Iowa Senate File 2421 proposes restrictions on the use of artificial intelligence by utilization review organizations (UROs) in prior authorization determinations. UROs may use AI for initial review, but not as the sole basis for denying, delaying, or downgrading requests, particularly those based on medical necessity [1]. The bill also mandates that denials or downgrades must be made by a qualified reviewer or clinical peer, with specific written statements and attestations provided [2].

Who does SF 2421 affect?

This legislation primarily affects utilization review organizations, health carriers, and healthcare providers operating in Iowa that use or plan to use AI-based algorithms for prior authorization processes. Specifically, it impacts systems making determinations related to medical necessity and those handling expedited or urgent requests.

What is the current status of SF 2421?

As of the last published update, SF 2421 is at the "introduced" stage, with bill status "introduced".

Where can I find the primary source for SF 2421?

The primary source for the most recent update is at https://www.legis.iowa.gov/publications/search/document?fq=id:1601487&q=artificial+intelligence. AIGI publishes the full citation chain plus every approved brief on this bill.

IA, US · AI law tracker

SF 2421 — IA, US

SF 2421 is an AI governance legislation from IA, currently introduced. The bill prohibits AI from being the sole basis for utilization review organizations to deny or downgrade prior authorization requests [1]. AIGI tracks 1 primary-source update on this bill; the most recent was published on 2026-02-23.

Status & timeline

Regulatory stage: introduced
Bill status: introduced
Authority / governing body: Iowa Legislature
Chamber: senate
Document type: legislation

Next deadline: No fixed deadline — effective upon enactment

Subscriber only

Full obligation matrix

Actor	Obligation	Deadline	Source
utilization_review_organization	Do not use an artificial intelligence-based algorithm as the sole basis for decisions to deny, delay, or downgrade prior authorization requests for health care services based on medical necessity.	Upon enactment	—
utilization_review_organization	Ensure that a decision to deny or downgrade a request for prior authorization is made by a qualified reviewer (if the health care provider is a physician) or a clinical peer (if the health care provider is not a physician).	Upon enactment	—
utilization_review_organization	Provide the health care provider requesting prior authorization a written statement citing specific reasons for the denial or downgrade, including any coverage or clinical criteria considered.	Upon enactment	—
utilization_review_organization	Ensure the written statement of denial or downgrade is signed by the qualified reviewer or clinical peer who made the determination.	Upon enactment	—
utilization_review_organization	Provide the health care provider and the covered person a written explanation of the utilization review organization’s appeals process.	Upon enactment	—
utilization_review_organization	Provide a written attestation that the qualified reviewer or clinical peer making the denial/downgrade meets specialty, training, and expertise requirements.	Upon enactment	—

Subscriber only

Enforcement risk score

/ 100

Announced regulation; enforcement footprint still forming.

Subscriber only

Role-based compliance checklist

compliance_officer Monitor the progress of Iowa SF 2421 through the legislative process for potential enactment. (Ongoing)
cto Assess current AI systems used in prior authorization to identify reliance on AI as the sole decision-maker for medical necessity denials, delays, or downgrades. (Immediately (if similar legislation is considered))
product_manager Begin planning for modifications to AI-assisted prior authorization workflows to integrate mandatory human review for high-risk decisions, ensuring AI does not act as the sole basis. (Immediately (if similar legislation is considered))
general_counsel Review the definitions of 'qualified reviewer' and 'clinical peer' and evaluate existing staff qualifications against these requirements. (Immediately (if similar legislation is considered))
compliance_officer Develop or update internal policies and training materials to ensure compliance with human review, written notification, and appeals process requirements for prior authorization denials/downgrades. (Upon enactment)

Subscriber only

Vendor impact assessment

Vendor risk class: high
Procurement categories: healthcare_ai, fraud_detection, infrastructure

Vendors providing AI solutions for healthcare prior authorizations will need to ensure their systems are designed to support human oversight requirements. This includes the ability to integrate human review, provide detailed documentation for decisions, and prevent AI from being the sole arbiter of high-risk medical necessity determinations.

Sample vendor questions

Does your AI solution for prior authorization ever make denial, delay, or downgrade decisions for medically necessary services without human review?
How does your AI system integrate with human review workflows to ensure human oversight is not merely perfunctory?
Can your system generate detailed, specific, and signed written rationales for prior authorization denials or downgrades, citing clinical and coverage criteria?
What processes are in place to ensure the human reviewers making final decisions meet the qualifications of 'qualified reviewer' or 'clinical peer' as defined by relevant state laws?
How do you ensure your AI system avoids bias that could lead to discriminatory denials or downgrades, especially when operating under human oversight mandates?

Intelligence briefs (1)

legislation introduced 2/23/2026

Iowa Bill Limits AI as Sole Basis for Prior Auth Denials

The bill prohibits AI from being the sole basis for utilization review organizations to deny or downgrade prior authorization requests [1].

This introduces specific human-in-the-loop requirements for AI in healthcare prior authorization, affecting deployer obligations and risk management.

Deadline: No fixed deadline — effective upon enactment

Primary source →

Frequently asked questions

What is SF 2421?: Iowa Senate File 2421 proposes restrictions on the use of artificial intelligence by utilization review organizations (UROs) in prior authorization determinations. UROs may use AI for initial review, but not as the sole basis for denying, delaying, or downgrading requests, particularly those based on medical necessity [1]. The bill also mandates that denials or downgrades must be made by a qualified reviewer or clinical peer, with specific written statements and attestations provided [2]. Primary source →
Why does SF 2421 matter?: This introduces specific human-in-the-loop requirements for AI in healthcare prior authorization, affecting deployer obligations and risk management. Primary source →
Who does SF 2421 affect?: This legislation primarily affects utilization review organizations, health carriers, and healthcare providers operating in Iowa that use or plan to use AI-based algorithms for prior authorization processes. Specifically, it impacts systems making determinations related to medical necessity and those handling expedited or urgent requests. Primary source →
What are the key dates for SF 2421?: No fixed deadline — effective upon enactment Primary source →
What is the current status of SF 2421?: As of the last published update, SF 2421 is at the "introduced" stage, with bill status "introduced". Primary source →
Where can I find the primary source for SF 2421?: The primary source for the most recent update is at https://www.legis.iowa.gov/publications/search/document?fq=id:1601487&q=artificial+intelligence. AIGI publishes the full citation chain plus every approved brief on this bill. Primary source →

Stay informed

Get briefs on every AI law, every morning.

Start 14-day trial →

Important — about this brief

This brief is published by AIGI as a regulatory intelligence service. It contains general information about AI laws, regulations, enforcement actions, and policy signals across jurisdictions. It is not legal, compliance, audit, or risk-management advice; it does not establish an attorney-client, advisory, or fiduciary relationship; and it should not be relied upon as a substitute for professional counsel applied to specific facts and circumstances. Where the brief identifies “Issues for Review,” those are observations of questions a reader in a particular role might raise with their own legal, compliance, or risk function — not recommendations to act. AIGI expressly disclaims liability for actions taken or not taken in reliance on this brief. Subscribers in regulated industries should consult licensed professionals authorized to practice in their jurisdiction.

Full disclosures →

Status & timeline

Intelligence briefs (1)

Iowa Bill Limits AI as Sole Basis for Prior Auth Denials

Frequently asked questions

Related

Get briefs on every AI law, every morning.