On September 28, 2026, Texas Attorney General Ken Paxton announced an investigation into Blue Cross Blue Shield of Texas (BCBSTX), its parent company Health Care Service Corporation (HCSC) and related entities over the denial and delay of urgent, medically necessary care and potentially burdensome prior authorization requirements. His office issued a Civil Investigative Demand (CID) to determine whether the companies violated Texas law, including the Deceptive Trade Practices Act (DTPA). It is an investigation, not a lawsuit, and nothing has been found. For providers, no rule changed. What changed is the value of evidence: Texas already sets preauthorization deadlines, and the provider who can prove when a request went in and when the answer came back has the leverage.
For behavioral health (BH) and substance use disorder (SUD) programs, whose residential, partial hospitalization (PHP) and intensive outpatient (IOP) care runs on authorizations and concurrent reviews, this scrutiny is a reason to tighten the paper trail now. Below: the rules that already set the clock, a checklist with BH and SUD examples, and what to log for every request.
The short version
- The Texas attorney general opened an investigation and issued a CID to BCBSTX and HCSC on September 28, 2026. It is not a lawsuit, and there are no findings.
- The focus: whether claims are denied without adequate review, and what BCBSTX has said about its approvals and denials.
- State-regulated HMO, PPO and EPO plans must already decide preauthorization requests by the third calendar day after receipt, and within 24 hours for a current inpatient.
- The Texas gold card law now uses a one-year evaluation: 90% of requests approved for a service, provided at least five times.
- Your best protection is a timestamped log of every request, peer-to-peer and decision.
What the attorney general announced
The press release says reports to the Office of the Attorney General (OAG) indicate that BCBSTX may have denied or delayed coverage for procedures deemed medically necessary or urgent. In one reported case, a newborn needed urgent treatment. Although the procedure was allegedly covered, administrative denials and potentially improper utilization review delayed approval of a transfer to a facility that could provide the care.
The investigation will focus on BCBSTX's representations about how it approves and denies medically necessary claims, and on whether claims are denied without adequate review. Paxton said an insurer should be helping provide urgently needed care, "not searching for ways to delay or deny it."
What this is, and what it is not
| What it is | What it is not |
|---|---|
| An OAG investigation of BCBSTX, HCSC and related entities | A lawsuit, settlement or court order |
| A CID seeking information on possible violations of Texas law, including the DTPA | A finding that any company broke any law |
| A review of claim decisions and what BCBSTX said about them | A change to any contract, prior authorization list or medical policy |
| A signal that prior authorization delays are an enforcement topic in Texas | A ruling on any claim, or a new way for providers to collect |
A CID is a pre-suit investigative tool: under the DTPA, the consumer protection division may demand documents relevant to an investigation of a possible violation (Tex. Bus. & Com. Code Sec. 17.61). An investigation may or may not lead to enforcement. This article is general information, not legal advice.
Why it matters beyond one insurer
This is the office's second such move in a month. NBC News reported on September 4, 2026 that Paxton's office had issued CIDs to TriWest, which administers TRICARE benefits, over denials caused by errors that wrongly listed some beneficiaries as having "Other Health Insurance," with previously approved claims overturned and money clawed back from providers. Both investigations treat insurance claim denials in Texas as a consumer protection matter, not only a contract dispute.
The rules are tightening too. Under SB 815 (2025), a Texas utilization review agent may not use an automated decision system to make an adverse determination, wholly or partly (Tex. Ins. Code Sec. 4201.156). Federally, CMS-0057-F set 2026 decision timeframes for Medicare Advantage, Medicaid and CHIP and requires a specific reason for every denial. Enforcement, complaints and appeals all turn on the same evidence: when you asked, what you sent, what the plan asked for, and when it answered.
Which prior authorization clock applies
Blue Cross Blue Shield Texas prior authorization timelines depend on the product type, not the logo on the card.
| Coverage | Rule | Standard request | Urgent or inpatient |
|---|---|---|---|
| State-regulated HMO (card shows "TDI" or "DOI") | Tex. Ins. Code Sec. 843.348 | By the third calendar day after the plan receives it | 24 hours for a patient who is an inpatient when services are proposed |
| State-regulated PPO or EPO | Tex. Ins. Code Sec. 1301.135 | By the third calendar day after receipt | 24 hours for a current inpatient |
| Medicare Advantage, Medicaid (fee-for-service and managed care), CHIP | CMS-0057-F, from 2026 | Seven calendar days | 72 hours for expedited requests |
| Self-funded employer plan | Federal law (U.S. Department of Labor), not TDI | Per plan document and federal rules | Per plan document and federal rules |
The Texas clock runs from receipt, so proof of receipt is the starting line. And when a utilization review agent denies poststabilization care requested after emergency treatment, it must notify the treating provider within one hour of the request (Sec. 4201.304).
What changes for providers right now
Nothing in the rules changed. But two existing levers deserve attention. If a state-regulated HMO or insurer violates the preauthorization subchapter on a required publication, notice or response, including a missed deadline, it must provide an expedited appeal for any affected service (Sec. 843.3483 and Sec. 1301.1353). Whether a given delay qualifies is a question for counsel, but you cannot raise it without timestamps. And plans must post, without a login, each service's required documentation, screening criteria and prior-year approval and denial statistics (Sec. 843.3481 and Sec. 1301.1351). Build every request to that list.
A checklist for Texas providers
- Classify the plan at intake. Record whether the ID card shows TDI or DOI, is Medicare Advantage, Medicaid or CHIP, or is self-funded. That decides the clock, the appeal path and the regulator.
- Write level-of-care requests to ASAM. Cover all six dimensions, explain why this is the least intensive level that meets the need, and why a lower level would not.
- Put urgency in writing. An expedited appeal of a denied service other than emergency care or continued hospitalization needs a written statement, with supporting documentation, that the service is necessary to treat a life-threatening condition or prevent serious harm (Sec. 4201.357). Draft it with the request.
- Treat each concurrent review as a new request. Log the due date and submit a fresh update before it.
- Ask for the peer-to-peer before the denial. Before an adverse medical necessity determination, the reviewer must offer a reasonable opportunity to discuss the treatment plan with a Texas-licensed physician, of the same or similar specialty when the requester is a physician (Sec. 4201.206).
- Send a summary, not psychotherapy notes. A utilization review agent may not require a therapist's process or progress notes as a condition of approval, but may require a medical record summary (Sec. 4201.203).
- Read every denial against the statute. The notice must state the principal reasons, the clinical basis, the source of the screening criteria and the appeal and independent review rights (Sec. 4201.303).
- Appeal on the statutory clock. Written appeal decisions are due by the 30th calendar day after receipt, expedited appeals within one working day of complete information; life-threatening cases can go straight to independent review (Sec. 4201.359, 4201.357, 4201.360).
- Escalate to TDI after appeals. Use TDI's online complaint system with the ID card, EOBs and your timeline, or call 800-252-3439.
- Keep parity in view. Sec. 1355.254 bars state-regulated plans from imposing treatment limitations on mental health or SUD benefits that are generally more restrictive than on medical and surgical benefits, and TDI takes parity complaints. If SUD prior authorization works differently from a comparable medical stay, document it.
BH and SUD level-of-care examples
These examples are illustrative and assume a state-regulated plan.
Residential admission (ASAM 3.5)
A patient finishing inpatient withdrawal management needs residential treatment after two IOP episodes ended in relapse. A strong request walks the six dimensions, then says why 3.5 rather than 2.5 or 2.1 (prior IOP failures, active use in the home) and why not 3.7 (no medical instability needing 24-hour monitoring). Because the patient is an inpatient when the service is proposed, the 24-hour clock may apply: say so on the request and log the submission time.
PHP or IOP request (ASAM 2.5 or 2.1)
Tie the scheduled weekly hours to the level requested and show why standard outpatient has not held gains. If the plan asks for more information, log when, what and when you answered: that entry separates plan delay from an incomplete submission.
Continued-stay review
Report what changed, dimension by dimension: withdrawal resolved, cravings persist, housing unstable, step-down planned. If medical necessity is questioned, request the peer-to-peer and record the reviewer's name, specialty and Texas licensure.
How the Texas gold card law works now
The Texas gold card law (HB 3459, 2021) exempts a physician or provider from preauthorization for a service once they show a record of approvals; first exemption notices were due October 1, 2022. HB 3812, effective September 1, 2025, extended the evaluation period from six months to 12. Under the current statute:
- You qualify for a service if, in the most recent one-year evaluation, the plan and its affiliates approved or would have approved at least 90% of your requests for it, and you provided it at least five times.
- You do not have to apply. Within five days of qualifying, the plan must notify you of the services, plans and duration.
- With an exemption, the plan may not deny or reduce payment for that service on medical necessity grounds, except for knowing, material misrepresentation or failure to substantially perform the service.
- It covers state-regulated HMO, PPO and EPO plans, not Medicaid (including managed care) or CHIP.
"Provider" in the statute includes hospitals and other licensed institutions, so BH facilities should check for exemption notices too. The Texas Medical Association reported that fewer than 4% of physicians qualified under the original rules.
What to log for each prior authorization request
Keep one row per request, outside email inboxes.
| Log field | What to capture | Why it matters |
|---|---|---|
| Request time | Date, time, channel, reference number | Starts the clock |
| Proof of receipt | Portal receipt, fax confirmation, call reference | Texas timeframes run from receipt |
| Missing-info requests | When asked, what was asked, when answered | Separates plan delay from incomplete submissions |
| Urgency | Urgent flag, inpatient status, serious-harm statement | Sets the clock and appeal path |
| Reviewer credentials | Name, license, specialty, Texas licensure | Tests same-or-similar-specialty rules |
| Peer-to-peer outcome | Requested time, held time, result | Shows the opportunity came before the denial |
| Decision time | Date, time; days or units approved versus requested | Ends the clock; captures partial denials |
| Denial content | Reason, clinical basis, criteria cited | Required notice content; core of the appeal |
| Appeals and complaints | Dates, decisions, IRO and TDI numbers | Proves exhaustion before escalation |
Each month, report request-to-decision time by payer and level of care.
Free template
Prior authorization request log (Excel)
A ready-made Excel log: requests, decisions, peer-to-peer reviews and the next concurrent review date for each patient, with turnaround time and approval rate calculated for you. A dated log is the record you will want if a payer's timeline is ever questioned.
Get the prior authorization log Free, with a work email.
If you are outside Texas
We are not predicting that other states will follow. But the same log is the evidence that matters under the CMS timeframes, your own state's utilization review rules and any parity complaint.
How Adentris helps
Adentris Prior Auth Autopilot builds prior authorization packets from the chart, submits them across portal, fax and phone, and tracks every window, including peer-to-peer. Adentris also reviews every active chart against payer and regulatory rules, including ASAM level of care and medical necessity, before claims go out. Each finding cites the rule that fired, and the platform drafts the correction for staff to approve.
It works on top of any EHR, connecting through its API or FHIR, HL7 feeds, an API our agents build where none exists, or the AI Web Agent, usually with no IT project on your side, and is typically live in about 30 days. To see it on your own charts, book a 30-minute call with our team.
Related reading
- CMS Prior Authorization Rules 2026: The Operator Playbook
- ASAM Level of Care Documentation: What Payers Expect
- Medical Necessity Documentation for Behavioral Health
Sources
- Texas Attorney General press release, September 28, 2026
- NBC News on TriWest CIDs, September 4, 2026
- Texas Business and Commerce Code, Chapter 17
- Texas Insurance Code, Chapter 843
- Texas Insurance Code, Chapter 1301
- Texas Insurance Code, Chapter 4201
- Texas Insurance Code, Chapter 1355
- Texas Medical Association: gold-carding FAQ
- Texas Medical Association: 2025 legislative wrap-up
- TDI: Preauthorization exemptions
- TDI: Provider complaints
- TDI: Health insurance complaints
- TDI: Mental health parity overview
- CMS: CMS-0057-F fact sheet
Frequently asked questions
Is the Texas attorney general suing Blue Cross Blue Shield of Texas?
No. On September 28, 2026, the attorney general announced an investigation and issued a Civil Investigative Demand to BCBSTX, HCSC and related entities. An investigation is not a finding, and no lawsuit has been announced.
How long does Blue Cross Blue Shield of Texas have to decide a prior authorization request?
It depends on the plan. State-regulated HMO, PPO and EPO plans must decide by the third calendar day after receipt, and within 24 hours for a current inpatient. Medicare Advantage, Medicaid and CHIP follow CMS timeframes: seven calendar days standard, 72 hours expedited.
What is the Texas gold card law?
It exempts a physician or provider from preauthorization for a service if the plan approved at least 90% of their requests for it in a one-year evaluation and they provided it at least five times. It covers state-regulated HMO, PPO and EPO plans, not Medicaid or CHIP.
Do Texas providers have a right to a peer-to-peer review?
Yes, under Texas Insurance Code Sec. 4201.206. Before an adverse medical necessity determination, the reviewer must offer a reasonable opportunity to discuss the treatment plan with a Texas-licensed physician.
Can a Texas health plan require psychotherapy notes for prior authorization?
No. Under Sec. 4201.203, a utilization review agent may not require a therapist's process or progress notes as a condition of approval. It may require a medical record summary.
How do I file a complaint with TDI about a prior authorization delay?
If the ID card shows TDI or DOI, exhaust the plan's appeals, then use TDI's online complaint system with the ID card, EOBs, authorization documents and a timeline. Self-funded employer plans are regulated federally, not by TDI.