How to Track Prior Authorizations and Prevent Behavioral Health Claim Denials
Physicians complete an average of 40 prior authorizations per week, and the work takes about 13 hours of physician and staff time, according to the American Medical Association's 2025 prior authorization survey of 1,000 physicians, released May 13, 2026. Behavioral health adds a complication. Authorizations usually cover a block of visits, units, or days, and the block runs out in the middle of treatment. The lapse surfaces weeks later as a denial. This guide shows how to track prior authorizations so unit counts and expiration dates are visible before billing, and how to prevent behavioral health claim denials that start as authorization errors.
Why behavioral health authorizations lapse
Outpatient therapy is repeated care. One approval can cover dozens of dates of service, and each billed session draws it down. Higher levels of care, such as partial hospitalization, add concurrent review: the payer re-examines medical necessity during treatment and approves additional days in short increments.
Requirements also change from plan to plan. Blue Cross and Blue Shield of Texas requires prior authorization for all inpatient, residential treatment center, and partial hospitalization admissions, and its provider page also lists intensive outpatient programs, applied behavior analysis, outpatient electroconvulsive therapy, and repetitive transcranial magnetic stimulation. Psychological testing is reviewed in some cases, and the plan notifies the provider when it applies. Community Health Plan of Washington takes a different position in its 2026 benefit grid: no authorization for the first two hours of psychological testing in a member's lifetime, and a benefit exception request for any units after that. A list that is correct for one payer will be wrong for the next, so verify requirements per member and per service.
Practice surveys show the strain. Black Book Market Research's 2026 State of Behavioral Health IT report, based on 1,104 behavioral health professionals and published February 17, 2026, found that 61% reported rising denials over the prior year and 79% ranked prior authorization among their top three administrative burdens.
Denial codes that point to authorization problems
Four Claim Adjustment Reason Codes (CARCs) describe authorization failures on a remittance advice (835), and they are easy to confuse. The table separates them.
| Code | X12 description | Typical cause | First action |
|---|---|---|---|
| CO-197 | Precertification, authorization, notification or pre-treatment absent | No authorization existed for the date of service, or a notification deadline was missed | Ask about retroactive authorization; if refused, appeal with clinical notes |
| CO-15 | Authorization number missing, invalid, or does not apply to the billed services or provider | Number keyed incorrectly, expired, or issued to a different provider | Correct the number and resubmit |
| CO-198 | Precertification or authorization exceeded | Visits or units billed past the approved count or date span | Request added units or an extension, with justification |
| CO-284 | Authorization number may be valid but does not apply to the billed services | Approval covers a different code or level of care | Confirm the approved codes with the payer, then correct the claim or request an update |
The group code CO stands for contractual obligation, which generally places the balance on the practice rather than the patient. These denials therefore reduce revenue directly. Billing and coding students can practice by pulling a sample 835 and matching each of these codes to the log field that would have prevented it.
How to track prior authorizations: what the log should contain
Whether the log lives in practice management software or a spreadsheet, keep one record per authorization, split by CPT or HCPCS code when the approval is code-specific. Include:
- Patient, member ID, payer, and plan type (commercial, Medicare Advantage, Medicaid managed care)
- Authorization number exactly as issued, with the date and the representative's name or the portal confirmation number
- Approved codes, level of care, and rendering provider NPI
- Units or visits approved, units used, and units remaining
- Start date, end date, and the date the next review request is due
- Request date, decision date, and status (pending, approved, partially approved, denied)
- Appeal deadline, if denied
Units remaining and next review date carry most of the weight. Recalculate remaining units from your own billed sessions every week; the payer portal is a second check, not the source of truth. Then set the review reminder well before the end date. Under the Department of Labor's claims regulation (29 CFR 2560.503-1), an ERISA group health plan has 15 days to decide a non-urgent pre-service request, plus one 15-day extension for reasons beyond its control. A continued-stay request filed on the last day can lawfully be answered after the authorization has ended. Only an urgent request to extend ongoing treatment, filed at least 24 hours before expiration, gets a decision within 24 hours.
A workflow that catches problems before the claim is billed
Before the first visit
Check eligibility and the plan's requirements for the specific service, then record who confirmed it and when. Submit the request before the first billable session. A retroactive authorization is something a payer may grant, not something a practice can count on.
Plan changes mid-treatment need their own check. Under a voluntary pledge announced by HHS and CMS on June 23, 2025, participating insurers committed that, from January 1, 2026, a new plan would honor existing prior authorizations for benefit-equivalent in-network services for 90 days when a patient switches coverage. The pledge reaches participating plans only, so confirm with the new payer instead of assuming.
During treatment
Compare scheduled sessions with units remaining at least weekly. Choose a trigger that fits each payer's turnaround time, such as filing for more units when three visits remain, and enter it in the log as a date so nobody has to remember a rule.
Before the claim goes out
Match the claim to the log. The authorization number belongs in Item 23 of the CMS-1500 (the REF segment with qualifier G1 in the 837P file), and the codes, dates of service, and rendering provider must fall inside what was approved. Those are the fields behind CO-15, CO-198, and CO-284.
What the 2026 federal rules change for providers
Since January 1, 2026, the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) has required Medicare Advantage organizations, state Medicaid and CHIP fee-for-service programs, and Medicaid and CHIP managed care plans to decide expedited requests within 72 hours and standard requests within seven calendar days. Qualified health plan issuers on the federal exchanges are excluded from those timeframes, and none of the decision requirements apply to drug authorizations. Impacted payers must also give a specific reason for every denial, and they had to post prior authorization metrics, including approval and denial rates and average decision times, by March 31, 2026. The electronic prior authorization API requirements arrive January 1, 2027.
For a practice, the useful step is to log the date and time each request reaches the payer. A standard request still undecided on day seven is a compliance question for those payers, and the log is the evidence. Ask for the denial reason in writing as well.
The limits are real. Employer-sponsored commercial plans fall outside CMS-0057-F; their timelines come from the ERISA claims regulation (72 hours for urgent requests, 15 days for non-urgent pre-service requests) or from state law. The insurer pledge is voluntary, and only 33% of physicians in the AMA survey believe it will make a meaningful difference.
Prior authorization is also a parity issue. The Mental Health Parity and Addiction Equity Act treats it as a nonquantitative treatment limitation, so a plan cannot apply it to behavioral health more strictly than to medical and surgical benefits. On September 8, 2026, the Department of Labor's Employee Benefits Security Administration issued Field Assistance Bulletin 2026-03, naming prior authorization, concurrent review, and retrospective review among its three enforcement priorities. The bulletin offers a specific warning sign: medical and surgical authorizations handled through automated submissions while behavioral health authorizations require a manual exchange of documents. The 2024 parity rule's new provisions remain unenforced during litigation, and the departments told the court on March 30, 2026 that they intend to propose replacement regulations by December 31, 2026. A record of the calls, forms, and documents each authorization required is the kind of evidence a process-disparity complaint would need.
Tracking denials and appeals
Add denials to the same log. Record the denial date, the CARC and any remark code, the appeal deadline, and who owns the next step. ERISA group health plans must give claimants at least 180 days to appeal, according to the Department of Labor, but provider contracts can set their own windows, so check yours rather than assuming 180.
The AMA survey, as reported by Becker's ASC Review, found that 55% of physicians lack the staff time or resources to appeal denials and 67% doubt an appeal will succeed based on past experience. A queue with deadlines and named owners addresses the first problem directly.
Do not depend on the payer's notice reaching the patient. In a June 2026 audit report, the HHS Office of Inspector General reviewed 100 of the 1,102 prior authorization denials that Community Behavioral Health, a Philadelphia Medicaid behavioral health plan, issued in 2023. None met every federal and state requirement, and 17 notices had gone to incorrect addresses, including six for enrollees experiencing homelessness. A practice that logs its own copy of each denial and contacts the patient directly is not relying on the mail.
Where to start
Four CARCs cover the authorization failures described above, and each has a matching field in the log: units remaining for CO-198, the authorization number and approved codes for CO-15 and CO-284, and a request date ahead of the first session for CO-197. A practice that tracks prior authorizations at that level, reconciles units weekly, and sets review dates ahead of expiration closes the gaps that produce these behavioral health claim denials. Add one more habit: stamp every request with its received date, because 72 hours and seven days are now measurable standards for Medicare Advantage and Medicaid plans, and the 90-day continuity pledge only helps patients whose new plan signed it.