Patient Rights Under the Appeals Process: A Guide for Practices
Patient Rights Under the Appeals Process: What Your Team Needs to Know
When a claim or prior authorization is denied, the patient often turns to your practice to ask what happens next, and your billing team is usually the one who knows what can still be done. Patients have more rights in the appeals process than most people realize, and a team that knows those rights and their deadlines can keep a denial moving instead of letting it stall. Here is where things stand in 2026, what changed on the prior authorization side, and how to use it in day-to-day denial work.
What "Patient Rights" in the Appeals Process Actually Means
The phrase gets tossed around a lot, but let's be specific. Under federal law, primarily the Affordable Care Act and its implementing regulations, patients enrolled in most health plans have a guaranteed right to:
- An internal appeal when a claim is denied or a service is deemed not medically necessary
- An external review by an independent organization if the internal appeal fails
- Expedited appeals when the situation is urgent (typically resolved within 72 hours)
- A plain-language explanation of why coverage was denied
- Access to the information the insurer used to make that denial decision
What has changed in 2026 is on the prior authorization side, mainly for government-sponsored coverage. Under CMS's Interoperability and Prior Authorization final rule (CMS-0057-F), from January 1, 2026, Medicare Advantage plans and state Medicaid and CHIP programs (fee-for-service and managed care) must decide standard prior authorization requests within 7 calendar days and expedited ones within 72 hours, and give a specific reason when they deny one (CMS fact sheet). Plans sold on the federal Marketplace must also give a specific reason for a prior authorization denial, but the deadlines do not apply to them. Drugs are excluded, and the rule does not cover employer group health plans. The appeal rights listed above are unchanged.
For your practice, this matters because a patient who doesn't know an appeal is possible, or who assumes the insurer's decision is final, will often let the denial stand. Telling the patient early that the decision can be appealed, and by when, helps prevent that.
The Timelines: Where Most Practices Drop the Ball
This is the area where even well-run practices slip up. Timelines in the appeals process aren't suggestions. Missing them can mean a patient loses their right to an external review entirely.
Here's a quick reference that your front desk, billing team, and care coordinators should all have somewhere visible:
- Patient deadline to file an internal appeal: At least 180 days after receiving the denial notice (ACA-compliant commercial and ERISA group health plans)
- Insurer deadline to respond to standard appeals: 30 days for pre-service denials, 60 days for post-service claims
- Insurer deadline for expedited (urgent) appeals: 72 hours
- Patient deadline to request external review: 4 months after receiving the final internal denial under the federal process; state processes vary
- Medicare, Medicare Advantage and Medicaid follow their own rules: traditional Medicare redetermination within 120 days of receiving the initial determination (receipt is presumed 5 days after the notice date); Medicare Advantage plan reconsideration within 65 days of the notice; Medicaid windows vary by state and managed care plan
That 4-month window for external review is the one that surprises people. It sounds generous, but it evaporates fast when patients are dealing with a health crisis on top of paperwork. Make it a practice habit to flag that window in your denial tracking system the moment an internal appeal is filed.
For example, a patient with a denied prior authorization for a specialty medication gets the denial in January. Your team files the internal appeal in February. The insurer upholds the denial in late March. That patient now has roughly until late July to request external review, and if no one tells them that, the window quietly closes.
What Patients Can Actually Request (And What Your Team Should Hand Them)
One of the most underused patient rights is the right to request the specific clinical criteria an insurer used to deny a claim. Under the federal claims rules for group health plans, the denial notice must either include any internal rule, guideline or protocol the plan relied on, or state that a copy is available free of charge on request, and the claimant can ask for copies of all documents relevant to the claim, also free of charge (29 CFR 2560.503-1).
Encourage your patients to ask for:
- The clinical review criteria or guidelines used (often InterQual or MCG criteria)
- The identity of any medical experts whose advice the plan obtained for the denial
- Any peer-reviewed literature the insurer cited
- A copy of the patient's relevant records as submitted to the payer
Why does this matter practically? Because once you see what the insurer used to deny, you can counter it directly. A denial that cites "lack of medical necessity" based on a generic guideline looks very different when your physician can respond point-by-point with the patient's specific clinical picture.
This is also where a drafting tool can help. EZAppeal drafts appeal letters in a few minutes, citing the payer's policy when one is on file, for your team to review and send. It does not replace clinical judgment: the reviewer still checks that the letter answers the insurer's stated rationale point by point.
The External Review: Don't Skip This Step
A lot of practices and patients treat external review as a long shot and skip it. That's a mistake, because it is the first point where a reviewer outside the plan looks at the denial. These reviews are done by independent review organizations (IROs).
The IRO looks at the clinical evidence again, and the plan is required by law to accept its decision (HealthCare.gov). That decision binds the claim under review only; it does not set precedent for other claims.
A few things your team should know:
- You can help patients initiate this. The patient can appoint a representative, such as the treating physician, to file it on their behalf (HealthCare.gov). Either way, you can walk them through the process, provide supporting documentation, and write a physician letter of support.
- State vs. federal jurisdiction matters. Fully insured plans generally use the state's external review process. Self-funded employer plans generally use the federal process, though some states let them use the state process instead (29 CFR 2590.715-2719). Know which is which before you start.
- Cost to the patient is low or zero. There is no charge under the HHS-administered federal process; a state process or a plan-contracted IRO can charge up to $25 per external review (HealthCare.gov).
How Your Team Can Be a Real Advocate (Without Practicing Law)
Your team isn't there to give legal advice, but you can absolutely help patients navigate this without stepping over any lines.
Build a simple denial response packet for your practice (even a one-page summary works) that includes:
- The patient's right to appeal and the deadline
- Who to call at the insurance company (member services, not claims)
- What documents to request
- Your practice's contact person for clinical documentation support
- The state insurance commissioner's number and website
Train your front desk staff to hand this out with every denial notice you receive on a patient's behalf. Make it routine, not reactive. And make sure your billing team has a tickler system to track where every open appeal stands, because patients won't always follow up, and the clock doesn't stop.
Pulling It Together
The appeals process is a legitimate pathway that patients have a legal right to use. As someone working in a medical practice or healthcare organization, you're often the first (and sometimes only) person who can point a patient toward that door.
Your next steps:
- Audit your current denial tracking process: do you have visibility into appeal deadlines for every open denial?
- Build or update your patient-facing denial packet
- Make sure your team knows how to request clinical criteria from insurers
- Identify your state's external review process and bookmark it
Your patients are counting on someone in that practice to know this stuff. Might as well be all of you.
See EZAppeal work on a sample denial
It drafts appeals and prior authorizations around the payer's published policy when one is on file. BAA included, zero PHI stored. Try the demo, no signup →