CMS Administrator Addresses Cyberattack Fallout and Prior Authorization Concerns”

The Centers for Medicare & Medicaid Services (CMS) is addressing two critical issues impacting the healthcare industry: the recent cyberattack on Change Healthcare and ongoing efforts to improve the prior authorization (PA) process.

The cyberattack, which occurred earlier this year, significantly disrupted electronic data interchange (EDI) transactions, impacting tasks like processing prior authorization requests. In response, CMS offered guidance and resources to help providers navigate the disruption and ensure patient care continuity. Prioritizing patient safety, the agency emphasized alternative communication methods, such as fax or telephone, for submitting urgent PA requests during the disruption. Collaboration with Change Healthcare, industry partners, and law enforcement focused on investigating the attack and restoring normal EDI operations swiftly. This incident highlighted the vulnerability of healthcare IT infrastructure, underscoring the need for robust cybersecurity measures and contingency plans across the healthcare system.

Meanwhile, CMS remains committed to streamlining the PA process while ensuring appropriate healthcare resource utilization. Standardization of criteria for PA requests across different payers is a key initiative. This would provide greater clarity for providers and reduce the burden of navigating multiple sets of guidelines. Exploring the feasibility of real-time decision-making tools for certain types of PA requests is another potential avenue for reducing delays. These tools would analyze requests based on pre-defined criteria and provide near-instantaneous approvals for services that meet established standards. Additionally, increased transparency in the PA process is a focus for CMS. This includes ensuring that providers have easy access to information on plan-specific PA requirements and receive clear feedback on denials.

CMS is actively engaging with health insurance payers to promote standardized criteria, explore real-time decision-making tools, and enhance transparency in their PA processes. Input from healthcare professionals on streamlining the PA process and identifying areas for improvement is also being sought. Collaboration with patient advocacy groups further ensures that patient voices are heard and the redesigned PA system prioritizes timely access to necessary care.

By working together, CMS and other stakeholders can create a more efficient and patient-centered PA system, while the focus on improving the PA process and strengthening cybersecurity measures can contribute to a more resilient and efficient healthcare system for all.