Your Rights
Your Rights Under the 2026 CMS Transparency Rule
4 min read · Updated February 2026
For decades, health insurers have operated their prior authorization systems behind closed doors. How often do they deny? How long do patients wait? Which drugs get blocked most? Until now, patients had no way to know. That's about to change.
What Is CMS-0057-F?
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), published in January 2024, is the most significant federal regulation targeting prior authorization in over a decade. It applies to:
- Medicare Advantage plans
- Medicaid managed care plans
- Qualified Health Plans (ACA Marketplace)
- Children's Health Insurance Program (CHIP)
Together, these cover over 150 million Americans. If you get insurance through any of these programs, this rule protects you.
The March 2026 Reporting Deadline
Starting March 2026, every covered insurer must publicly report:
- Total prior authorization requests received
- Approval and denial rates — broken down by service/drug category
- Average decision time — how long patients waited
- Appeal outcomes — how many denials were overturned
- Reasons for denial — categorized by type
This data will be publicly available. For the first time, you'll be able to compare insurers based on how they actually treat patients — not just their marketing. Ellen is tracking these reports as they come in and will surface this data in your dashboard.
January 2027: Electronic PA APIs
By January 1, 2027, insurers must implement standardized electronic prior authorization APIs using HL7 FHIR. What this means in practice:
- Faster decisions: PA requests and responses will be electronic and near-instant, replacing fax machines and phone trees
- Real-time status: Your doctor's office can check the status of a PA in real-time instead of calling and waiting on hold
- Specific denial reasons: Insurers must provide a specific reason for every denial — no more vague "does not meet criteria" responses
- Shorter decision timelines: Standard PA decisions must be made within 7 days (down from the previous guideline of 14). Urgent requests: 72 hours.
What You Can Demand Right Now
Even before the 2027 API deadline, you have rights today:
- Ask for the specific clinical criteria used to deny your medication. Insurers must provide this upon request.
- Request the credentials of the person who reviewed your PA. Was it a board-certified specialist in your condition, or a general reviewer?
- Demand a peer-to-peer review where your doctor speaks directly with the insurer's medical director.
- Ask for the insurer's PA denial rate for your specific medication. As of March 2026, they're required to have this data.
- File a complaint with CMS if your insurer isn't complying with the new transparency requirements.
For a complete overview of your rights, visit Ellen's Your Rights page.
Why This Matters
Prior authorization denials have been rising for years. The American Medical Association reports that 94% of physicians say PA delays care, and 33% say it has led to a serious adverse event for a patient.
The CMS transparency rule doesn't eliminate prior authorization — but it shines a light on it. When insurers know their denial rates are public, the calculus changes. Plans with abnormally high denial rates will face scrutiny from regulators, employers, and patients choosing plans during open enrollment.
Transparency is the first step toward accountability.
Stay Informed
Ellen monitors CMS rule changes and insurer compliance so you don't have to. If your insurer isn't meeting the new requirements, we'll help you understand your options.