The regulatory burden on health operators
Operating a health insurance plan in Brazil means dealing with one of the densest regulatory frameworks in the private sector. The ANS (Agência Nacional de Saúde Suplementar — Brazil's National Supplementary Health Agency) oversees everything from procedure authorization deadlines to provider network composition, with penalty processes that can result in multimillion-real fines.
The problem is not the rules themselves. It is that most operators manage these regulatory processes in spreadsheets, emails, and legacy systems that do not communicate with each other. When the ANS sends a notification, the compliance team must reconstruct the history manually — and frequently discovers the deadline has already passed.
This article details the 5 most critical regulatory processes for health operators, with ANS-mandated deadlines, non-compliance penalties, and how to structure them with stages and SLAs to avoid sanctions.
1. Procedure authorization
What the ANS requires
RN 259/2011 and RN 455/2020 establish maximum deadlines for procedure authorization by health plans. Missing these deadlines is one of the most frequent infractions in the sector.
Regulatory deadlines: - Urgent and emergency: immediate or within 24 hours - Basic consultations: up to 7 business days - Specialist consultations: up to 14 business days - High-complexity procedures: up to 21 business days - Dental procedures: up to 21 business days
When the operator does not respond within the deadline, the procedure is considered authorized by default. The beneficiary can proceed, and the operator must cover the cost.
Penalties
Undue denials or authorization delays generate fines of R$ 30,000 to R$ 100,000 per occurrence, administrative proceedings, suspension of new plan sales in repeated cases, and reputational damage.
How to structure with stages and SLAs
A well-structured authorization process needs stages reflecting the real workflow and SLAs anticipating regulatory deadlines:
- 1Request receipt — Log the request with beneficiary, provider, procedure, and diagnosis data. SLA: 2 hours for initial triage.
- 2Technical analysis — Verify contractual coverage, waiting periods, clinical guidelines. SLA: varies by urgency (4h for urgent, 3 business days for elective).
- 3Medical audit — When required, review by medical auditor with technical opinion. SLA: 2 business days.
- 4Decision — Authorize, issue substantiated denial, or request additional information. SLA: 24h before the regulatory deadline.
- 5Beneficiary communication — Formal notification of the decision with reasoning. SLA: same day as decision.
The critical point: internal SLAs must be shorter than ANS deadlines. If the regulatory deadline for a specialist is 14 business days, the completion SLA should be 10 business days.
2. Complaints and preliminary investigation notices (NIP)
What the ANS requires
The NIP (Notificação de Investigação Preliminar — Preliminary Investigation Notice) is the mechanism the ANS uses to mediate beneficiary complaints before opening administrative proceedings.
Regulatory deadlines: - NIP response: 10 calendar days (5 days for urgent care demands) - Demand resolution: within the response deadline - Supporting documentation: submitted with the response
If the operator does not respond or resolve, the ANS converts the NIP into administrative proceedings — resulting in fines and IDSS (Supplementary Health Performance Index) impact.
Penalties
Fines of R$ 25,000 to R$ 100,000 per unanswered NIP, IDSS reduction affecting the operator's public ranking, and accumulated unresolved NIPs can trigger the appointment of a fiscal director.
How to structure
- 1Receipt — Log the NIP with ANS protocol number, beneficiary data, and demand description. SLA: 2 hours.
- 2Classification — Identify if it is a care demand (authorization, network, coverage) or non-care (financial, contractual). SLA: 4 hours.
- 3Internal investigation — Review beneficiary history, understand what happened, identify responsible parties. SLA: 3 calendar days.
- 4Resolution — Take necessary action: authorize procedure, correct billing, restore service. SLA: 7 calendar days.
- 5Formal response — Draft ANS response with supporting documentation and submit through the agency's system. SLA: 9 calendar days.
3. SUS reimbursement
When a health plan beneficiary uses the public health system (SUS) for a procedure the plan should cover, the ANS charges the operator. Operators receive an ABI (Identified Beneficiary Notice) and have 30 days to challenge or pay.
Non-payment leads to interest, late fees, and registration as active debt with the ANS.
How to structure
- 1ABI receipt — Log the notification. SLA: 24 hours.
- 2Eligibility verification — Confirm beneficiary status and coverage. SLA: 5 days.
- 3Challenge analysis — Evaluate grounds for challenging. SLA: 10 days.
- 4Decision — Challenge with documentation or provision for payment. SLA: 20 days.
- 5Follow-up — Monitor ANS response or ensure payment. SLA: per ANS response.
4. Provider network updates
Operators must notify the ANS about provider exclusions 30 days in advance, notify affected beneficiaries, ensure equivalent replacement, and keep the ANS registry (RPS) updated. Hospital or emergency room exclusions require prior ANS authorization.
How to structure
- 1Change request — Log inclusion or exclusion. SLA: 24 hours.
- 2Impact analysis — Verify minimum coverage. SLA: 5 days.
- 3Replacement — Identify substitute provider. SLA: 15 days.
- 4Regulatory communication — Notify ANS and beneficiaries. SLA: 20 days.
- 5Registry update — Update RPS and medical directory. SLA: 25 days.
5. Rate adjustments
Individual plan adjustments follow the ANS-defined annual index. Collective plans with 30+ members negotiate but must report to the ANS. Beneficiaries must be notified 30 days in advance.
How to structure
- 1Actuarial preparation — SLA: 60 days before the base date.
- 2Legal validation — SLA: 45 days before.
- 3Internal approval — SLA: 40 days before.
- 4Beneficiary communication — SLA: 30 days before (legal deadline).
- 5ANS communication — Per agency calendar.
- 6Application and monitoring — Contract base date.
How CaseFy helps
CaseFy lets you create specific templates for each ANS regulatory process. Instead of managing deadlines in spreadsheets, each obligation becomes a case with stages, SLAs, and automations.
Automations act as regulatory guardrails: 80% SLA alerts, 100% escalations, mandatory documents per stage, and compliance dashboards. The timeline records every event with timestamps for audit evidence.
CaseFy offers ready-to-use health compliance templates. Configure stages, set SLAs to match ANS deadlines, and start operating the same day.