BH RevCycle Subscribe
Analysis

Original Medicare never concurrently reviews a PHP stay — it recertifies on day 18, then every 30 days

Concurrent review is where residential, PHP and IOP revenue is actually decided. The federal recertification cadence, the 24-hour ERISA clock on an extension request, what a reviewer reads, and who eats the days already delivered when authorisation lapses.

BH REVCYCLE NEWSROOM  /  AUG 24, 2026  /  6 MIN  /  AUTHORIZATIONS

Original Medicare does not review a partial hospitalization stay while it is happening. No payer clinician calls on day three. The gate is a physician recertification due on the 18th day, then every 30 days after that.1 ecfr.gov

That is the exception. For nearly every other payer, the money on a residential, PHP or IOP episode is decided in concurrent review, several days at a time, while the patient is still in the building.

Three reviews, three different things at risk

MACPAC separates the tools cleanly: prior authorisation approves care before it is furnished, concurrent authorisation re-assesses the need “during the course of treatment,” and retrospective review denies payment “after it was delivered.”12 macpac.gov

When it happensWhat a denial costsWho can still fix it
Prior authorisationBefore admissionThe admission — nothing delivered, nothing lostAdmissions; patient can be redirected
Concurrent reviewEvery few days, mid-stayThe next block of days, and sometimes the days already deliveredClinical team, in real time, against a clock
Retrospective reviewAfter discharge, often after paymentCash already booked and spentAppeals and records, months later

The middle row is where behavioral health programs lose money. It is the only one where the clinical team is generating cost on the same day the decision is being made.

Medicare’s cadence is a physician’s obligation, not a payer’s

The Medicare fee-for-service outpatient prior authorization list holds eight service categories, from blepharoplasty to facet joint interventions, and not one of them is behavioral health.3 ecfr.gov PHP and IOP have never been on it.

Instead, 42 CFR 424.24 makes physician certification a condition of payment and fixes the recertification interval in regulation rather than plan policy.1 ecfr.gov

PHPIOP
First recertification due18th day of servicesNo first-recert milestone; interval only
Then no less often thanEvery 30 daysEvery 60 days
SignatureTreating physician with knowledge of the patient’s responseSame
Must restatePatient “would otherwise require inpatient psychiatric care in the absence of continued stay”Patient continues to require at least 9 hours per week
Must also describeResponse to interventions; symptoms still placing patient at risk of hospitalization; discharge coordination goalsResponse to interventions; symptoms still requiring intensive treatment; discharge coordination goals

42 CFR 424.24(d)(3) and (e)(3); identical language at CMS Pub. 100-02 Ch. 6 §§ 70.3 and 70.4.1 ecfr.gov2 cms.gov

Three of those five rows are content requirements, and content is what fails. A recertification saying the patient is engaged and doing well satisfies nothing the regulation asks for. The hour thresholds those certifications attest to — 9 a week for IOP, 20 for PHP — are set out in our guide to the levels of care.

The recertification is not a progress note with a signature on it. It is a payment document that has to answer a question about the counterfactual — what happens if this stops.

What the reviewer is actually reading

CMS names four components used “to help determine whether the services provided were accurate and appropriate”: the initial certification, the physician recertification, the physician-signed treatment plan, and progress notes. Each note should describe the treatment service, the patient’s response, and how that response relates to the plan’s goals. Goals themselves must be “designed to measure the patient’s response to active treatment,” and activities that are primarily recreational and diversionary, or that only provide functional support without treating the presenting symptoms, are not PHP or IOP services at all.2 cms.gov

Commercial and MA reviewers work from proprietary instruments — MCG, InterQual, the ASAM Criteria, a plan’s own guidelines. The criteria differ. The evidence they run on does not: measurable goals, notes showing response against those goals, and a documented reason the next level down is not yet safe.

The clock on an extension request

Federal law does not say how often a plan may re-review. It says how fast the plan must answer once you ask.

An ERISA plan gets 24 hours to answer an urgent request to extend a stay. A Medicaid MCO gets seven days for a standard one.

Maximum time a plan may take to notify of a determination, in hours, by regulatory pathway.

42 CFR 422.568(b)(1)(ii)6 ecfr.gov, 422.572(a)(1)7 ecfr.gov, 438.210(d)(1)(i)(B) and (d)(2)(i)8 ecfr.gov, and 29 CFR 2560.503-1(f)(2)(i) and (f)(2)(ii)(B)4 ecfr.gov. Retrieved 24 August 2026. Seven-day figures apply to MA services subject to 42 CFR 422.122 from 1 January 2026 and to Medicaid managed care rating periods starting on or after that date. All are regulatory maximums; each pathway allows a 14-calendar-day extension on stated grounds.

The 24-hour rule is the one worth building a workflow around. An urgent request to extend an approved course of treatment must be decided within 24 hours — but only if it reaches the plan at least 24 hours before the authorised period runs out. Submit at hour 23 and the plan reverts to the ordinary urgent-claim clock of 72 hours.4 ecfr.gov

An adverse determination mid-stay is a different animal

For an ERISA plan, cutting an approved course short is not a neutral event. Any reduction or termination before the end of the approved period “shall constitute an adverse benefit determination,” and notice must come far enough in advance “to allow the claimant to appeal and obtain a determination on review of that adverse benefit determination before the benefit is reduced or terminated.”4 ecfr.gov Read literally, the appeal should conclude before the last authorised day.

Medicare Advantage carries a parallel trigger: written notice is required whenever a plan denies a service or “reduce[s] or prematurely discontinue[s] the level of care for a previously authorized ongoing course of treatment.”6 ecfr.gov

Medicaid managed care goes further. The notice must explain the right to continued benefits during the appeal, and the plan must continue them where the appeal is timely, involves termination or reduction of previously authorised services, the services were ordered by an authorised provider, and the original authorisation period has not expired.9 ecfr.gov10 ecfr.gov Note the fourth condition. Once the authorised period lapses, continuation is gone — which makes the filing date, not the clinical argument, the thing that preserves the days.

Who eats the days already delivered

It depends on the payer, and the answers point in opposite directions.

Medicare Advantage — the plan is locked in. Where an MA organisation approved care through prior authorisation, a pre-service determination, “or a concurrent determination made during the enrollee’s receipt of inpatient or outpatient services,” it “may not deny coverage later on the basis of lack of medical necessity” and may not reopen the decision absent good cause or reliable evidence of fraud or similar fault.5 ecfr.gov

Medicaid managed care — continued days are recoverable. If the appeal and any state fair hearing uphold the plan, it may recover the cost of services furnished while the appeal was pending, consistent with state recovery policy and its contract.10 ecfr.gov Win instead, and disputed services already furnished must be paid for, with anything not yet furnished authorised within 72 hours of the reversal notice.11 ecfr.gov

Commercial generally — approval is not payment. Prior authorisation approvals “are not binding, and usually contain language stating that the approval does not guarantee payment,” which preserves the payer’s ability to review retrospectively and deny.12 macpac.gov

Original Medicare — it turns on which statute the denial cites. Reasonable-and-necessary denials under §1862(a)(1)(A) are appealable by the provider and limitation on liability applies. Benefit category denials under §1861(ff) or §1835(a)(2)(F) — the day program that is really social or diversionary, the stable patient on medication management only — are not appealable by the provider, and limitation on liability does not apply.2 cms.gov Same unpaid days, no route.

The state layer moves the numbers again

State utilization review law overrides the federal floor for fully insured business, and it holds the tightest deadlines. New York requires a concurrent review determination within one business day of receipt of the necessary information, against three business days for a prospective review. For inpatient substance use disorder treatment the determination is due within 24 hours where the request is filed at least 24 hours before discharge — and while it is pending, the reviewer may not deny coverage on medical necessity or lack of prior authorisation grounds.13 nysenate.gov

New York’s Office of Mental Health also pushes plans off calendar-driven review, recommending trigger-based utilization review and stating it “shall not be conducted more frequently than is reasonably required” to assess medical necessity. For adult inpatient stays it advises applying concurrent review only from day 31 onward where no clinical trigger is met, and issuing no medical necessity denials for the first 30 days.14 omh.ny.gov

That is guidance in one state. No federal rule sets the re-review interval anywhere — it belongs to the plan and lives in the authorisation letter. The clock that starts when you submit, and the one that stops when the authorised period expires, belong to you.

Sources & notes

  1. Office of the Federal Register / GPO (eCFR).42 CFR 424.24 — Requirements for medical and other health services furnished by providers under Medicare Part B. Retrieved Aug 24, 2026.
  2. Centers for Medicare & Medicaid Services.Medicare Benefit Policy Manual, Pub. 100-02, Chapter 6 (§§ 70.3, 70.4), Rev. 12425. Retrieved Aug 24, 2026.
  3. Office of the Federal Register / GPO (eCFR).42 CFR 419.83 — List of hospital outpatient department services requiring prior authorization. Retrieved Aug 24, 2026.
  4. Office of the Federal Register / GPO (eCFR).29 CFR 2560.503-1 — Claims procedure (ERISA), paragraph (f)(2)(ii), concurrent care decisions. Retrieved Aug 24, 2026.
  5. Office of the Federal Register / GPO (eCFR).42 CFR 422.138 — Prior authorization (Medicare Advantage). Retrieved Aug 24, 2026.
  6. Office of the Federal Register / GPO (eCFR).42 CFR 422.568 — Standard timeframes and notice requirements for organization determinations. Retrieved Aug 24, 2026.
  7. Office of the Federal Register / GPO (eCFR).42 CFR 422.572 — Timeframes and notice requirements for expedited organization determinations. Retrieved Aug 24, 2026.
  8. Office of the Federal Register / GPO (eCFR).42 CFR 438.210 — Coverage and authorization of services (Medicaid managed care). Retrieved Aug 24, 2026.
  9. Office of the Federal Register / GPO (eCFR).42 CFR 438.404 — Timely and adequate notice of adverse benefit determination. Retrieved Aug 24, 2026.
  10. Office of the Federal Register / GPO (eCFR).42 CFR 438.420 — Continuation of benefits while the MCO, PIHP, or PAHP appeal and the State fair hearing are pending. Retrieved Aug 24, 2026.
  11. Office of the Federal Register / GPO (eCFR).42 CFR 438.424 — Effectuation of reversed appeal resolutions. Retrieved Aug 24, 2026.
  12. Medicaid and CHIP Payment and Access Commission (MACPAC).Prior Authorization in Medicaid (issue brief, August 2024). Retrieved Aug 24, 2026.
  13. New York State Senate (consolidated laws).NY Insurance Law § 4903 — Utilization review determinations. Retrieved Aug 24, 2026.
  14. New York State Office of Mental Health.Best Practices Manual: Utilization Review of Adult and Child Mental Health Services. Retrieved Aug 24, 2026.
MethodologyThis piece describes the review process, not clinical placement. Federal certification and recertification cadence is taken from the current eCFR text of 42 CFR 424.24(d) and (e) and from CMS Pub. 100-02 Chapter 6 §§ 70.3 and 70.4 (Rev. 12425, effective 1 January 2024), both retrieved 24 August 2026. Payer decision deadlines are the regulatory maximums in 42 CFR 422.568, 422.572, 438.210(d) and 29 CFR 2560.503-1(f), not observed turnaround times; where a rule has a 2026 applicability date the date is stated. The absence of a Medicare fee-for-service prior authorization requirement for behavioral health outpatient programs is established by the service list at 42 CFR 419.83, which contains no behavioral health category. No federal rule sets how frequently a Medicare Advantage plan, a Medicaid managed care plan or a commercial plan may re-review an ongoing residential, PHP or IOP stay. Those intervals are set in the plan's own utilization management policy and stated in the authorization letter, and they are not reported here because there is no national number to report. New York is used as a single illustration of the state utilization review layer; its timeframes do not travel to other states. The ASAM Criteria, MCG and InterQual are proprietary and none of their criteria text is reproduced or paraphrased here; they appear only as the instruments payers name in policy.