PPO Prior Authorization: When You Need Approval for Care

Prior authorization is a cost and utilization management tool embedded in most PPO health plans that requires a member to obtain insurer approval before receiving certain medical services, procedures, or prescription drugs. This page explains how the authorization process is structured, which care categories most frequently trigger it, and how insurers draw the line between approved and denied requests. Understanding this mechanism is essential for anyone navigating a PPO plan and trying to avoid unexpected claim denials or out-of-pocket costs.

Definition and scope

Prior authorization — also called precertification, prior approval, or preauthorization — is a formal determination by a health insurer that a proposed treatment or service meets the plan's medical necessity criteria before the insurer agrees to pay for it. The term "medical necessity" is not arbitrary: the Centers for Medicare & Medicaid Services (CMS) defines medically necessary services as those that are reasonable and necessary for the diagnosis or treatment of an illness, injury, or to improve the functioning of a malformed body member.

Within PPO plans specifically, prior authorization operates differently than in HMOs. A PPO member does not need a primary care referral to see a specialist — a key structural distinction covered in the PPO referral requirements overview — but the insurer may still require authorization for the specific procedure the specialist recommends, even when the visit itself is unrestricted.

The scope of prior authorization varies by plan but typically covers a defined list of services. In 2022, the American Medical Association reported in its 2022 Prior Authorization Physician Survey that 33% of physicians reported prior authorization led to a serious adverse event for a patient, and 80% described the administrative burden as high or extremely high. CMS has responded with rulemaking — including the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) issued in January 2024 — that requires certain payers to implement electronic prior authorization and issue decisions on standard requests within 7 calendar days.

How it works

The prior authorization workflow follows a defined sequence:

  1. Provider initiation: The treating physician or specialist submits a request — electronically or via fax — to the insurer, including clinical notes, diagnosis codes (ICD-10), procedure codes (CPT), and supporting documentation establishing medical necessity.
  2. Insurer review: A licensed clinician employed by or contracted to the insurer reviews the submission against the plan's clinical criteria, which most large PPO insurers derive from evidence-based guidelines such as those published by InterQual (Change Healthcare) or MCG Health.
  3. Decision issuance: The insurer issues an approval, denial, or request for additional information. Under the CMS-0057-F rule, impacted payers must respond to standard requests within 7 calendar days and to expedited (urgent) requests within 72 hours.
  4. Approval or appeal: An approved authorization is not a guarantee of payment — it confirms only that the service meets plan criteria. A denial triggers the member's right to appeal the decision, including an internal appeal and, if exhausted, an external independent review.

Retroactive authorization — seeking approval after a service is already delivered — is generally not accepted except in documented emergency situations. Emergency care is specifically exempt from prior authorization requirements under federal law (No Surprises Act, 42 U.S.C. § 300gg-111), a protection detailed further in the PPO emergency care coverage section.

Common scenarios

Certain service categories generate the overwhelming majority of prior authorization requests in PPO plans. These include:

Decision boundaries

Insurers apply distinct criteria when drawing the line between approval and denial. The two primary dimensions are clinical criteria compliance and site-of-service appropriateness.

Clinical criteria compliance asks whether the submitted documentation establishes that the proposed treatment is medically necessary, not experimental or investigational, and consistent with generally accepted standards of care. Experimental treatments are excluded from coverage in virtually all standard PPO contracts; a service classified as investigational requires separate review that may invoke the plan's clinical exception process.

Site-of-service review addresses whether the proposed setting is the least-cost appropriate option. An insurer may approve an MRI but require it be performed at an outpatient imaging center rather than a hospital outpatient department if clinical guidelines support equivalent quality at lower cost — a substitution that can reduce cost-sharing as described in the PPO copay vs. coinsurance framework.

The contrast between standard authorization and expedited authorization is operationally significant. Standard review timelines apply to non-urgent scheduled care; expedited review is warranted when applying the standard timeline "could seriously jeopardize the life or health of the member or the member's ability to regain maximum function" — language adopted from the DOL Claims Procedure Regulations (29 CFR § 2560.503-1). Failure to request expedited review when clinically appropriate, or failure by an insurer to respond within the 72-hour window, can itself constitute a basis for appeal.

References

The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)