Notes on payer behavior
CO-197 authorization denials: the three-way triage
Denial code CO-197 is the payer saying: "Precertification/authorization/notification/pre-treatment absent." What that means for your practice, and whether it's worth chasing, below.
CO-197, precertification or authorization absent, reads like the end of the road. It isn't. It's actually three different problems with three different plays, and the worst thing you can do is treat all three as appeals. Triage first.
Case one: the authorization exists
A big share of auth denials are clerical. The authorization was obtained, but the claim didn't carry it, or carried it wrong. That's not an appeal. It's a corrected claim with the authorization number in the right field. Before you resubmit, check that the auth actually covers what was billed: the procedure code, the date-of-service range, the rendering provider, and the place of service. A mismatch on any one of the four fires the denial. (A wrong or missing auth number specifically is its own code, CARC 15, with the same data-fix play.) Save the appeal letter for the case where the auth was valid, submitted correctly, and the payer misapplied it. Then cite the payer's own confirmation number and date.
Case two: urgent or emergent care
Payers keep retro-authorization exceptions for urgent and emergent services. The windows are payer- and plan-specific. Some run around 30 days, some longer, and the documentation requirements differ, so verify per plan rather than assuming a number. The play: a retro-auth request under the exception with the clinical justification attached, then resubmit. Move fast. Speed matters more here than anywhere else in the denial queue.
Case three: the elective miss
Elective service, no authorization, no exception. This is the hardest branch. On commercial plans it's close to unwinnable, and the honest answer is usually process repair, not appeal cycles. The picture changes a lot by line of business, though. Federal reviews have repeatedly found that a large majority of appealed Medicare Advantage denials get overturned (HHS OIG and KFF analyses put it around three-quarters or more). Same code, opposite odds. That's why the triage comes before the drafting.
The timeline lever
Authorization is one of the few denial types where the payer's own timeline is often part of your case. Florida law (§627.42392) governs prior-authorization handling for Florida-regulated plans, and federal rule CMS-0057-F sets decision deadlines (72 hours expedited, 7 days standard) for Medicare Advantage, Medicaid, and marketplace plans as of 2026. If the payer missed its own decision deadline, put that fact in the appeal.
The workers' comp exception is stronger than all of it. In Florida WC, the carrier must respond to an authorization request by the third business day. Silence is authorization by operation of law, and it forfeits the carrier's medical-necessity contest (§440.13(3)). If your specialty treats work injuries, an unanswered auth request is a lever, not a limbo. Details in the Florida WC note.
The sibling code: authorization exceeded
CARC 198 is the cousin: the auth exists, but the billed units or scope exceed it. It gets its own order of operations. Compare billed units, codes, and dates against the auth's approved scope. Request an auth amendment first where the payer allows it. Appeal the already-rendered excess with documentation of why it was necessary (intra-operative findings, staged care). And a clerical mismatch between the billed and authorized code for the same procedure? Data fix, not a fight.
Who lives in this queue
Every auth-heavy specialty: pain management (injections, ablations), gastroenterology (advanced endoscopy), spine and orthopedic surgery, plastic surgery, dermatology (biologics), ENT and urology procedures. The mix of the three cases changes by specialty. The triage doesn't. And the clock is always running. Appeal windows at Florida's payers range from about 120 days to a year, mapped in the working deadlines table.
Prevention: where this denial actually gets solved
Recovery work salvages cases one and two. The elective miss only ever gets solved upstream. The workflow that ends it is verification at scheduling: confirm before the case that an authorization exists and that it matches the four fields the claim will carry (codes, dates, rendering provider, site), then re-verify whenever the plan changes at reverification or the procedure changes in planning. Practices that treat the auth as a yes/no checkbox keep generating case-one denials. Practices that treat it as a four-field match mostly stop seeing this code at all.
Questions people ask about CO-197
What does denial code CO-197 mean?
The payer's system found no prior authorization, precertification, or notification for the service. It doesn't mean none exists; it means the claim and the authorization didn't match.
Can a CO-197 denial be overturned?
Often. If an authorization exists, match its number, dates, units, and codes to the claim and resubmit. If an emergency exception applies, invoke it with the record. If the authorization was genuinely missed, a retro-authorization request is the only route, and payers grant it selectively.
Can I bill the patient when authorization was missing?
Generally not on in-network claims; the contract puts authorization on the provider and CO makes the amount yours. Check the contract and the group code.