§ 422.122 Prior authorization requirements.

(a) Communicating a reason for denial. Beginning January 1, 2026, if the MA organization denies a prior authorization request (excluding request for coverage of drugs as defined in § 422.119(b)(1)(v)), in accordance with the timeframes established in §§ 422.568(b)(1) and 422.572(a)(1), the response to the provider must include a specific reason for the denial, regardless of the method used to communicate that information.

(b) Prior Authorization Application Programming Interface (API). Beginning January 1, 2027, an MA organization must implement and maintain an API conformant with § 422.119(c)(2) through (4), (d), and (e), and the standards in 45 CFR 170.215(a)(1), (b)(1)(i), and (c)(1) that—

(1) Is populated with the MA organization's list of covered items and services (excluding drugs, as defined in § 422.119(b)(1)(v)) that require prior authorization;