Medicaid and Medicare Review · Medical Necessity · Supervision · 42 C.F.R. Part 2

Behavioral Health Audit Defense

Behavioral health audits are documentation audits. The service is rarely disputed; whether the record proves it usually is.

Request a Free Case Review
Behavioral Health Audit Direct Line
(800) 345 - 4125
If the request covers substance use disorder records, speak to counsel before producing anything.
Behavioral Health Briefing

Documentation, Supervision and the Part 2 Problem

Behavioral health has become a concentrated audit target across Medicaid and Medicare, and the findings are strikingly consistent: medical necessity not established, session notes that do not support the units billed, treatment plans that are stale or generic, and services delivered by staff whose credentialing or supervision does not meet the payer’s requirement.

There is also a problem the rest of healthcare does not face. Substance use disorder records are governed by 42 C.F.R. Part 2, which restricts disclosure well beyond ordinary privacy rules. Producing records to an auditor without working through Part 2 first creates a second, separate exposure on top of the audit.

42 C.F.R. Part 2
SUD Records Confidentiality
Medicaid
The Dominant Payer and Auditor
2,000+
Audits and Investigations Handled
Immediate
Response for Audit Deadlines
Former officials from the agencies investigating your matter
U.S. Department of Justice
DOJ
FBI
FBI
HHS OIG
HHS-OIG
DEA
DEA
OptumRx
OptumRx
McKesson
McKesson
NAMFCU
NAMFCU
U.S. Treasury
Treasury
Client Reviews
What Clients Say
5.07 Google reviews
The Stakes
The service is rarely disputed, the documentation almost always is

Behavioral health audits seldom turn on whether treatment was appropriate. They turn on whether the record establishes medical necessity, whether the note supports the time billed, whether the treatment plan was current, and whether the person delivering the service was qualified and supervised as the program required. Findings extrapolate, and where the pattern suggests services billed but not delivered, the matter moves from overpayment into fraud territory quickly.

  • Medical necessity and session documentation drive most findings
  • Supervision and credentialing defects invalidate otherwise good care
  • Part 2 restricts disclosure of substance use disorder records
Case files binders
Case files
01
Time-based billing is checked against the note

Where units are time-based, the note has to establish the duration. Notes that record a service but not its length, or that are identical across sessions and patients, produce denials at scale because the same defect repeats across the population.

Documentation Exposure
02
Supervision defects invalidate valid care

Services delivered by unlicensed or provisionally licensed staff depend on the supervision arrangement meeting the payer’s requirement, and on that being documented. Where it is not, the service is denied even though it was clinically appropriate and actually delivered.

Credentialing Exposure
03
Pattern findings escalate the matter

Cloned notes, sessions billed on days a patient was not present, and units that exceed what the day could physically contain are read as evidence of intent rather than error. That is the point at which an audit becomes a fraud investigation.

Escalation Risk
Why Behavioral Health Is Audited Differently
The evidence of the service is the note, and nothing else

Four features make behavioral health review distinct.

Factor 01
There is no independent trace of delivery
Unlike a dispensed drug or an implanted device, a counselling session leaves no record other than the clinician’s note. That places the entire evidentiary weight on documentation quality, and auditors know it.
Factor 02
Part 2 sits across the whole response
Substance use disorder records carry disclosure restrictions that are stricter than ordinary privacy rules and that apply to auditors as they do to anyone else. The lawful route to producing them has to be worked out before production, not afterwards.
Factor 03
Programme rules vary by state and by payer
Medicaid behavioral health requirements for supervision, credentialing, treatment planning and documentation differ between states and between managed care plans. Compliance is measured against the specific programme rule, not against general clinical standards.
Factor 04
Growth areas draw scrutiny fastest
Applied behaviour analysis, intensive outpatient and telehealth-delivered behavioural services have all expanded quickly, and rapid growth in a service line reliably attracts data-driven review. Providers in those lines should expect scrutiny as a matter of course.
Before producing substance use disorder records, establish what Part 2 permits
Protect Your Practice Now →
Illustrative stack of legal and medical records prepared for document review
Document review · Illustrative image, not a client record
Document Review

The document response shapes the next procedural stage

The first response is not a routine administrative task. It establishes the documents, timing, and record the contractor can later use in its findings and on appeal.

Notice and deadlineIdentify the review posture and protect the earliest response window.
Contractor and review typeConfirm whether the matter is a document request, prepayment review, postpayment review, or focused medical review.
Scope and requested recordsReview the claim universe and the requested records before producing a file that cannot be taken back.
Our Approach
How we defend a behavioral health audit

Four stages, starting before anything is produced.

  • Document request response and audit scope evaluation
  • Initial determination engagement and statistical methodology challenge
  • Formal appeals: redetermination, QIC reconsideration, ALJ hearing
  • Parallel FCA and criminal coordination if the contractor refers
Conference room
Where defense is built
01
Establish the payer, the rule and the Part 2 position

We identify which programme rules apply, what the reviewer is measuring against, and whether any of the records requested are Part 2 protected. That determines what may lawfully be produced and on what basis.

02
Test the records the way a reviewer will

A sample is reviewed against the specific requirements: medical necessity established, treatment plan current and individualised, note supporting the units billed, and the deliverer credentialed and supervised as required.

03
Produce deliberately, and fix forward

Records are produced organised to the request with the required elements identified. In parallel, prospective documentation, supervision records and treatment planning are corrected, because completed remediation is worth far more than an intention to improve.

04
Appeal, and contain the escalation

Adverse findings are taken through the applicable appeal route, and extrapolation is challenged on methodology where it is used. Where findings suggest a pattern rather than a documentation gap, the matter is handled with the fraud exposure in view from the start.

Health Law Alliance attorneys
The HLA Bench

The HLA Behavioral Health Audit Team

Health Law Alliance handles the response and any parallel appeal, licensing matter or referral as one coordinated matter, so the strategy does not change hands as the matter moves between forums.

The bench includes a former Assistant U.S. Attorney nominated for the DOJ Director's Award, senior healthcare-company counsel, and attorney-providers with experience across healthcare audits and investigations.

Health Law Alliance

Firm record

5,000+Matters handled
2,500+Clients represented
2,000+Audits overseen
ImmediateAttorney response
Former professional experience

Where Our Attorneys Served Before Health Law Alliance

Department of Justice Former Assistant U.S. Attorney
Drug Enforcement Administration Former DEA Diversion Control Program Manager
OptumRx Former senior executive experience
McKesson Former healthcare-industry experience

Agency and company marks identify former professional experience of individual HLA team members. They do not imply affiliation, endorsement, or a client relationship.

Common Questions
Frequently Asked Questions

Seven questions that come up on almost every first call. The answers below are general; specific situations require privileged consultation.

What triggers a behavioral health audit?
Commonly data: high units per clinician per day, rapid growth in a service line, unusual billing patterns across a patient panel, or units that exceed what a working day can contain. Complaints and referrals also feature, but analytics drive most reviews.
What are the most common findings?
Medical necessity not established in the record, notes that do not support time-based units, treatment plans that are stale or not individualised, and services delivered by staff whose credentialing or supervision does not meet the programme requirement.
Can auditors demand substance use disorder records?
Access to Part 2 protected records is restricted, and the lawful route depends on the basis for the request and the consents or agreements in place. It has to be worked through before production, because disclosing without authority creates a separate exposure on top of the audit.
What happens if notes look similar across sessions?
Cloned or templated documentation is treated as a serious finding, because it suggests the note does not reflect the individual encounter. Where it repeats at scale it moves a matter from overpayment towards an allegation of services not rendered as billed.
Are telehealth behavioral services audited differently?
They attract particular attention, because the requirements around modality, consent, location, and documentation of the encounter vary by programme and changed substantially in recent years. Applying an outdated rule set is a common and avoidable source of findings.
Can we correct documentation after a request arrives?
Records can be amended through a proper amendment process, identified and dated as such. What must never happen is anything that looks like backfilling or altering notes after a request, which converts a documentation dispute into a fraud allegation.
Speak with Behavioral Health Audit Counsel Today

Get the Part 2 position settled before records are produced

Send us the records request and tell us whether substance use disorder services are involved. We will tell you what may lawfully be produced, what the reviewer will measure against, and where the sample is likely to fail. Free, confidential, no retainer.

"The contractor sent a document request covering three years of claims. Health Law Alliance was on the call within two hours, walked us through the production framework, and ran a privileged pre-production review of every document before it left the practice. When the findings came back with extrapolation, the methodology challenge at the redetermination level reduced the recoupment demand to a small fraction of the original number. The procedural record built at the redetermination stage carried through the QIC reconsideration." - Practice administrator, multi-location practice (anonymized client, 2024)
Behavioral health records request? Part 2 may restrict what you can produce.