Medicare Advantage Prior Authorization for Behavioral Health: The Rules Plans Must Follow
What Medicare Advantage plans are required to do when they review behavioral health services — coverage-criteria limits, utilization-management committee rules, 2026 transparency submissions — and how to use each requirement in requests and appeals.
On this page: Direct answer
Direct answer
Medicare Advantage prior authorization behavioral health: what operators need to know
What Medicare Advantage plans are required to do when they review behavioral health services — coverage-criteria limits, utilization-management committee rules, 2026 transparency submissions — and how to use each requirement in requests and appeals. MA plans must follow traditional Medicare coverage criteria where they exist; internal criteria only fill genuine gaps.
Medicare Advantage prior authorization is not unconstrained. Federal rules require MA plans to cover the same basic benefits as traditional Medicare and to follow Medicare coverage criteria — national and local coverage determinations and statutory rules — where they exist. Where Medicare criteria are absent or not fully established, a plan may apply internal coverage criteria, but those criteria must be based on current evidence and made publicly accessible. Each MA organization must also operate a utilization-management committee that reviews its policies annually, with clinical-specialty representation that includes behavioral health.
Oversight is tightening in 2026: MA organizations must submit information about the internal coverage criteria they use, and CMS has described plans to review selected services' criteria annually. GAO, reviewing nine MA organizations, found that nearly all required prior authorization for behavioral health services — particularly inpatient care — and most applied internal coverage criteria to those decisions; it recommended CMS target behavioral health in its oversight. For provider teams, each obligation is usable: a criteria basis you can demand, a public document you can read before you write the request, and an oversight trail you can cite. Published analyses also show most appealed MA denials are overturned — the leverage is real.
Key takeaways
The short version
- MA plans must follow traditional Medicare coverage criteria where they exist; internal criteria only fill genuine gaps.
- Internal coverage criteria must be evidence-based and publicly accessible — find and file the document before writing the request.
- A utilization-management committee with behavioral health representation must review plan policies annually.
- 2026 brings criteria transparency: plan submissions to CMS and announced annual criteria reviews.
- Upheld MA pre-service denials are automatically forwarded to an independent review entity — build the record for that reviewer.
1. The rulebook MA plans operate under
| Obligation | What it requires | How a provider team uses it |
|---|---|---|
| Follow Medicare coverage criteria | Apply NCDs, LCDs, and statutory coverage rules where they exist | Check Medicare coverage documents first; cite them when a plan's decision conflicts |
| Internal criteria limits | Internal coverage criteria only where Medicare criteria are absent or not fully established; evidence-based and publicly accessible | Locate the published criteria, verify accessibility, and write requests to the named elements |
| UM committee | Annual review of utilization-management policies with clinical-specialty representation including behavioral health | Reference the requirement when criteria appear outdated or misapplied to behavioral health |
| Decision timeframes | Expedited and standard windows for organization determinations under current CMS rules | Calendar the clocks; late decisions are escalation facts |
| Appeal structure | Plan reconsideration, with upheld pre-service denials auto-forwarded to an independent review entity | Build each request as the record the independent reviewer will eventually read |
2. What GAO found about behavioral health review
GAO's review of nine MA organizations found that eight required prior authorization for behavioral health services — concentrated in inpatient and other specialized levels of care — and seven reported applying internal coverage criteria to inpatient behavioral health decisions. GAO also found that CMS's audit and oversight work had not specifically targeted behavioral health requests, and recommended that its planned criteria reviews do so.
The operational reading: for behavioral health, the internal-criteria pathway is not the exception but the norm, because Medicare coverage documents leave genuine gaps for levels of care such as residential treatment. That makes the transparency requirements — public accessibility and evidence basis — the provider team's primary tools, not fine print.
3. Find and file the plan's criteria before you write the request
- 01
Check Medicare first
Search the Medicare Coverage Database for NCDs and LCDs relevant to the service. Where Medicare criteria exist, they — not plan-internal rules — govern the MA decision.
- 02
Locate the plan's internal criteria
Where Medicare is silent, find the plan's published internal coverage criteria for the service. Save the document, its URL, and its version date into your payer-criteria library.
- 03
Note gaps in accessibility
If the criteria cannot be found publicly, document the search. An inaccessible internal criterion is itself an escalation fact under the transparency requirement.
- 04
Write to the named elements
Structure the request element-by-element against the criteria that actually govern — Medicare document or published internal criteria — with record evidence per element.
- 05
Reuse at appeal
A denial citing criteria the plan was not entitled to apply, criteria that are not public, or elements your submission met is an appeal built from your own criteria file.
4. Run MA appeals to the independent reviewer
- Track the organization-determination clock from complete submission; use expedited pathways when clinical urgency supports them
- On denial, request the specific criteria applied and the reviewer's specialty — and compare against your criteria file before drafting
- File plan reconsideration on time with the element-mapped record; upheld pre-service denials are automatically forwarded to the independent review entity, so write for that second reader from the start
- Preserve continuity protections: current CMS rules constrain mid-course disruption of authorized treatment — raise them when an active authorization is cut short
- Tag outcomes by plan and service so overturn patterns are countable — the aggregate belongs in plan meetings and, where warranted, CMS complaints
5. Watch the 2026 oversight signals
- MA organizations' utilization-management data and internal-coverage-criteria submissions to CMS began coming due in 2026 — public reporting and review findings will follow
- CMS has described annual reviews of selected services' internal criteria; whether behavioral health services are selected is worth tracking given GAO's recommendation
- Plan-level denial and overturn data published through CMS programs gives your payer meetings national context for your own tagged outcomes
- None of this replaces per-case work: oversight signals strengthen escalations, but each authorization and appeal still runs on its own clock and record
Common questions
Answers before you build.
Can a Medicare Advantage plan use its own criteria for behavioral health?+
Only within limits. MA plans must follow traditional Medicare coverage criteria where they exist. Where Medicare criteria are absent or not fully established — common for behavioral health levels of care — a plan may apply internal coverage criteria, but they must be based on current evidence and made publicly accessible.
How do I find an MA plan's internal coverage criteria?+
Plans are required to make internal coverage criteria publicly accessible; most publish them in medical-policy libraries on their provider sites. Save the document and version date. If you cannot locate published criteria for a service the plan reviews, document the search — the accessibility requirement is itself part of your escalation.
What happens after a Medicare Advantage appeal is denied?+
For pre-service denials, an MA plan that upholds its own denial on reconsideration must automatically forward the case to an independent review entity. Build the original request and the reconsideration as the record that independent reviewer will read — element-mapped evidence against the governing criteria.
Do behavioral health services face more MA prior authorization than other services?+
GAO found that nearly all reviewed MA organizations required prior authorization for behavioral health services, especially inpatient and specialized levels of care, and most used internal coverage criteria for those decisions. Analyses of CMS data also show that appealed denials are overturned at high rates, which supports appealing with a complete record.
Practical closeout
Use this operator checklist.
- MA plans must follow traditional Medicare coverage criteria where they exist; internal criteria only fill genuine gaps.
- Internal coverage criteria must be evidence-based and publicly accessible — find and file the document before writing the request.
- A utilization-management committee with behavioral health representation must review plan policies annually.
- 2026 brings criteria transparency: plan submissions to CMS and announced annual criteria reviews.
- Upheld MA pre-service denials are automatically forwarded to an independent review entity — build the record for that reviewer.
Continue through the cluster
Verified customer case studies are added only with customer permission and supporting evidence; none is implied by these operational examples.
Sources & methodology
Trace the operational claims.
Marsa Health Editorial reviewed the primary and research sources below on July 28, 2026. We translate them into workflow controls, distinguish proposals from final rules, and flag where plan, program, state, contract, or clinical requirements vary.
- 01Medicare Advantage: CMS Oversight of Prior Authorization Criteria Should Target Behavioral Health Services (GAO-25-107342) U.S. Government Accountability OfficeGAO findings on MA organizations' use of prior authorization and internal coverage criteria for behavioral health, and CMS's planned 2026 criteria reviews and data submissions.Accessed or rechecked July 28, 2026
- 0242 CFR 422.137: Medicare Advantage Utilization Management Committee Electronic Code of Federal RegulationsCurrent regulation requiring an MA utilization-management committee, annual review of policies, and clinical-specialty representation including behavioral health.Accessed or rechecked July 28, 2026
- 03Part C Utilization Management Annual Data Submission Centers for Medicare & Medicaid ServicesCurrent CMS information on the 2026 Medicare Advantage utilization-management data submission, including internal coverage criteria used for prior-authorization decisions.Accessed or rechecked July 28, 2026
- 04Medicare Advantage prior authorization determinations in 2024 KFFAnalysis of CMS data on Medicare Advantage prior authorization denials and appeals.Accessed or rechecked July 28, 2026
- 05Medicare Coverage Database Centers for Medicare & Medicaid ServicesOfficial search for current national and local Medicare coverage documents. Users must select the relevant jurisdiction, effective version, service, and linked billing article.Accessed or rechecked July 28, 2026
- 06CMS Interoperability and Prior Authorization Final Rule CMS-0057-F Centers for Medicare & Medicaid ServicesCurrent implementation dates, decision timeframes, denial-reason requirements, metrics, and API provisions for impacted payers.Accessed or rechecked July 28, 2026
- 07Electronic Prior Authorization Centers for Medicare & Medicaid ServicesCurrent CMS provider-readiness guidance for 2027 electronic prior authorization, EHR questions, FHIR testing, and workflow preparation.Accessed or rechecked July 28, 2026
- 08Minimum Necessary Requirement U.S. Department of Health and Human ServicesHIPAA guidance on limiting uses, disclosures, and requests for protected health information when the standard applies.Accessed or rechecked July 28, 2026
Organizational author. Editorial review covers source accuracy, search intent, workflow boundaries, and human-oversight requirements. This material is educational and does not provide clinical, legal, coding, or coverage advice.
No named clinical or legal expert reviewer is attributed to this version. Marsa Health does not invent reviewer credentials.
Read our editorial methodRevision history
What changed and when
July 28, 2026
Initial publication, source review, and operational editing.