| Provision | Healthcare Providers | Patients | Payers |
|---|---|---|---|
| Prior authorization (PA) records must be available via Patient Access API within 1 business day | No impact | Have access to prior authorization data and can check status | Need to submit aggregated, de-identified, annual metrics to CMS |
| New Provider Access API exposes USCDI and EOB data to new stakeholder | Can access administrative and clinical data for their attributed patients / members | Consent to what data is shared with whom and for how long | Must determine attribution methodology and framework for consent |
| Payers can exchange member data to understand populations transitioning across coverages | No impact | Can opt-in to share longitudinal data across payers | With patients' consent, can access clinical records automatically at the time of enrollment. |
| Simplified administration around the prior authorization process | Can implement PA process within the context of existing clinical workflows | Receive public reporting on PA approval timeliness across payers | Can track and report on key PA metrics & SLAs |
| Stricter decision data requirements and faster turnaround by payers on authorization requests | Receive authorization decisions and rejection details faster | Receive authorization sooner, reducing barriers to care | (Starting 1/1/2026) Must process and send decisions within 72 hours for cases seven days for non-urgent cases |