Prior Authorization for Interventional Radiology Procedures

What’s Broken, What Works, and How to Protect Your Practice

 

The Reality of Prior Authorization for IR Procedures

Prior authorizations for Interventional Radiology (IR) procedures remains unpredictable. Payers frequently outsource reviews to TPAs such as eviCore, AIM, or Carelon – often switching without notice. Rules vary by plan, and reviewers are often non-specialists. It is common for an OB/GYN or family physician to determine medical necessity for complex vascular or embolization cases.

 

The “No Auth Required” Illusion

When a payer says “no authorization required” it seldom guarantees payment. It may mean:

  • The carrier won’t review before the procedure but can still deny afterward.
  • The service is not a covered benefit for the patient’s plan.
  • The procedure is labeled “experimental” or ‘investigational” – a label frequently applied to accepted or emerging IR therapies like embolization for osteoarthritis are often non-covered by the carrier.

Best Practice

Ask WHY no prior auth is required.

  • Is it not a member benefit, plan benefit, never covered, experimental, investigational?
  • Document the name, date, and reference number of the representative confirming “no auth required.”
    • Include full medical necessity rationale, even if prior auth is not required.
    • Keep screenshots or portal confirmations.
    • Remember: “No auth required” shifts the burden to you – documentation becomes your only defense.

 

ICD-10 and CPT®: The Core of Medical Necessity

Accurate indication and diagnosis coding are at the heart of medical necessity. Consistent documentation of signs and symptoms are as important as the diagnosis itself—they work together to justify the procedure and ensure reimbursement across all carriers with medical-necessity policies.

Carriers determine medical necessity by matching ICD-10-CM diagnosis codes to the policy-approved indications for the billed CPT® procedures. The primary diagnosis or indication must clearly explain why the exam or intervention was needed. Clinic notes should support this.

Best Practice

  • Always include signs, symptoms, and failed conservative management (e.g., claudication, non-healing ulcer, hematuria, pelvic pain) in your documentation.
  • Avoid vague or “rule-out” terms – use definitive, clinically supported language aligned with LCDs, NCDs, and payer medical-necessity policies.
  • If documentation lacks precision, coding may result in different than codes approved for prior auth resulting in a valid procedure being denied as “not medically necessary”.

 

Requesting All CPT® Possibilities: Why IR is Different

In IR, the full procedural pathway is often unknown until the case begins. Unlike open surgery, IR procedures are dynamic and adaptable based on findings during the procedure.

Because of this variability, always request authorization for all CPT® codes that could reasonably occur during the planned intervention.

Best Practice

  • Submit the entire expected CPT® range based on potential findings (e.g., diagnostic angiography, atherectomy, stent, embolization).
  • Include a clear explanation – “Therapeutic escalation may be required based on angiographic findings.”
    • Clinic notes should support medical necessity.
    • If payer portals reject multiple CPTs, attach a written rationale or contact the payer directly.
    • Keep records of all requested CPTs and the representative’s confirmation or portal response.

  

Average Turnaround Times

Step

Typical Bus Days Notes

Initial Submission

2-5

Longer for vascular, oncology cases

Add’l Documentation

+2-7

Common for PAD, Dialysis, Embolization

Peer-to-Peer

+2-5

Delays due to reviewer availability

Appeal/Reconsideration +5-15

Adds weeks if escalated

  • Carriers quote a total average timeframe of 7 – 14 business days; however, documentation clearly supporting medical necessity typically takes 7-10 days.
  • Urgent cases typically take 72 hours if carrier’s criteria are met.

 

Urgent Requests: When “Urgent” Isn’t Urgent

Physicians often mark cases as urgent when delay could cause harm—acute ischemia, hemorrhage, or infection. But carriers apply internal “urgent” criteria that are inconsistently enforced and rarely public.

Best Practice

  • Document Why a prior auth delay poses harm using clear, clinical language.
  • Include imaging, wound findings, and objective data.
  • Cite professional guidelines (SIR, SVS, ACR, OEIS).
  • Track all case numbers, reps, and denial notes.

 

Documentation is the Differentiator

Prior Auth success hinges on structured, evidence-based documentation that demonstrates adherence to the standard of care.

Best Practice

  • Conservative therapies tried or contraindicated – document it.
  • Clear rationale when tests (e.g., ABI) weren’t performed – document it.
  • Literature and guidelines supporting medical necessity – document it.
  • Summaries of prior imaging and interventions – document it.
  • Explanations for omitted tests or atypical approaches – document it.

 

Reducing the Burden: Outsourced Pre-Auth Services

Many IR practices now use third-party prior auth services to offload administrative work. Example: StreamlineMD handles eligibility checks, submissions, peer-to-peer coordination, and tracking—allowing providers to focus on patient care.

Such services:

  • Monitor payer and TPA policy changes.
  • Handle multi-portal submissions and communications.
  • Provide turnaround-time and denial reports.
  • Outsourcing can reduce burnout, missed deadlines, and denials, particularly for high-volume IR practices.

Note: Be skeptical of vendors offering AI solutions for prior auths.  StreamlineMD is a consumer of AI automation, and continuously evaluates AI solutions that are viable and make sense to include in our service platform.  To date, the prior auth AI solutions we’ve seen and tested are not ready for prime time for IR purposes.  If you see a solid demonstration and talk to other IR practices that use the AI solution with a high level of satisfaction, please contact StreamlineMD and we’ll be happy to evaluate the product.

 

Take Aways

  • Always ask WHY no pre-auth is required
  • Standardize workflow checklists by procedure type.
  • Write reviewer-proof narratives assuming the reviewer is non-IR.
  • Document every interaction—especially ‘no auth required’ confirmations.
  • Prepare for peer-to-peer reviews using clinical data and guideline citations.
  • Leverage pre-auth partners like StreamlineMD for efficiency.

 

Click here for StreamlineMD’s best practice prior authorization checklist

 

Bottom Line

  • IR prior authorization is a moving target.
  • Policies change without notice.
  • “No auth” and “urgent” do not guarantee payment.
  • Your protection lies in precise documentation, structured workflows, and proactive communication.
  • When your notes tell the complete clinical story, you protect both your patients and your revenue.
  • Be a good storyteller.
  • Be skeptical about AI automation for IR prior auths.

 

Resources

StreamlineMD firsthand experience

 *See a previous blog on prior authorizations here: Help Improve Prior Authorizations

 

StreamlineMD provides Revenue Cycle Solutions to Radiology & Interventional Specialists. Our Mission is to Improve Healthcare for All Americans.  Our Core Values that guide us on our mission are Service Quality, Teamwork, Accountability, Efficiency, Adaptability, Communication, and Integrity. Proud winner of the Great Place To Work award. Learn more about us at streamlineMD.com

Share the Post:

Related Posts

Notice

Cyber Incident Update – 9/28/25 at 6:00 pm EST:

StreamlineMD applications are up and live!

Access Client Portal Here

We are pleased to inform you that, following clearance from our cybersecurity experts, client access to our system has been restored. You may begin accessing the system starting at 6:00 PM EST today, Sunday, September 28, 2025.

Please note that while core functionality is fully restored, the following features are currently unavailable as we continue working to bring all components back online:

1. SMD Mobile App (viewing PDF chart)
2. Patient Portal
3. RxPhoto (inside the EHR)

We are working to restore these remaining services as quickly and securely as possible.

We will continue to monitor system performance closely and will provide updates as additional components become available.

If you experience any issues or require support, please contact our support team directly at 330-564-2641.

Thank you once again for your continued patience, understanding, and trust.

Cyber Incident Update – 9/28/25 at 2:00 pm EST:

Following our scheduled call with the cybersecurity team earlier today, we have been advised that additional security measures must be implemented before client access can be restored. Specifically, changes to our VPN configuration are required to ensure a more secure connection environment.

Our internal teams are actively working on these adjustments and will move as quickly and carefully as possible to complete the necessary changes.

Our next update will be at 4:00 PM EST.

Cyber Incident Update – 9/28/25 at 12:00 pm EST:

We are pleased to share that our internal teams currently have access to the system environment. In the interim, if needed, we are able to assist by running your patient appointment schedules for the week. Please contact our support team or email at smdhelpdesk@prcmedicalllc.zohosupport.com if you require this service.

We are scheduled to meet with our cybersecurity team at 1:00 PM EST today to review final clearance for restoring client access. We will provide another update following that discussion.

We appreciate your continued patience and partnership as we work to bring services back online safely and securely.

Cyber Incident Update – 9/27/25 at 10:00 pm EST:

We are pleased to report that our routine nightly processes have completed successfully, and the system environment remains stable and fully operational.

At this stage, we are awaiting final clearance from our cybersecurity partner before restoring client access.

However, our partner informed us that they need more time and so this clearance will not be available until after 1:00 PM EST tomorrow, Sunday, September 28, 2025.

Thank you for your patience while we maintain the highest standards of security and system integrity. 

Cyber Incident Update – 9/27/25 at 7:00 pm EST:

We are continuing to move forward with final preparations for restoring system access. Our internal teams have completed their validation processes, and the environment remains fully operational.

At this time, we are running our routine nightly processes to further confirm system stability and readiness. We continue to await final clearance from our cybersecurity experts to bring services fully back online.

We remain optimistic that systems will be accessible to clients by tomorrow morning, Sunday, September 29, 2025, at 7:00 AM EST.

As always, we are taking every measure to ensure a secure and controlled restoration.

Thank you again for your continued patience and support. Our next update will be provided by 10:00 PM EST.

Cyber Incident Update – 9/27/25 at 11:00 am EST:

We are pleased to share that our team has gained access to the system environment and is actively conducting testing—an important step toward the full restoration of services.

As part of this process, we have completed testing of the Practice Management (PM) and Coding software and are pleased to report that no issues have been identified with the software. Testing will continue across all system components to ensure overall stability and reliability.

Our teams will continue working throughout the day to validate all aspects of the system before bringing it back online.

We are deeply grateful for your continued patience, support, and trust as we proceed with restoration in a safe and controlled manner.

We will provide another update at 2:00 pm EST.

Cyber Incident Update – 9/26/25 at 7:00 pm EST:

We are pleased to share that our team is now gaining access to the system environment and actively conducting testing. This is an important step toward full restoration of services.

We again want to reassure you that there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

Our teams will continue to work throughout the evening and into the weekend to validate all aspects of the system before bringing it back online.

Thank you for your continued patience, support, and trust as we move forward with restoration in a safe and controlled manner.

We will provide another update at 10:00 am EST on Saturday, September 27, 2025.

Cyber Incident Update – 9/26/25 at 3:00 pm EST:

We continue to make steady progress in our restoration efforts. At this time, 95% of servers have been cleared; however, they remain behind protective firewalls as we work closely with our team of experts toward full restoration.

The StreamlineMD systems will remain unavailable for the rest of today, Friday, September 26, 2025. Our teams will begin comprehensive testing of all aspects of the system as soon as possible, likely this evening and over the weekend.

Importantly, there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

We truly appreciate your support and understanding during this process. You are important to us, and we remain committed to restoring services safely and securely.

We will provide another update at 6:00 pm EST.

Cyber Incident Update – 9/26/25 at 2:00 pm EST:

We continue to work diligently this afternoon with our cybersecurity team and are making steady progress.   

We anticipate the StreamlineMD systems will remain inaccessible for the remainder of today, Friday, September 26, 2025.  

We will provide another update at 6:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 11:00 am EST:

We continue to work throughout the day with our cybersecurity team and continue to make progress.  

We anticipate the StreamlineMD systems will not be accessible before 3:00 pm EST on Friday, September 26, 2025

We will provide another update at 2:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 09:00 am EST:

We continue to work this morning with our cybersecurity team and continue to make progress.   

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.  

We will provide another update at 12:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 07:00 am EST:

We have continued to work through the night with our cybersecurity team and continue to make progress.  

We will continue restoring servers to service and testing internally. 

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025. 

We will provide another update at 9:00 am EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/25/25 at 11:00 pm EST:

So far, we are making great progress, and our systems are internally coming back online. At this time, there is no evidence of system damage or PHI compromise.

Throughout the night, we will continue restoring servers to service and testing internally.

We don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.

We will provide another update on Friday, September 26, at 6:00 am EST


Cyber Incident Update –9/25/25 at 7:00 pm EST:

We are currently in the process of restoring our servers and anticipate determining a timeline for resuming full operations by 10:00 PM EST this evening, September 25, 2025.

Our team continues to work diligently and in close coordination with our security partners in response to the cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precaution, our systems remain offline to prevent any potential data compromise. We continue to follow our established cybersecurity protocols to ensure the protection and integrity of your data.

We will provide our next update by 10:00 PM EST today.

We appreciate your continued patience and understanding as we work to bring our systems back online safely.

Incident Update – 9/25/25 at 12:00 pm EST:

StreamlineMD is currently working closely with our security team to address a cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precautionary measure, we proactively shut down our systems to prevent any potential data compromise.

Our team is actively following established cybersecurity protocols to ensure the continued protection of your data. At this time, the software will remain inaccessible for the remainder of the day, September 25, 2025.

We understand the impact this may have on your operations and sincerely appreciate your patience and understanding. We are committed to providing updates as frequently as possible and will keep you informed of our progress.

StreamlineMD is experiencing a cyber incident

Our security software detected malicious behavior and our team of internal and external experts are working to resolve the issue. The security team has made it clear that we need to shut down our services altogether, pending a more detailed analysis.