Regulon — IA-SF-2421 · IA SF 2421 (Utilization Review AI & Prior Authorization)

Summary

Iowa SF 2421 would have regulated utilization review organizations' use of artificial intelligence in prior authorization decisions and established peer review requirements for denials and downgrades. Division I prohibits UROs from using AI-based algorithms as the sole basis for denying, delaying, or downgrading a prior authorization request based on medical necessity, and requires that all denials and downgrades be made by a qualified reviewer (physician) or clinical peer with same-specialty expertise. Divisions II and III exempt cancer-related screenings and life-threatening inpatient conditions from prior authorization requirements. Division IV establishes procedural requirements for prepayment audits, including notification timelines, completion deadlines, and appeal rights for providers. The bill was withdrawn and did not advance.

Enforcement & Penalties

Enforcement Authority

The Commissioner of Insurance may adopt rules to administer and enforce the bill's provisions. No private right of action is created. Enforcement is agency-initiated through the Iowa Insurance Division. For the cancer-related screening exemption provisions, the Director of Health and Human Services shall adopt rules to administer, with the Commissioner of Insurance also authorized to adopt rules.

Penalties

The bill does not specify monetary penalties or damages. For the audit provisions, if a health carrier or utilization review organization violates the audit section, the claim shall be automatically approved and promptly paid pursuant to section 507B.4A, subsection 2, including interest. No other remedies are specified.

Who Is Covered

Compliance Obligations 6 obligations · click obligation ID to open requirement page

HC-01 Healthcare AI Decision Restrictions · HC-01.1 · Deployer · Healthcare

Iowa Code § 514F.8, subsection 2A (new)

Plain Language

Utilization review organizations may use AI-based algorithms for initial review of prior authorization requests, but when the request involves medical necessity, the AI tool may not serve as the sole basis for a decision to deny, delay, or downgrade the request. A human decision-maker must independently participate in any adverse determination. This permits AI as a screening or triage tool while prohibiting fully automated adverse decisions on medical necessity grounds.

Statutory Text

2A. A utilization review organization may use an artificial intelligence-based algorithm to provide an initial review of a request for prior authorization, except that, for a prior authorization request for a health care service based on medical necessity, a utilization review organization shall not use an artificial intelligence-based algorithm as the sole basis for the utilization review organization's decision to deny, delay, or downgrade the prior authorization request.

HC-01 Healthcare AI Decision Restrictions · HC-01.2 · Deployer · Healthcare

Iowa Code § 514F.8A(2)

Plain Language

Prior authorization denials and downgrades must be made by a same-specialty qualified reviewer (if the requesting provider is a physician) or a clinical peer (if the requesting provider is not a physician). The URO must provide the requesting provider a signed written statement citing the specific reasons for the decision including coverage and clinical criteria relied upon, a written explanation of the appeals process (which must also be provided to the covered person), and a written attestation confirming the reviewer's qualifications including name, NPI, board certifications, specialty expertise, and educational background. This creates both a human oversight requirement and a detailed disclosure obligation tied to each adverse determination.

Statutory Text

2. A utilization review organization shall not deny or downgrade a request for prior authorization unless all of the following requirements are met: a. The decision to deny or downgrade the request is made by either of the following: (1) A qualified reviewer, if the health care provider requesting prior authorization is a physician. (2) A clinical peer, if the health care provider requesting prior authorization is not a physician. b. The utilization review organization provides the health care provider that requested the prior authorization all of the following: (1) A written statement that cites the specific reasons for the denial or downgrade, including any coverage criteria or limits, or clinical criteria, that the utilization review organization considered or that was the basis for the denial or downgrade. The written statement shall be signed by either of the following: (a) The qualified reviewer that made the denial or downgrade determination, if the health care provider that requested prior authorization is a physician. (b) The clinical peer that made the denial or downgrade determination, if the health care provider that requested prior authorization is not a physician. (2) A written explanation of the utilization review organization's appeals process. The utilization review organization shall also provide the written explanation to the covered person for whom prior authorization was requested. (3) A written attestation that is either of the following: (a) If the health care provider that requested prior authorization is a physician, a written attestation that the qualified reviewer who made the denial or downgrade determination practices in the same or a similar specialty as the health care provider, and has the requisite training and expertise to treat the medical condition that is the subject of the request for prior authorization, including sufficient knowledge to determine whether the health care service is medically necessary or clinically appropriate. The attestation shall include the qualified reviewer's name, national provider identifier, board certifications, specialty expertise, and educational background. (b) If the health care provider that requested prior authorization is not a physician, a written attestation that the clinical peer who made the denial or downgrade determination practices in the same or a similar specialty as the health care provider, and the clinical peer has experience managing the specific medical condition or administering the health care service that is the subject of the request for prior authorization. The attestation shall include the clinical peer's name, national provider identifier, board certifications, specialty expertise, and educational background.

HC-01 Healthcare AI Decision Restrictions · HC-01.2 · Deployer · Healthcare

Iowa Code § 514F.8A(3)-(4)

Plain Language

When a prior authorization request is denied, the URO must conduct a consultation between the requesting provider and a same-specialty qualified reviewer or clinical peer within seven business days of the denial notification. If the denial or downgrade is appealed by the provider or covered person, the appeal must be conducted by a different qualified reviewer or clinical peer (not the individual who made the initial determination). The appeal reviewer must consider all known clinical aspects of the services including relevant medical records and medical literature submitted by the provider. This creates a mandatory post-denial consultation requirement and ensures independent review on appeal.

Statutory Text

3. A utilization review organization that denies a request for prior authorization shall, no later than seven business days after the date that the utilization review organization notifies the requesting health care provider of the denial, conduct a consultation either in person or remotely, as follows: a. Between the health care provider and a qualified reviewer, if the health care provider requesting prior authorization is a physician. b. Between the health care provider and a clinical peer, if the health care provider requesting prior authorization is not a physician. 4. a. If a utilization review organization's decision to deny or downgrade a request for prior authorization is appealed by the requesting health care provider or covered person, the appeal shall be conducted by either of the following: (1) A qualified reviewer, if the health care provider requesting prior authorization is a physician. (2) A clinical peer, if the health care provider requesting prior authorization is not a physician. b. A qualified reviewer or clinical peer involved in the initial denial or downgrade determination of a request for prior authorization that is the subject of an appeal shall not conduct the appeal. c. When conducting an appeal of a request for prior authorization, the qualified reviewer or clinical peer shall consider the known clinical aspects of the health care services under review, including but not limited to medical records relevant to the covered person's medical condition that is the subject of the health care services for which prior authorization is requested, and any relevant medical literature submitted by the health care provider as part of the appeal.

Other · Healthcare

Iowa Code § 514F.8B(2) (new)

Plain Language

Health carriers are prohibited from requiring prior authorization or imposing additional utilization review requirements for cancer-related screenings when the screening is recommended by the patient's health care professional based on current NCCN clinical practice guidelines in oncology. This is a prior authorization exemption provision that does not directly regulate AI systems — it removes the insurer's authority to require pre-approval for guideline-concordant cancer screenings regardless of whether AI is involved in the review process.

Statutory Text

2. A health carrier shall not require prior authorization for, or impose additional utilization review requirements on, a covered person for a cancer-related screening if the screening is recommended by the covered person's health care professional based on the most recently updated national comprehensive cancer network clinical practice guidelines in oncology.

Other · Healthcare

Iowa Code § 514F.8C(2) (new)

Plain Language

Health carriers may not require prior authorization or impose additional utilization review for diagnosis and treatment of conditions that emerge during inpatient care and are reasonably determined by a health care professional to be life-threatening without immediate intervention. This is a coverage mandate ensuring that life-threatening conditions discovered during hospitalization are treated without prior authorization delays, regardless of whether AI is involved in the review process.

Statutory Text

2. A health carrier shall not require prior authorization for, or impose additional utilization review requirements on, a covered person for diagnosis and treatment of a health condition that develops or becomes evident in a covered person while the covered person is receiving treatment at an inpatient facility, and the health condition is reasonably determined by a health care professional to be a life-threatening condition unless the covered person receives immediate assessment and treatment.

Other · Healthcare

Iowa Code § 514F.10(2)-(6) (new)

Plain Language

Health carriers and UROs conducting claims audits must notify the provider within 15 calendar days of selecting a claim for audit, complete the audit and issue a determination within 45 calendar days of receiving all documentation, allow providers to appeal adverse determinations within 30 calendar days, and resolve appeals within 14 calendar days. If the carrier or URO violates any of these requirements, the claim is automatically approved and must be promptly paid with interest. These are claims processing procedural requirements that do not specifically address AI systems.

Statutory Text

2. A health carrier or utilization review organization that conducts an audit shall notify the health care provider that submitted the claim of the initiation of the audit no later than fifteen calendar days after the date the health carrier selects the claim for audit. 3. A health carrier or utilization review organization shall complete an audit of a claim and issue a determination on the claim to the health care provider that submitted the claim no later than forty-five calendar days after the date that the utilization review organization receives all requested documentation regarding the claim from the health care provider. 4. A health care provider that submitted a claim that is the subject of an audit by a health carrier or utilization review organization, and that receives an adverse determination regarding the claim, may appeal the adverse determination no later than thirty calendar days after the date the health care provider receives the audit determination. 5. A health carrier or utilization review organization shall consider an appeal under subsection 4, and issue a final determination on the claim that is the subject of the appeal, no later than fourteen calendar days after that date the health carrier or utilization review organization receives notice of the appeal. 6. If a health carrier or utilization review organization violates this section, the claim shall be automatically approved by the health carrier or utilization review organization and promptly paid pursuant to section 507B.4A, subsection 2.