Behavioral Health Billing: Denials, Parity, and How to Win Appeals in 2026

Why Behavioral Health Billing Is Its Own Specialty

Behavioral health billing is structurally different from general medicine billing, and applying general medicine assumptions to it is one of the most consistent ways practices lose revenue they legitimately earned. The differences are not superficial. They run through the code sets, the payer architecture, the regulatory framework, and the documentation standards. A biller who is excellent at orthopedics or internal medicine will still have a significant learning curve when they move to behavioral health, because so many of the default rules simply do not apply.

The CPT code set used in behavioral health reflects this complexity. Diagnostic psychiatric evaluations use 90791 (without medical services) and 90792 (with medical services). Individual psychotherapy is time-based, using 90832 (30 minutes), 90834 (45 minutes), and 90837 (60 minutes), each with corresponding add-on codes for psychotherapy combined with evaluation and management services. Substance use disorder programs frequently use HCPCS H-codes such as H0001 (alcohol and drug assessment), H0004 (behavioral health counseling and therapy), and H0015 (alcohol and drug treatment program, per hour). When psychiatric prescribers are also conducting E/M visits, the overlap with 99XXX codes introduces additional layering around medical decision-making versus psychotherapy time that many PM systems handle inconsistently.

Payer architecture adds another layer of complexity. Many commercial health plans carve out their behavioral health benefits to separate managed behavioral health organizations: Optum Behavioral Health, Magellan Health, Beacon Health Options, and others. When a plan carves out behavioral health, claims that go to the medical payer are often automatically denied and must be rerouted to the MBHO. This routing error is one of the most common and frustrating sources of behavioral health denials, and it requires staff to verify carve-out status at intake and at every authorization cycle, not just at the start of a patient relationship.

The regulatory framework is also distinct. MHPAEA establishes a parity obligation that does not exist for most other medical specialties. For substance use disorder treatment, 42 CFR Part 2 creates privacy protections that go beyond HIPAA, governing how SUD records can be disclosed for billing and treatment coordination. Providers who operate in both behavioral health and SUD treatment must manage two regulatory regimes simultaneously. The February 2024 final rule modifying Part 2 (effective for full compliance by February 16, 2026) aligned many Part 2 requirements with HIPAA, but the heightened SUD-specific protections remain in place for civil, criminal, and administrative proceedings.

Finally, the medical necessity bar in behavioral health is more subjective and more heavily contested than in most other specialties. A broken arm either requires a cast or it does not. A patient with major depressive disorder requiring 90837 weekly psychotherapy involves a clinical judgment call that payers frequently challenge, often using criteria that are not publicly disclosed and may not meet MHPAEA's comparability standard. This subjectivity is both the source of most behavioral health denials and the reason why parity-based appeals are particularly effective in this specialty.

The 2026 Parity Enforcement Landscape

What MHPAEA Requires

The Mental Health Parity and Addiction Equity Act (MHPAEA) is a federal law requiring that group health plans and health insurance issuers offering mental health or substance use disorder (MH/SUD) benefits provide coverage that is no more restrictive than coverage for comparable medical or surgical benefits. This applies across three categories of limitations: financial requirements (copays, coinsurance, deductibles), quantitative treatment limits (visit caps, day limits), and non-quantitative treatment limits (NQTLs), which include prior authorization criteria, medical necessity standards, provider network composition, and step therapy or fail-first requirements. MHPAEA applies to most employer-sponsored group health plans with 51 or more employees and to individual and small group health insurance issued through the ACA marketplaces. The law was enacted in 2008, extended to small employers and Medicaid managed care organizations through subsequent legislation, and significantly strengthened by the Consolidated Appropriations Act of 2021 (CAA 2021), which added the requirement that plans conduct and document a comparative analysis of their NQTLs. The Department of Labor maintains detailed MHPAEA guidance including model notices and enforcement resources.

The 2024 Final Rule: What Changed

On September 9, 2024, the Departments of Labor, Health and Human Services, and Treasury jointly published a final rule amending MHPAEA regulations that had been in place since 2013. The 2024 final rule added several significant requirements: a prescriptive NQTL analysis template requiring item-by-item disclosure of the factors and evidentiary standards plans use when designing NQTLs; a "meaningful benefits" test requiring that if a plan covers a condition in any benefit classification, it must cover at least one core MH/SUD treatment in each classification where comparable medical benefits are offered; a mandatory outcomes-based data collection requirement for plan years beginning on or after January 1, 2026; and an ERISA fiduciary certification requirement for the NQTL comparative analysis process.

In May 2025, following a legal challenge by the ERISA Industry Committee (ERIC) and an Executive Order directing agency review, the Departments announced they would not enforce the new provisions of the 2024 final rule while reconsidering whether to rescind or modify it. This non-enforcement announcement is important to understand precisely: it suspends only the new provisions added by the 2024 rule. The original 2013 MHPAEA regulations, MHPAEA's statutory obligations as amended by CAA 2021, and the CAA 2021 NQTL comparative analysis requirement all remain fully in force. Plans must still conduct and document a comparative analysis of their NQTLs and produce it within 45 days of a government request. Providers can still file parity complaints and, as of 2022, behavioral health parity disputes are eligible for external review. In plain terms: parity as a legal obligation did not pause. The newer enforcement machinery is temporarily on hold, but the underlying right to equal treatment is intact.

Recent Enforcement Actions

The most significant state-level enforcement action of 2026 came from Georgia. On January 8, 2026, the Georgia Insurance Commissioner issued orders fining 11 major commercial health insurers nearly $25 million for violations of state and federal mental health parity laws. The fines followed targeted market conduct examinations reviewing how insurers administered behavioral health benefits during 2022. The largest fine, more than $10.2 million, was levied against Oscar Health Plan of Georgia. Blue Cross Blue Shield Healthcare Plan of Georgia received the second-largest fine at $4.6 million. Cigna and Kaiser Foundation Health Plan of Georgia were fined $2.1 million and $2.5 million respectively. These January 2026 orders built on more than $20 million in additional fines the Commissioner had announced in August 2025, stemming from Georgia's first mandatory mental health parity data call, which uncovered over 6,000 parity violations involving improper prior authorization requirements, inconsistent benefit classification, and unclear post-service medical necessity reviews. Both enforcement rounds are documented in detail by Arnall Golden Gregory's January 2026 analysis and confirmed by OPEN MINDS reporting.

Georgia is not alone. State insurance regulators across the country are increasingly pairing per-violation monetary penalties with mandatory corrective action plans and ongoing monitoring requirements. When regulators are uncovering thousands of violations per insurer in market conduct exams, it tells you something important: the parity violations that create your denials are systematic and documented, not case-by-case judgment calls. That means your appeals can, and should, reference the regulatory record.

What This Means for Billers

For billing teams in 2026, the parity landscape creates a concrete strategic opportunity. Prior authorization denials and medical necessity denials for behavioral health services are now challengeable on parity grounds whenever you can show that a comparable medical service would not face the same restriction. You do not need a lawyer to make this argument in an internal appeal. You need a documented comparison: identify the analogous medical service (a specialist consultation with similar frequency, a chronic disease management program with similar intensity), confirm that the medical service does not face the same prior authorization requirement or medical necessity bar, and cite MHPAEA's comparability standard. The enforcement record from Georgia and other states gives you credibility when you make that argument, because you can point to documented patterns of exactly this kind of discrimination at the insurer level.

Top Behavioral Health Denial Patterns in 2026

Behavioral health practices tend to see the same denial patterns repeatedly. Understanding the root cause behind each pattern, not just the code, is what separates a practice with a 10% denial rate from one with a 22% denial rate. Here are the eight most common patterns, with the CARC codes typically attached and the fastest path to resolution.

1. Prior Authorization Not Obtained or Expired (CARC 197)

CARC 197 is the most straightforward denial in behavioral health billing: the claim did not have an active authorization covering the date of service. In behavioral health, this happens more often than in almost any other specialty because authorizations require frequent renewal. A 60-day or 90-day authorization for weekly therapy runs out fast, and if the renewal request is not tracked and submitted in advance, the clinician keeps seeing the patient while the billing team runs into a wall of retroactive denials. The fix is a dedicated authorization tracking system that alerts staff at least 15 days before expiration, with an automatic renewal workflow that does not depend on anyone remembering. Every CARC 197 should be audited not just for recovery but to identify whether a process gap caused it.

2. Medical Necessity Not Established (CARC 50, 55, 167)

CARC 50 (not medically necessary), CARC 55 (not medically necessary for this place of service), and CARC 167 (benefit for this diagnosis is not covered) collectively represent the most contested category of behavioral health denials. These are almost always clinical documentation failures rather than genuine coverage exclusions. The payer's reviewer could not find, in the clinical record, the specific language that maps the patient's current functional impairment to the level of care being billed. Payers look for DSM-5-TR specific diagnosis codes, standardized assessment scores (PHQ-9, GAD-7, AUDIT-C for SUD), documentation of failed lower levels of care, and an explicit connection between the treatment plan and the billed service. Medical necessity denials for behavioral health are highly winnable on appeal when the clinical record is built with the payer's criteria in mind from the start.

3. Missing Start/Stop Times on 90837 (Documentation Gap)

CPT 90837 covers psychotherapy of 60 minutes (53 minutes or more of face-to-face time). The code is time-based, which means the clinical record must document a specific start time and stop time for the session, not just a session length or a checkbox. This is not a billing rule. It is a coding rule baked into the CPT code descriptor itself. Payers are increasingly using AI-assisted audit tools to scan for this documentation at the point of prepayment review, and notes that say "60-minute session" without times attached are being down-coded to 90834 or 90832 automatically. The prevention is entirely upstream: EHR templates must capture start and stop time as required fields, not optional fields. Treat any note that lacks both times as an incomplete note before billing.

4. Out-of-Network or Carve-Out Routing Mistakes (CARC 242)

CARC 242 (services not provided by designated providers) is the behavioral health carve-out problem in claim form. The payer who adjudicates the member's medical claims is not the entity adjudicating behavioral health, but the claim went to the medical payer anyway. The result is a denial that looks like a network denial but is actually a routing error. Fixing it requires resubmitting to the correct MBHO, which is fine if you catch it within timely filing limits. The prevention is confirming carve-out routing at intake, at each authorization cycle, and whenever a patient's employer changes plan years. This is not a one-time verification. Employers change behavioral health carve-out vendors between plan years with some regularity.

5. Non-Covered Service or Diagnosis (CARC 96, 204)

CARC 96 (non-covered charge) and CARC 204 (service not covered by this payer/contractor) are often the result of a benefit classification error rather than a genuine coverage exclusion. Before accepting a CARC 96 denial as the final word, verify whether the behavioral health benefit is explicitly excluded or whether it falls under a limitation that may be subject to parity challenge. Courts and state regulators have found that payers improperly classify behavioral health services as non-covered when comparable medical services are covered under a different benefit category. If the patient's plan covers chronic disease management or medical specialty visits but claims to exclude the behavioral health equivalent, that classification is worth scrutinizing under MHPAEA.

6. Duplicate Claim Submission (CARC 18)

CARC 18 (exact duplicate claim or service) shows up in behavioral health practices that resubmit unresolved claims without changing the claim frequency code. When a claim is in pending status and staff resubmit it unchanged to try to move it forward, the second submission flags as a duplicate and both claims end up denied. The correct process for an unresolved claim is either a claim status inquiry (EDI 276/277) to check payer processing status or a corrected claim (frequency code 7) if there is an actual error to fix. Staff who do not know the difference between a corrected claim and a duplicate resubmission will generate CARC 18 denials systematically.

7. Credentialing and Provisional Billing Window Gaps (CARC 140, B7)

CARC 140 (patient/insured health identification number and name do not match) and RARC B7 (this provider was not certified/eligible to be paid for this procedure/service on this date of service) both appear when a clinician sees patients while their credentialing application is still pending with the payer. Behavioral health practices with high therapist turnover are particularly vulnerable because the credentialing cycle for each new hire (typically 90-120 days with commercial payers) creates a window where claims cannot be billed under that provider's NPI at in-network rates. Provisional billing under a supervising provider's NPI is an option in some states and for some payer contracts, but the rules vary and must be verified at the payer contract level before billing begins.

8. Concurrent Care Denials (Multiple Providers, Same Date)

When a patient receives both a therapy session (90837) and a psychiatric evaluation or medication management visit (99213 or 90792) on the same day from different providers in the same practice, payers sometimes deny one service as a duplicate or as an unbundled service. The correct approach is to document that the services were distinct, medically necessary, and performed by different clinicians with different treatment roles. A brief separate documentation note addressing the clinical rationale for both services on the same day, attached to the claim or submitted in the appeal, resolves most of these denials at the first level of review.

The Prior Authorization Workflow That Survives Parity Audits

Most behavioral health prior authorization problems are process problems, not clinical problems. The following seven-step workflow is designed specifically to reduce CARC 197 denials, survive post-payment audits, and preserve your right to make parity-based appeals when authorization is improperly required.

1. Verify eligibility and benefits at every episode, not just at intake. Real-time EDI 270/271 eligibility transactions confirm active coverage, deductible status, and behavioral health benefit tier. Run these at intake, at the start of each authorization period, and at plan year rollover. A patient who was in-network in December may be in a different plan tier in January.
2. Confirm carve-out routing before submitting any authorization request. Call the benefits number on the member's card and explicitly ask whether behavioral health is administered by the plan or carved out to a separate MBHO. Document the representative's name, the date, and the MBHO name or phone number confirmed. This takes four minutes and prevents routing errors that take four weeks to resolve.
3. Document medical necessity in the language the payer uses, not the language the clinician prefers. Request the payer's behavioral health medical necessity criteria (they are required to provide them under MHPAEA disclosure rules). Then build intake and progress note templates that address those criteria directly. If the payer's criteria reference functional impairment, include GAF scores, PHQ-9, or GAD-7 scores. If they reference failed lower levels of care, document that explicitly in the initial authorization request.
4. Submit the authorization request with diagnosis, treatment plan, session frequency, and anticipated duration in the initial package. Do not submit a minimal initial request expecting to add detail in the concurrent review. Payers who receive complete initial requests have less justification for issuing limited authorizations with aggressive concurrent review requirements.
5. Track authorization status, expiration dates, and renewal deadlines in a dedicated tracking system. This is not optional for any practice billing more than 20 patients per clinician. A shared spreadsheet breaks the moment a staff member is out sick. A structured tracking field in your PM system, or a dedicated authorization management tool, is the minimum viable process for preventing CARC 197 at scale.
6. Maintain a parity comparison file for every payer whose authorizations you manage. Document which medical services the payer requires authorization for and which it does not. When a payer requires authorization for 90837 weekly therapy but does not require authorization for weekly wound care, chiropractic, or diabetic education visits with comparable clinical frequency, you have your parity argument already documented and ready to use in the appeal if the authorization is denied.
7. Build parity language into your appeal templates before you need them. The time to draft a parity-based appeal is not the day you get the denial. Build a template that references MHPAEA's comparability standard, identifies the comparable medical service, and cites the payer's own authorization criteria for that medical service. When a denial arrives, you are inserting specific facts into a proven framework, not starting from scratch.

How to Win Behavioral Health Appeals: The 80% Playbook

The American Psychiatric Association's parity tracking data shows that 81.7% of behavioral health denials reaching an Independent Review Organization (IRO) are reversed. State-level data from external review reports consistently show reversal rates in the 62-82% range for behavioral health cases. The painful irony is that most behavioral health denials never reach the IRO level because providers do not appeal them. Staff write off small-dollar behavioral health claims, accept payer decisions at the internal appeal stage, or miss the filing deadline for external review. That 81.7% reversal rate exists for providers who follow through, not for everyone who gets denied.

Here is how to structure the four most common behavioral health appeal types.

Prior Authorization Denial Appeal

The strongest prior authorization appeals in behavioral health combine a parity argument with a clinical necessity argument. Lead with the parity comparison: identify a medical service covered by the same plan that has the same or lower clinical justification for authorization but does not require it. Cite 45 CFR 146.136 and the plan's own Summary Plan Description or Evidence of Coverage language describing how authorization requirements apply equally to medical and behavioral health benefits. Then add the clinical necessity documentation: current diagnosis with specificity code, standardized assessment scores, and the treating clinician's statement on why the treatment frequency requested is the minimum appropriate to prevent deterioration. External review for parity-based authorization denials is available under ACA rules as of 2022, and IRO reversal rates for these cases are high. See ROI's prior authorization appeal templates for a working framework.

Medical Necessity Appeal

Medical necessity appeals for behavioral health succeed when you speak the payer's criteria language back to them, not the language of the DSM. Obtain the payer's behavioral health clinical criteria (InterQual, MCG, or proprietary criteria). Map the patient's clinical record to each criterion the payer used to deny. If the denial letter references "lack of documented functional impairment," your appeal should include the PHQ-9 scores, GAD-7 scores, and the clinician's direct statement of how the patient's symptoms limit occupational, social, or daily functioning. If the denial cites "absence of treatment plan goals," attach the treatment plan with specific, measurable goals. Never respond to a medical necessity denial by saying the service was medically necessary. Show it. Use the medical necessity appeal workflow for the step-by-step process.

Coding and Bundling Appeal

When a claim is down-coded from 90837 to 90834 or a psychotherapy code is bundled with an E/M code, the appeal turns entirely on documentation. If your note has the start and stop times and they support 90837, attach a copy of the note and cite the CPT code descriptor for 90837 directly (53 minutes or more of face-to-face psychotherapy time). If you are billing both a psychiatric E/M and an add-on psychotherapy code using 90833 or 90836, explain in the appeal letter how the E/M and the psychotherapy were distinct services with separate documentation supporting each component. Modifier -59 (distinct procedural service) can be appropriate for same-day concurrent services, but only with documentation that explicitly supports the separation.

Timely Filing Appeal

Timely filing denials (typically CARC 29) are winnable if you have documented evidence of a timely submission attempt: a clearinghouse confirmation number, a 277CA acceptance transaction, or a certified mail receipt. The appeal should include the confirmation evidence and, if relevant, explain any extraordinary circumstances that prevented timely filing. Keep every clearinghouse acknowledgment record permanently. If your clearinghouse deletes transaction histories after 90 days, download and archive confirmation reports monthly. One timely filing appeal you cannot document is one you cannot win.

Documentation Standards That Pass 2026 AI Payer Audits

Insurance companies have been using algorithmic review for a long time. What has changed in 2024 and 2025 is the deployment of natural language processing tools that scan clinical note text directly, not just structured billing fields. These tools flag notes that are templated, that lack time specificity, or that use generic language not connected to a specific diagnosis or treatment plan goal. The consequence is down-coding on prepayment review or retrospective recoupment demands, neither of which is easy to reverse after the fact.

Documentation that reliably passes AI-assisted behavioral health audits includes the following elements in every session note:

• Precise start and stop time for every time-based psychotherapy code. Not session duration. Not "45-minute session." Actual clock times: "Session start: 2:05 PM. Session end: 3:08 PM."
• Specific therapeutic interventions with brief descriptions of techniques used. "Reviewed CBT thought records for catastrophizing patterns related to workplace conflict" is a specific intervention. "Discussed issues" is a documentation gap waiting to happen.
• Current DSM-5-TR diagnosis with specificity code referenced in the note body, not just in the header. If the treatment targets F33.1 (major depressive disorder, recurrent, moderate), the note should reference the depressive symptoms being treated and the current severity assessment.
• Connection between the session content and the active treatment plan goals. Which measurable treatment plan goal did this session address? What was the patient's progress toward that goal this session? AI tools look for this connection and flag notes where session content cannot be traced to a treatment plan objective.
• Session frequency justification when frequency exceeds typical norms. For patients in weekly therapy beyond the initial intensive phase, a brief sentence explaining why weekly frequency remains clinically necessary (rather than biweekly or monthly) protects against concurrent review denials and down-frequency authorization renewals.
• Standardized assessment scores at regular intervals. PHQ-9 and GAD-7 at intake, at 30 and 60 days, and at treatment plan review. AUDIT-C or DAST-10 for SUD treatment. These scores create an objective record of clinical change that payers cannot dismiss as subjective, and they are the most powerful evidence in medical necessity appeals.

If your EHR does not enforce these elements as required fields, that is a configuration problem worth addressing before your next post-payment audit. An EHR that allows clinicians to submit notes without start/stop times is a direct path to 90837 down-coding at scale.

How ROI Handles Behavioral Health Data

Behavioral health billing creates a specific set of data patterns that general-purpose revenue cycle tools often miss. At Revenue Optimization & Intelligence, we built our denial taxonomy around specialty-specific patterns, and behavioral health is one of the most fully mapped.

• The ROI platform ingests 835 and 837 files from any clearinghouse or EHR export, requiring no integration work on your end. Behavioral health-specific CARC/RARC combinations are flagged automatically and routed to the appropriate denial category.
• Prior authorization denials are tagged with our parity comparison framework, so your appeals team sees not just the denial reason but the recommended parity argument for that payer's known prior authorization requirements across benefit categories.
• Time-based code denials (90837 down-coded to 90834, for example) are flagged with documentation gap flags that route directly to the clinical supervisor for note correction, not just to the billing queue.
• The EDI Code Intelligence Lab includes complete CARC and RARC entries for every denial code commonly seen in behavioral health, each with fix, appeal, and prevention guidance specific to behavioral health billing contexts.
• Our appeal template library includes parity-based prior authorization templates, medical necessity templates pre-populated with DSM-5-TR language structures, and time-based code appeals with CPT code descriptor citations built in.

"Behavioral health billing is not harder than other specialties. It has different rules. Once your team understands the parity framework and builds documentation processes around it, your denial rate drops fast." Mindy Corbett, CSPO, CPC, CPB, CPPM, Founder, Revenue Optimization & Intelligence

Frequently Asked Questions

What is the average denial rate for behavioral health claims in 2026?

Behavioral health claims are denied at rates between 15% and 25%, roughly triple the 8-12% rate seen in general medicine. A denial rate under 10% is considered best-in-class for behavioral health. Rates above 20% typically indicate front-end process failures, such as authorization gaps or carve-out routing errors, rather than clinical coding errors. Every denied claim costs $25-$62 to rework, which means a practice with 200 behavioral health visits per month at a 20% denial rate is spending between $1,000 and $2,480 per month just working existing denials.

What is the Mental Health Parity and Addiction Equity Act (MHPAEA)?

MHPAEA is a federal law requiring that group health plans and health insurance issuers offering mental health or substance use disorder (MH/SUD) benefits provide coverage that is no more restrictive than coverage for comparable medical or surgical services. This covers financial requirements (copays, deductibles), quantitative limits (visit caps), and non-quantitative treatment limits (prior authorization, medical necessity criteria, network adequacy). The law was enacted in 2008 and significantly strengthened by the Consolidated Appropriations Act of 2021, which added a requirement that plans conduct and document a comparative analysis of their NQTLs. The Department of Labor and the Centers for Medicare and Medicaid Services share enforcement responsibility for MHPAEA depending on plan type.

Why do behavioral health claims get denied more often than medical claims?

Several structural factors drive higher denial rates in behavioral health. Prior authorization requirements are applied approximately 5.4 times more often than for comparable medical services. Many behavioral health benefits are carved out to separate managed behavioral health organizations, creating routing errors. Medical necessity standards for behavioral health are more subjective and more contested than for most medical conditions. Time-based psychotherapy codes require documentation elements (start/stop times, specific interventions) that many clinical workflows do not reliably capture. Together, these factors create a denial pattern that requires specialty-specific knowledge to address systematically.

Can I appeal a prior authorization denial on parity grounds?

Yes. MHPAEA requires that prior authorization requirements for behavioral health be no more stringent than those applied to comparable medical or surgical services. If a payer requires prior authorization for a behavioral health service but not for a comparable medical service, that disparity is a parity violation and grounds for both internal and external appeal. Building a parity comparison file that documents which medical services the payer authorizes without restriction, and pairing it with the standard appeal documentation, substantially strengthens these appeals. IRO reversal rates for behavioral health external reviews in the range of 62-82% suggest these appeals are worth pursuing.

What is the difference between CPT 90834 and 90837?

CPT 90834 covers individual psychotherapy of 45 minutes (38-52 minutes of face-to-face time). CPT 90837 covers individual psychotherapy of 60 minutes (53 minutes or more of face-to-face time). Both codes require documented start and stop times in the clinical record. The difference in reimbursement between the two codes is significant, often $40-$70 per session depending on payer. Billing 90837 when the note only documents 45 minutes of face-to-face time is a coding error. Billing 90834 when the session was genuinely 60 minutes but the note does not capture start/stop times is a documentation failure that costs revenue and creates audit risk.

How long do I have to file an external review appeal for a behavioral health denial?

Under ACA regulations, consumers and providers generally have four months from receipt of a final internal appeal denial to request external review by an IRO. For ERISA-governed self-funded employer plans, federal rules set a minimum four-month window, though state laws may provide longer windows for fully-insured plans. Starting in 2022, ACA rules require that mental health parity disputes be eligible for external review, expanding provider access to the IRO process. Missing external review filing deadlines forfeits the right to an IRO decision, so tracking internal appeal decisions and calculating external review deadlines at the time of each internal denial is critical.

Does 42 CFR Part 2 apply to my substance use disorder billing?

42 CFR Part 2 applies to any federally assisted program that holds itself out as specializing in, or providing, SUD diagnosis, treatment, or referral for treatment. This covers most outpatient SUD programs, opioid treatment programs, and hospital-based SUD units. The February 2024 final rule aligned Part 2 with HIPAA, allowing a single patient consent to cover treatment, payment, and healthcare operations disclosures. Full compliance with the 2024 revisions was required by February 16, 2026. Providers should confirm that patient consent forms, notice of privacy practices, and billing workflows all reflect the updated requirements. The complete revised regulation is at 42 CFR Part 2 on eCFR.

What documentation do I need to prevent AI down-coding of 90837 sessions?

To survive AI-assisted payer audits of 90837, clinical notes must include: precise start and stop times (not session duration), specific therapeutic interventions by name (not "discussed issues"), the patient's current DSM-5-TR diagnosis with specificity code, documentation of functional impairment or safety risk justifying session frequency, and measurable treatment plan goals with the clinician's assessment of progress toward those goals at this session. Standardized assessment scores (PHQ-9, GAD-7) at regular intervals create an objective clinical record that is difficult to challenge. Templated notes that do not vary across sessions are the most common AI audit trigger and should be treated as a compliance risk in any behavioral health EHR configuration review.

Sources

1. U.S. Department of Labor. Mental Health Parity and Addiction Equity Act (MHPAEA) guidance, regulations, and resources. https://www.dol.gov/agencies/ebsa/laws-and-regulations/laws/mental-health-and-substance-use-disorder-parity
2. Federal Register. Requirements Related to the Mental Health Parity and Addiction Equity Act (Final Rule, September 23, 2024). https://www.federalregister.gov/documents/2024/09/23/2024-20612/requirements-related-to-the-mental-health-parity-and-addiction-equity-act
3. Arnall Golden Gregory LLP. Georgia Continues Aggressive Mental Health Parity Enforcement, Fining Insurers Nearly $25 Million (January 28, 2026). https://www.agg.com/news-insights/publications/georgia-continues-aggressive-mental-health-parity-enforcement-fining-insurers-nearly-25-million/
4. OPEN MINDS. Georgia Issues $25 Million In Fines To 11 Insurers Over Mental Health Parity Violations (February 11, 2026). https://openminds.com/market-intelligence/news/georgia-issues-25-million-in-fines-to-11-insurers-over-mental-health-parity-violations/
5. URAC. Georgia Issues $25M in Mental Health Parity Fines, Elevating Behavioral Health Parity Compliance Scrutiny (February 24, 2026). https://www.urac.org/blog/georgia-issues-25m-in-mental-health-parity-fines-elevating-behavioral-health-parity-compliance-scrutiny/
6. Neal, Gerber & Eisenberg LLP. Parity on Ice: MHPAEA's 2024 Final Rule Heads to the Penalty Box (July 7, 2025). https://www.nge.com/news-insights/publication/parity-on-ice-mhpaeas-2024-final-rule-heads-to-the-penalty-box/
7. Trucker Huss APC. The Agencies Press Pause on the 2024 Final MHPAEA Rule (May 29, 2025). https://www.truckerhuss.com/2025/05/the-agencies-press-pause-on-the-2024-final-mhpaea-rule/
8. U.S. Department of Health & Human Services (HHS/SAMHSA/OCR). Fact Sheet: 42 CFR Part 2 Final Rule (February 8, 2024; updated January 30, 2026). https://www.hhs.gov/hipaa/for-professionals/regulatory-initiatives/fact-sheet-42-cfr-part-2-final-rule/index.html
9. eCFR. 42 CFR Part 2: Confidentiality of Substance Use Disorder Patient Records. https://www.ecfr.gov/current/title-42/chapter-I/subchapter-A/part-2
10. Centers for Medicare & Medicaid Services. CMS Behavioral Health Strategy and Key Concepts. https://www.cms.gov/priorities/innovation/key-concepts/behavioral-health
11. X12.org. Claim Adjustment Reason Codes (CARC) master list. https://x12.org/codes/claim-adjustment-reason-codes
12. Holland & Hart LLP. Do the New Substance Use Disorder Record Rules Apply to You? (February 9, 2026). https://www.hollandhart.com/do-the-new-substance-use-disorder-record-rules-apply-to-you
13. Cipher Billing. Behavioral Health Claims Trends in 2025: What Providers Need to Know (April 2026). https://cipherbilling.com/behavioral-health-claims-trends-in-2025-what-providers-need-to-know/