Prior Authorization Reform Gains Momentum in States

A MultiState analysis published in August 2025 documents the accelerating pace of state prior authorization reform, including a development with significant implications for physician practices: states are beginning to restrict the use of artificial intelligence in coverage determinations. This expansion of reform scope — from process requirements like response timelines and gold-card exemptions to substantive restrictions on how payers make decisions — signals a maturation of the PA reform movement that practices should watch closely.

AI Restrictions Enter the Conversation

Several states have introduced or enacted provisions requiring that prior authorization denials involve review by a licensed physician rather than AI-driven algorithms. This responds directly to high-profile revelations about payers using automated systems to deny claims at scale — including investigations showing claim review times measured in seconds rather than minutes. For physician practices, these restrictions matter because they change the nature of the denial itself. A denial reviewed by a physician, even if upheld, comes with clinical reasoning that can be addressed in an appeal. An algorithmic denial often comes with boilerplate rationale that gives practices little to work with.

The tension is real: AI and automation can legitimately improve the speed and consistency of prior authorization processing, and the CMS interoperability rule envisions electronic PA systems that rely on technology. But there is a meaningful difference between using technology to facilitate PA submission and using algorithms to make clinical coverage decisions without human review. States are drawing that line, and practices should understand where it falls in their jurisdiction.

Expanded Gold-Card Programs

The MultiState analysis also tracks the continued expansion of gold-card programs beyond the Texas model. More states are adopting performance-based exemptions, and some are lowering the approval rate threshold or expanding the range of services that qualify. This evolution reflects both the success of early gold-card implementations and the recognition that the original thresholds may have been too restrictive to deliver meaningful relief.

For practices, the expansion of gold-card programs reinforces the value of systematic PA tracking. Practices that maintain clean data on their authorization approval rates by service type and payer are positioned to claim exemptions as they become available. Those operating without systematic tracking may qualify for gold-card relief without knowing it.

Mandatory Decision Timeframes

The momentum around mandatory decision timeframes continues to build, with states establishing increasingly specific requirements:

• Urgent PA requests: 24 to 72 hours depending on the state
• Standard PA requests: 3 to 7 calendar days
• Automatic approval if payer fails to respond within the mandated timeframe (in some states)
• Penalties for systematic non-compliance with response requirements

The "auto-approval" provision in some state laws is particularly noteworthy. It creates a structural incentive for payers to respond promptly and gives practices a concrete remedy when payers fail to meet deadlines. Practices need workflows that track PA submission timestamps and flag payer responses that arrive outside mandated windows.

The Strategic Implication

The broadening scope of state PA reform — from process improvements to AI restrictions to expanded exemptions — reflects a legislative environment that is increasingly willing to constrain payer behavior. For physician practices, this momentum creates an environment where systematic denial management becomes more powerful, not less. Better data on PA outcomes, structured tracking of payer response times, and evidence-based appeal processes all become more valuable as the regulatory framework provides additional leverage points. The states are building the scaffolding. Practices need the operational infrastructure to climb it.