Clinic Referral Intake Workflow: Referrals and Prior Authorization Ready Before Day One

A clinic referral intake workflow takes every new referral, logs it against the right patient, works out which documents and authorizations that appointment needs, chases what is missing, and shows the front desk what is still outstanding a few days before the visit. Staff still speak to payers and clinicians still decide whether a referral is appropriate. Automation makes sure nothing is discovered too late.

Referrals arrive in many shapes: an electronic referral, a scanned letter, a fax, an email from another provider, or a patient who simply turns up with a printout. Each appointment type and payer can need something different. That variety is why intake is so often done from memory, and why missing paperwork is so often found after the patient has been seen.

This post covers one workflow in depth. For the wider view of automation in outpatient clinics, see our healthcare clinics hub.

AI Automation for Healthcare Clinics, Explained Step by Step · 2:57 Subscribe

Why intake goes wrong

Most clinics recognize at least one of these:

• Referrals arrive in five inboxes. Fax, email, portal, post and the patient's own phone. Nobody has one list.
• Requirements live in people's heads. The senior receptionist knows which insurer wants an authorization for which service. When she is on leave, things slip.
• Checks happen the day before. By then, an authorization may take longer than you have.
• Expired or incomplete referrals go unnoticed. A referral for the wrong service or past its validity is treated as fine until someone queries a claim.

The rules behind all this vary by country, which is exactly why a written rulebook beats memory.

How referral and authorization rules differ

These examples show why a single checklist rarely works for every clinic. Check the rules where you operate and with each payer you work with.

• United States: many health plans require prior authorization for certain services. Under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), Medicare Advantage, Medicaid, CHIP and federal marketplace plans have had to decide expedited requests within 72 hours and standard requests within 7 calendar days since January 2026. Commercial employer plans are not directly covered by that rule, so timeframes still vary.
• United Kingdom: NHS referrals usually come from a GP, often through the NHS e-Referral Service. Private patients claiming on medical insurance typically need their insurer to confirm cover before treatment, and many insurers ask for a GP or specialist referral.
• Canada: provincial health plans generally expect a referral from a family physician or nurse practitioner before specialist care is covered, and extended health plans have their own rules for services such as physiotherapy.
• Australia: for patients to receive a Medicare rebate for specialist care, they generally need a referral. Services Australia says a GP referral to a specialist is usually valid for 12 months from the specialist's first consultation, unless the referral states a different period, while specialist-to-specialist referrals are usually valid for 3 months.

The referral intake workflow, step by step

1. Collect every referral into one queue (automated)

Route the referral inbox, fax-to-email, portal downloads and scanned post into a single queue. Each item gets a reference and a received date. If letters arrive as photos or multi-page scans, convert them into one PDF per referral so the file is easy to read later. Our free image to PDF, PDF merge and PDF compress tools cover the occasional manual job.

2. Extract the key details for a person to confirm (review)

From each referral, pull out the patient's name and date of birth, the referring provider, the referral date, the service requested and any stated urgency. Present these for a staff member to check against the original and match to an existing patient or create a new record.

Mismatches, such as a different date of birth or a name spelled two ways, always go to a person. Matching the wrong record is a privacy incident, not a typo.

3. Apply the clinic's own requirements rules (automated)

This is the core of the workflow. Write down, once, what each combination of appointment type and payer needs. For example:

The table above is an illustration; your clinic's version comes from your payers' current rules and your own policies. Once it exists, the system can create a checklist for every new booking automatically.

4. Ask the patient for what only they can provide (automated)

Send a short request through the clinic's secure form for anything outstanding: insurance card images, policy numbers, a copy of a referral the patient holds, or a health questionnaire. One reminder before the visit is usually enough. Keep the request specific; a list of six vague items gets ignored.

5. Surface what is still missing, early (automated list, person acts)

Several days before the appointment, the front desk sees a short list: patients with missing documents, unconfirmed authorizations, or referrals close to expiry. The list includes the payer's contact route and what has already been tried.

The timing matters. A list the morning of the appointment only produces awkward conversations. A list several days ahead gives staff time to call the payer, contact the referrer or talk to the patient about self-paying.

6. Staff verify and record the outcome (person)

Staff check eligibility and authorization through the payer's portal or phone line, then record the outcome against the booking: approved with reference, pending, denied, or patient choosing to self-pay. Automation can remind them to follow up on "pending" items; it should not submit authorization requests without a person reviewing the clinical content.

7. Clinician review where needed (person)

Some referrals need clinical triage: is this the right service, is it urgent, should the patient be seen sooner or redirected? That decision belongs to a clinician. The workflow can route referrals marked urgent, or those mentioning certain keywords, to a clinician's review list, but it should never downgrade or reject a referral on its own.

What to automate and what to keep

Privacy and security basics

Referral letters contain health information, so the usual rules apply in full: HIPAA in the US, UK GDPR and EU GDPR in Europe, PIPEDA and provincial health privacy laws in Canada, and the Privacy Act in Australia. A few practical points:

• Use only services the clinic has assessed, under a business associate agreement or data processing agreement where required.
• Share the minimum necessary. A reminder service needs a name, contact details and appointment time, not the referral letter.
• Keep access logged and limited to staff who need it.
• If referral emails come from outside providers, make sure your own domain's email is authenticated so replies are trusted. The free email deliverability checker shows whether SPF, DKIM and DMARC are in place.

Where to start

Start with step 3: write down your requirements rules for your five most common appointment types and payers. Even without software, that table alone reduces errors. Then add the single queue and the "still missing" list.

Make It Flow begins by mapping how referrals move through your clinic today, including the awkward ones that arrive on paper. Our overview of AI for private clinics covers other workflows. Therapy and counselling practices handle referrals with extra care for confidentiality; our therapy practices automation page covers their intake, and our veterinary practices automation page covers reminders and booking checks in animal care. If you would like help designing yours, get in touch.

FAQ

What is a referral intake workflow?

It is the set of steps a clinic follows from receiving a referral to being ready for the first appointment: logging the referral, matching it to the patient, working out which documents and authorizations are needed, requesting them, and confirming everything is in place. Automation keeps that sequence consistent and visible.

Can automation submit prior authorization requests?

It can help prepare them, for example by gathering the patient details and documents a payer asks for. But authorization requests contain clinical information, and decisions about what to submit and how to respond to a denial should stay with trained staff and clinicians. Check each payer's process and your own policies.

How early should a clinic check authorizations?

As early as the payer's turnaround allows, ideally when the appointment is booked and again several days before it. Under the CMS rule that applies to several US government-funded plans, standard requests can take up to 7 calendar days, so a check the day before is too late for many services.

How long is a specialist referral valid?

It depends on the country and payer. In Australia, Services Australia says a GP referral to a specialist is generally valid for 12 months from the first specialist consultation unless stated otherwise. Other systems and insurers set their own rules, so record the validity period alongside each referral.

Is it safe to use AI to read referral letters?

It can be, with safeguards. The service must be assessed and contracted appropriately for health data, access should be limited and logged, and a person should confirm the extracted details against the original letter. Uncertain patient matches and anything clinical should always be checked by staff.

What should a clinic automate first in intake?

Usually the single referral queue and a list of missing items a few days before each appointment. Those two steps make problems visible early without changing clinical processes, and they work with most clinic systems through existing exports or inbox rules.