Research & Resources, OneAnother Health

Prior Authorization
Transparency Inventory

A structured inventory of public-facing utilization management and prior authorization performance data across major payers, PBMs, employer plans, BCBS independent plans, and state regulatory models. Updated as new data is published.

Prior authorization transparency data is fragmented, incomplete, and operationally opaque. CMS-0057-F created the first federal mandate for payer PA metric disclosure, but it excludes pharmacy, omits denial reasons, has no service-level breakdown requirement, and does not reach the roughly 60 percent of privately insured Americans covered under ERISA self-insured employer plans. No major PBM publishes pharmacy PA performance data voluntarily. This inventory documents what is publicly available, who is required to report, where the data falls short, and what the emerging state and federal regulatory landscape looks like through April 2026.

CMS-0057-F (CY2025 data, reported March 2026) · AHIP/BCBSA voluntary commitments · State mandates

● Last Updated:

Inventory Overview

This inventory tracks whether major U.S. payers publicly disclose prior authorization and utilization management performance metrics under CMS-0057-F and related transparency requirements. Coverage spans national commercial insurers, PBMs, BCBS plan licensees, ERISA self-insured employer plans, fully insured employer groups, and state Medicaid managed care programs.

National and Regional Commercial Payers

Among national commercial insurers, transparency disclosure quality varies significantly. UnitedHealth Group, CVS Health (Aetna), Cigna (The Cigna Group), and Humana are subject to CMS-0057-F annual reporting for Medicare Advantage and ACA marketplace lines of business. Commercial fully insured group disclosure is less consistent. Centene, Molina, and Elevance Health (Anthem) carry substantial Medicaid managed care exposure with state-specific reporting obligations that differ materially from commercial transparency standards.

The ERISA Self-Insured Employer Blind Spot

Approximately 60 to 65 percent of privately insured Americans are covered through ERISA self-insured employer arrangements. These plans are exempt from state insurance regulation and are not subject to most state-level PA disclosure mandates. CMS-0057-F reporting requirements apply only to plans under CMS oversight, creating a structural transparency blind spot covering the largest single segment of commercially insured lives in the United States. Administrative services only (ASO) arrangements between self-insured employers and commercial insurers mean the same carrier may operate both a regulated and an unregulated PA process across its book of business.

Pharmacy Prior Authorization Gaps

PBMs including CVS Caremark, Express Scripts (Evernorth), and OptumRx manage pharmacy prior authorization separately from medical PA under distinct contractual and regulatory frameworks. Pharmacy PA disclosure requirements are less developed than medical PA requirements. Step therapy, quantity limits, and non-medical switching are common pharmacy PA practices with limited public transparency. CMS-0057-F covers pharmacy benefits for CMS-regulated plans, but enforcement and reporting standards for pharmacy PA metrics lag those for medical PA.

State Regulatory and Enforcement Variability

State-level PA transparency frameworks range from proactive mandatory reporting with public dashboards (California, New York, Colorado) to minimal disclosure requirements beyond federal minimums. States with Gold Carding laws, step therapy reform legislation, independent review organization mandates, or clinical criteria disclosure requirements generally present stronger PA transparency environments for fully insured commercial plans. Medicaid managed care disclosure requirements are established through state contracts with managed care organizations and vary by state.

U.S. Privately Insured Population: PA Transparency by Coverage Segment
60%
10%
6%
8%
10%
6%
ERISA Self-Insured (60%) DARK ZONE
~158M Americans. No reporting pathway. ERISA preempts all state mandates.
Fully Insured , Active Enforcement (10%)
~26M Americans. Aggregated state data only. No group-specific PA data available.
Fully Insured , Variable Enforcement (6%) ENFORCEMENT GAP
~16M Americans. UM statutes exist; enforcement quality varies significantly by domicile.
Medicare Advantage (8%)
~21M Americans. CMS-0057-F compliant. Medical PA only, no pharmacy.
Medicaid MCO (10%)
~26M Americans. CMS-0057-F compliant. Medical PA only, no pharmacy.
FFS / Other (6%)
~16M Americans. Minimal or no PA transparency.
Source: KFF Employer Health Benefits Survey 2024 · CMS Enrollment Data 2025 · Estimates approximate. Fully insured enforcement split is illustrative.
Current data limitations: CMS-0057-F metrics are aggregated across all services, no service-level or drug-class breakdown required. Pharmacy/drug PA is excluded from the 2024 final rule; addressed only in proposed CMS-0062-P (published April 14, 2026, comments due June 15, 2026; compliance proposed October 2027). Beginning January 2026, impacted payers must provide specific denial reasons to providers on individual MA, Medicaid MCO, CHIP, and QHP PA decisions per CMS-0057-F. This is an operational provider-facing requirement; it does not require aggregate denial reasons in public reporting, which is what this inventory captures. Drug PA decisions and ERISA self-insured plans are excluded from both. Fully insured employer groups receive no group-specific PA data under any mechanism.
Column key:  Reported| Not reported
Connect