irrelevant information."

Health insurers' view: America's Health Insurance Plans, a group for health insurers, welcomed final approval of the preauthorization regulations, but it said health insurers need better, more standardized systems to comply, and that another HHS agency, the Office of the Coordinator for Health Information Technology needs to step up.

The technology office "should swiftly require vendors to build electronic prior authorization capabilities into the electronic health record so that providers can do their part, or plans will build a bridge to nowhere," AHIP said.

The Centers for Medicare and Medicaid Services offices in Woodlawn, Maryland. Credit: Jay Mallin/Bloomberg

NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Related Stories

Resource Center