A prior authorization is a formal request your doctor’s office sends to your insurance company before you can receive a specific treatment, procedure, or medication. It’s typically a one- to two-page form (paper or electronic) that collects your personal details, your diagnosis, what’s being requested, and why it’s medically necessary. The insurer reviews this information and sends back an approval or denial, usually within seven calendar days for standard requests.
If you’ve never seen one, the process can feel like a black box. Here’s what’s actually on the form, what gets attached to it, and what the response looks like when it comes back.
What’s on the Form Itself
Whether it’s a paper form or an electronic submission, a prior authorization request collects the same core categories of information. A typical form includes these sections:
- Patient information: your full name, date of birth, gender, height, weight, home address, phone number, health plan ID number, and group number.
- Ordering provider information: the name, address, phone, and fax of the doctor requesting the service, along with their tax identification number and NPI (a unique 10-digit number assigned to every healthcare provider).
- Rendering provider or facility: if the service will be performed somewhere other than the ordering doctor’s office, this section identifies the surgeon, specialist, lab, or hospital that will actually deliver the care, including their own NPI.
- Diagnosis codes: standardized codes (called ICD codes) that translate your medical condition into a format insurers can process. Your doctor selects the code that matches your diagnosis.
- Procedure or service codes: another set of standardized codes (CPT or HCPCS codes) identifying exactly what’s being requested, whether that’s an MRI, a specific surgery, or a course of physical therapy.
- Prescription drug details: if the request is for a medication, this section captures the drug name, dosage, quantity, and the diagnosis it’s treating.
Many forms also include a free-text field where the provider can explain why the requested service is necessary. This is where the clinical argument lives: a brief summary of your condition, what treatments you’ve already tried, and why this particular service or drug is the right next step.
What Gets Attached as Supporting Evidence
The form alone rarely tells the whole story. Your doctor’s office typically attaches clinical documentation to strengthen the case. This can include recent lab results, imaging reports, office visit notes describing your symptoms, and records showing which treatments you’ve already tried that didn’t work. For medications, insurers often want proof of “step therapy,” meaning documentation that you tried a cheaper or preferred drug first and it was ineffective or caused side effects.
The specific documents required vary by insurer and by what’s being requested. A prior authorization for a knee replacement will need very different supporting records than one for a specialty medication. Some insurers publish their criteria online so providers know exactly what to include, but in practice, incomplete submissions are common and lead to delays or denials.
Paper Forms vs. Electronic Submissions
Traditionally, prior authorizations were submitted by fax. Many still are. A staff member in your doctor’s office fills out the form, gathers the supporting documents, and faxes everything to the insurer’s utilization review department. Some insurers also have their own web portals where staff can log in, fill out fields, and upload documents.
Electronic prior authorization is gradually replacing this process. Instead of faxing or logging into a separate portal, the request gets built directly inside the provider’s electronic health record system and transmitted digitally to the insurer. CMS is pushing this transition forward: starting January 1, 2027, certain health plans regulated by CMS must implement prior authorization APIs that let providers submit and track requests without using separate portals. The goal is real-time access to coverage requirements and standardized data fields that eliminate guesswork about what documentation is needed.
For now, though, the experience depends heavily on your insurer and your provider’s technology. Some offices still spend significant time on phone calls and fax machines.
What the Form Looks Like State by State
There’s no single national prior authorization form. Each insurer can design its own, which is one reason the process frustrates providers. However, a growing number of states now mandate standardized forms to reduce the chaos. California requires insurers to use a specific numbered form (Form No. 61-211). Florida requires a standard form approved by its Financial Services Commission for plans that don’t use electronic submission. Mississippi caps the form at two pages and requires it to be available electronically. New York, New Mexico, Oregon, Texas, and Vermont all have their own standardization requirements as well.
Vermont’s approach is particularly detailed, requiring that PA forms align with national electronic transaction standards and include a common set of data fields. Texas encourages adoption of national standards for prescription drug authorizations. Despite these efforts, if you see multiple specialists across different insurers, the forms and processes can still look noticeably different from one plan to another.
How Long the Response Takes
Under a 2024 CMS rule, impacted payers must send prior authorization decisions within 72 hours for urgent (expedited) requests and seven calendar days for standard, non-urgent requests. Urgent requests apply when a delay could seriously jeopardize your health.
In practice, timelines vary. Some electronic submissions get approved within hours. Complex requests that require additional documentation can stretch out longer, especially if the insurer comes back asking for more records, which effectively resets the clock. If your provider submits an incomplete request, the back-and-forth can add days or even weeks.
What an Approval Looks Like
An approval is straightforward. You (or more often your provider) receives a notification that the requested service or medication has been authorized. This includes a reference or authorization number, the approved service or drug, the dates during which the authorization is valid, and sometimes the number of approved visits or refills. Your provider’s office uses that authorization number when submitting the claim after the service is performed.
Approvals typically expire. If you don’t receive the service within the authorized window, often 60 to 90 days depending on the plan, you or your provider may need to start the process over.
What a Denial Looks Like
A denial letter is more detailed than an approval. Your insurer is required to tell you why the claim was denied, using specific language about which criteria weren’t met. The letter also must include information about your right to an internal appeal, your right to an external appeal if the internal review upholds the denial, and whether your state has a Consumer Assistance Program that can help you navigate the process.
Denial letters often cite the insurer’s medical policy language directly. For example, the letter might state that coverage is denied because the requested medication isn’t on the plan’s preferred drug list, or that the clinical documentation didn’t demonstrate failure of a first-line treatment. If you choose to appeal, your response letter should be addressed to the specific appeals analyst named in the denial and should directly address the stated reason for denial with additional evidence or argument.
Denials aren’t necessarily final. Many are overturned on appeal, particularly when the original submission was missing documentation that the provider can supply in a second round.