The definitive guide to the CMS final rule requiring Medicare Advantage organizations, Medicaid managed care plans, state Medicaid and CHIP agencies, and QHP issuers to implement FHIR-based APIs and streamline prior authorization processes.
CMS-0057-F establishes enforceable requirements for impacted payers to implement standards-based FHIR APIs, accelerate prior authorization decisions, and publicly report transparency metrics. It builds upon the 2020 CMS Interoperability and Patient Access final rule and represents the most significant federal push toward real-time health data exchange.
```Requires payers to give patients access to claims, clinical data, and prior authorization information through FHIR-based third-party apps of their choice.
Enables in-network providers to retrieve adjudicated claims, encounter data, USCDI clinical data, and prior authorization details for their attributed patients.
Mandates automated health data exchange when patients change payers, ensuring continuity of care with up to five years of historical data.
Streamlines the PA process by enabling providers to electronically determine requirements, query documentation needs, and submit requests from within their EHR.
The rule applies to a broad range of payer types across Medicare, Medicaid, CHIP, and the ACA marketplace. Stand-alone dental plans (SADPs) and FF-SHOP issuers are excluded.
CMS finalized a phased compliance schedule. Prior authorization process improvements take effect in 2026, while API development requirements are due in 2027.
Payers must provide specific denial reasons, respond within mandated timeframes (72 hours urgent / 7 calendar days standard), and publicly report prior authorization metrics. Patient Access API metrics reporting to CMS also begins.
All four FHIR-based APIs must be live: Patient Access API (with PA data), Provider Access API, Payer-to-Payer API, and Prior Authorization API. Applies to MA organizations and state Medicaid/CHIP FFS programs by this date; managed care plans and QHP issuers by rating/plan year beginning on or after this date.
New "Electronic Prior Authorization" measures under the MIPS Promoting Interoperability performance category and the Medicare Promoting Interoperability Program begin. Eligible clinicians, hospitals, and CAHs report a yes/no attestation.
CMS mandates specific HL7 FHIR standards codified at 45 CFR 170.215, aligned with the ONC HTI-1 final rule. Payers may voluntarily adopt newer versions ahead of regulatory updates.
| Standard | Specification | Citation |
|---|---|---|
| HL7 FHIR | FHIR Release 4.0.1 | 45 CFR 170.215(a)(1) |
| US Core IG | HL7 FHIR US Core IG STU 3.1.1 (expires Jan 1, 2026) | 45 CFR 170.215(b)(1)(i) |
| SMART App Launch | SMART Application Launch Framework IG 1.0.0 (expires Jan 1, 2026) | 45 CFR 170.215(c)(1) |
| Bulk Data Access | FHIR Bulk Data Access (Flat FHIR) v1.0.0: STU 1 | 45 CFR 170.215(d)(1) |
| OpenID Connect | OpenID Connect Core 1.0 (errata set 1) | 45 CFR 170.215(e)(1) |
| Content Standard | USCDI v1 (expires Jan 1, 2026) → USCDI v3 | 45 CFR 170.213 |
Cloud Health Office is a vendor-neutral, Kubernetes-native platform purpose-built for CMS-0057-F compliance — from FHIR APIs to prior authorization automation.
Explore Cloud Health Office →