States Tighten Rules on AI Health Coverage Decisions

Georgia and Iowa have enacted 2026 laws limiting how health insurers use AI in prior authorization and utilization review, according to PYMNTS and Sheppard Mullin. Georgia's SB 444 takes effect on January 1, 2027 and bars an AI system from issuing an adverse determination without qualified human review; Iowa's HF 2635 allows AI-assisted initial review but bars AI as the sole basis for denial, delay, or downgrade on medical necessity. The AMA and Colorado Legislative Council also document broader state activity around healthcare AI. For practitioners building payer-facing models, the immediate requirement is auditability: systems need logs, evidence packages, fairness checks, and clinician-review workflows that can survive state-by-state compliance review.
The practical takeaway for payer-facing AI teams is that human review now needs to be engineered as evidence, not described as policy. State laws are increasingly targeting the point where an algorithm influences prior authorization or medical-necessity decisions, which means model outputs, reviewer actions, and final determinations need reproducible audit trails.
What happened
PYMNTS, summarizing a Sheppard Mullin Healthcare Law Blog review, reported that several states are expanding guardrails on AI use in health insurance decisions. Sheppard Mullin says Georgia's SB 444, effective January 1, 2027, allows AI to participate in decision processes but bars an AI system from issuing an adverse determination until a qualified human reviewer conducts utilization review involving a clinical peer. The same review says Iowa's HF 2635, effective July 1, 2026 for the AI provision, permits AI for initial prior authorization review but bars AI as the sole basis for denial, delay, or downgrade based on medical necessity.
Regulatory context
The AMA's state legislative review lists enacted measures in states including Arizona, Illinois, Maryland, Nebraska, and Texas that constrain healthcare AI use through requirements such as disclosure, human judgment, non-discrimination, accuracy review, and limits on replacing clinical decision-making. A Colorado Legislative Council memo citing NCSL documents the wider surge in health-related AI bills, which shows why national payer workflows are likely to face a patchwork of state requirements.
For practitioners
The engineering requirement is stronger governance plumbing. Systems used in prior authorization or utilization review should capture model version, input evidence, output rationale, human reviewer identity or role, reviewer notes, final decision, appeal context, and fairness-monitoring signals. If the system cannot show how a human clinical reviewer independently assessed the recommendation, the model may be hard to defend under these laws.
What to watch
Watch whether states move from process controls to stricter limits on model classes, automated-denial workflows, or training data. Also watch for federal preemption debates and insurer adoption of standardized decision packets, because those could determine whether engineering teams build one national audit pattern or many jurisdiction-specific workflows.
Key Points
- 1State laws increasingly allow AI to assist prior authorization but prohibit AI as the sole basis for medical-necessity denials, raising auditability needs.
- 2Legislation commonly requires human clinical review, individualized-data baselines, non-discrimination checks, and periodic accuracy reviews, increasing monitoring burden.
- 3A rapid legislative surge across states creates fragmentation; practitioners should design for audit trails and flexible compliance controls across jurisdictions.
Scoring Rationale
State-level limits on insurer AI use materially affect system design, compliance, and monitoring for prior authorization and utilization review models. The impact is notable because payer-facing AI teams may need auditable human-review workflows across a fragmented state-law landscape.
Sources
Public references used for this report.
View 8 more sources
- 04State Legislation on AI and Health Introduced between 2023 and 2025content.leg.colorado.gov
- 05States rush to regulate AI in health care - WP Intelligencewpintelligence.washingtonpost.com
- 06States Continue Efforts to Regulate AI in Healthcarehklaw.com
- 07State Lawmakers Eye Guardrails for Use of AI in Healthcarelexisnexis.com
- 08How states are regulating AI in health insurance coveragebeckerspayer.com
- 09Artificial Intelligence & Health Care: A Primerncsl.org
- 10Federal AI Policy Threatens Prior Authorization Reformhealthlaw.org
- 11Senate Co-Sponsorship Memo 47665 Informationpalegis.us
Practice with real Health & Insurance data
90 SQL & Python problems · 15 industry datasets
250 free problems · No credit card
See all Health & Insurance problems