Codify — Article

California AB 539: Prior authorizations must remain valid for at least one year

Requires DMHC‑ and DOI‑regulated prior authorizations to carry a minimum one‑year duration (or cover the course of treatment if shorter), shifting administrative and financial risk.

The Brief

AB 539 amends two California statutes that govern health care service plans and health insurers to impose a minimum durability requirement on prior authorizations. The bill requires a prior authorization to remain in effect for at least one year from the date of approval, or for the entire course of prescribed treatment if that course is less than one year, and preserves the existing prohibition on rescinding authorizations after a provider renders services in good faith.

The change creates operational and compliance effects for Department of Managed Health Care (DMHC)–regulated plans and Department of Insurance (DOI)–regulated insurers: authorization workflows, recordkeeping, and utilization‑management practices will need updates; providers and patients should see fewer retroactive denials; payers face longer exposure to authorized services. The bill also leaves unchanged the scope of covered benefits and retains existing enforcement tools under state law.

At a Glance

What It Does

Amends Health & Safety Code §1371.8 and Insurance Code §796.04 to add a statutory floor for prior‑authorization duration: authorizations must remain effective for at least one year from approval or throughout the prescribed course of treatment if shorter. The bill keeps in place the existing ban on rescinding an authorization after a provider renders services in good faith.

Who It Affects

DMHC‑regulated health care service plans and DOI‑regulated health insurers, the physicians and facilities that seek authorizations, third‑party prior authorization vendors, and revenue‑cycle teams that manage claims and appeals. Patients receiving multi‑visit or chronic treatments will be directly affected by reduced need for repeat authorizations.

Why It Matters

This creates a predictable baseline for authorization duration that reduces administrative churn and the risk of retroactive denials, while forcing payers to absorb longer coverage windows for authorized care. For compliance teams and plan actuaries the bill requires operational changes and may affect utilization management and cost forecasting.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

AB 539 changes California law governing prior authorizations by adding a clear minimum duration. Where plans or insurers approve a specific treatment, that approval must stay in effect for at least one year from the approval date.

If the prescribed course of treatment ends in less than a year, the authorization must remain effective for the entire course. The measure does not expand covered benefits or alter the contractual terms that define plan coverage.

The bill modifies parallel provisions in the Health and Safety Code (governing licensed health care service plans) and the Insurance Code (governing insurers). Both provisions already bar a plan or insurer from rescinding or modifying an authorization after a provider has rendered care in good faith; AB 539 leaves that protection intact while imposing the new minimum time floor.

Practically, that means an authorization supplied for multi‑visit therapies, ongoing specialty medications, or serial procedures cannot be withdrawn midcourse on administrative grounds tied to enrollment changes or later eligibility determinations.Implementation will be primarily operational: plans and insurers must track authorization start dates and durations, update provider-facing portals and prior‑auth rules, and adjust notification and appeals workflows. Providers and their billing offices will likely see fewer returns for missing or expired authorizations during the one‑year window, but providers must still document good‑faith delivery of services and comply with plan requirements.

The statute preserves payers’ ability to enforce medical necessity, benefit limits, and contractual exclusions; it does not prevent prospective denials or requirements that authorizations meet plan criteria at issuance.Enforcement remains with state regulators and existing statutory remedies. Because the underlying Knox‑Keene and Insurance Code frameworks treat willful violations as criminal or administrative offenses, the bill’s changes operate inside that enforcement environment.

The legislation also includes the standard state fiscal notice clarifying that no state reimbursement is required for local agencies under a specified constitutional provision.

The Five Things You Need to Know

1

AB 539 amends Health & Safety Code §1371.8 and Insurance Code §796.04 to add a minimum validity period for prior authorizations.

2

A prior authorization must remain effective for at least one year from the date of approval, unless the prescribed course of treatment is shorter, in which case it must last for the entire course.

3

The bill leaves intact the existing prohibition on rescinding or modifying an authorization after a provider renders care in good faith and pursuant to that authorization.

4

The statute explicitly states it does not expand or alter the benefits available under a plan or change contract terms between policyholders and insurers.

5

The amendments sit within existing enforcement frameworks for DMHC and the Department of Insurance; willful violations remain subject to existing penalties under those laws.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 1 — Health & Safety Code §1371.8

Minimum validity and nonrescindable authorizations for health care service plans

This section inserts a minimum‑duration rule into the statute governing licensed health care service plans, requiring prior authorizations to remain valid at least one year from approval or for the full course of treatment if shorter. It keeps the long‑standing bar on rescinding an authorization after a provider has rendered care in good faith and reiterates that the change does not expand plan benefits. For plan administrators, this creates a hard timing obligation tied to the approval date that must be reflected in authorization systems and provider communications.

Section 2 — Insurance Code §796.04

Parallel requirement for insurers regulated by the Department of Insurance

This mirrors the Health & Safety Code amendment for insurers: authorized treatments covered under a policy must remain authorized for at least one year or for the course of treatment if shorter. The duplicate structure ensures both DMHC‑regulated plans and DOI‑regulated insurers operate under the same minimum‑duration standard. Insurers must adjust utilization management, appeals, and recovery practices to accommodate the extended durability of approvals.

Section 3 — Reimbursement clause

State fiscal note—no reimbursement required under Article XIII B

The bill includes the standard disclosure that no state reimbursement is required for local agencies or school districts under Section 6 of Article XIII B because any costs would arise from criminal or penalty changes. Practically, this limits claims that the state must pay for local enforcement obligations tied to the statute; it does not change the underlying enforcement authorities or penalties that can be applied for noncompliance.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Healthcare across all five countries.

Explore Healthcare in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Patients with chronic or multi‑visit treatment plans — reduced likelihood of repeated prior‑authorization requests and fewer interruptions to continuing care during the one‑year window.
  • Providers (physicians, specialists, clinics) — greater billing and clinical certainty because approved treatments remain in force, lowering the risk of retroactive denials and payment disputes tied to authorization expirations.
  • Revenue‑cycle and clinical administrative staff — less time spent on renewals or repeated authorization submissions for treatments that fall within the one‑year period, improving workflow efficiency.

Who Bears the Cost

  • Health care service plans and health insurers regulated by DMHC and DOI — must update systems, adjust prior‑authorization policies, and accept longer exposure to authorized services, which can increase administrative and financial risk.
  • Third‑party prior authorization vendors and IT teams — required to change business rules, interfaces, and reporting to track the new minimum duration and to support providers and payers in transition.
  • Compliance, legal, and actuarial departments at payers — face increased workload to interpret the scope of the new rule, reassess utilization management strategies, and model cost implications; potential need to renegotiate provider contracts or update medical necessity protocols.

Key Issues

The Core Tension

The bill forces a trade‑off between continuity and certainty for patients and providers on one hand, and payers’ ability to manage utilization and control improper payments on the other; imposing criminal‑level enforcement on what can be operational or interpretive disputes intensifies that tension and raises implementation and legal questions.

AB 539 is straightforward in text but creates several implementation and policy tensions. First, the law guarantees temporal durability for approvals but does not define key operational terms: the bill does not specify how to compute the ‘‘date of approval’’ for multi‑stage authorizations, whether partial approvals reset the one‑year clock, or how concurrent authorizations for related services interact.

Those ambiguities will require regulatory guidance or litigation to resolve and will drive divergent operational interpretations across payers.

Second, the statute preserves payers’ ability to apply benefit limits, medical necessity reviews, and prospective denials at the time of authorization, but it does not explicitly limit retrospective audit recoveries or clawbacks where a payer later determines fraud or misrepresentation. That raises practical questions about the boundary between protecting good‑faith provider reliance and enabling payers to detect and correct improper payments.

Finally, inserting a minimum validity period shifts financial and utilization risk toward payers; absent offsetting changes, plans may respond by tightening initial authorization criteria, increasing administrative controls, or adjusting premiums. The criminal and enforcement context further complicates the picture: treating willful violations as punishable conduct raises stakes for both regulators and plans when disagreements arise over proper application of the rule.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.