wa-law.org > bill > 2025-26 > HB 1566 > Substitute Bill
The legislature finds that health insurance carriers, health plans, and managed care organizations are the decision makers for the type and level of care covered for an enrollee's health care benefits and are not responsible for determining or altering an enrollee's diagnosis or treatment plan. It is not always transparent who the decision maker is or how decisions are made in determining enrollee coverage for treatment, prescription drugs, or services. Artificial intelligence is being increasingly utilized by carriers, health plans, and managed care organizations to make or aid in decisions about medical necessity and coverage of provider-recommended treatment.
It is the intent of the legislature to increase transparency in the prior authorization process for health care coverage decisions and to ensure licensed physicians and licensed health professionals remain responsible for making determinations about coverage for treatment, prescription drugs, and services that are medically necessary. If artificial intelligence tools are used to aid in the decision-making process, standards must be put in place to ensure these tools are not used to make inappropriate determinations that could impact the health of an enrollee.
Each carrier offering a health plan issued or renewed on or after January 1, 2024, shall comply with the following standards related to prior authorization for health care services and prescription drugs:
The carrier shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through an electronic prior authorization process, as designated by each carrier:
For electronic standard prior authorization requests, the carrier shall make a decision and notify the provider or facility of the results of the decision within three calendar days, excluding holidays, of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the carrier to make a decision, the carrier shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
For electronic expedited prior authorization requests, the carrier shall make a decision and notify the provider or facility of the results of the decision within one calendar day of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the carrier to make a decision, the carrier shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
The carrier shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through a process other than an electronic prior authorization process:
For nonelectronic standard prior authorization requests, the carrier shall make a decision and notify the provider or facility of the results of the decision within five calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the carrier to make a decision, the carrier shall request any additional information from the provider or facility within five calendar days of submission of the nonelectronic prior authorization request.
For nonelectronic expedited prior authorization requests, the carrier shall make a decision and notify the provider or facility of the results of the decision within two calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the carrier to make a decision, the carrier shall request any additional information from the provider or facility within one calendar day of submission of the nonelectronic prior authorization request.
In any instance in which a carrier has determined that a provider or facility has not provided sufficient information for making a determination under (a) and (b) of this subsection, a carrier may establish a specific reasonable time frame for submission of the additional information. This time frame must be communicated to the provider and enrollee with a carrier's request for additional information.
The carrier's prior authorization requirements must be described in detail and written in easily understandable language. The carrier shall make its most current prior authorization requirements and restrictions, including the written clinical review criteria, available to providers and facilities in an electronic format upon request. The prior authorization requirements must be based on peer-reviewed clinical review criteria. The clinical review criteria must be evidence-based criteria and must accommodate new and emerging information related to the appropriateness of clinical criteria with respect to black and indigenous people, other people of color, gender, and underserved populations. The clinical review criteria must be evaluated and updated, if necessary, at least annually.
When denying a prior authorization determination, the carrier shall include the credentials, board certifications, and areas of specialty expertise and training of the provider who had clinical oversight over the determination in any notification sent to the health plan enrollee and provider requesting or referring the service.
[Empty]
Carriers maintain the ability to make adjustments to policies and procedures that impact the applicability of their prior authorization requirements. Except as provided in (b) of this subsection, beginning August 1, 2025, these adjustments can only be made quarterly and go into effect either January 1st, April 1st, July 1st, or October 1st of any given calendar year. Notification of policy changes must be provided to all in-network providers at least 45 days prior to the quarterly update and must be available to providers in a single location on the carrier's website. The notification must be provided independent of other policy changes or provider notification publications and be easily accessible in electronic provider and enrollee portals.
Adjustments to policies and procedures that impact the applicability of prior authorization requirements to reflect federal food and drug administration approvals, national comprehensive cancer network guidelines, United States preventive services task force guidelines, or state or national public health emergencies may be made at any time and shall be posted on the website referenced in (a) of this subsection. Notification of adjustments made under this subsection must be provided to all in-network providers as soon as possible.
[Empty]
Only a licensed physician or a licensed health professional working within their scope of practice may deny a prior authorization request based on medical necessity. The licensed physician or licensed health professional shall evaluate the specific clinical issues involved in the health care services requested by the requesting provider by reviewing and considering the requesting provider's recommendation, the enrollee's medical or other clinical history, as applicable, and individual clinical circumstances. An artificial intelligence tool shall not be the sole means used to deny, delay, or modify health care services. Algorithms may be used to process and approve prior authorization requests, but may not be used without human review to deny care based on a determination of medical necessity.
A carrier that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, shall ensure all of the following:
(A) An enrollee's medical or other clinical history, including demographic data; and
(B) Individual clinical circumstances as presented by the requesting provider;
ii. The artificial intelligence tool does not base its determination solely on a group data set;
iii. The artificial intelligence tool's criteria and guidelines comply with this chapter and applicable state and federal law;
iv. The use of the artificial intelligence tool does not discriminate, directly or indirectly, against an enrollee in violation of state or federal law;
v. The artificial intelligence tool is fairly and equitably applied, including in accordance with any applicable regulations and guidance issued by the federal department of health and human services;
vi. The policies and procedures for using the artificial intelligence tool are open to audit by the office of the insurance commissioner under chapter 48.37 RCW;
vii. The artificial intelligence tool's performance, use, and outcomes are periodically reviewed by the carrier to maximize accuracy and reliability; and
viii. Patient data is not used beyond its intended and stated purpose, consistent with chapter 70.02 RCW and the federal health insurance portability and accountability act of 1996, 42 U.S.C. Sec. 1320d et al., as applicable.
[Empty]
Each carrier shall build and maintain a prior authorization application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for health care services, identify prior authorization information and documentation requirements, and facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system. The application programming interface must support the exchange of prior authorization requests and determinations for health care services beginning January 1, 2025, and must:
Use health level 7 fast health care interoperability resources in accordance with standards and provisions defined in 45 C.F.R. Sec. 170.215 and 45 C.F.R. Sec. 156.22(3)(b);
Automate the process to determine whether a prior authorization is required for durable medical equipment or a health care service;
Allow providers to query the carrier's prior authorization documentation requirements;
Support an automated approach using nonproprietary open workflows to compile and exchange the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services;
Indicate that a prior authorization denial or authorization of a service less intensive than that included in the original request is an adverse benefit determination and is subject to the carrier's grievance and appeal process under RCW 48.43.535; and
Each carrier shall establish and maintain an interoperable electronic process or application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for a covered prescription drug. The application programming interface must support the exchange of prior authorization requests and determinations for prescription drugs, including information on covered alternative prescription drugs, beginning January 1, 2027, and must:
Allow providers to identify prior authorization information and documentation requirements;
Facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system, and may include the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services; and
Indicate that a prior authorization denial or authorization of a drug other than the one included in the original prior authorization request is an adverse benefit determination and is subject to the carrier's grievance and appeal process under RCW 48.43.535.
If federal rules related to standards for using an application programming interface to communicate prior authorization status to providers are not finalized by the federal centers for medicare and medicaid services by September 13, 2023, the requirements of (a) of this subsection may not be enforced until January 1, 2026.
[Empty]
(A) The reasons that the carrier cannot reasonably satisfy the requirements;
(B) The impact of noncompliance upon providers and enrollees;
(C) The current or proposed means of providing health information to the providers; and
(D) A timeline and implementation plan to achieve compliance with the requirements.
ii. The commissioner may grant a one-year delay in enforcement of the requirements of (a) of this subsection (4) if the commissioner determines that the carrier has made a good faith effort to comply with the requirements.
iii. This subsection (4)(d) shall not apply if the delay in enforcement in (c) of this subsection takes effect because the federal centers for medicare and medicaid services did not finalize the applicable regulations by September 13, 2023.
e. By September 13, 2023, and at least every six months thereafter until September 13, 2026, the commissioner shall provide an update to the health care policy committees of the legislature on the development of rules and implementation guidance from the federal centers for medicare and medicaid services regarding the standards for development of application programming interfaces and interoperable electronic processes related to prior authorization functions. The updates should include recommendations, as appropriate, on whether the status of the federal rule development aligns with the provisions of chapter 382, Laws of 2023. The commissioner also shall report on any actions by the federal centers for medicare and medicaid services to exercise enforcement discretion related to the implementation and maintenance of an application programming interface for prior authorization functions. The commissioner shall consult with the health care authority, carriers, providers, and consumers on the development of these updates and any recommendations.
Nothing in this section applies to prior authorization determinations made pursuant to RCW 48.43.761.
This section applies to prior authorization functions carried out by health care benefit managers, as defined in RCW 48.200.020, under direct or indirect contract with a carrier.
The commissioner may adopt any rules necessary to implement this section.
For the purposes of this section:
"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, such as computer vision, speech or natural language processing, and content generation. "Artificial intelligence" includes generative artificial intelligence.
"Expedited prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where:
(A) Could seriously jeopardize the life or health of the enrollee;
(B) Could seriously jeopardize the enrollee's ability to regain maximum function; or
(C) In the opinion of a provider or facility with knowledge of the enrollee's medical condition, would subject the enrollee to severe pain that cannot be adequately managed without the health care service or prescription drug that is the subject of the request; or
ii. The enrollee is undergoing a current course of treatment using a nonformulary drug.
c. "Generative artificial intelligence" means an artificial intelligence system that generates novel data or content based on a foundation model.
d. "Machine learning" means the process by which artificial intelligence is developed using data and algorithms to draw inferences therefrom to automatically adapt or improve its accuracy without explicit programming.
e. "Standard prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where the request is made in advance of the enrollee obtaining a health care service or prescription drug that is not required to be expedited.
Beginning January 1, 2024, the authority shall require each managed care organization to comply with the following standards related to prior authorization for health care services and prescription drugs:
The managed care organization shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through an electronic prior authorization process, as designated by each managed care organization:
For electronic standard prior authorization requests, the managed care organization shall make a decision and notify the provider or facility of the results of the decision within three calendar days, excluding holidays, of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the managed care organization to make a decision, the managed care organization shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
For electronic expedited prior authorization requests, the managed care organization shall make a decision and notify the provider or facility of the results of the decision within one calendar day of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the managed care organization to make a decision, the managed care organization shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
The managed care organization shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through a process other than an electronic prior authorization process described in subsection (5) of this section:
For nonelectronic standard prior authorization requests, the managed care organization shall make a decision and notify the provider or facility of the results of the decision within five calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the managed care organization to make a decision, the managed care organization shall request any additional information from the provider or facility within five calendar days of submission of the nonelectronic prior authorization request.
For nonelectronic expedited prior authorization requests, the managed care organization shall make a decision and notify the provider or facility of the results of the decision within two calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the managed care organization to make a decision, the managed care organization shall request any additional information from the provider or facility within one calendar day of submission of the nonelectronic prior authorization request.
In any instance in which a managed care organization has determined that a provider or facility has not provided sufficient information for making a determination under (a) and (b) of this subsection, a managed care organization may establish a specific reasonable time frame for submission of the additional information. This time frame must be communicated to the provider and enrollee with a managed care organization's request for additional information.
The prior authorization requirements of the managed care organization must be described in detail and written in easily understandable language. The managed care organization shall make its most current prior authorization requirements and restrictions, including the written clinical review criteria, available to providers and facilities in an electronic format upon request. The prior authorization requirements must be based on peer-reviewed clinical review criteria. The clinical review criteria must be evidence-based criteria and must accommodate new and emerging information related to the appropriateness of clinical criteria with respect to black and indigenous people, other people of color, gender, and underserved populations. The clinical review criteria must be evaluated and updated, if necessary, at least annually.
When denying a prior authorization determination, the managed care organization shall include the credentials, board certifications, and areas of specialty expertise and training of the provider who had clinical oversight over the determination in any notification sent to the managed care enrollee and provider requesting or referring the service.
[Empty]
Managed care organizations maintain the ability to make adjustments to policies and procedures that impact the applicability of their prior authorization requirements. Except as provided in (b) of this subsection, beginning August 1, 2025, these adjustments can only be made quarterly and go into effect either January 1st, April 1st, July 1st, or October 1st of any given calendar year. Notification of policy changes must be provided to all in-network providers at least 45 days prior to the quarterly update and must be available to providers in a single location on the managed care organization's website. The notification must be provided independent of other policy changes or provider notification publications and be easily accessible in electronic provider and enrollee portals.
Adjustments to policies and procedures that impact the applicability of prior authorization requirements to reflect federal food and drug administration approvals, national comprehensive cancer network guidelines, United States preventive services task force guidelines, or state or national public health emergencies may be made at any time and shall be posted on the website referenced in (a) of this subsection. Notification of adjustments made under this subsection must be provided to all in-network providers as soon as possible.
[Empty]
Only a licensed physician or a licensed health professional working within their scope of practice may deny a prior authorization request based on medical necessity. The licensed physician or licensed health professional shall evaluate the specific clinical issues involved in the health care services requested by the requesting provider by reviewing and considering the requesting provider's recommendation, the enrollee's medical or other clinical history, as applicable, and individual clinical circumstances. An artificial intelligence tool shall not be the sole means used to deny, delay, or modify health care services. Algorithms may be used to process and approve prior authorization requests, but may not be used without human review to deny care based on a determination of medical necessity.
A managed care organization that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, shall ensure all of the following:
(A) An enrollee's medical or other clinical history, including demographic data; and
(B) Individual clinical circumstances as presented by the requesting provider;
ii. The artificial intelligence tool does not base its determination solely on a group data set;
iii. The artificial intelligence tool's criteria and guidelines comply with this chapter and applicable state and federal law;
iv. The use of the artificial intelligence tool does not discriminate, directly or indirectly, against an enrollee in violation of state or federal law;
v. The artificial intelligence tool is fairly and equitably applied, including in accordance with any applicable regulations and guidance issued by the federal department of health and human services;
vi. The policies and procedures for using the artificial intelligence tool are open to audit by the authority consistent with RCW 74.09.200;
vii. The artificial intelligence tool's performance, use, and outcomes are periodically reviewed by the managed care organization to maximize accuracy and reliability; and
viii. Patient data is not used beyond its intended and stated purpose, consistent with chapter 70.02 RCW and the federal health insurance portability and accountability act of 1996, 42 U.S.C. Sec. 1320d et al., as applicable.
By July 1, 2027, the authority shall publish a list of treatments, prescription drugs, equipment, and services, along with their applicable billing codes,that specifies under which circumstances prior authorization is required, prohibited, or has other uniform application across the medical assistance program under this chapter. The authority must consider applicable state and federal laws when deciding which services are not subject to prior authorization. The authority shall focus on existing prior authorization requirements and treatments, prescription drugs, equipment, and services that are treated inconsistently in the medical assistance program. The authority shall update the list at least annually and provide notice and an opportunity for public comment prior to finalizing the list. Nothing in this subsection alters existing obligations of the authority and managed care organizations to ensure enrollee access to treatments, prescription drugs, equipment, and services that are not included in the list. Nothing in this section prohibits the authority and managed care organizations from applying other utilization management strategies, consistent with state and federal law, for services for which prior authorization is not required.
[Empty]
Each managed care organization shall build and maintain a prior authorization application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for health care services, identify prior authorization information and documentation requirements, and facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system. The application programming interface must support the exchange of prior authorization requests and determinations for health care services beginning January 1, 2025, and must:
Use health level 7 fast health care interoperability resources in accordance with standards and provisions defined in 45 C.F.R. Sec. 170.215 and 45 C.F.R. Sec. 156.22(3)(b);
Automate the process to determine whether a prior authorization is required for durable medical equipment or a health care service;
Allow providers to query the managed care organization's prior authorization documentation requirements;
Support an automated approach using nonproprietary open workflows to compile and exchange the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services; and
Indicate that a prior authorization denial or authorization of a service less intensive than that included in the original request is an adverse benefit determination and is subject to the managed care organization's grievance and appeal process under RCW 48.43.535.
Each managed care organization shall establish and maintain an interoperable electronic process or application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for a covered prescription drug. The application programming interface must support the exchange of prior authorization requests and determinations for prescription drugs, including information on covered alternative prescription drugs, beginning January 1, 2027, and must:
Allow providers to identify prior authorization information and documentation requirements;
Facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system, and may include the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services;
Indicate that a prior authorization denial or authorization of a drug other than the one included in the original prior authorization request is an adverse benefit determination and is subject to the managed care organization's grievance and appeal process under RCW 48.43.535; and
Include the credentials, board certifications, and areas of specialty expertise and training of the provider who had clinical oversight over the determination in any notification sent to the managed care enrollee and provider requesting or referring the service.
If federal rules related to standards for using an application programming interface to communicate prior authorization status to providers are not finalized by September 13, 2023, the requirements of (a) of this subsection may not be enforced until January 1, 2026.
[Empty]
(A) The reasons that the managed care organization cannot reasonably satisfy the requirements;
(B) The impact of noncompliance upon providers and enrollees;
(C) The current or proposed means of providing health information to the providers; and
(D) A timeline and implementation plan to achieve compliance with the requirements.
ii. The authority may grant a one-year delay in enforcement of the requirements of (a) of this subsection (5) if the authority determines that the managed care organization has made a good faith effort to comply with the requirements.
iii. This subsection (5)(d) shall not apply if the delay in enforcement in (c) of this subsection takes effect because the federal centers for medicare and medicaid services did not finalize the applicable regulations by September 13, 2023.
This section applies to prior authorization functions carried out by health care benefit managers, as defined in RCW 48.200.020, under direct or indirect contract with a carrier.
The authority may adopt any rules necessary to implement this section.
Nothing in this section applies to prior authorization determinations made pursuant to RCW 71.24.618 or 74.09.490.
For the purposes of this section:
"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, such as computer vision, speech or natural language processing, and content generation. "Artificial intelligence" includes generative artificial intelligence.
"Expedited prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where:
(A) Could seriously jeopardize the life or health of the enrollee;
(B) Could seriously jeopardize the enrollee's ability to regain maximum function; or
(C) In the opinion of a provider or facility with knowledge of the enrollee's medical condition, would subject the enrollee to severe pain that cannot be adequately managed without the health care service or prescription drug that is the subject of the request; or
ii. The enrollee is undergoing a current course of treatment using a nonformulary drug.
c. "Generative artificial intelligence" means an artificial intelligence system that generates novel data or content based on a foundation model.
d. "Machine learning" means the process by which artificial intelligence is developed using data and algorithms to draw inferences therefrom to automatically adapt or improve its accuracy without explicit programming.
e. "Standard prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where the request is made in advance of the enrollee obtaining a health care service or prescription drug that is not required to be expedited.
A health plan offered to public employees, retirees, and their covered dependents under this chapter issued or renewed on or after January 1, 2024, shall comply with the following standards related to prior authorization for health care services and prescription drugs:
The health plan shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through an electronic prior authorization process:
For electronic standard prior authorization requests, the health plan shall make a decision and notify the provider or facility of the results of the decision within three calendar days, excluding holidays, of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the health plan to make a decision, the health plan shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
For electronic expedited prior authorization requests, the health plan shall make a decision and notify the provider or facility of the results of the decision within one calendar day of submission of an electronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the health plan to make a decision, the health plan shall request any additional information from the provider or facility within one calendar day of submission of the electronic prior authorization request.
The health plan shall meet the following time frames for prior authorization determinations and notifications to a participating provider or facility that submits the prior authorization request through a process other than an electronic prior authorization process described in subsection (4) of this section:
For nonelectronic standard prior authorization requests, the health plan shall make a decision and notify the provider or facility of the results of the decision within five calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the health plan to make a decision, the health plan shall request any additional information from the provider or facility within five calendar days of submission of the nonelectronic prior authorization request.
For nonelectronic expedited prior authorization requests, the health plan shall make a decision and notify the provider or facility of the results of the decision within two calendar days of submission of a nonelectronic prior authorization request by the provider or facility that contains the necessary information to make a determination. If insufficient information has been provided to the health plan to make a decision, the health plan shall request any additional information from the provider or facility within one calendar day of submission of the nonelectronic prior authorization request.
In any instance in which the health plan has determined that a provider or facility has not provided sufficient information for making a determination under (a) and (b) of this subsection, the health plan may establish a specific reasonable time frame for submission of the additional information. This time frame must be communicated to the provider and enrollee with the health plan's request for additional information.
The prior authorization requirements of the health plan must be described in detail and written in easily understandable language. The health plan shall make its most current prior authorization requirements and restrictions, including the written clinical review criteria, available to providers and facilities in an electronic format upon request. The prior authorization requirements must be based on peer-reviewed clinical review criteria. The clinical review criteria must be evidence-based criteria and must accommodate new and emerging information related to the appropriateness of clinical criteria with respect to black and indigenous people, other people of color, gender, and underserved populations. The clinical review criteria must be evaluated and updated, if necessary, at least annually.
When denying a prior authorization determination, the health plan shall include the credentials, board certifications, and areas of specialty expertise and training of the provider who had clinical oversight over the determination in any notification sent to the health plan enrollee and provider requesting or referring the service.
[Empty]
Health plans maintain the ability to make adjustments to policies and procedures that impact the applicability of their prior authorization requirements. Except as provided in (b) of this subsection, beginning August 1, 2025, these adjustments can only be made quarterly and go into effect either January 1st, April 1st, July 1st, or October 1st of any given calendar year. Notification of policy changes must be provided to all in-network providers at least 45 days prior to the quarterly update and must be available to providers in a single location on the health plan's website. The notification must be provided independent of other policy changes or provider notification publications and be easily accessible in electronic provider and enrollee portals.
Adjustments to policies and procedures that impact the applicability of prior authorization requirements to reflect federal food and drug administration approvals, national comprehensive cancer network guidelines, United States preventive services task force guidelines, or state or national public health emergencies may be made at any time and shall be posted on the website referenced in (a) of this subsection. Notification of adjustments made under this subsection must be provided to all in-network providers as soon as possible.
[Empty]
Only a licensed physician or a licensed health professional working within their scope of practice may deny a prior authorization request based on medical necessity. The licensed physician or licensed health professional shallevaluate the specific clinical issues involved in the health care services requested by the requesting provider by reviewing and considering the requesting provider's recommendation, the enrollee's medical or other clinical history, as applicable, and individual clinical circumstances. An artificial intelligence tool shall not be the sole means used to deny, delay, or modify health care services. Algorithms may be used to process and approve prior authorization requests, but may not be used without human review to deny care based on a determination of medical necessity.
A health plan that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence tool for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, shall ensure all of the following:
(A) An enrollee's medical or other clinical history, including demographic data; and
(B) Individual clinical circumstances as presented by the requesting provider;
ii. The artificial intelligence tool does not base its determination solely on a group data set;
iii. The artificial intelligence tool's criteria and guidelines comply with this chapter and applicable state and federal law;
iv. The use of the artificial intelligence tool does not discriminate, directly or indirectly, against an enrollee in violation of state or federal law;
v. The artificial intelligence tool is fairly and equitably applied, including in accordance with any applicable regulations and guidance issued by the federal department of health and human services;
vi. The policies and procedures for using the artificial intelligence tool is open to audit by the office of the insurance commissioner;
vii. The artificial intelligence tool's performance, use, and outcomes are periodically reviewed by the health plan to maximize accuracy and reliability; and
viii. Patient data is not used beyond its intended and stated purpose, consistent with chapter 70.02 RCW and the federal health insurance portability and accountability act of 1996, U.S.C. Sec. 1320d et al., as applicable.
[Empty]
Each health plan offered to public employees, retirees, and their covered dependents under this chapter shall build and maintain a prior authorization application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for health care services, identify prior authorization information and documentation requirements, and facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system. The application programming interface must support the exchange of prior authorization requests and determinations for health care services beginning January 1, 2025, and must:
Use health level 7 fast health care interoperability resources in accordance with standards and provisions defined in 45 C.F.R. Sec. 170.215 and 45 C.F.R. Sec. 156.22(3)(b);
Automate the process to determine whether a prior authorization is required for durable medical equipment or a health care service;
Allow providers to query the health plan's prior authorization documentation requirements;
Support an automated approach using nonproprietary open workflows to compile and exchange the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services;
Indicate that a prior authorization denial or authorization of a service less intensive than that included in the original request is an adverse benefit determination and is subject to the health plan's grievance and appeal process under RCW 48.43.535; and
Each health plan offered to public employees, retirees, and their covered dependents under this chapter shall establish and maintain an interoperable electronic process or application programming interface that automates the process for in-network providers to determine whether a prior authorization is required for a covered prescription drug. The application programming interface must support the exchange of prior authorization requests and determinations for prescription drugs, including information on covered alternative prescription drugs, beginning January 1, 2027, and must:
Allow providers to identify prior authorization information and documentation requirements;
Facilitate the exchange of prior authorization requests and determinations from its electronic health records or practice management system, and may include the necessary data elements to populate the prior authorization requirements that are compliant with the federal health insurance portability and accountability act of 1996 or have an exception from the federal centers for medicare and medicaid services; and
Indicate that a prior authorization denial or authorization of a drug other than the one included in the original prior authorization request is an adverse benefit determination and is subject to the health plan's grievance and appeal process under RCW 48.43.535.
If federal rules related to standards for using an application programming interface to communicate prior authorization status to providers are not finalized by the federal centers for medicare and medicaid services by September 13, 2023, the requirements of (a) of this subsection may not be enforced until January 1, 2026.
[Empty]
(A) The reasons that the health plan cannot reasonably satisfy the requirements;
(B) The impact of noncompliance upon providers and enrollees;
(C) The current or proposed means of providing health information to the providers; and
(D) A timeline and implementation plan to achieve compliance with the requirements.
ii. The authority may grant a one-year delay in enforcement of the requirements of (a) of this subsection (4) if the authority determines that the health plan has made a good faith effort to comply with the requirements.
iii. This subsection (4)(d) shall not apply if the delay in enforcement in (c) of this subsection takes effect because the federal centers for medicare and medicaid services did not finalize the applicable regulations by September 13, 2023.
Nothing in this section applies to prior authorization determinations made pursuant to RCW 41.05.526.
This section applies to prior authorization functions carried out by health care benefit managers, as defined in RCW 48.200.020, under direct or indirect contract with a carrier.
The commissioner may adopt any rules necessary to implement this section.
For the purposes of this section:
"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, such as computer vision, speech or natural language processing, and content generation. "Artificial intelligence" includes generative artificial intelligence.
"Expedited prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where:
(A) Could seriously jeopardize the life or health of the enrollee;
(B) Could seriously jeopardize the enrollee's ability to regain maximum function; or
(C) In the opinion of a provider or facility with knowledge of the enrollee's medical condition, would subject the enrollee to severe pain that cannot be adequately managed without the health care service or prescription drug that is the subject of the request; or
ii. The enrollee is undergoing a current course of treatment using a nonformulary drug.
c. "Generative artificial intelligence" means an artificial intelligence system that generates novel data or content based on a foundation model.
d. "Machine learning" means the process by which artificial intelligence is developed using data and algorithms to draw inferences therefrom to automatically adapt or improve its accuracy without explicit programming.
e. "Standard prior authorization request" means a request by a provider or facility for approval of a health care service or prescription drug where the request is made in advance of the enrollee obtaining a health care service that is not required to be expedited.
A health carrier that offers a health plan shall not retrospectively deny coverage or retrospectively modify to a service less intensive than that included in the original request for emergency and nonemergency care that had prior authorization, including for medical necessity, under the plan's written policies at the time the care was rendered, unless:
The prior authorization was based upon a material misrepresentation by the provider, facility, or covered person; or
The underlying health plan coverage is lawfully rescinded, canceled, or terminated retrospectively through the date of service.
Retrospective denials of services with prior authorization or retrospective modification to less intensive services due to a change in the carrier's determination of medical necessity are prohibited, shall not be considered adverse benefit determinations, and will not be required to follow the standard appeals processes in RCW 48.43.530 or any carrier policies related to their own grievance and appeals process. If an enrollee or the provider requesting the original authorization demonstrates the authorization was valid per the plan's written policies, then the carrier will deem the authorization approved and payable. Interest will be assessed on the associated claim submitted by the provider at the rate of one percent per month, retroactive to the original date of the authorization request.
The commissioner shall adopt, in rule, standards for this section after considering relevant standards adopted by national managed care accreditation organizations and state agencies that purchase managed health care services.
By January 1, 2026, and annually thereafter, for individual and group health plans issued by a carrier that has written at least one percent of the total accident and health insurance premiums written by all companies authorized to offer accident and health insurance in Washington in the most recently available year, the carrier shall report to the commissioner the following aggregated and deidentified data related to the carrier's prior authorization practices and experience for the prior plan year:
The total number of prior authorization requests, approvals, and denials. The carrier must report these totals separately for approvals or denials made by the carrier directly and for approvals or denials made by a health care benefit manager as defined in RCW 48.200.020 that is delegated to make prior authorization determinations, either directly or indirectly, on behalf of the carrier. In the report, carriers must also indicate:
The percentage of total denials that were aided by artificial intelligence tools; and
The percent of prior authorization determinations made after the standard and expedited authorization request turnaround times stated in RCW 48.43.830;
Lists of the 10 inpatient medical or surgical codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved for each code;
Lists of the 10 outpatient medical or surgical codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved for each code;
Lists of the 10 inpatient mental health and substance use disorder service codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved for each code;
Lists of the 10 outpatient mental health and substance use disorder service codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved;
Lists of the 10 durable medical equipment codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved for each code;
Lists of the 10 diabetes supplies and equipment codes:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each code and the percent of approved requests for each code; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each code and the percent of requests that were initially denied and then subsequently approved for each code;
Lists of the 10 prescription drugs:
With the highest total number of prior authorization requests during the previous plan year, including the total number of prior authorization requests for each prescription drug and the percent of approved requests for each prescription drug;
With the highest percentage of approved prior authorization requests during the previous plan year, including the total number of prior authorization requests for each prescription drug and the percent of approved requests for each prescription drug; and
With the highest percentage of prior authorization requests that were initially denied and then subsequently approved on appeal, including the total number of prior authorization requests for each prescription drug and the percent of requests that were initially denied and then subsequently approved for each prescription drug; and
The average determination response time in hours for prior authorization requests to the carrier in total reported under (a) of this subsection and with respect to each code reported under (b) through (h) of this subsection for each of the following categories of prior authorization:
Expedited decisions;
Standard decisions; and
Extenuating circumstances decisions.
[Empty]
By January 1, 2021, and annually thereafter, the commissioner shall aggregate and deidentify the data collected under subsection (1) of this section into a standard report and may not identify the name of the carrier that submitted the data. The commissioner must make the report available to interested parties.
The report must contain trend data for total authorization requests, approvals, and denials by plan and health care benefit managers.
The commissioner may request additional information from carriers reporting data under this section.
The commissioner may adopt rules to implement this section. In adopting rules, the commissioner must consult stakeholders including carriers, health care practitioners, health care facilities, and patients.
For the purpose of this section, "prior authorization" means a mandatory process that a carrier or its designated or contracted representative requires a provider or facility to follow before a service is delivered, to determine if a service is a benefit and meets the requirements for medical necessity, clinical appropriateness, level of care, or effectiveness in relation to the applicable plan, including any term used by a carrier or its designated or contracted representative to describe this process.