HF2635 overhauls how health carriers handle clean claims, audits, and prior authorizations. The bill creates timelines and remedies for audited or unpaid claims, mandates reimbursement of providers’ administrative costs for audits, bars carriers from penalizing providers for out‑of‑network referrals, and imposes procedural and clinical‑peer requirements on utilization review organizations (UROs).
For providers and payers the bill is consequential: it reduces carrier flexibility to retroactively recover payments, formalizes who must decide and document prior‑auth denials, and exposes carriers to civil penalties and mandatory recovery of providers’ litigation costs. Compliance, operational and litigation risk shifts toward carriers; providers gain faster remedies and new bargaining leverage in contract negotiations.
At a Glance
What It Does
Establishes enforceable timelines and remedies for clean‑claim audits and payments, prohibits certain carrier conduct toward providers, and requires URO denials or downgrades be made and documented by qualified clinical reviewers. Violations are treated as unfair trade practices and carry civil penalties.
Who It Affects
Health carriers regulated in Iowa (including Medicaid/Hawki programs and contracted managed care organizations), utilization review organizations, and health care providers that submit claims or request prior authorization. Insurance regulators will gain new rulemaking and enforcement responsibilities.
Why It Matters
Operationally, carriers will need to change audit workflows, hire or document qualified clinical reviewers, and revise provider contracts. For providers, the measure creates faster remedies for stalled payments and stronger protections against contractual coercion and punitive recoupments.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill defines key terms (clean claim, audit, health carrier, health care provider) and then places firm process requirements around claim audits. When a carrier selects a clean claim for audit it must notify the provider quickly, reimburse reasonable administrative costs incurred responding to the audit, finish the audit within a short window after receiving requested records, and provide an appeal route.
If the carrier misses the timelines the claim is automatically approved and must be paid with interest.
HF2635 also restricts carriers’ leverage in network contracting. Carriers may not impose financial penalties, reduce reimbursements, charge administrative fees, or terminate a provider because the provider referred to or affiliated with an out‑of‑network clinician.
The bill bars carrier interference in staffing and referral decisions and requires negotiation before imposing or enforcing onerous contract amendments; unconscionable contract terms are void.On prior authorization, the bill requires that any denial or downgrade be made by an appropriately matched clinical decision‑maker: a “qualified reviewer” physician for physician requests, or a clinical peer for non‑physician requests. The URO must give the requesting provider a written denial that states specific reasons, cites the clinical or coverage criteria relied on, explains appeals, and includes a signed attestation listing reviewer credentials and identifiers.
At the provider’s request the URO must hold a live consultation within seven business days, and appeals must be decided by a reviewer who did not make the initial decision.Enforcement is immediate: violations of the audit, conduct, or prior authorization rules are designated unfair trade practices, subject carriers to civil penalties, and entitle providers to recover litigation costs, including attorneys’ fees, regardless of whether they prevail. The bill includes targeted exemptions for claims under active fraud investigations and for federal programs requiring audits, and phase‑in language that applies the prior‑authorization changes to plans and requests affected after January 1, 2027.
The Five Things You Need to Know
A carrier that audits a clean claim must notify the provider within 15 calendar days of selecting the claim and finish the audit and issue a determination within 45 calendar days after receiving all requested documentation.
If the carrier violates the audit timing rules the clean claim is automatically approved and must be promptly paid with interest at 10% per annum.
The bill requires the carrier or URO to include a signed attestation with any denial or downgrade naming the reviewer and providing the reviewer’s NPI, state license number, board certifications, specialty expertise, and educational background.
Health carrier is defined to include the state medical assistance program (Medicaid), the Hawki program, and managed care organizations contracting with the Department of Health and Human Services.
A provider who sues a carrier under these provisions is entitled to recover litigation costs, including reasonable attorney fees and litigation expenses, regardless of the lawsuit’s outcome.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Audits of clean claims — notice, timelines, cost reimbursement, and automatic approval
This section operationalizes audits: it defines “audit” and “clean claim,” requires carriers to reimburse documented, reasonable administrative costs providers incur responding to audits, and sets process deadlines — notification soon after selection, a 45‑day completion window after records are received, and appeal timelines. The practical effect is to force carriers to either move quickly on clinical or billing disputes or pay the claim with interest, reducing the use of protracted post‑payment recoupments.
Standards of conduct — limits on contractual and operational leverage over providers
This provision prohibits carriers from imposing financial penalties, reimbursement reductions, administrative fees, or network removals based solely on a provider’s referrals or affiliations with out‑of‑network clinicians, and from micromanaging staffing or referral decisions. It also requires an opportunity to negotiate contract amendments and renders unconscionable obligations void. Practically, carriers must revisit contract language and enforcement practices and cannot impose one‑sided changes without negotiation.
Integrating new violations into state unfair trade practice enforcement and expanding ‘insurer’ scope
The bill amends existing trade practice statutes to enumerate violations of the new audit and conduct rules as unfair or deceptive acts, subject to civil penalties. It also clarifies that the term “insurer” covers a wider set of entities — explicitly including Medicaid/Hawki and contracted managed care organizations — ensuring enforcement reaches public program contractors as well as commercial carriers.
Prior authorization — who can decide denials, required documentation, consultation and appeal rules
This section requires that denials or downgrades be made by an appropriately matched clinician: a physician qualified reviewer for physician requests or a clinical peer for non‑physician requests. It compels the URO to provide a written reasoned denial, attestation of reviewer credentials, and an explanation of the appeals process; mandates a live consultation within seven business days on request; and requires appeals be heard by an independent reviewer. The provision formalizes clinical accountability in utilization review decisions and creates documentation standards for audits and litigation.
Prior authorization exemptions and applicability
The bill carves out two specific prior‑auth exemptions: cancer‑related screening or preventive services recommended per the most recent NCCN oncology guidelines, and emergent diagnoses that arise during inpatient care that require immediate assessment and treatment. The new prior‑auth rules apply to plans and requests affected on or after January 1, 2027, with transitional coverage for pending requests begun before that date but not finally determined by it.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Independent and small provider practices — faster remedies for delayed payments, reimbursement for time spent on audits, and reduced risk of surprise recoupments improve cash flow and reduce administrative burden.
- Patients needing cancer screening or emergent inpatient care — the prior‑authorization exemptions lower the chance of preauthorization delay for certain cancer‑related preventive services and urgent inpatient‑onset conditions.
- Provider contracting teams and counsel — stronger statutory protections against unilateral contract amendments and certain punitive clauses increase providers’ negotiating leverage.
- Providers pursuing enforcement — statutory entitlement to litigation costs and fees regardless of case outcome makes enforcement more financially viable for providers with borderline claims.
Who Bears the Cost
- Health carriers and contracted UROs — operational and staffing costs to meet strict timelines, pay interest and audit reimbursements, procure or document qualified reviewers, and defend against increased litigation exposure and civil penalties.
- Managed care organizations administering Medicaid/Hawki — expanded compliance obligations and potential financial exposure now explicitly brought into the covered definition of carriers.
- State insurance regulator (Commissioner) — additional rulemaking, oversight and enforcement workload to implement definitions, audit standards, reviewer attestation requirements, and to process civil penalty actions.
- Employers and plan sponsors (indirectly) — administrative and compliance costs for self‑insured plans or plan admin vendors may increase if carriers pass along higher operating costs through premiums or fees.
Key Issues
The Core Tension
The bill’s central dilemma is balancing provider payment certainty and contractual protections against carriers’ need to detect fraud, control inappropriate utilization, and manage program integrity; it speeds payment and raises transparency at the cost of narrowing carriers’ time and tools for investigation, while leaving unresolved questions about reviewer independence and the practical scope of fraud exemptions.
HF2635 trades off speed and payment certainty against carriers’ ability to investigate complex claims and control fraud and inappropriate utilization. The automatic‑approval remedy plus a 10% interest penalty creates a strong disincentive for carriers to extend audit timelines, but it also increases the stakes of premature or incomplete carrier decisions.
Carriers will need to balance faster audits with ensuring sufficient factual and clinical review to avoid overpayments.
The requirement that denials and appeals be decided by reviewers who are employed by or contracted with the carrier or URO raises a paradox: the bill tightens clinical‑peer requirements but keeps decision‑makers within the carrier/URO employment ecosystem, which may not eliminate perceived conflicts of interest and could narrow the pool of available reviewers. The attestation requirement (NPI, license, board certifications, education) improves transparency but increases administrative burden and may slow decisions if carriers must assemble and verify credentials for each denial.
Practical enforcement questions remain. The exemptions for active fraud investigations and federally mandated audits are necessary but susceptible to broad interpretation: carriers could invoke “active fraud investigations” to delay protections, triggering disputes over what constitutes an appropriate invocation.
Finally, the entitlement to litigation fees regardless of outcome increases providers’ leverage but may encourage marginal suits that increase system costs and regulator workload.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.