Waiting on an approval is one of the hardest parts of starting ABA. For Florida families with Medicaid, a federal rule now puts a clock on one piece of that wait: the plan's decision on a prior authorization request. This guide explains what the rule requires, when the clock starts, what it does not cover, and how it compares with the rules for other kinds of coverage.
What is the federal 7-day prior authorization rule?
In January 2024, CMS, the federal agency that oversees Medicaid, issued the Interoperability and Prior Authorization Final Rule (CMS-0057-F). Its prior authorization requirements took effect on January 1, 2026. Under the rule, covered payers must:
- send prior authorization decisions within 72 hours for expedited (urgent) requests;
- send decisions within 7 calendar days for standard (non-urgent) requests;
- give a specific reason when they deny a prior authorization request; and
- publicly report certain prior authorization metrics on their websites each year (the first report was due March 31, 2026).
The covered payers include state Medicaid and CHIP fee-for-service programs, Medicaid managed care plans and CHIP managed care entities. The rule also requires new electronic prior authorization systems (a Prior Authorization API), which payers must implement beginning January 1, 2027. That part is mostly for providers and plans, but it is meant to make requests faster to send and track.
Does the rule apply to Florida Medicaid ABA?
Yes. Florida Medicaid requires prior authorization for all behavior analysis (BA) services. Since February 1, 2025, most children's BA requests go to their Statewide Medicaid Managed Care (SMMC) plan, and requests for children not in a plan go to Acentra, the state's quality improvement organization. Both are covered by CMS-0057-F because they are Medicaid managed care and fee-for-service.
Under the Florida Medicaid Behavior Analysis Services Coverage Policy (December 2024), authorization is needed before services start, and the behavior plan covers up to six months, so a new decision is needed at each renewal. The 7-day and 72-hour clocks apply to those renewal requests as well as the first one.
When does the clock start, and what does it not cover?
The rule sets how long the plan has to decide a request it has received. It does not cover the steps before the request is sent, which often take longer than the decision itself:
- getting a physician's order;
- getting a Comprehensive Diagnostic Evaluation (CDE), which can involve a wait for an evaluator;
- finding an in-network BA provider; and
- the provider's initial assessment, including the Vineland-3 and BASC-3 Parenting Relationship Questionnaire the policy requires, and writing the behavior plan.
Our guide to Medicaid ABA referral and CDE requirements covers those steps. A complete request is the fastest request: if the plan says something is missing, ask exactly what, and make sure the provider resubmits promptly.
Renewals deserve the same care. Because a Medicaid behavior plan covers up to six months, ask the provider when it plans to submit the renewal request and make sure the reassessment, progress data and parent participation data are ready well before the current authorization ends. A 7-day decision clock helps only if the request goes in early enough. Our guide to avoiding gaps at reauthorization has a sample timeline.
The rule also does not decide how many hours your child gets. It only sets how fast the plan must answer and requires a specific reason if the answer is no.
What counts as an expedited request?
Expedited review is for urgent situations, where waiting the standard time could seriously harm a child's health or functioning. The provider usually asks for expedited review and explains why. Each plan's member handbook describes its criteria. For ABA, most initial and renewal requests are standard, but a sudden rise in dangerous behavior, such as serious self-injury or aggression, is the kind of situation to raise with the lead analyst. If your child is in immediate danger, call 911 first.
How do the timelines compare across coverage types?
| Coverage | Standard request | Urgent request | Where the rule comes from |
|---|---|---|---|
| Florida Medicaid managed care plan (SMMC) | 7 calendar days | 72 hours | CMS-0057-F |
| Florida Medicaid fee-for-service (Acentra) | 7 calendar days | 72 hours | CMS-0057-F |
| Employer plan covered by ERISA (most private-sector job-based plans) | Up to 15 days, with one possible 15-day extension | No later than 72 hours | U.S. Department of Labor claims procedure rule (29 CFR 2560.503-1) |
| HealthCare.gov Marketplace plan | CMS-0057-F's decision clocks do not apply; the plan's own rules and federal Marketplace appeal rules do | CMS-0057-F fact sheet | |
| TRICARE | Not covered by CMS-0057-F; follow TRICARE and Humana Military (East Region) rules | TRICARE | |
The employer-plan row comes from the Department of Labor's guidance on its claims rule, which says pre-service claims must be decided within a reasonable time but not later than 15 days, and urgent care claims not later than 72 hours. Some plans set shorter timelines in their own documents. Our guide to ABA prior authorization in Florida covers commercial plans in more detail.
Did Florida pass its own prior authorization reform in 2026?
No. Florida's prior authorization statute, s. 627.42392, requires health insurers, Medicaid managed care plans and HMOs that do not have an electronic process to use a state-approved prior authorization form of no more than two pages. That law was last amended in 2017. Bills to overhaul it in the 2026 session (SB 1130 and HB 1015), and bills to create a dispute program for denied prior authorizations (SB 1198 and HB 1023), all died in committee on March 13, 2026. For Florida Medicaid, the federal rule is the main source of decision deadlines.
What can you do if the plan misses the deadline or denies the request?
- Write down dates. Ask the provider for the date the request was submitted and any reference number.
- Call the plan. Use the member services number on your child's Medicaid card. Ask for the status, the decision date and, if denied, the specific reason in writing.
- Ask for help. The Florida Medicaid Helpline is 1-877-254-1055. Managed care complaints can be filed online at flmedicaidmanagedcare.com/complaint.
- Appeal a denial or reduction. Plan appeals and Medicaid fair hearings have short deadlines printed on the notice. See Medicaid ABA appeals and fair hearings.
- Use EPSDT. For children under 21, medically necessary services beyond the policy's usual coverage may be approved. See EPSDT explained.
If you have other coverage
If a parent's employer plan or TRICARE also covers your child, the approval process and timing follow that plan's rules. Hope Center works with Blue Cross Blue Shield (Florida Blue), Aetna, Cigna (Evernorth), UMR, Personify Health and TRICARE East, with a sliding scale for your share after insurance. A child who has Medicaid cannot be seen self-pay at Hope Center (center policy), but your family can add employer or Marketplace insurance, which we accept. We handle benefits verification and the authorization request with your insurer, and services usually begin 3 to 5 business days after the insurer approves the plan, depending on how quickly paperwork comes back. Ask for a free benefits check on our insurance page or contact us.