January 1, 2026 was the federal compliance deadline for Medicare Advantage plans to implement electronic prior authorization systems under the Improving Seniors' Timely Access to Care Act. The law required MA plans to accept prior authorization requests electronically, respond to urgent requests within 72 hours and standard requests within 7 days, and provide real-time decisions for certain routinely approved services. The deadline passed. Technically, most plans are compliant. Operationally, the experience for independent practices has not changed materially.

Electronic prior authorization compliance is being measured against a technical standard — does the portal exist, does it accept electronic submissions, does the system generate a response within the required window? Most MA plans can demonstrate yes to all three. What the compliance measurement does not capture is whether the portal works reliably, whether the decision returned within 72 hours contains a real clinical determination or a procedurally valid deferral, and whether the administrative burden on practice staff actually decreased.

The data from the first half of 2026 is consistent: practices with established prior authorization workflows are not reporting meaningful time savings from the electronic mandate. The portals exist. Many require separate logins, do not integrate with EHR systems, and produce responses that defer clinical determinations to secondary review — technically within the window, practically requiring follow-up calls that look identical to the pre-mandate process.

The place where the mandate is making a measurable difference is in documentation. Electronic submissions create a timestamped record of the request and the response. That record is your evidence base for appeal and for regulatory complaint. The practices capturing and organizing that documentation are building an asset. The practices treating portal submissions as a replacement for their prior fax workflow — and not retaining the output — are getting the compliance theater version of the reform.

CMS will incorporate electronic prior authorization compliance into MA Star Ratings beginning with the 2027 measurement cycle. Plans that are not meeting response time standards will face rating penalties. The complaints you submit through the CMS plan grievance process — documenting specific instances of delayed or inadequate electronic PA responses — are the data that drives regulatory response. If your practice is consistently experiencing non-compliant PA behavior from a specific MA plan, document it and submit. That is not optional escalation. That is how the regulatory mechanism works.

Watch your PA denial rate by plan over the next 90 days. A plan meeting the electronic compliance standard should show a measurable improvement in first-submission approval rates for routinely approved services. If the rates are not moving, the portal is compliant and the process is not.

The Medicaid continuous enrollment unwinding that began in April 2023 — when states regained the authority to disenroll beneficiaries who no longer met eligibility criteria — has been running for over three years. The federal deadline for states to complete the unwinding process passed in mid-2024. Most states completed their redetermination processes. The Medicaid landscape has stabilized at a new baseline. Independent practices that were tracking the unwinding as an active event have largely moved on.

The AR damage from the unwinding has not moved on. It is still in the books.

Medicaid unwinding created AR exposure through three mechanisms that play out on different timelines. The first — immediate claim denials when coverage terminated — most practices caught and addressed. The second — delayed eligibility verification failures where coverage appeared active at the time of service but was retroactively terminated — is more insidious and takes longer to surface. The third — patient balance conversion from Medicaid-covered services to self-pay following disenrollment — is the mechanism most likely to still be generating uncollectable AR in mid-2026.

When a Medicaid beneficiary is disenrolled and does not obtain replacement coverage, claims for services rendered after the disenrollment date are the practice's financial exposure. If the practice had established a pattern of seeing this patient under Medicaid and did not update eligibility verification at every visit — which is the standard most practices cannot operationally sustain — the exposure compounds across multiple visits before anyone catches it.

The practical implication: your AR aging report may be materially overstated. Identifying and writing off genuinely uncollectable Medicaid-converted balances is not a revenue loss — it is an accounting correction. More importantly, it tells you your true collection rate, which is the number that drives operational decisions.

Pull your AR aging for Medicaid and self-pay buckets, filtered to accounts opened between April 2023 and December 2024. Identify balances over 180 days. For each patient in that cohort, verify whether the balance traces to a service date after a Medicaid disenrollment event. If yes, that balance is almost certainly uncollectable and should be reviewed for write-off.

The second watch: some states extended their unwinding timelines and are still processing redeterminations. If your state was in the extended cohort, you may still be seeing new eligibility terminations hitting active patient panels. Check your state Medicaid agency's current redetermination status. If you are still in an active unwinding window, your eligibility verification at every visit is not optional.

Commercial payer and Medicare Advantage audit activity directed at independent medical practices has increased measurably in the first half of 2026. The increase is not random. Payer audit programs are data-driven, and the targeting criteria — while not published — are consistent enough across audit patterns to identify the practice features that generate elevated audit risk. Understanding those features does not guarantee audit avoidance. It does allow a practice to audit-proof its documentation before the letter arrives rather than after.

Independent practices face audit risk from two distinct directions in 2026. The first is evaluation and management coding — specifically the distribution of E/M levels billed. A practice where a high percentage of visits are billed at level 4 or 5 (99214, 99215) without a corresponding patient acuity profile that supports that distribution is generating a statistical outlier signal. Payer audit algorithms compare your E/M distribution to specialty and geography norms. Deviation triggers review.

The second audit risk vector is specific to practices that have implemented the 2023 E/M coding changes — particularly the shift to medical decision-making as the primary documentation standard. Practices that updated their billing without updating their documentation templates to explicitly capture the MDM elements are billing under the new standard with documentation that supports the old standard. That gap is an audit finding. The code is defensible. The chart doesn't defend it.

Three things to do before the end of Q3. First, pull your E/M distribution by code for the last 12 months and compare it to CMS published norms for your specialty. If your 99215 rate is more than 15–20 percentage points above the specialty average, your documentation needs to be airtight before you get a letter.

Second, pull a random sample of 10 charts for visits billed at 99214 or 99215 in the last 90 days. For each chart, verify that the medical decision-making documentation explicitly addresses the number and complexity of problems, the amount and complexity of data reviewed, and the risk of complications. If your documentation is capturing the clinical work but not articulating the MDM elements, fix the template now.

Third, if your practice had significant Medicaid unwinding exposure, document the payer mix change and its cause. Having a clear narrative for why your payer mix shifted is not just good practice management — it is your first line of defense if a commercial payer or MA plan requests a documentation review.