As states continue introducing prior authorization reforms tied to artificial intelligence, payers are facing growing uncertainty around how AI can be used in claims reviews and medical necessity determinations. A recent KFF analysis outlines several key issues shaping the future of AI regulation in healthcare.
- ERISA May Limit State Oversight
The Employee Retirement Income Security Act (ERISA) generally shields self-funded employer health plans from many state insurance regulations, meaning some state AI laws may not apply to these plans. However, ERISA still requires insurers to provide fair and thorough claims review processes. - Federal AI Standards Could Override State Rules
A nationwide federal framework could simplify compliance for insurers operating across multiple states, but it could also reduce stricter protections already established at the state level. Current federal guidance surrounding AI use in Medicare and Medicaid remains limited. - Several States Already Have AI Healthcare Laws
As of late April, nine states — including California, Texas, Illinois, Indiana, and Alabama — had enacted laws addressing AI use in prior authorization or claims review processes. - HIPAA May Not Fully Cover AI Data Risks
While HIPAA protects patient information handled by healthcare providers and insurers, some third-party AI vendors and technology companies may fall outside those protections, raising concerns about privacy and data security. - CMS and Medicare AI Oversight Is Increasing
CMS’ new Wasteful and Inappropriate Services Reduction Model uses technology vendors to support prior authorization efforts in traditional Medicare, with some vendors reportedly incorporating AI tools. Regulators continue emphasizing that algorithms alone should not determine medical necessity without individualized clinical review. - Legal Challenges Could Shape Future Policy
Lawsuits involving AI-assisted claim denials are gaining national attention and may influence how courts and regulators approach AI oversight in healthcare moving forward.
As AI adoption expands across healthcare operations, providers and payers may need to monitor both state legislation and emerging federal guidance closely to remain compliant and prepared for future regulatory changes.
Resource: Federal vs. state AI rules: What payers need to know