In short
This denial means the plan needed to approve the care ahead of time and has no approval on file. First, find out whether a request was ever sent. If it was, send proof. If it wasn't, ask the provider to request approval now or after the fact, and appeal with the medical reasons the care was needed.
Prior authorization means your health plan must approve some care before you get it. It is also called pre-authorization or pre-certification. If the plan has no approval on file, it may deny the claim afterward, even if the care was right for you.
This denial is often about paperwork and timing, not medicine. That is good news: it can often be fixed. This guide explains how. It is part of the Coverage & Appeals Center. For the basics, see how prior authorization works.
What the letter says vs. what it means
| What the letter says | What it often means |
|---|---|
| “No authorization on file” | The plan can’t find an approval for this service and date |
| “Authorization required” | This service needs approval in advance under your plan |
| “Services exceed authorization” | Approval existed, but for fewer visits, a different code, or other dates |
| “Authorization expired” | Approval was given, but the care happened after it ran out |
| “Request not submitted timely” | The request came in after the plan’s deadline |
The fix depends on which one you have. Call the plan and ask exactly what is missing. Write down the answer and a reference number.
Rules that changed in 2026
A federal rule called CMS-0057-F changed prior authorization for many plans starting January 1, 2026 (CMS: CMS-0057-F fact sheet). It applies to:
- Medicare Advantage plans
- Medicaid and CHIP (including managed care plans)
- Plans sold on the federal ACA Marketplace (specific-reason rule only)
For these plans, the rule says:
- Urgent requests must be decided within 72 hours.
- Standard requests must be decided within 7 calendar days.
- When they deny a request, they must give a specific reason.
- They must publish data about their prior authorization decisions in 2026.
- They must offer electronic prior authorization systems by January 1, 2027.
Many large insurers also made voluntary promises in June 2025. These include clearer denial explanations and a 90-day transition period for prior authorizations when you switch plans during treatment, starting in January 2026 (CMS: industry pledge, June 23, 2025). These are promises, not laws, so ask your plan how it applies them.
If you have Traditional Medicare, a separate model called WISeR began testing AI-assisted prior authorization in six states in 2026. Kentucky and Indiana are not part of it (CMS: WISeR Model).
How to fix a missing prior authorization denial
- Find out whether a request was sent. Call the provider’s office and ask if they requested approval, when, and what the reference number was.
- If a request was sent, get proof. Ask the provider’s office for the submission record, fax confirmation or portal screenshot.
- If no request was sent, ask about retro-authorization. Some plans accept a request after the care. Ask the provider’s office to request it with the medical reasons.
- Check the details. Make sure the approved service code, number of visits and dates match the claim. A mismatch can look like “no authorization.”
- Appeal with the medical reasons. If the plan still denies, file an internal appeal. Explain why the care was needed and attach your clinician’s letter and records.
- Ask for external review if needed. If the denial was based on medical judgment, you may be able to ask for an outside review (45 CFR 147.136(d); KRS 304.17A-600; IC 27-8-29-12).
Who is responsible?
It depends on your plan and the provider’s contract. When a provider is in network, the provider’s office is often responsible for getting approval. In some contracts, the in-network provider cannot bill you for a service the plan denied only because the office didn’t get approval.
If you saw an out-of-network provider, you may be responsible for getting the approval yourself. Check your plan documents.
Ask the provider’s billing office directly: “Am I responsible for this bill if the denial was for missing authorization?” Get the answer in writing if you can.
Sample appeal letter
Sample appeal letter — missing prior authorization
[Your name] [Your address] · [Your phone] · [Your email] [Date] [Plan name] — Appeals Department [Address or fax from your denial letter] RE: Appeal of denial for missing prior authorization Member name: [Name] Member ID: [Number] Claim / reference number: [Number] Service: [Service] on [date] Provider: [Name] Date of denial letter: [Date] To the Appeals Department: I am appealing your denial of [service] on [date] for "[copy the exact reason]." [Choose one:] - A prior authorization request was submitted on [date] (reference [number]). Proof of submission is enclosed. Please process the claim under that request. - The service was needed before approval could be obtained because [reason, e.g., urgent symptoms]. I ask you to review the medical necessity of the care and approve it retroactively. Enclosed: - Proof of the prior authorization request (if any) - Letter of medical necessity from [clinician] - Medical records from [dates] - Your denial letter Please reverse the denial. If you do not, please explain the specific reason in writing and tell me how to request an external review. Sincerely, [Signature] [Printed name]
Deadlines
| Step | Federal (ACA rule) | Kentucky | Indiana |
|---|---|---|---|
| Prior auth decision (MA, Medicaid/CHIP since 2026) | 72 hours urgent / 7 days standard | Same federal rule | Same federal rule |
| Internal appeal | Generally within 180 days of the denial | At least 180 days for most plans; check your denial letter (KY DOI UM Review Guide (2026)) | No Indiana filing window; federal rules give at least 180 days for most plans (29 CFR 2560.503-1); check your denial letter. Grievance decided within 20 business days, appeal within 45 days (IC 27-8-28-16; IC 27-8-28-17) |
| External review request | Generally within 4 months of the final internal denial | Within 4 months, through your insurer | Within 120 days, through your insurer |
See the Kentucky and Indiana guides for state details. Self-funded employer plans use the federal external review process.
When to escalate
- If the plan won’t tell you what is missing, ask for the specific reason in writing. Plans covered by CMS-0057-F must give a specific denial reason since 2026.
- If you are stuck between the plan and the provider, contact your state Department of Insurance: Kentucky (800) 595-6053 (KY DOI Consumer Protection) or Indiana (800) 622-4461 (IDOI Consumer Services).
- If the real issue is whether the care was needed, see denied as “not medically necessary”.
How to avoid this denial next time
Most prior authorization problems can be prevented with a few questions before your appointment:
- “Does this service need prior authorization under my plan?” Ask the plan and the provider’s office.
- “Who is requesting it, and when?” Get a name and a date.
- “Has it been approved?” Ask for the approval or reference number before your visit.
- “What exactly was approved?” Check the service, the number of visits, the body part or level, and the dates.
- “When does it expire?” Schedule the care inside the approved dates.
- “Am I switching plans soon?” If so, ask your new plan how it handles approvals from your old one. Many insurers promised a 90-day transition period starting in 2026 (CMS: industry pledge).
Keep the approval number with your appointment details. If a claim is later denied, that number is your best evidence.
Urgent and emergency care
Emergency care is handled differently: most health plans must cover emergency services without prior authorization (45 CFR 149.110). You should never delay emergency care to get approval. Call 911 in an emergency.
If the care is urgent but not an emergency, ask the provider to request an urgent prior authorization. Since 2026, Medicare Advantage and Medicaid plans must decide urgent requests within 72 hours.
Get specific help
Prior authorization is common for imaging, therapy and injections. See how to get these covered:
Frequently asked questions
What is prior authorization?
It is your plan’s approval before you get certain care. Without it, the plan may refuse to pay the claim.
Can I get approval after I already had the care?
Sometimes. This is called retro-authorization. Some plans allow it, especially for urgent care. Ask your provider’s office to request it.
How fast must my plan decide a prior authorization request?
Since January 1, 2026, Medicare Advantage and Medicaid plans must decide urgent requests within 72 hours and standard requests within 7 calendar days.
Do I have to pay if the provider forgot to get approval?
It depends on your plan and the provider’s contract. Ask the provider’s billing office in writing.
What does “services exceed authorization” mean?
The plan approved some care, but the claim was for more visits, a different service, or different dates than approved. Ask the provider to request an update.
Does switching insurance cancel my approval?
Many insurers promised a 90-day transition period for existing approvals when you switch plans during treatment, starting in 2026 (CMS: industry pledge). Ask your new plan.
Can I ask for an outside review?
If the denial is based on medical judgment, often yes. Purely administrative denials may not qualify (45 CFR 147.136(d)).
Does Aptiva get prior authorization for me?
For Aptiva patients, yes. Aptiva’s team handles prior authorization and appeals for our patients in Kentucky and Indiana.
Sources
- CMS — Interoperability and Prior Authorization Final Rule (CMS-0057-F)
- AJMC — Payers' AHIP prior authorization commitments (June 2025)
- 45 CFR 147.136 — Internal claims and appeals and external review processes (Cornell LII)
- Kentucky Department of Insurance — Independent External Review guide
- Indiana Code 27-8-29 — External review of grievances (Indiana General Assembly)
- CMS — CMS-0057-F fact sheet
- CMS — Industry pledge on prior authorization (June 23, 2025)
- CMS — WISeR Model
- 45 CFR 149.110 — Emergency services (eCFR)
- 29 CFR 2560.503-1 — Claims procedure (eCFR)
- KY DOI — UM Review Guide (rev. Jan 2026)
- KY DOI — Division of Consumer Protection
- KRS 304.17A-600 — Definitions
- Indiana Code Title 27 (IC 27-8-28, 27-8-29)
- Indiana DOI — Consumer Services