Medicare and Medicaid Programs; Patient Protection and Affordable Care Act; Interoperability Standards and Prior Authorization for Drugs for Medicare Advantage Organizations, Medicaid Managed Care Plans, State Medicaid Agencies, Children's Health Insurance Program (CHIP) Agencies and CHIP Managed Care Entities, and Issuers of Qualified Health Plans on the Federally-Facilitated Exchanges
Updated 5 hours ago ()
These proposals are intended to improve the electronic exchange of health care data and streamline processes related to prior authorization by increasing the interoperability of systems used across the health care industry. We are proposing new requirements for Medicare Advantage (MA) organizations, state Medicaid fee-for-service (FFS) programs, state Children's Health Insurance Program (CHIP) FFS programs, Medicaid managed care plans, CHIP managed care entities, and Qualified Health Plan (QHP) issuers on the Federally-facilitated Exchanges (FFEs), including issuers that offer small group market QHPs on the Federally-facilitated Small Business Health Options Program (FF- SHOP) Exchanges (hereinafter referred to as "small group market QHP issuers on the FF-SHOPs") (collectively "impacted payers"), to make available electronic prior authorization for drugs. We are also proposing to extend many existing interoperability requirements for the prior authorization of non-drug items and services to include prior authorizations for drugs to further reduce patient and provider burden. We are also proposing to require impacted payers to report their application programming interfaces (API) en
- Tags
- HIPAA, Proposed Rule, Health and Human Services Department, Centers for Medicare & Medicaid Services, cybersecurity, information blocking, breach notification
- Related exam domains
- CISSP 1: Security and Risk Management; CISSP 7: Security Operations; CISSP 8: Software Development Security; CISM 3: Information Security Program; CISM 4: Incident Management; CISA 5: Protection of Information Assets
- Source record id
- 2026-07205
- First seen by InfoSec Signals
- Sep 23, 2026
Source: Federal Register API, Office of the Federal Register, National Archives and Records Administration about this source more from it
Exam domain labels come from a keyword heuristic and are study hints, not an official mapping. The summary is the publisher's own text, shortened; the linked record is authoritative.