Kiruba's Amazing Information

You asked your insurer to approve a scan, and it said no. Or it said nothing at all, which is the same answer on a slower clock. Pushing back works only if you know which prior authorization deadline you are holding the insurer to. Most people guess seven days, the number in the headlines. For many readers the real figure is fifteen.

How Long Does Your Insurer Really Have to Respond?

Medicare Advantage plans and state Medicaid and CHIP programs must decide a standard request within seven calendar days and an urgent one within 72 hours, while an employer plan can take fifteen days for the same standard request.

The seven-day figure comes from the CMS fact sheet for rule CMS-0057-F, which binds Medicare Advantage and state Medicaid and CHIP programs and carves federal exchange insurers out of the timeframes. Compliance began on 1 January 2026 for Medicare Advantage and state fee-for-service programs. If your cover comes through an employer, this clock is not yours. Scope decides everything here, as it does for the right to repair laws in the US.

Employer plans answer to a different document, the Labor Department's claims rule at 29 CFR 2560.503-1. It gives a plan 15 days on a pre-service claim, which is my reading of a prior authorization request, and allows one 15-day extension if the plan tells you before the first period ends. That is about twice the Medicare Advantage wait, and more than four times with the extension. For India, see rejected health claims and the clause rule.

Conventional advice says to phone every day. I would write once, quote your calculated date and ask for the reason, because a dated letter leaves a record. Four numbers show what pushing back is worth. Three come from KFF's January 2026 analysis of Medicare Advantage requests in 2024, two years before these clocks began. The fourth is my own sum from the Labor Department text.

The extension is not automatic. The text allows it only for matters beyond the plan's control, and only if the plan tells you before the first period ends, so ask the plan in writing whether you were sent that notice.

Which Prior Authorization Deadline Applies to You?

Find the plan on your insurance card in the table: Medicare Advantage and Medicaid or CHIP follow the seven-day clock, employer plans follow fifteen days, and federal exchange plans sit outside the CMS decision timeframe.

Worked example: assume a standard request, not urgent, that your doctor's office submits on Tuesday 3 November 2026, with no missing paperwork. Seven calendar days puts the Medicare or Medicaid answer at Tuesday 10 November. Fifteen puts the employer plan at Wednesday 18 November, or Thursday 3 December if it uses its one extension. On these assumptions the gap is eight days, or 23 with the extension. Do the same sum with your own submission date: it takes under a minute, and that date is the one for your letter.

The employer row is the surprise, and the exchange row needs a second look, since the fact sheet only says what the CMS clock leaves out. Guessing the clock does not work, or not for long. A date, a letter and a reason do. My view: fifteen days is too slow for a scan your doctor wants soon, so ask the office to mark it urgent when delay could harm you.

Prior Authorization Denied: What Does the Notice Owe You?

A denial must state a specific reason: the CMS rule requires one from 2026 for covered plans, except for drugs, and the Labor Department rule makes an employer plan name its reasons and the plan provisions it relied on.

If the refusal is for a medication, the CMS reason duty does not reach it, so use the plan's own appeals process in your plan documents. The Federal Register notice frames the denial notice as one sent to your provider, so ask the doctor's office for a copy.

KFF reports that only 11.5% of Medicare Advantage denials were appealed. With the overturn rate above, that is my own sum: roughly nine of every 100 denials reversed in whole or part, and close to 89 never challenged. Averages hide the insurer, since KFF put UnitedHealth Group at the top of the denial range and Elevance Health at the bottom, and none of it speaks directly to employer plans. The same logic runs through cancelling a subscription after the FTC rule was vacated.

Public data cannot say which treatments are refused most, because CMS does not collect denials by service type. My view is that posted turnaround figures will matter more than the headline clock: covered plans must post approval and denial rates and median response times on their own websites, the first set due by 31 March 2026.

• If the plan asks for missing information, you get at least 45 days to supply it, so answer fast.
• The electronic approval API generally starts on 1 January 2027, so 2026 requests still wait on the deadline.

Decide today which clock is yours, add its days to the date the office submitted the request, and write that date on a calendar. If it passes without an answer, or a denial arrives, send one dated letter asking for the reason, then file the appeal. This holds only for plans the rule covers: with an exchange plan or a drug request, read your plan documents and confirm coverage on the CMS fact sheet.

You ask the maker for a replacement screen. The reply is that parts go only to authorized shops, and the shop quotes a price that makes the old phone look like the better buy. Whether that refusal is lawful depends on the state you live in and the date your device was first sold. A right to repair law is the rule that settles it, and in 2026 the answer changes from one state to the next.

Does Right to Repair Cover My Phone or Laptop?

Often yes, but only if the device was first sold after your state's cut-off date, and the receipt is the cheapest way to check that. Colorado and New York reach phones and laptops, while the Texas analysis does not confirm them, so check before assuming.

The cut-off runs from first sale, not from the day you bought it secondhand. Colorado's legislative summary of HB 24-1121 covers equipment first sold or used in the state on or after July 1, 2021, so a laptop first sold in 2020 falls outside the rule that took effect January 1, 2026. New York runs the same logic on an earlier clock: Proskauer's summary of its law applies it only to products first manufactured and first sold there on or after July 1, 2023. The same scope question shapes most consumer rules, and the airline refund rules after the 2025 rollback show it.

Four numbers decide most cases, and each one changes what you can ask for or what you pay. The day count and the law count are my own arithmetic. The Texas floor comes from the state's bill analysis, and the parts ceiling comes from PIRG's summary of Colorado's rule.

The cap only helps if you can see the shop rate, and a quote that omits it leaves the limit impossible to test. A rule that says no more than is easy to nod at and hard to check.

Which States Have Right to Repair Laws?

Four states below have a law in force now, and each one starts on its own date, so the year you check matters as much as the state. Colorado, Connecticut, Texas and New York are enforceable today, while Massachusetts has only a pending digital bill.

Find your row, check the date, and the table settles most cases in one pass. A passed date means the right applies now, and a pending bill means nothing applies yet. The Connecticut and New York dates come from PIRG and Proskauer summaries rather than the statutes, so confirm them against the bill before you rely on them.

Can a Manufacturer Refuse to Sell Me Parts?

No, a maker cannot refuse outright in the four states with a law in force, because each one requires parts or repair materials to be made available to independent shops and owners. The exact duties differ, and Texas gives makers a year from first sale.

Parts pairing ties a replacement part to the maker's own software, and it is the refusal that usually hides. Colorado bars it in three specific ways, including blocking a replacement part and showing misleading warnings about unidentified parts. It still allows pairing that records information or runs standalone biometric authentication.

Texas takes a narrower route. Its bill does not bar makers from requiring remote authorization or an internet connection before a part works, so a Texas shop may still hit that gate. My view is that this gap matters more than the headlines admit. For the India rules, which differ, read right to repair in India 2026: what a phone maker actually owes you.

• Ask the seller in writing whether a part needs online authorization before you pay.
• Texas gives a maker 30 days to cure after written notice, and only the attorney general can enforce the rule.

Repair or replace is the decision, and parts come first. The same pattern shows up when a federal rule is vacated but other law still applies, as in what still forces a subscription company to let you quit. If your state's law reaches your device, the maker owes you parts or repair materials, so send one written request this week for the part, with its price beside the authorized-shop rate. Book the shop or buy the replacement only after that answer is in writing.

You asked data brokers to delete you. Weeks later the status screen reads EXEMPT for one, RECORD NOT FOUND for another and nothing for a third. Which of those is a refusal? Under California DROP, the state's single deletion portal for brokers, perhaps only the blank one, because the first two are answers the law allows.

Does California DROP Actually Delete Your Data?

Yes, where a registered broker holds a matching record, DROP orders deletion, inferences included, but the broker may keep the minimum personal information needed to comply, and exempt records stay put.

The Delete Request and Opt-out Platform opened to California residents in January 2026. Brokers had to start processing requests on 1 August 2026 and must check in at least every 45 days, per CalPrivacy. Count 45 days from 1 August and you reach 15 September: my arithmetic, not an announcement, but it means a status should already be in your account.

What comes back is a status code, and the codes are the fine print. CalPrivacy's testimony to the Vermont Senate (slides as of 1 May 2026) says brokers may keep the minimum personal information needed to comply. EXEMPT means the record falls under a legal exemption, OPTED-OUT means every identifier you shared was already opted out, and RECORD NOT FOUND means nothing matched. None is a refusal.

Matching runs on hashed identifiers, and a broker downloads only the identifier types it already holds. One that knows you by phone number alone will not find you if you submitted just an email, so it will honestly answer RECORD NOT FOUND. Guides saying one email is enough are wrong: list every address and number you use.

DROP covers only data brokers, meaning businesses that sell data on people they have no direct relationship with. Your bank and the shops you buy from keep their records. Headline rules often shrink on contact: compare the vacated FTC click-to-cancel rule with what the FTC junk-fee rule actually covers.

Four figures decide how much leverage you hold, all from CalPrivacy's own pages and testimony: how long you wait, and what a stalling broker risks.

The penalty matters mostly as a comparison. Charged per request and per day, it overtakes a broker's yearly registration cost in about a month of ignoring one request. That break-even is my arithmetic from two published numbers.

What Do Brokers Keep, Row By Row?

Brokers may keep the minimum records needed to comply and anything covered by an exemption, and companies outside DROP's scope keep everything, so the table sets each rule against your next move.

Each middle cell pits what DROP makes a broker do against what it may keep.

My reading: the platform is a good lever and a poor guarantee. It is strong where a broker holds a match and silent everywhere else.

What Can Go Wrong With A Data Broker Deletion Request?

Most failures come from who you are and what you listed: outside California the platform does nothing for you, and a broker holding an identifier you never submitted will answer RECORD NOT FOUND.

Residency is the hard wall, so look to your own state's rules if you live elsewhere. Then comes the evidence gap. CalPrivacy's February 2026 product-update deck leaves sign-ups, verified-resident share, completion time and support tickets blank, and the May testimony slide does the same. So no official success rate exists; anyone quoting one is estimating. Untested rights are not new: see airline refund rules after the 2025 rollback.

CalPrivacy told Vermont senators in May 2026 about nearly a dozen actions for failing to register, with no names or amounts, which suggests deletion enforcement is untested. So I would not assume a broker fears the daily penalty (a guess, and a fair one, but still a guess). Independent audits are not required until 1 January 2028, so for two years your own checks are the audit.

• A blank status after the first window deserves a written follow-up, not a shrug.
• RECORD NOT FOUND on a broker that holds only your phone number means you left an identifier out.
• EXEMPT is lawful, but ask which exemption the broker relies on.

Here is the decision. If you live in California, file once with every email address and phone number you use, then check the status screen every 45 days and chase any blank. Elsewhere, DROP is not for you. If your fight is a rejected health claim in India, start with this guide to pushing back.