Health plans subject to federal prior authorization rules have until January 1, 2027 to have FHIR-based prior authorization application programming interfaces (APIs) operational. That technical requirement has drawn a wave of vendor partnerships in the closing months of 2026. The latest came when MCG Health, a clinical guidance company owned by Hearst Health, and Itiliti Health, a prior authorization automation platform, announced a combined solution aimed at helping health plans meet the compliance deadline. Their integrated offering combines MCG’s clinical guidance content with Itiliti’s authorization workflow and interoperability tools.
The partnership is designed for a specific regulatory moment. The Centers for Medicare and Medicaid Services (CMS) finalized the Interoperability and Prior Authorization Final Rule (CMS-0057-F) in January 2024, establishing two phases of compliance.
The first phase, effective January 1, 2026, required impacted health plans, including Medicare Advantage organizations, Medicaid and CHIP managed care plans, and Qualified Health Plan issuers on Federally Facilitated Exchanges, to make prior authorization decisions within 72 hours for urgent requests and seven days for standard ones, state specific reasons for all denials, and publicly report prior authorization metrics by March 31.
The second phase, due January 1, 2027, requires those same plans to have FHIR-based APIs in place to automate the end-to-end prior authorization process electronically. The rule does not apply to commercial fully insured plans or ERISA self-insured employer plans.
The operational requirements have been in force for nearly a year, but provider data suggests the pressure hasn’t translated into relief at the practice level. The Medical Group Management Association’s (MGMA) September 2026 poll of medical group leaders found that 44% said prior authorization turnaround became slower in 2026 compared to 2025, despite the new decision-time mandates. The same organization’s 2026 Regulatory Burden Report found that 90% of practices said prior authorization burden increased over the prior 12 months.
Both companies are active participants in the HL7 Da Vinci Project, the industry initiative whose interoperability standards are incorporated into the rule’s API requirements. Bobbi Maddox, a product manager at Blue Cross Blue Shield of Minnesota in Minneapolis, said in the announcement that the integration “supports a more consistent, transparent, and efficient prior authorization process by providing clearer guidance to providers and reducing administrative complexity.”
While CMS-0057-F does not reach commercial employer plans directly, the compliance deadline matters for anyone advising clients on plan selection. Medicare Advantage plans, Medicaid managed care organizations, and ACA marketplace plans are all in scope, the same categories that appear in employer benefit strategies for retirees, lower-wage workforces newly moving from marketplace coverage, and public-sector groups.
A plan’s ability to demonstrate FHIR API readiness by January 2027 is now a concrete technical benchmark advisors can use when evaluating whether a plan partner is positioned for the operational demands ahead. CMS estimates the rule will save $15 billion over 10 years, primarily by reducing provider-side administrative burden on prior authorization processing. That projection is built on closing the cost gap between manual and electronic prior authorization processing. The 2023 CAQH Index puts the gap at $10.97 per manual transaction against $5.79 for fully electronic, a 47% reduction per request. Those savings accrue to plan sponsors and, eventually, to premium trends as the pressure on employer health plans from regulatory and cost dynamics continues to mount heading into 2027 renewals.
CMS projects approximately 365 parent organizations are subject to the rule’s requirements, according to its regulatory impact analysis.
