CO-197 Denial Code: The Prior Authorization Recovery Playbook for AR Teams in 2026

What Is CO-197 Denial Code and Why It’s Costing Your Practice Revenue Right Now

The co 197 denial code means the payer rejected the claim because prior authorization, precertification, or notification was not obtained before the service was rendered.

Per X12, the standards body that maintains all HIPAA-mandated claim adjustment reason codes, the verbatim CARC 197 description reads: “Precertification/authorization/notification/pre-treatment absent.” The CO prefix means Contractual Obligation, so the provider absorbs the write-off and the patient can’t be billed.

Prior authorization denials are now one of the costliest revenue cycle problems in U.S. healthcare. Per KFF’s 2024 Medicare Advantage report, MA insurers issued 52.8 million prior authorization determinations in 2024 and denied 4.1 million of them at a 7.7% denial rate.

Even more striking, KFF data shows 80.7% of appealed denials were at least partially overturned, but only 11.5% of denied requests were ever appealed.

That’s massive recoverable revenue sitting on the table. The OIG’s April 2022 audit and follow-up October 2024 audit both confirmed that Medicare Advantage plans inappropriately deny prior authorization requests at rates that meet Medicare coverage rules.

In 2025, PA-related denials accounted for nearly 11% of all initial claim denials across commercial payers, with CO-197 sitting at the center of that volume.

Initial claim denial rates reached 11.8% in 2024, per MDaudit’s Hospital Denial Report. Experian Health’s 2025 State of Claims found 41% of U.S. providers reporting denial rates at or above 10%. At $25-$118 in rework cost per denied claim (MGMA 2024), CO-197 isn’t an administrative nuisance. It’s a measurable revenue leak.

This is the Top 10 Denial Codes in Medical Billing for 2026 AR practitioner playbook for CO-197.

We’ll walk through the X12 standard, the 4 group code variants, the full authorization code family disambiguation, the 7-RARC operational pairing table, the 4-Phase Authorization Recovery Workflow, payer-specific behavior across BCBS, UHC, Anthem, Aetna, Cigna, Humana, and Wellcare, and the 2026 CMS regulatory updates that change CO-197 workflow this year.

One O Seven RCM’s professional denial management services catch every recoverable denial before it exits your A/R.

X12 Authority: What CO-197 Denial Code Means Officially

Per X12, the standards body that maintains all HIPAA-mandated claim adjustment reason codes, the official co 197 denial code CARC 197 definition reads verbatim:

“Precertification/authorization/notification/pre-treatment absent.”

CARC 197 has been active since October 31, 2006, with its last definitional update on May 1, 2018. As of May 14, 2026, the code remains current and unmodified. X12 updates the CARC and RARC code sets three times per year, approximately March 1, July 1, and November 1.

Where CO-197 Appears on the Remittance

CO-197 appears in two operational contexts. On paper Explanation of Benefits documents, you’ll find it in the bottom adjustments section. On electronic 835 ERA transactions, CARC 197 populates the CAS segment within Loop 2110 (Service Payment Information). The CAS segment carries the group code, the reason code, and the adjustment amount as three sequential fields.

Per CMS’s HIPAA Administrative Simplification rule, payers must use CARCs and RARCs approved by X12-recognized code set maintainers. They can’t substitute proprietary adjustment codes. When a payer issues a “missing auth” denial, X12 mandates that CARC 197 appears on the remittance.

The CO Prefix Decoded

The two-letter prefix CO stands for Contractual Obligation. Per the X12 Claim Adjustment Group Code list, CO indicates the unpaid balance is the provider’s responsibility under the contract between the provider and payer. This is fundamentally different from PR (Patient Responsibility), where the patient is on the hook for the balance.

Per CMS Medicare Claims Processing Manual Publication 100-04, Medicare beneficiaries may be billed only when Group Code PR is used with an adjustment. So when Medicare or a Medicare Advantage plan returns CO-197, the provider absorbs the write-off and the patient can’t be billed.

CO-197 Denial Code (co 197 denial code) Group Code Disambiguation: CO-197 vs PR-197 vs OA-197 vs PI-197

Most denial code articles treat the co-197 denial code as a single code. It isn’t. The same 197 reason code pairs with four different group codes, and each variant has different financial responsibility implications. Your AR team needs to recognize all four variants to apply the right recovery workflow.

Group Code Comparison Table

The 4-Variant Operational Reality

CO-197 (Contractual Obligation) is the most common. The provider failed to obtain authorization per the network contract. The provider absorbs the loss. The patient can’t be billed under any circumstances. This is the variant most denial management workflows are built around.

PR-197 (Patient Responsibility) is rarer but operationally distinct. The plan terms shift the authorization burden to the patient. For example, some specialty Medicare Advantage plans require the member to secure pre-auth for certain non-emergent services. When PR-197 appears, the patient can be billed, but only if the provider performed the service knowing the patient hadn’t secured the authorization.

OA-197 (Other Adjustment) appears in coordination-of-benefits or secondary payer scenarios. The primary payer denied for missing auth, and the adjustment doesn’t squarely fit CO or PR. OA-197 typically requires investigation to determine the correct responsibility tier.

PI-197 (Payer Initiated) is the least understood variant. PI denials occur when a payer reverses a previously paid claim retroactively because they determined post-payment that authorization was missing. PI-197 is most common with Medicare Advantage plans following the CMS-4208-F Contract Year 2026 Final Rule, which restricts plans from reopening previously approved inpatient admissions except for obvious error or fraud.

Patient Billing Compliance Rule

Per CMS Medicare Claims Processing Manual Publication 100-04, Medicare beneficiaries may be billed only when the Group Code is PR. Any CO-197, OA-197, or PI-197 denial under Medicare creates contractual write-off. Billing a Medicare patient for a CO group denial is a compliance violation that triggers Stark and Anti-Kickback scrutiny.

CO-197 Denial Code (co 197 denial code) Family Disambiguation: CO-197 vs CO-198 vs CO-15 vs CO-210 vs CO-284 vs CO-296 vs CO-302

Here’s what no other denial code resource explains clearly: the co 197 denial code is the headline code in a family of seven X12 authorization-related CARC codes. Each one signals a different operational failure. Each one has a different fix path. AR teams that confuse CO-197 with CO-198 or CO-15 waste hours on the wrong recovery workflow.

Authorization Code Family Decoder Table

The Operational Decision Matrix

When the ERA arrives, your team’s first move is to verify which authorization-family CARC you’re actually dealing with. The internal logic matters because each variant routes to a different recovery workflow.

If the CARC is CO-197, no authorization was ever secured. The fix path is retro-auth or appeal. If the CARC is CO-198, you have an authorization but the service exceeded its scope. You’ll need to request scope expansion (more visits, extended date range, or higher unit count) and appeal.

If the CARC is CO-15, authorization exists but wasn’t transmitted correctly. The fix is resubmitting the claim with the auth number properly populated in Loop 2300 REF02 with REF01 qualifier G1. This is often a clearinghouse or billing system bug, not a clinical workflow gap. Our comprehensive CO-16 missing information resolution guide covers similar EDI population mechanics.

If the CARC is CO-210, the auth was secured but late. Some payers will still honor the auth retroactively. Others won’t. Submit the appeal with timestamped documentation showing when the auth was secured versus the service date.

If the CARC is CO-284, you have an auth but it covers a different service than what you billed. If the CARC is CO-296, the auth was issued to a different provider or location. If the CARC is CO-302, the authorization expired and new auth is required for any future services.

Misconception Correction Block

Some competitor sites incorrectly conflate CO-197 with CO-50 (Medical Necessity) or CO-242 (Service Not Authorized by Designated Provider). These are different X12 reason codes with different operational implications. The CO-50 medical necessity appeal framework follows different documentation requirements. The full CO-109 wrong payer resolution playbook is a billing-routing issue, not an authorization failure.

The 8 Operational Triggers of CO-197 Denial Code in 2026

The co-197 denial code communicates an administrative failure, not a clinical judgment. The payer isn’t saying the service was unnecessary. They’re saying the authorization process broke down somewhere between scheduling and claim submission. Here are the 8 operational triggers that produce CO-197 denials in 2026, ranked by frequency.

Trigger 1: Prior Authorization Never Obtained

The most common cause is the simplest: an authorization request was never created. This happens when scheduling staff don’t recognize that a service requires PA, when payer-specific PA matrices aren’t current, or when a new patient is scheduled urgently without PA verification. In 2026, this trigger accounts for roughly 40-50% of CO-197 denials.

Per CMS-0057-F, payers must now provide specific denial reasons (effective 2026), so this trigger is increasingly visible on remittances. Practices that haven’t updated PA matrices since open enrollment are particularly exposed to this trigger in Q1 2026.

Trigger 2: Authorization Expired Before Service Date

Authorizations have expiration dates. When a procedure is rescheduled or postponed, the original auth may expire before the new service date. Per the Medicare OPD Operational Guide updated March 2, 2026, the Prior Authorization Request must be submitted before the service is provided AND before the claim is submitted. PARs aren’t accepted after service completion.

Tracking authorization expiration dates with automated alerts is one of the top operational controls. Without expiration tracking, 15-25% of CO-197 denials trace back to expired authorizations on rescheduled services.

Trigger 3: Authorization Number Missing From Claim

The auth was secured but never transmitted on the 837 EDI transaction. This is purely a billing system, clearinghouse, or EHR configuration issue. The fix is verifying that the authorization number populates Loop 2300 REF02 with REF01 qualifier G1, or Loop 2400 REF02 for service-level authorizations.

Most major billing systems have specific fields for “auth number” but require explicit team training to use them correctly. When CO-197 comes back paired with RARC M62, this is the likely root cause.

Trigger 4: Incorrect or Invalid Authorization Number

Transposed digits. Wrong patient match. Incorrect payer routing. These data entry errors are common when authorizations are manually keyed from payer portals into billing systems. Some payers also issue temporary or provisional authorization numbers that expire if the actual auth doesn’t post within a defined window.

Trigger 5: Service Performed Outside Authorization Scope

The auth was issued for CPT 99214 but the service was billed as 99215. The auth covered 6 visits but the patient received 7. The auth approved one provider but a different provider rendered the service.

The auth was issued for one location but the service occurred at another. All of these scope-mismatch scenarios trigger CO-197 (or sometimes CO-284, CO-296, or CO-198 depending on payer interpretation).

Trigger 6: Notification Requirements Not Met

Some payers don’t require formal PA but do require pre-service notification, typically within 24-48 hours for emergency admissions and sometimes 7 days for elective procedures. Missing the notification window triggers CO-197 even though no formal “authorization” was technically required.

Anthem, BCBS, and several Medicare Advantage plans have notification-only workflows that frequently produce CO-197. The distinction between “authorization” and “notification” matters operationally but not financially: both produce CO-197.

Trigger 7: Policy Changes Not Followed

WISeR Model expansion brought 5 new service categories under prior authorization for Original Medicare effective January 1, 2026. DMEPOS PA expansion added new HCPCS codes April 13, 2026. The CMS-0062-P proposed rule will extend PA to provider-administered drugs under Medicare Part B by October 1, 2027.

Workflows built around 2024 PA requirements will produce CO-197 denials in 2026 because the scope has expanded.

Trigger 8: Open Enrollment Authorization Workflow Disruption

October through January each year, payers update their PA matrices, member benefit terms, and authorization vendor relationships. Practices that don’t refresh PA verification workflows during open enrollment frequently see CO-197 denials spike in Q1.

The 2026 cycle was particularly disruptive because CMS-0057-F operational provisions took effect January 1, 2026, requiring impacted payers to publish updated PA decision timeframes and specific denial reasons.

CO-197 Denial Code RARC Pairings: The Complete Operational Decoder Table

Per X12, every co-197 denial code pairs with one or more RARC (Remittance Advice Remark Codes) that provide additional context. Think of CARC 197 as the “what” and the RARC as the “why” or “what now.” The RARC pairing tells your AR team exactly what action the payer expects. Ignore the RARC and you’re guessing at the recovery workflow.

RARC Pairing Reference Table

Decision Tree for RARC Action

When you see CO-197 + N210, file an appeal. The payer is explicitly telling you appeal is the next step. When you see CO-197 + M62, your billing system didn’t transmit the auth correctly. Don’t appeal. Resubmit a corrected claim with the auth in the right EDI field.

When you see CO-197 + MA120 on a Medicare DMEPOS claim, the UTN (Unique Tracking Number) wasn’t appended in CMS-1500 Item 23 or the equivalent 837 field. Per Noridian Medicare guidance, also check whether a special modifier was required to bypass prior authorization for emergency cases.

When you see CO-197 + N758, log into the payer portal and review the specific decision context. The payer made a deliberate denial that requires investigation rather than automatic appeal. When you see CO-197 + N182, the payer never received the authorization request. Submit retro-auth with complete clinical documentation justifying medical necessity.

When you see CO-197 + N674, the service required a prior pre-requisite procedure that may or may not have happened. Verify the clinical sequence and appeal with documentation. When you see CO-197 + N517, submit a new claim (not an appeal, not a corrected claim) with the requested information attached.

The 4-Phase CO-197 Denial Code Authorization Recovery Workflow

One O Seven RCM developed The 4-Phase Authorization Recovery Workflow specifically for AR teams managing high co 197 denial code volumes managing high CO-197 volumes in 2026. Unlike generic 8-step resolution guides, this 4-Phase methodology maps directly to the operational reality of post-CMS-0057-F prior authorization workflows.

Each phase has clear inputs, clear outputs, and a defined decision point that routes to the next phase.

Phase 1: Diagnose

Phase 1 starts the moment the ERA arrives. Your team’s job in Phase 1 is to identify exactly what kind of authorization failure you’re dealing with.

Pull the full ERA context, not just the CARC 197 line. Identify every RARC paired with the denial. Verify the group code (CO, PR, OA, or PI). Cross-reference the CARC 197 with the broader authorization code family from Section 4. Is this truly CO-197, or is it CO-198, CO-15, CO-210, CO-284, CO-296, or CO-302?

Document the audit trail: claim ID, service date, CPT, payer, denial date, ERA receipt date, RARC codes, and group code.

Phase 1 Decision Point: Based on the RARC, decide whether this is a billing system issue (CO-197 + M62 = resubmit), an appeal scenario (CO-197 + N210 = appeal), a retro-auth scenario (CO-197 + N182 = retro-auth attempt), or an investigation scenario (CO-197 + N758 = portal review first).

Phase 2: Decode

Phase 2 is investigation. Before you act, verify what actually happened in the authorization workflow.

Verify whether an authorization was secured for this service. Pull from payer portal, faxed approvals, EHR notes, and authorization log. If auth exists, verify it matches the billed service (CPT, units, dates, provider, location). If auth doesn’t exist, determine if retroactive authorization is available per payer policy.

Some payers allow retro-auth within 24-72 hours. Some allow 14-30 days with medical necessity. Some never allow retro-auth. Contact the payer for clarification when documentation is ambiguous. Review payer portal for the specific denial rationale, especially with N758 pairings.

Phase 2 Decision Point: At the end of Phase 2, you know exactly which fix path applies: corrected claim, retro-auth request, formal appeal, or write-off. Move to Phase 3 only when this is clear.

Phase 3: Re-Authorize

Phase 3 is execution of the authorization recovery action.

If retro-auth is available, submit the retro-auth request with complete clinical documentation (chart notes, medical necessity justification, urgency context, and any relevant labs or imaging). For Medicare DMEPOS denials, ensure the 14-byte UTN is appended to Item 23 on the CMS-1500 or the equivalent 837 field.

If special modifiers were required to bypass prior authorization (emergency situations, ABN scenarios), apply them per payer guidance. If retro-auth is unavailable, prepare the formal appeal package for Phase 4.

If a new authorization is required for future services, secure it now to prevent recurrence. Our real-time eligibility verification and prior authorization services prevent the next CO-197 from occurring.

Phase 3 Decision Point: Did the retro-auth succeed? If yes, move to Phase 4 with the new auth number. If no, route the claim to formal appeal.

Phase 4: Resubmit

Phase 4 is the actual claim resubmission or appeal filing.

Update the claim with the authorization number in Loop 2300 REF02 with REF01 qualifier G1 (for claim-level auth), or Loop 2400 REF02 for service-level authorization. Submit corrected claim (frequency code 7) if the original claim was processed and you’re updating it.

Submit the appeal package if retro-auth failed, including timeline of events, medical necessity documentation, payer policy citations, and clinical records.

Track the appeal or resubmission through adjudication. Per CMS-0057-F, impacted payers must respond to expedited PA decisions within 72 hours and standard PA decisions within 7 calendar days starting January 1, 2026.

Update your denial management dashboard with outcome data (overturn rate, recovery amount, days to recovery). Our comprehensive medical billing services include end-to-end CO-197 recovery management.

Phase 4 Decision Point: Was the claim paid? If yes, document the recovery and close. If no, escalate to ALJ hearing (Medicare, $200 threshold CY 2026) or Federal Court ($1,960 threshold CY 2026), or accept the write-off if the business case doesn’t justify further appeals.

Medicare CO-197 Denial Code Workflow + WISeR Model + OPD PA Program

Medicare co-197 denial code (co 197 denial code) prior authorization in 2026 looks fundamentally different than it did in 2024. The WISeR Model expansion, the updated OPD PA Operational Guide, the DMEPOS HCPCS code additions, and the Medicare Advantage Contract Year 2026 final rule combine to create a Medicare PA landscape that’s stricter, faster, and more transparent.

Medicare OPD PA Operational Guide (March 2, 2026)

Per the Medicare OPD PA Operational Guide updated March 2, 2026, the Prior Authorization Request must be submitted before the service is provided and before the claim is submitted. PARs won’t be accepted after the service is completed. The MAC may deny the claim if the provider didn’t receive a provisional affirmation, unless the service is exempt.

The OPD PA program covers specific HOPD services with PA review at the MAC level. Failure to receive a provisional affirmation before performing the service triggers CO-197 with no retroactive remedy except formal appeal with extraordinary medical necessity documentation.

WISeR Model 2026 Implementation

The Wasteful and Inappropriate Service Reduction (WISeR) Model is CMS’s first expansion of Original Medicare prior authorization in years. WISeR began January 1, 2026, with participants and MACs accepting prior authorization requests on January 5, 2026, for services rendered on or after January 15, 2026.

WISeR operates in 6 states: Arizona, New Jersey, Ohio, Oklahoma, Texas, and Washington. Per WISeR Operational Guide Version 6.0 last updated April 24, 2026, the model targets 5 service categories: epidural steroid injections, knee arthroscopy, cervical fusion, nerve stimulator implants, and percutaneous vertebral augmentation.

If your practice operates in any of these 6 states and bills any of these 5 service categories, your previously CO-197-free workflow now requires PA controls. Our CO-24 Medicare Advantage capitation resolution playbook covers similar MA-specific operational gaps.

DMEPOS UTN and 2026 Updates

Medicare DMEPOS prior authorization requires the 14-byte Unique Tracking Number (UTN). Per Noridian Medicare guidance, the UTN must be appended to Item 23 on the CMS-1500 claim form or the equivalent loop/segment for 837 electronic claims.

New HCPCS codes were added to DMEPOS PA requirements effective April 13, 2026. The DMEPOS PA exemption process for high-performing suppliers took effect January 13, 2026, with notices issued April 2, 2026, and the cycle beginning June 1, 2026.

MAC Jurisdictional Behavior

The Medicare Administrative Contractor handling your jurisdiction affects how CO-197 denials are routed and appealed. Noridian (Jurisdictions JE, JF, JJ, JK) covers DME MAC and Part A/B services across western states. CGS (Jurisdiction J15, J5) handles DME and HHH services.

Palmetto GBA (Jurisdictions JJ, JM) covers Part A/B services in southeastern states. NGS (Jurisdictions K, 6, 8) covers northeast and midwest. First Coast (Jurisdictions JN, 9) covers Florida and Caribbean.

Each MAC has different appeal timelines, documentation expectations, and PA submission portals. AR teams managing multi-state Medicare denials must maintain MAC-specific workflows.

Medicare Advantage Contract Year 2026 (CMS-4208-F)

The CMS Contract Year 2026 MA/Part D Final Rule (CMS-4208-F) restricts Medicare Advantage plans from reopening or modifying a previously approved inpatient admission decision except for obvious error or fraud. This provision should reduce PI-197 retroactive denials, but only if practices document approved authorizations meticulously.

When you obtain MA authorization for inpatient admission, document the approval timestamp, the approving plan representative, and the auth reference number. If the MA plan attempts a retroactive denial, CMS-4208-F provisions provide grounds for appeal. Our end-to-end revenue cycle management workflows include MA-specific PA protection documentation protocols.

Medicaid CO-197 Denial Code: TPL + State PA Workflow

Medicaid co-197 denial code, or co 197 denial code, authorization differs from Medicare in two critical ways. First, Medicaid operates as the payer of last resort under Section 1902(a)(25) of the Social Security Act, meaning Third Party Liability must be exhausted before Medicaid reimburses.

Second, Medicaid PA rules vary by state, with each state Medicaid agency setting its own authorization matrix, retroactive auth policies, and appeal timelines.

Medicaid TPL and CO-197

When a Medicaid CO-197 denial appears, the first investigation isn’t “did we secure auth?” but “did we bill the right payer first?” If the patient has commercial primary insurance, Medicaid will deny with CO-197 (or CO-22 Coordination of Benefits) until the primary payer adjudication is complete. Filing Medicaid as primary when commercial coverage exists is a TPL violation.

Per Medicaid.gov Coordination of Benefits guidance, TPL determinations must be exhausted before Medicaid pays. CO-197 on a Medicaid claim with active commercial coverage is almost always a billing sequencing issue.

State-Specific Medicaid PA Variations

Arkansas Medicaid, Texas Medicaid, California Medicaid (Medi-Cal), Florida Medicaid, and New York Medicaid all have different PA matrices and retroactive auth policies. Some allow 30-90 day retroactive authorization with medical necessity. Some require auth before service with no retroactive option. AR teams managing multi-state Medicaid billing must maintain state-specific PA requirement databases, not a single universal workflow.

State PA Reform Laws Affecting Medicaid CO-197

Several states have enacted Gold Card laws that reduce PA burden for high-performing providers. Texas SB 1742 (2024) provides Gold Card exemption for providers with a 90% or higher approval rate on prior 5 PAs. California AB 3260 (2024) creates streamlined PA for high-performing providers. Ohio HB 49 (2024) implements PA reform for specific service categories.

These state-level reforms reduce CO-197 risk for qualifying providers but require active enrollment in the state’s Gold Card program. Providers should evaluate Gold Card eligibility in their operating states.

Dual-Eligible Workflow

Patients enrolled in both Medicare and Medicaid (dual-eligibles, approximately 12.5 million Americans) require Medicare-primary, Medicaid-secondary billing sequencing. CO-197 denials on Medicaid secondary claims often resolve when the Medicare primary adjudication is finalized and submitted with the secondary claim.

CO-197 Denial Code Commercial Payer-Specific Behavior (6+ Payers)

Commercial payers handle the co 197 denial code or co-197 denial code with significantly different operational rules, appeal timelines, and authorization vendors. Generic CO-197 recovery workflows fail because they treat all commercial payers as identical. Here’s how the major commercial payers actually work in 2026.

Blue Cross Blue Shield (BCBS) CO-197

BCBS plans operate through the BlueCard inter-plan program for out-of-state patients, which adds routing complexity to CO-197 denials. Many BCBS plans outsource authorization to third-party vendors. eviCore Healthcare handles imaging, radiology, cardiology, and oncology. AIM Specialty Health manages imaging and specialty drugs. Carelon Medical Benefits Management covers imaging and surgical procedures.

When you see a CO-197 denial from a BCBS plan, verify whether the auth request was submitted to the right vendor. Submitting directly to BCBS when the plan uses eviCore for imaging creates an automatic denial.

Appeals go through Availity Provider Portal for most BCBS plans, though some affiliates still require direct submission. Appeal windows range from 60 to 180 days depending on the state Blues plan.

UnitedHealthcare (UHC) CO-197

UHC operates the UHC Provider Portal for authorization submissions and appeals. UHC updates its prior authorization list monthly, so practices that don’t review the PA matrix on a recurring basis frequently see CO-197 denials when new requirements are added. UHC retroactive authorization is rare. The appeal window is typically 180 days.

UHC also operates Medicare Advantage (UHC MA, AARP Medicare Advantage), commercial, Medicaid (UHC Community Plan), and TRICARE West products, each with slightly different PA rules. A single UHC patient may have different PA requirements depending on which product they’re enrolled in.

Anthem CO-197 (Including Anthem CO-243 Combo for PT/OT)

Anthem (Elevance Health) PA workflows are notable for one critical scenario: PT/OT initial evaluations frequently trigger CO-243 (Services Not Authorized by Designated Provider) plus CO-197 in combination. This pairing appears in r/CodingandBilling threads and clinical billing discussions.

Anthem typically requires PA for PT/OT services beyond the initial evaluation. The initial eval may not require PA if billed under specific codes, but subsequent visits do. The combination of CO-243 plus CO-197 on an initial eval claim usually indicates a workflow gap where PT/OT scheduling didn’t verify Anthem’s specific eval/treatment PA requirements.

Aetna CO-197

Aetna’s appeal window is 60 days, the shortest among major payers. This compresses the recovery timeline dramatically. Aetna requires PA for an extensive list of services including advanced imaging (CT 74177, MRI 70553, PET scans), high-cost surgical procedures, specialty drug therapies, and behavioral health beyond initial evaluation.

Aetna uses Availity for many transactions but maintains the Aetna Provider Portal for PA-specific workflows. Don’t assume that Availity access equals PA submission access. Some Aetna PA requests route through authorization vendor portals separate from Availity.

Cigna CO-197

Cigna operates the Cigna Healthcare Provider (CHCP) Portal. Behavioral health PA workflows under Cigna require concurrent review, meaning initial auth plus periodic re-authorization throughout treatment. Missing the concurrent review window produces CO-197 even when initial auth was secured. Cigna’s appeal window is 180 days for most denials.

Humana CO-197

Humana operates predominantly in the Medicare Advantage space and emphasizes plan enrollment verification before service. Patients who switched MA plans during open enrollment frequently trigger CO-197 denials when scheduling didn’t catch the plan change. Humana also has specific PA requirements for prescription drug benefits under Medicare Part D.

Wellcare CO-197

Wellcare (Centene affiliate) operates primarily in Medicare Advantage and Medicaid managed care across multiple states. Each state Wellcare plan has slightly different authorization workflows. AR teams managing multi-state Wellcare denials must maintain state-specific recovery protocols.

Network Status Caveat

Network status (in-network or out-of-network) doesn’t override PA sequencing. Out-of-network providers still need authorization for PA-required services. Patients sometimes assume out-of-network means no PA required. This misunderstanding is a common source of PR-197 disputes. Our provider credentialing and enrollment services include network verification workflows that prevent these PA-routing failures.

2026-2027 Regulatory Updates Affecting CO-197 Denial Code

The regulatory environment for co-197 denial code and co 197 denial code prior authorization in 2026 is the most active it’s been in over a decade. Twelve federal and state regulatory anchors affect CO-197 workflow this year. Practices that haven’t updated workflows around these changes are vulnerable to denial spikes throughout 2026 and into 2027.

CMS-0057-F: Interoperability and Prior Authorization Final Rule

The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) operational provisions are now in effect as of January 1, 2026.

Impacted payers (Medicare Advantage, Medicaid, CHIP, ACA Marketplace) must respond to expedited PA requests within 72 hours, respond to standard PA requests within 7 calendar days, provide specific denial reasons beginning in 2026, and publicly report PA metrics with initial reporting due March 31, 2026.

The “specific denial reasons” requirement should reduce CO-197 ambiguity over time, as payers must explain exactly why the auth or notification was deemed absent.

CMS-0062-P: Drug Prior Authorization Proposed Rule

On April 10, 2026, CMS released a proposed rule that extends prior authorization reform to drugs billed under the medical benefit. CMS-0062-P proposes a 24-hour decision deadline for urgent drug PA requests, a 72-hour deadline for standard drug PA requests, NCPDP standards adoption for drug PA effective October 1, 2027, with public comment closing June 15, 2026.

Practices billing provider-administered drugs (oncology infusions, IV therapies, specialty injectables) should prepare for ePA workflow transitions throughout 2027. Our comprehensive CO-252 documentation resubmission workflow addresses similar documentation-intensive PA scenarios.

WISeR Operational Guide v6.0 (April 24, 2026)

The WISeR Model Operational Guide updated to Version 6.0 on April 24, 2026, with modifications to select codes and documentation requirements. Practices in the 6 participating states must maintain current copies of the operational guide. The April 24, 2026 update is the version currently in effect.

CMS-4208-F: Medicare Advantage Contract Year 2026 Final Rule

CMS-4208-F restricts Medicare Advantage plans from reopening or modifying a previously approved inpatient admission decision except for obvious error or fraud. This rule is intended to ensure plans honor approved PAs. The provision is critical for hospitals and inpatient facilities managing MA PA reversals.

ONC HTI-4 Final Rule

The ONC HTI-4 Final Rule includes new and updated certification criteria supporting electronic prior authorization and related API functionality. The HTI-4 documentation was last updated March 31, 2026.

Federal Register CY 2026 AIC Adjustment

For CY 2026 Medicare appeals (requests filed on or after January 1, 2026), the ALJ hearing threshold is $200 (up from $190 in CY 2025). The Federal District Court threshold is $1,960 (up from $1,900 in CY 2025). Per Federal Register CY 2026 AIC Adjustment notice, claims may be aggregated to meet the threshold at each appeal level.

State Gold Card Laws Affecting CO-197

Texas SB 1742 provides a Gold Card exemption for providers with a 90% or higher approval rate on prior PAs. California AB 3260 creates streamlined PA for high-performing providers. Ohio HB 49 implements PA reform for specific service categories.

Additional states have pending or partial PA reform legislation. Providers should evaluate Gold Card eligibility in their operating states to reduce ongoing PA burden. Our complete CO-29 timely filing prevention guide covers the timing dimension when late auth intersects timely filing risk.

HIPAA X12 278 Enforcement Discretion (FHIR Shift Signal)

HHS and CMS have stated they won’t take enforcement action against covered entities that don’t use X12 278 transactions as part of an all-FHIR prior authorization process described in CMS-0057-F. This enforcement discretion signals a real shift toward API-based PA workflows that will accelerate through 2027.

CO-197 Denial Code: Denial Management KPIs + Appeals Framework

Effective co 197 denial code management requires measuring the right KPIs and benchmarks. The co 197 denial code appears across all payer types. and knowing your benchmarks. It’s about measuring the right KPIs, structuring the appeal workflow correctly, and operating against documented benchmarks.

The 5 Critical CO-197 KPIs

The Appeal Workflow Decision Tree

Before filing any appeal, the AR team should run this decision tree. Was authorization actually obtained? If yes and not transmitted, this is a CO-15 or CO-197+M62 scenario. Submit a corrected claim, not an appeal.

If auth wasn’t obtained, is retroactive auth available? Some plans allow 24-72 hours, some 14-30 days, some never. Check payer policy first. If retro-auth is unavailable or denied, do you have strong medical necessity documentation? If yes, file the formal appeal. If no, the recovery probability is low.

Calculate the recovery ROI. Per MGMA 2024 data, rework cost per claim is $25-$118. If the claim value is under $200 and appeal probability is below 50%, the math may not justify the appeal.

Medicare Appeal Timelines

Commercial Appeal Timelines

CO-197 Appeal Package Contents

A strong CO-197 appeal package includes: cover letter with timeline of events and reason for appeal, original claim and ERA showing the CO-197 denial, documentation of the authorization request (if attempted), medical necessity narrative from the rendering provider, supporting clinical records (chart notes, imaging, labs), payer policy citations supporting medical necessity, and any relevant peer-reviewed clinical literature.

Our full CO-45 contractual adjustment workflow addresses similar contractual obligation scenarios where appeal preparation matters.

The Recovery Math

Industry data shows practices that restructure CO-197 workflows can reduce auth-related denials by 40% or more within 90 days. A 91% reduction from 32 monthly denials to 3 is achievable with structured pre-auth controls, real-time eligibility verification, and dedicated PA specialist roles.

Per KFF MA data, when CO-197 denials are appealed, 80.7% are at least partially overturned. A practice with 50 monthly CO-197 denials at $400 average claim value, appealing all 50 with an 80% overturn rate, recovers approximately $16,000 monthly in previously lost revenue.

Our comprehensive denial code reference guide for 2026 maps the full denial ecosystem. Our dedicated AR follow-up services manage CO-197 recovery workflows so your clinical staff can focus on care. The full PR-27 coverage termination resolution playbook covers the PR-side recovery math where patient responsibility intersects auth failures.

CO-197 Denial Code Related Codes Cluster

The co-197 denial code (co 197 denial code) doesn’t exist in isolation. Understanding how this co-197 denial code relates to adjacent codes saves AR teams hours. It sits within a broader denial code ecosystem where adjacent codes frequently appear in conjunction or get misclassified as CO-197. AR teams managing CO-197 denials should understand the related codes that appear alongside it.

Coordination of Benefits Adjacency

CO-22 (Coordination of Benefits) often appears alongside or instead of CO-197 when billing sequence errors occur. If you bill Medicaid as primary when commercial insurance exists, CO-22 fires before CO-197 even becomes relevant. Our full CO-22 coordination of benefits recovery playbook covers the COB-side recovery comprehensively.

Non-Covered Service Adjacency

CO-96 (Non-Covered Charges) gets confused with CO-197 because both represent payer non-payment scenarios. CO-96 means the service isn’t covered under the plan at all. CO-197 means the service is potentially covered but PA wasn’t obtained. The recovery workflows differ entirely. Our CO-96 non-covered charges resolution guide covers the non-covered side.

NCCI Bundling and Modifier Adjacencies

CO-97 (Bundling/Incidental) appears when two services that shouldn’t be billed separately get billed separately under NCCI rules. It’s not authorization-related but appears in PAA clusters alongside CO-197. Our comprehensive CO-97 NCCI bundling resolution guide clarifies the distinction.

CO-236 (NCCI Procedure-to-Procedure edits) and CO-4 (NCCI modifier issues) are coding-side denials that can be mistaken for authorization failures when they appear on the same claim. Our CO-236 NCCI PTP edit resolution guide and full CO-4 NCCI modifier resolution guide clarify these distinctions.

PT/OT Specific Adjacency

CO-243 (Services Not Authorized by Designated Provider) frequently appears with CO-197 in Anthem PT/OT initial evaluation scenarios. The fix for CO-243 + CO-197 combos usually requires resubmitting with the correct designated provider and reauthorizing under the appropriate PT/OT benefit code.

Authorization Code Family Quick Reference

Refer to Section 4 (Authorization Code Family Disambiguation) for the complete decoder of CO-197 vs CO-198, CO-15, CO-210, CO-284, CO-296, and CO-302. These are the seven X12 CARC codes that all relate to authorization status, and confusing them leads to incorrect recovery workflows.

The CO-197 Denial Code Prevention Playbook (Front-End Controls)

Co-197 denial code prevention beats co 197 denial code losses every time. The co-197 denial code recovery workflow starts here. The cost of preventing a CO-197 denial is roughly $5-$15 in pre-auth verification time. The cost of recovering one is $25-$118 per MGMA 2024 data, plus the 60-day average to actual payment.

Control 1: Real-Time Eligibility Verification (270/271 EDI)

Every patient encounter should include real-time eligibility verification at scheduling and re-verification at check-in. The 270 EDI transaction requests eligibility from the payer; the 271 response returns coverage details including PA requirements. Integration with the EHR or practice management system reduces manual verification time from 15-30 minutes per patient to under 90 seconds.

Control 2: Pre-Authorization Matrix by Payer

Build and maintain an internal database mapping every commonly billed CPT code to PA requirements for every payer in your network. Update monthly. Reference at scheduling. The matrix should include CPT code and description, payer name and plan type, PA required (Yes/No/Conditional), vendor for PA submission (eviCore, AIM, Carelon, direct), required documentation, and PA decision timeframe per payer.

Control 3: 48-72 Hour Pre-Appointment Authorization Protocol

All PA-required services should have authorization secured 48-72 hours before the appointment. Same-day authorization scrambling is the number one source of CO-197 denials in 2026. Build the protocol into scheduling workflows. Use comprehensive prior authorization workflow services when in-house capacity is insufficient.

Control 4: Designate a Dedicated Pre-Authorization Specialist

Practices over 5 providers should have at least one dedicated PA specialist. The role’s responsibilities include submitting PA requests, tracking PA status, logging auth numbers in EHR, communicating with payers, escalating denials, and maintaining the PA matrix. Single ownership prevents the “everyone-and-no-one” gap that produces CO-197 denials.

Control 5: Authorization Tracking with Expiration Alerts

Every authorization has an expiration date. Build automated alerts that fire 7 days before expiration to either reschedule the service or request scope extension. Without expiration tracking, 15-25% of CO-197 denials trace back to expired authorizations on rescheduled services.

Control 6: Authorization Number Validation at Pre-Submission

Before any claim leaves the billing system, validate that the authorization number is populated in the correct EDI field (Loop 2300 REF02 with REF*G1, or Loop 2400 REF02), the auth number matches patient demographics, and the auth scope (CPT, dates, provider) matches the billed service. Pre-submission validation catches 80-90% of “auth obtained but not transmitted” scenarios.

Control 7: Monthly A/R Spike Root Cause Analysis

Run monthly A/R aging reports filtered by denial code. When CO-197 volume spikes month-over-month, conduct root cause analysis to identify the underlying gap (new PA requirement, vendor change, staff turnover, workflow drift). Our medical billing audit services provide systematic root cause analysis when in-house capacity is insufficient.

Control 8: Electronic Prior Authorization (ePA) Adoption Prep

CMS-0057-F mandates the FHIR Prior Authorization API for impacted payers by January 1, 2027. Practices that haven’t prepared for ePA workflow transitions will be operationally behind by Q2 2027. Start vendor evaluations in 2026, pilot with one payer, and scale by Q4 2026 to be ready for the 2027 mandate.

Patient Education on Authorization Responsibilities

Patients should understand their own responsibility for authorization compliance, especially under PR-197 plans where the patient bears financial responsibility. Include PA expectations in patient onboarding documentation and pre-appointment communications. An informed patient reduces PR-197 disputes and financial-responsibility confusion at collections.

Per AAPC Prior Authorization Resources, best practice includes patient-facing documentation explaining which services require PA and what happens if authorization isn’t obtained.

CO-197 Denial Code Future Outlook: 2026-2027 PA Landscape

The trajectory of co-197 denial code prior authorization in 2026 and 2027 is clear: faster decisions, more transparency, electronic-first workflows, and AI-driven analytics. Practices that prepare now will have an operational advantage.

FHIR Prior Authorization API Mandate (January 1, 2027)

Per CMS-0057-F, the FHIR Prior Authorization API becomes mandatory for impacted payers on January 1, 2027. This replaces faxed PA requests, manual portal entry, and legacy X12 278 transactions with API-based real-time PA submission.

Practices need to identify FHIR-compliant PA submission vendors, train staff on API-based PA workflows, integrate FHIR PA with EHR systems, and pilot with one payer before scaling.

NCPDP ePA for Drugs (October 1, 2027)

The CMS-0062-P proposed rule will require NCPDP ePA standards for drug prior authorization by October 1, 2027, if finalized as proposed. Practices billing provider-administered drugs should monitor the rule’s progress and prepare for drug-specific ePA workflows.

ICD-11 Transition Impact

The U.S. ICD-11 transition planning is underway, with diagnosis-driven PA mapping expected to evolve significantly. Diagnoses will drive PA requirements with greater specificity than under ICD-10-CM. Our ICD-11 transition roadmap covers the full transition timeline and how PA workflows will shift.

AI-Powered PA Platforms

Predictive denial prevention platforms using machine learning are increasingly common. These platforms analyze claim patterns to flag high-CO-197-risk encounters before submission. Major vendors include Olive AI, Epic Payer Path, Waystar, and Change Healthcare. ROI typically appears within 6-12 months of deployment.

State Gold Card Law Expansion

Texas, California, and Ohio have active Gold Card laws. Florida, New York, Pennsylvania, and Michigan have pending or partial legislation. Expect 5-8 additional state Gold Card laws by end of 2027, reducing PA burden for high-performing providers.

Public PA Metrics Transparency

March 2026 marks the first public PA metrics reporting under CMS-0057-F. This data gives practices documented grounds to challenge denials and compare experiences against published payer benchmarks. AR teams should track payer-specific PA approval rates and denial reasons as published benchmarks become available.

Frequently Asked Questions: CO-197 Denial Code and co 197 denial code 2026

What does CO-197 denial code mean?

The co 197 denial code , also called CO-197 denial code , means the payer rejected the claim because prior authorization was not obtained. Per X12, the official co-197 denial code CARC 197 description is “Precertification/authorization/notification/pre-treatment absent.” The CO group code prefix means Contractual Obligation, so the provider absorbs the write-off and the patient can’t be billed.

What is the difference between CO-197 and CO-198?

CO-197 means no authorization exists at all. You never obtained approval for the service. CO-198 means an authorization exists but is exceeded or invalid. The auth had limits that were passed (visits, units, dates). The recovery workflows differ: CO-197 requires retro-auth or appeal; CO-198 requires scope expansion or appeal. Confusing the two routes your team to the wrong fix.

What is code 197?

Code 197, also called the co-197 denial code or co 197 denial code, is a Claim Adjustment Reason Code (CARC) maintained by X12. Its official description reads “Precertification/authorization/notification/pre-treatment absent.” The code has been active since October 31, 2006, with its last definitional update on May 1, 2018. It indicates that the required prior authorization was not obtained before the service was rendered.

How do I avoid a CO-197 denial?

Avoid co 197 denial code by verifying patient eligibility and authorization requirements 48-72 hours before each appointment, maintaining an internal Pre-Authorization Matrix by payer, designating a dedicated PA specialist, tracking authorization expiration dates with automated alerts, and validating that authorization numbers populate correctly in the 837 EDI claim (Loop 2300 REF*G1 qualifier).

Real-time 270/271 eligibility verification at scheduling is your first line of defense.

What does precertification/authorization/notification/pre-treatment absent mean?

“Precertification/authorization/notification/pre-treatment absent” is the verbatim X12 description of the co 197 denial code (CARC 197). It means the payer required some form of pre-service approval (precertification, authorization, notification, or pre-treatment review) and that approval was either never obtained, obtained too late, or not properly transmitted on the claim. The specific failure type is further clarified by the RARC paired with CARC 197.

How do I know if a CO-197 remittance has been denied?

On a paper EOB, look for the co-197 denial code in the bottom adjustments section. On an electronic 835 ERA, CO-197 appears in the CAS segment within Loop 2110 with the group code “CO,” reason code “197,” and adjustment amount.

Check the accompanying RARC codes (N210, M62, MA120, N758, N182) for additional context on the required fix. The RARC tells you what to do next.

What is the difference between CO-197 and PR-197?

CO-197 (Contractual Obligation) means the provider absorbs the write-off and can’t bill the patient. This is the most common variant. PR-197 (Patient Responsibility) means the patient owes the balance because plan terms shifted PA responsibility to the patient. Each variant has different operational implications for A/R collection workflows. Only PR-197 allows patient billing.

Can I bill the patient for a CO-197 denial?

No. CO-197 denials are contractual obligations between the provider and the payer. Your network contract prohibits billing the patient for CO group denials. Patient billing applies only when the group code is PR (Patient Responsibility). Billing a Medicare patient for a CO denial violates federal compliance rules under CMS Pub 100-04.

What is RARC N210 with CO-197?

RARC N210 reads “Alert: You may appeal this decision.” When paired with the co-197 denial code, it signals that the payer expects you to file a formal appeal. The pairing CO-197 + N210 is one of the most common combinations and indicates the denial is appealable with appropriate medical necessity documentation. Don’t resubmit. File the formal appeal.

Is retroactive authorization possible for CO-197?

Co 197 denial code retroactive authorization availability varies by payer and circumstance. Some plans allow retro-auth within 24-72 hours for emergency situations. Some allow 14-30 days with strong medical necessity documentation. Some commercial payers and Medicare OPD PA never allow retro-auth. Per the Medicare OPD Operational Guide (March 2, 2026), PARs won’t be accepted after service completion under the OPD PA program.

How long do I have to appeal a CO-197 denial?

Appeal timelines vary by payer. Medicare: 120 days for redetermination, 180 days for reconsideration, 60 days for ALJ ($200 threshold CY 2026), and 60 days for Federal Court ($1,960 threshold CY 2026). Commercial payers: 60-180 days depending on payer. Aetna has the shortest window at 60 days.

UHC, BCBS, and Cigna typically allow 180 days. Track appeal deadlines from the ERA receipt date.

What is CO-197 vs CO-15?

CO-197 means no authorization exists at all. CO-15 means an authorization exists but the auth number is missing, invalid, or doesn’t apply to the billed services on the claim.

CO-15 is typically a billing system or EDI transmission issue, while CO-197 is typically a workflow gap at scheduling or pre-service. CO-15 is fixed with a corrected claim; CO-197 requires retro-auth or appeal.

Does CMS-0057-F affect CO-197 denials?

Yes. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) operational provisions are now in effect as of January 1, 2026.

Impacted payers must respond to PA decisions within 72 hours (expedited) or 7 calendar days (standard), provide specific denial reasons, and publicly report PA metrics with the first report due March 31, 2026. These provisions should reduce CO-197 ambiguity and improve denial transparency across the board.

What is the WISeR Model and how does it affect CO-197?

The Wasteful and Inappropriate Service Reduction (WISeR) Model is CMS’s prior authorization program for Original Medicare effective January 1, 2026.

WISeR operates in 6 states (AZ, NJ, OH, OK, TX, WA) and targets 5 service categories: epidural steroid injections, knee arthroscopy, cervical fusion, nerve stimulator implants, and percutaneous vertebral augmentation. Practices in these states billing these services now require PA, increasing CO-197 risk for previously un-PA’d workflows.

What is Anthem CO-243 vs CO-197 for PT/OT?

Anthem PT/OT initial evaluations frequently trigger CO-243 (Services Not Authorized by Designated Provider) in combination with CO-197 (Auth Absent). The combination indicates scheduling didn’t verify Anthem’s specific eval/treatment PA requirements. The fix usually requires resubmitting with the correct designated provider, reauthorizing under the appropriate PT/OT benefit code, and educating intake staff on Anthem-specific PA workflow.