Health Insurance Preauthorization Amendments

Health Insurance Preauthorization Amendments

United States

RAI-US-UT-SB31900-2026

SB 319

Effective: May 6, 2026
In Force(In Force)
BillTransparency and DisclosureGovernance and Oversight
Export PDF

Utah SB 319 mandates health insurers disclose AI use in preauthorization, ensures human oversight, and sets clear timelines for decisions.

Overview

Utah Senate Bill 319 (SB 319), officially titled the “Health Insurance Preauthorization Amendments,” represents a significant legislative effort to modernize health insurance practices within the state, particularly concerning the integration of artificial intelligence (AI) in preauthorization decisions. Enacted on March 19, 2026, and slated to take effect on May 6, 2026, this bill aims to enhance transparency, reduce administrative burdens for healthcare providers, and safeguard patients by establishing clearer guidelines for insurer operations. The core objective of SB 319 is to ensure that while insurers may leverage advanced technologies like AI to streamline processes, human oversight and independent medical judgment remain paramount in critical healthcare decisions.

The legislation introduces several key provisions designed to achieve these goals. Foremost among them is the requirement for health insurers to explicitly disclose whether they utilize artificial intelligence or automated tools in their preauthorization review processes. This disclosure mandate is a cornerstone of the bill's transparency objectives, providing patients and providers with crucial information about the mechanisms underlying authorization decisions. Furthermore, SB 319 establishes specific timeframes within which insurers must make preauthorization determinations, including expedited reviews for urgent care requests, thereby addressing concerns about delays in patient care. It also mandates minimum validity periods for authorizations, particularly for chronic or long-term care conditions, aiming to reduce the frequency of repetitive authorization requests. These measures collectively seek to create a more efficient, transparent, and patient-centric health insurance landscape in Utah.

Definitions

Utah SB 319 introduces or clarifies several key definitions to ensure precise application of its provisions within the context of health insurance preauthorization. Central to the bill is the definition of “Artificial intelligence,” which is explicitly stated to mean the same as defined in Section 53-25-901 of the Utah Code. This cross-reference ensures consistency with broader state regulations concerning AI. Furthermore, the bill specifies that “Artificial intelligence” includes “generative artificial intelligence,” aligning the legislation with evolving AI capabilities. These definitions are crucial for delineating the scope of the disclosure requirements and other mandates related to AI use in preauthorization processes.

Beyond AI, the bill defines several other terms critical to understanding its impact on health insurance. An “Adverse preauthorization determination” is defined as an insurer's decision that healthcare does not meet the preauthorization requirement. “Authorization” refers to an insurer's determination that a proposed drug, device, or covered service meets all requirements and will be covered. The “Authorization validity period” specifies the duration for which an authorization remains valid. A “Chronic or long-term care condition” is defined as a condition lasting at least three months, requiring ongoing medical attention or limiting daily activities. The bill also defines “Insurer” by referencing Section 31A-22-634 and “Preauthorization requirement” as an insurer's mandate for an enrollee to obtain authorization before receiving a service. These comprehensive definitions provide a clear framework for compliance and enforcement within the health insurance sector.

Governance and Institutional Framework

The governance and institutional framework for Utah SB 319 primarily centers on the Utah Insurance Department, which is tasked with overseeing and enforcing the new requirements. The bill mandates that insurers report specific preauthorization statistics to the department annually. This reporting includes data on the percentage of authorizations, adverse preauthorization determinations, and appeal statistics, offering the department crucial insights into insurer practices and compliance with the new regulations. These reporting mechanisms are vital for monitoring the effectiveness of the bill's provisions and for identifying any potential areas of non-compliance or systemic issues within the health insurance preauthorization landscape.

Furthermore, the legislation establishes a framework that emphasizes transparency and accountability from insurers. By requiring insurers to post detailed preauthorization requirements and statistics on their websites, the bill empowers both the Insurance Department and the public to scrutinize insurer behavior. The department's role extends to ensuring that insurers adhere to the stipulated timelines for making authorization decisions and that human oversight is maintained in the review process, particularly when AI is utilized. This robust framework aims to ensure that the integration of AI in health insurance preauthorization is conducted responsibly, with appropriate checks and balances to protect consumers and maintain fair practices across the industry.

Key Focus Areas

Utah SB 319 concentrates on several critical areas to reform health insurance preauthorization. A primary focus is on AI Disclosure, mandating that insurers explicitly state whether they employ artificial intelligence or automated tools in their processes for reviewing authorization requests. This provision is designed to enhance transparency, allowing patients and providers to understand the role of technology in healthcare decisions. The bill ensures that the use of AI does not replace human judgment, particularly in adverse determinations.

Another significant area is Human Oversight in Decision-Making. The bill explicitly requires that an individual reviewing an adverse preauthorization determination must exercise independent medical judgment and not rely solely on recommendations generated by AI or any other automated source. This ensures that critical healthcare decisions retain a human element, preventing algorithmic bias or errors from solely dictating patient care. Additionally, the bill addresses Preauthorization Timelines, defining maximum periods within which insurers must make authorization or adverse preauthorization determinations, with expedited processes for urgent care. It also establishes Authorization Validity Periods, requiring authorizations for chronic or long-term care conditions to be valid for at least 12 months and for outpatient services for at least six months, reducing administrative burdens for ongoing treatments. Finally, Increased Transparency is a key component, with insurers required to post detailed preauthorization requirements, statistics on approvals, denials, and appeals, and clinical criteria used for decisions on their websites.

Implementation Framework

The implementation framework for Utah SB 319 places specific obligations on health insurers to adapt their operational procedures and communication strategies. Insurers are required to conspicuously post comprehensive information regarding preauthorization requirements on their websites, presented in easily understandable language. This includes detailed statistics on authorizations, adverse preauthorization determinations, and appeals, categorized to provide clear insights into their decision-making processes. Crucially, if an insurer utilizes artificial intelligence in reviewing authorization requests, a notice of this use must also be prominently displayed on their website.

Furthermore, the bill outlines procedures for modifying existing preauthorization requirements. Any such modifications necessitate a 30-day advance notice posted on the insurer's website, and written notice must be provided to network providers upon request. This ensures that healthcare providers are adequately informed of changes, minimizing disruptions to patient care. The framework also dictates specific timeframes for insurers to render decisions on authorization requests, distinguishing between urgent and non-urgent cases to ensure timely access to care. These detailed requirements aim to standardize and clarify the preauthorization process, fostering greater efficiency and transparency across the health insurance sector in Utah.

Monitoring and Evaluation

Monitoring and evaluation of Utah SB 319's effectiveness are primarily facilitated through mandatory reporting requirements imposed on health insurers. Beginning each April 1, insurers with preauthorization requirements are obligated to submit comprehensive reports to the Utah Insurance Department. These reports must detail, for the preceding calendar year, the percentage of authorizations, adverse preauthorization determinations, and appeal statistics. The data is expected to be categorized, including information related to prescription drugs, providing a granular view of insurer practices. This systematic collection of data is crucial for the Insurance Department to assess compliance, identify trends, and understand the impact of AI integration on preauthorization outcomes.

The bill also includes specific repeal dates for certain reporting provisions, indicating a legislative intent for periodic review and potential adjustment of these requirements. For instance, subsections related to the reporting of the number of approved and denied preauthorizations and the rulemaking for preauthorization reporting are set to be repealed on July 1, 2029. Another section concerning coordination with other states is slated for repeal on July 1, 2033. These sunset clauses suggest that the legislature anticipates evaluating the efficacy and necessity of these reporting mandates over time, allowing for flexibility and adaptation based on observed outcomes and evolving industry standards. This forward-looking approach ensures that the regulatory framework remains relevant and effective in addressing the dynamic landscape of health insurance and AI.

Penalties, Liability, and Appeals

While Utah SB 319 primarily focuses on establishing disclosure requirements, transparency, and operational standards for health insurance preauthorization, it implicitly leverages existing enforcement mechanisms within Utah's insurance code for non-compliance. The bill amends existing sections of the Utah Code (specifically 31A-22-650 and 63I-1-231), meaning that violations of the new provisions would likely fall under the purview of the Utah Insurance Department's general enforcement powers. These powers typically include the ability to investigate complaints, issue corrective actions, impose administrative fines, or even revoke licenses for severe or repeated infractions. The absence of explicitly enumerated new penalties within SB 319 suggests an reliance on the existing regulatory framework for insurance practices.

Regarding liability and appeals, the bill introduces provisions designed to enhance fairness and provide avenues for redress. Insurers are required to provide detailed explanations for any adverse preauthorization determination, outlining the specific reasons for denial and the criteria that were not met. This increased transparency is critical for patients and providers to understand the basis of a denial and to formulate effective appeals. Furthermore, the mandate for independent medical judgment in reviewing adverse determinations, rather than sole reliance on AI recommendations, strengthens the grounds for challenging decisions that may be perceived as algorithmically flawed or lacking human context. The bill's emphasis on clear communication and the right to appeal ensures that mechanisms are in place for individuals to contest unfavorable decisions and seek appropriate resolution.

Relationship to Other Instruments

Utah SB 319 operates by amending existing statutes within the Utah Code, specifically Section 31A-22-650, which pertains to health care preauthorization requirements, notice, reporting, and the prohibition of retroactive denials. It also amends Section 63I-1-231, which deals with repeal dates within Title 31A. By modifying these established legal instruments, SB 319 integrates its new provisions directly into the existing regulatory framework for health insurance in Utah, ensuring continuity and leveraging established enforcement mechanisms. This approach avoids creating an entirely new, standalone piece of legislation, instead opting to refine and update current laws to address the emerging challenges and opportunities presented by artificial intelligence in healthcare.

Crucially, the bill's definition of "Artificial intelligence" and "Generative artificial intelligence" explicitly references Section 53-25-901 of the Utah Code. This cross-referencing is a deliberate legislative technique to maintain consistency and coherence across different state laws concerning AI. By adopting a uniform definition, SB 319 ensures that the understanding and application of AI-related terms are consistent, preventing potential ambiguities or conflicts with other state regulations that may also address artificial intelligence. This interconnectedness with other Utah Code sections highlights a broader legislative effort to develop a cohesive regulatory landscape for AI across various sectors within the state.

International Alignment

As a state-level legislative initiative from Utah, United States, SB 319 primarily addresses domestic regulatory concerns within the state's jurisdiction. Therefore, it does not directly align with international AI regulations or frameworks. State-specific legislation like this typically focuses on local issues, consumer protection within state borders, and the specific operational requirements of industries regulated at the state level, such as health insurance. The bill's provisions are tailored to the unique legal and healthcare landscape of Utah, reflecting the priorities and concerns of its constituents and legislative body.

While Utah SB 319 does not have an explicit international alignment, its principles of transparency, human oversight, and accountability in AI decision-making within a critical sector like healthcare resonate with broader global discussions and emerging international best practices for responsible AI governance. Many international bodies and national governments are exploring similar themes to ensure that AI development and deployment are ethical, safe, and beneficial to society. However, the specific mechanisms and legal mandates of SB 319 are designed for the U.S. state context and do not incorporate or directly reference international treaties, agreements, or regulatory standards.

Implementation Timeline

MilestoneDateNotes
Governor Signed2026-03-19Bill signed into law by the Governor.
Effective Date2026-05-06The date on which the bill's provisions become legally binding.
Reporting Requirement Repeal (Certain Subsections)2029-07-01Specific reporting provisions related to preauthorization statistics and rulemaking are repealed.
Coordination with Other States Repeal2033-07-01Section 31A-2-217 regarding coordination with other states is repealed.

Compliance Checklist

CheckRequired Action
Post Preauthorization RequirementsInsurers must conspicuously post all preauthorization requirements in detail and easily understandable language on their public website.
Disclose AI UseInsurers must disclose whether artificial intelligence is used in the process of reviewing a request for authorization on their website.
Ensure Human OversightAn individual reviewing an adverse preauthorization determination must use independent medical judgment and not rely solely on AI recommendations.
Adhere to Decision TimelinesInsurers must make authorization or adverse preauthorization determinations within defined maximum timeframes, with expedited review for urgent cases.
Ensure Authorization Validity PeriodsAuthorizations for chronic/long-term conditions must be valid for at least 12 months; outpatient services for at least 6 months.
Report Statistics to Insurance DepartmentAnnually report authorization, denial, and appeal statistics to the Utah Insurance Department.
Provide Detailed Denial ExplanationsInsurers must provide specific information in notices regarding adverse preauthorization determinations, including reasons for denial and appeal processes.
Update Website for ModificationsInsurers must update their website to reflect any modifications to preauthorization requirements at least 30 days before the change takes effect.

Sources and References

SourceType
Utah Legislature - SB 319government
Plain English

A new Utah law, Senate Bill 319 (SB 319), requires health insurers operating in the state to be transparent about their use of artificial intelligence (AI) in preauthorization decisions, ensure human oversight, and adhere to strict timelines for approvals. This legislation, effective May 6, 2026, aims to modernize health insurance practices by setting clear guidelines for how insurers use technology while protecting patients and providers. It applies to all health insurers in Utah that require preauthorization for services.

The law introduces several key obligations for these insurers. First, they must clearly disclose on their public websites if they use artificial intelligence or automated tools in their preauthorization review processes. This includes generative AI, as defined by state code. Second, and crucially, any individual reviewing an adverse preauthorization determination must exercise independent medical judgment and cannot rely solely on AI recommendations. This ensures that critical healthcare decisions maintain a human element. Third, insurers must adhere to strict timelines for making preauthorization decisions, including expedited reviews for urgent care requests. Finally, the law mandates minimum validity periods for authorizations: at least 12 months for chronic or long-term care conditions and at least six months for outpatient services, reducing the burden of frequent re-authorization.

Violations of these new requirements will fall under the existing enforcement powers of the Utah Insurance Department, which can investigate complaints, issue corrective actions, and impose administrative fines. A practical point for product managers and in-house teams is that while AI can streamline processes, the law explicitly demands human judgment for adverse decisions. This means AI tools must be designed to support, not replace, human medical review, particularly when a patient's care is denied. The law also requires annual reporting of authorization statistics to the Insurance Department, though some of these reporting requirements are set to be repealed in 2029 and 2033, indicating a planned review of the law's effectiveness.

Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.

What you must do — compliance checklist

0 / 8 marked complete

Plain-English obligations under Health Insurance Preauthorization Amendments. Not legal advice — verify against the official text before relying on it.

  1. #1CriticalMay 6, 2026

    Applies to: Health insurers

    Insurers must conspicuously post all preauthorization requirements in detail and easily understandable language on their public website.
  2. #2CriticalMay 6, 2026

    Applies to: Health insurers using AI in preauthorization

    Insurers must disclose whether artificial intelligence is used in the process of reviewing a request for authorization on their website.
  3. #3CriticalMay 6, 2026

    Applies to: Health insurers

    An individual reviewing an adverse preauthorization determination must use independent medical judgment and not rely solely on AI recommendations.
  4. #4CriticalMay 6, 2026

    Applies to: Health insurers

    Insurers must make authorization or adverse preauthorization determinations within defined maximum timeframes, with expedited review for urgent cases.
  5. #5CriticalMay 6, 2026

    Applies to: Health insurers

    Authorizations for chronic/long-term conditions must be valid for at least 12 months; outpatient services for at least 6 months.
  6. #6CriticalUpon adverse determination

    Applies to: Health insurers

    Insurers must provide specific information in notices regarding adverse preauthorization determinations, including reasons for denial and appeal processes.
  7. #7CriticalApr 1, 2027

    Applies to: Health insurers with preauthorization requirements

    Annually report authorization, denial, and appeal statistics to the Utah Insurance Department.
  8. #8Important30 days before modification

    Applies to: Health insurers

    Insurers must update their website to reflect any modifications to preauthorization requirements at least 30 days before the change takes effect.

© Regulations.AI — created on 11-Apr-2026 using Gemini 2.5 Flash