CMS-0057-F, finalized in January 2024, forces insurers (Medicare Advantage, Medicaid/CHIP, and certain ACA plans) to replace fax-based workflows with four mandatory FHIR APIs by January 2027.
The four APIs payers must build:
- Patient Access — members see their claims, clinical data, and prior auth status via third-party apps
- Provider Access — in-network doctors pull patient data directly from the payer
- Payer-to-Payer — up to 5 years of health history follows the patient when they switch plans
- Prior Authorization — fully electronic PA workflow with structured approvals, denials, and reasons
Key deadlines:
- 2026 — faster PA decision timelines (72 hours urgent / 7 days standard) and public reporting kick in
- 2027 — all four APIs must be live and operational
Who's affected: Payers own compliance, but the rule ripples out to providers, EHR vendors, clearinghouses, and patients who gain more control over their own data.
Under the hood: Everything runs on FHIR R4, SMART on FHIR (OAuth 2.0) for auth, Bulk Data exports for large transfers, and Da Vinci implementation guides for prior auth workflows (CRD, DTR, PAS).
Three years to rebuild how half the U.S. healthcare system shares data. The clock is running.
Top comments (0)