KFF Report Maps Patchwork of Rules Governing AI in Health Insurance Decisions

WASHINGTON — A new KFF report maps the federal and state regulatory framework governing artificial intelligence use in health insurance coverage decisions, finding uneven consumer protections as insurers increasingly deploy automated systems.

The report, titled “Regulation of AI in Prior Authorization and Claims Review: A Look at Federal and State Consumer Protections,” surveys both existing and proposed rules at the federal and state level that constrain how health insurers may deploy AI-driven tools when deciding whether to approve, deny or delay medical care, according to KFF.

Prior authorization — the requirement that patients or providers obtain insurer approval before receiving certain treatments — has long been a point of contention in health care policy. The integration of AI and algorithmic tools into these processes has drawn scrutiny from regulators, consumer advocates and lawmakers concerned that automated systems may improperly deny medically necessary care.

Federal Landscape

At the federal level, the report examines how existing authorities under the Affordable Care Act, the Employee Retirement Income Security Act and Medicare and Medicaid regulations apply to AI-assisted coverage determinations. The Centers for Medicare and Medicaid Services finalized rules in recent years requiring greater transparency in prior authorization processes, including provisions that touch on the use of automated decision-making tools.

The analysis also addresses the role of the Department of Health and Human Services and the Federal Trade Commission in overseeing AI deployment by insurers, according to KFF. Federal regulators have signaled increasing attention to algorithmic bias and the potential for AI systems to systematically deny claims without adequate individualized medical review.

State-Level Action

The KFF report finds that states have emerged as primary laboratories for AI health insurance regulation. A growing number of state legislatures have enacted or proposed laws specifically addressing AI in insurance decision-making, with provisions ranging from disclosure requirements to outright prohibitions on fully automated claim denials without human review.

Several states have moved to require that insurers disclose when AI tools are used in coverage decisions and ensure that patients retain meaningful access to human review of adverse determinations. State insurance commissioners have also issued guidance and enforcement actions targeting AI-driven prior authorization practices, according to the analysis.

Industry Impact

The regulatory landscape carries implications for major health insurers including UnitedHealth Group, Cigna, Aetna and their competitors, all of which have invested in AI and machine learning systems to process the millions of prior authorization requests handled annually across the U.S. health care system.

The health insurance industry has argued that AI tools can improve efficiency, reduce administrative burden on providers and speed coverage decisions for patients. Critics counter that algorithmic systems may prioritize cost containment over clinical appropriateness, pointing to lawsuits and investigative reports alleging that some insurers used AI to deny claims at scale without adequate medical review.

Consumer Protection Gaps

The KFF analysis finds that despite growing regulatory activity, gaps remain in consumer protections. The patchwork nature of state-by-state regulation means that protections available to patients vary widely depending on geography and the type of insurance plan they hold, with self-insured employer plans governed by federal ERISA law often falling outside the reach of state insurance regulations.