CMS MA Rule (AI prior auth)
CMS Medicare Advantage Final Rule (CMS-4201-F) — algorithmic prior authorization limits
United States · 42 C.F.R. § 422.101(c); 88 Fed. Reg. 22120 (Apr. 12, 2023)
- Status
- In effect
- Took effect
- January 1, 2024
- Applies to
- Medicare Advantage organizations and their delegated utilization-management vendors (including AI/algorithmic prior-authorization platforms such as those at issue in current MA UM litigation)
- Enforced by
- Centers for Medicare & Medicaid Services
Medicare Advantage plans cannot use algorithms or AI to deny medically necessary care. Any algorithm-driven coverage decision must comply with traditional Medicare coverage criteria and consider the individual patient's circumstances — not just generic model output.
Who is protected: Medicare Advantage enrollees facing prior-authorization or coverage decisions made or aided by AI
Legal detail
42 C.F.R. § 422.101(c) (CMS-4201-F, 88 Fed. Reg. 22120) requires MA organizations to base coverage decisions on individual patient circumstances and applicable Medicare coverage criteria; algorithm or AI tools may not be used to deny care that would be covered under traditional Medicare. CMS reiterated in FAQ (Feb. 2024) that AI tools cannot override the requirement for individualized assessment.
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Strength | Moderate |
| Enacted | April 12, 2023 |
| Citation | 42 C.F.R. § 422.101(c); 88 Fed. Reg. 22120 (Apr. 12, 2023) |
| Private right of action | No, agency enforcement only |
| Penalties | Plan compliance actions; civil money penalties; suspension or termination of MA contracts |
| Topics | healthcare AI · automated decision-making · consumer protection |
| Agency page | CMS FAQ on Medicare Advantage Coverage Criteria and Utilization Management (CMS-4201-F) |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related healthcare AI rules elsewhere
- Missouri AI Therapy Chatbot Ban (SB 1019) · In effect
- PA v. Character.AI (Fake Psychiatrist Chatbot) · Blocked / in litigation
- RI Therapy Chatbot Ban (2026) · In effect
- RI AI Companion Self-Harm Safety (2026) · Enacted (not yet in effect)
- California AB 489 (AI healthcare chatbot misrepresentation ban) · In effect
- AZ HB 2175 (AI Insurance Denial — Physician Review) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.