Opening a Behavioral Health Program: The Personnel File Timeline from License to Accreditation
Licensing, accreditation and federal employment law run on separate clocks, and all three read the same personnel files. This guide sets out the order of operations for a new or expanding behavioral health or substance use treatment program: what the files must hold before the state looks at them, which federal items start with the first hire, what an accreditation surveyor checks later against your own written schedules, and where each state's detail lives in our other guides.
Reviewed October 25, 2026 · 21 min read · Published October 25, 2026
The short version
- Licensing, accreditation and federal employment law run on separate clocks. In Florida, accreditation is required "for all clinical treatment services and for each location services are offered" but cannot be attained without a Department-issued license, so the license comes first and proof of an accreditation application is due at the first renewal (r. 65D-30.003(2)(a); s. 397.403(3), F.S.).
- The state reads the files early. Florida's license application is full permission for DCF to enter and inspect at any time, and "The department may not issue a regular license to any service provider that fails to provide proof that background screening information has been submitted in accordance with chapter 435" (s. 397.411(1)(c), F.S.; s. 397.4073(1)(h), F.S.).
- A Florida hire whose level 2 screening is still running may be brought on "for training and orientation purposes" only, and "the employee may not have direct contact with vulnerable persons" until the screening is complete (s. 435.06(2)(d), F.S.).
- In California, anyone providing counseling services must be registered or certified with a DHCS-approved certifying organization before the first session; DHCS says the old six-month window "is no longer permissible" (HSC §11833(c)(1); MHSUDS IN 18-056).
- In a New Jersey residential program, fingerprint-supported State-level criminal history checks must be initiated "not later than the time of hiring all staff, including student interns and volunteers" (N.J.A.C. 8:111-3.5(a)2).
- Federal file items start with the first hire, not the license: Form I-9 Section 1 "at the time of hire" and Section 2 "within three business days of the hire" (8 CFR 274a.2(b)(1)(i)(A), (b)(1)(ii)(B)), and bloodborne pathogens training for exposed staff "At the time of initial assignment to tasks where occupational exposure may take place" (29 CFR 1910.1030(g)(2)(ii)).
- No federal statute or regulation requires a provider to check the LEIE or sets a frequency. OIG recommends checking before employing or contracting and then monthly, and no federal health care program pays for items or services furnished by an excluded person (OIG, Updated Special Advisory Bulletin, May 8, 2013, p. 15; 42 CFR 1001.1901(b)(1)).
- In CARF's 2026 Behavioral Health manual, verification of backgrounds, credentials and fitness for duty is Standard 1.I.5 and comes before a person delivers services. Five personnel frequencies are left to each organization's written schedule (1.I.4, 1.I.5, 1.I.8, 1.I.9 and 1.H.13), and surveyors check the files against that schedule.
- CARF asks for the survey application at least three months before your preferred two-month survey window, and "Within 90 days of being notified of the accreditation decision, you submit a completed QIP" (carf.org, Survey preparation; Steps to accreditation).
- To be certified by SAMHSA, an opioid treatment program "must be the subject of a current, valid accreditation by an Accreditation Body or other entity designated by the Secretary" (42 CFR 8.11(a)(2)); SAMHSA's list, updated April 24, 2026, names five approved bodies, CARF International among them.
Three clocks, one set of files
Opening a behavioral health or substance use treatment program means meeting three sets of rules that run on different calendars.
- Licensing is the state's clock. It starts when you apply and sets what each personnel file must hold.
- Accreditation is your accreditor's clock. Depending on the state and the program, it is a condition of the license, a condition of payment, or optional. Either way, the surveyor later reads the same files against the accreditor's standards and against the schedules in your own policies.
- Federal employment and health care law starts with your first hire, licensed or not.
So the files have to be complete early, not assembled after the license arrives. In Florida the license application itself is full permission for DCF to enter and inspect at any time (s. 397.411(1)(c), F.S.), and "The department may not issue a regular license to any service provider that fails to provide proof that background screening information has been submitted in accordance with chapter 435" (s. 397.4073(1)(h), F.S.). In California, a certified program whose personnel records have not reached the DHCS analyst by the end of the site visit "shall be cited for a deficiency" (DHCS certification standards, §37(c)). Plan on the state reading your first files at or before licensure.
This guide covers the order of operations. The state checklists live in our guides to Florida DCF 65D-30 personnel files, California SUD program personnel files and New Jersey SUD personnel files under 8:111 and 8:43K, with the accreditation layer in the CARF behavioral health personnel file guide and the federal exclusion layer in the OIG exclusion screening guide.
Order of operations: license first, accreditation first, or both
Which comes first depends on the state and on the program type, and the patterns differ.
| Where | What comes first | Citation |
|---|---|---|
| Florida, substance use clinical treatment | The DCF license. Accreditation is required for every clinical treatment service and location, cannot be attained without a Department-issued license, and is proved at renewal: proof of application at the first renewal, proof of accreditation after that | r. 65D-30.003(2)(a); s. 397.403(3), F.S. |
| North Carolina, services DHHS designates | Enrollment or a state contract. A new provider must be accredited within one year of Medicaid enrollment, or within two years after its first contract for a state-funded service that requires national accreditation | G.S. 122C-81(d) |
| Ohio, mental health and addiction services | Accreditation, where national accreditation exists for the service: required for initial state certification since October 3, 2023, and for renewals since October 1, 2025 | Ohio Rev. Code 5119.36(B) |
| New Jersey | The Department of Health license. Accreditation is not a licensing condition, except that an opioid treatment program must hold federal certification, which requires accreditation. Accredited programs can seek deemed status | N.J.A.C. 8:43K-8.1(a)1; 8:43K-2.6 |
| California | The DHCS license or certification. We found no California rule that gives an accredited SUD program deemed status, fewer reviews or credit toward the DHCS personnel rules | BHIN 21-001 |
| Opioid treatment programs, any state | Accreditation, before SAMHSA certification. Accreditation bodies survey "for initial accreditation, and then at least every three years" | 42 CFR 8.11(a)(2); 8.4(a)(1) |
| Medicaid psychiatric residential treatment facilities for individuals under 21 | Accreditation by the Joint Commission, CARF, the Council on Accreditation or another accreditor the state recognizes, as a condition of Medicaid coverage | 42 CFR 441.151(a)(2)(ii) |
Two practical consequences follow.
In a license-first state, build to the state list first. The accreditor is not in the room at licensure, so the state's own list is the one the first files must satisfy. In Florida that is the seven items in r. 65D-30.004(4)(a), plus the CPR and first aid certificate for direct care staff and proof of medication training (65D-30.0046(1)(c)6., (1)(h)). Then layer the accreditor's standards on top.
Work back from the renewal date. CARF asks for the survey application at least three months before your preferred two-month survey window (carf.org, Survey preparation; Steps to accreditation), and Florida's first renewal must carry "proof of application for accreditation for each licensed service component providing clinical treatment" (s. 397.403(3), F.S.). Put both dates on the calendar the week the license issues.
This guide covers the personnel side of opening. For the license application process itself, see the page on opening a treatment center from Vie Consulting Service. Vie Consulting Service and Corvara HR share a founder.
Before the license: what the first files must hold
Each state writes its own list. Two habits serve every state covered here: build the roster wider than payroll, because volunteers, interns and contractors count (see the FAQ below), and verify credentials at the source rather than accepting a photocopy the employee hands in.
Florida (DCF, chapter 397)
- Every personnel record holds seven items: the current job description with minimum qualifications and documentation that the person meets them; the application or resume; the annual performance appraisal; a signed and dated acknowledgment of orientation and of the personnel and operating policies; a verified or certified copy of degrees, licenses or certificates; screening documentation; and documentation of required training (r. 65D-30.004(4)(a)1.-7.).
- Level 2 screening is role-scoped. It reaches owners, directors, chief financial officers and clinical supervisors; personnel with direct contact with children or with developmentally disabled adults; and peer specialists, who are screened under the separate s. 397.417(4) standard (s. 397.4073(1)(a), F.S.). Rule 65D-30.0034(2) separately requires level 2 screening for all owners.
- Register with the Clearinghouse and initiate each check there before referring anyone for fingerprinting (s. 435.12(2)(d), F.S.), and collect the Attestation of Good Moral Character, form CF 1649 (June 2025), at the initial screening (r. 65D-30.004(4)(b)3.).
- A new applicant submits competency and ability information for the applicant, chief executive officer, chief financial officers and clinical supervisors, "including education, previous employment history, and list of references" (r. 65D-30.0036(1)(c), (2)(a)).
- Most new-hire training is due within six months of the hiring date, but nursing support training comes before the person performs the function and medication training before the person first supervises self-administration of medication (65D-30.0046(1)(c), (1)(c)5., (1)(h)). New clinical staff working at least 20 hours per week owe 12 hours of competency-based training within the first year (65D-30.0046(1)(f)). An opening cohort hired in one month hits every one of these deadlines in one month, so schedule the courses before the doors open.
The full file list and training table are in the Florida DCF 65D-30 guide.
California (DHCS)
- Since AB 118, every outpatient alcohol or other drug program with a California location must be certified by DHCS (HSC §§11832, 11832.2). Form DHCS 5082, Program Director Information, is part of the initial certification application (Standards §10(a)(24)), and the program director needs at least two years of work experience in the field of substance use disorders and related behavioral health conditions (Standards §36(a)(2)).
- Anyone providing counseling services must be registered with, or certified by, CAADE, CADTP or CCAPP before the first session (HSC §11833(c)(1); MHSUDS IN 18-056).
- Residential and certified program staff need a health screening with a TB test between 60 days before and 7 days after employment (9 CCR §10564(e)(1); Standards §36(d)). A test done eight days after the start date is already late.
- DHCS requires criminal record clearance only for staff who work with adolescents in waiver facilities; other checks follow the Fair Chance Act, which bars conviction questions before a conditional offer at employers with five or more employees (9 CCR §10624; Gov. Code §12952).
The record table and counselor clocks are in the California SUD program guide.
New Jersey (Department of Health)
- Residential (8:111): the facility must "initiate State-level criminal history background checks supported by fingerprints not later than the time of hiring all staff, including student interns and volunteers" (N.J.A.C. 8:111-3.5(a)2). The duty is to initiate by the time of hire, so the file needs a documented initiation date.
- Residential (8:111): at licensure the facility discloses "contract arrangements with outside agencies" as part of its staffing patterns, criteria and credentials (8:111-2.3(i)3).
- Outpatient (8:43K): the facility must "Employ and designate the following staff: i. Program director; ii. Clinical supervisor; and iii. Counseling and/or therapy staff" (8:43K-6.2(a)). Criminal history is a written policy duty rather than a fingerprint mandate (8:43K-4.11(a)7, (a)7i).
Which chapter governs a given program, and both full lists, are in the New Jersey SUD guide.
From the first hire: the federal items
These rules apply to the file whatever your state and accreditor, and several start before a single client is seen.
- Form I-9. The employee completes Section 1 "at the time of hire," the day employment actually begins, and you complete Section 2 "within three business days of the hire" (8 CFR 274a.2(b)(1)(i)(A), (b)(1)(ii)(B); 274a.1(c)).
- Exclusion screening. No federal health care program pays for an item or service furnished by an excluded person (42 CFR 1001.1901(b)(1)), and OIG may impose a civil money penalty on anyone who arranges or contracts, "by employment or otherwise," with a person they know or should know is excluded (42 CFR 1003.200(b)(4)). OIG states that "Providers are not required by statute or regulation to check the LEIE," and recommends checking before employing or contracting and then monthly (OIG, Updated Special Advisory Bulletin, May 8, 2013, p. 15). Monthly becomes binding where a state Medicaid rule or a contract makes it so, as paragraph 5(r) of Florida's December 2023 Medicaid provider agreement forms does. Details are in the OIG exclusion screening guide.
- Background checks through a screening company. The Fair Credit Reporting Act requires a written disclosure "in a document that consists solely of the disclosure" and the applicant's written authorization before the report is obtained, and, before any adverse action, "a copy of the report" and a written description of the person's rights (15 U.S.C. 1681b(b)(2)(A), (b)(3)(A)).
- HIPAA training. A covered entity trains new workforce members, including volunteers and trainees, on its privacy policies "within a reasonable period of time" after they join, documents it, and keeps the documentation six years (45 CFR 164.530(b), (j)(2); 160.103). No current rule sets an annual frequency (45 CFR 164.308(a)(5)(i)).
- Part 2. The 2024 amendments to 42 CFR part 2 have required compliance since February 16, 2026 (89 FR 12472), but Part 2 sets no workforce training requirement; HHS wrote that "part 2 does not expressly require training" (89 FR 12590).
- Medical information. An employer with 15 or more employees keeps medical examination information "on separate forms and in separate medical files" (29 CFR 1630.14(b)(1), (c)(1); 1630.2(e)(1)).
- Bloodborne pathogens. Exposed staff are trained at initial assignment and then within one year of their previous training, and are offered the hepatitis B vaccine within 10 working days of initial assignment, with a signed declination if they refuse (29 CFR 1910.1030(g)(2)(ii), (iv); (f)(2)(i), (iv)).
- Drug-free workplace. A direct HHS grant recipient gives each employee working on the award a copy of its drug-free workplace statement (2 CFR 382.20; 2 CFR 182.205-182.215); money that arrives through a state pass-through does not by itself bring you under the rule (2 CFR 182.660).
None of these waits for the license. A program that hires an office manager and a clinical director three months before opening owes their I-9s on the normal schedule, and should run their exclusion checks before they start, not at licensure.
Writing the policies your accreditor will hold you to
Much of an accreditation survey is decided by policies written before opening, because the surveyor reads the files against them. This guide uses CARF as its example because our CARF guide maps where its personnel standards sit. Florida DCF's list of recognized accrediting agencies names CARF alongside the Council on Accreditation, the Green Apple Accreditation Commission of Social Services and The Joint Commission; with another accreditor, pull its manual and build the same way.
CARF's current Behavioral Health Standards Manual is the 2026 edition, "for surveys conducted between July 1, 2026 and June 30, 2027" (CARF online store). CARF sells the manual, so what follows describes where the standards sit, in our own words, without reproducing them. Opioid treatment programs are surveyed against a separate 2026 Opioid Treatment Program Standards Manual.
Personnel standards sit mainly in Section 1.I, Workforce Development and Management. CARF's own survey report lists the key areas of 1.I as composition of workforce, ongoing workforce planning, verification of backgrounds, credentials and fitness for duty, workforce engagement and development, performance appraisals, and succession planning (CARF Accreditation Report, November 2025, published by the Delaware DSCYF).
Three points matter at opening:
- Verification comes before services. In the 2026 manual, verification of backgrounds, credentials and fitness for duty is Standard 1.I.5, completed before the person delivers services. A copy of a license handed in by the employee is not a check with the issuing board. Record what was verified, against which source, by whom and on which date.
- Five frequencies are yours to set. CARF leaves job description review (1.I.4), re-verification of backgrounds, credentials and fitness for duty (1.I.5), competency assessment (1.I.8), performance appraisal (1.I.9) and driver record review (1.H.13) to the organization. Write a number for each into policy before the first hire. Surveyors check the files against your own schedule, so choose intervals you will meet.
- Background checks follow the law and your policy. CARF requires criminal background checks itself for people who give direct services to children or adolescents, and under its juvenile justice and older adult designations. For everyone else, 1.I.5 calls for them where the law, a contract or your own procedures do, so your state's licensing rules usually decide.
Other Section 1 standards reach the file too: competency-based health and safety training at orientation and at least annually (1.H.4), and, for U.S. organizations that receive federal funds, exclusion checks and corporate compliance training (1.A.7). If your policy templates came from an older crosswalk, check the lettering, since the 2026 manual relettered Section 1 (see the changes below).
The accreditation survey and its deadlines
CARF describes its survey team as one that "determines your conformance to all applicable standards by observing services, interviewing persons served and other stakeholders, and reviewing your documentation" (carf.org, Steps to accreditation). Its accreditation conditions, as printed in its 2026 continuing care retirement community manual, give CARF access to documents including "human resource files," and warn that the unavailability of key staff at the survey may be grounds for nonaccreditation.
| Step | When | Source |
|---|---|---|
| Survey application | At least three months before your preferred two-month survey window | carf.org, Survey preparation; Steps to accreditation |
| Written notice of the survey dates | At least 30 days before the survey | carf.org, Survey preparation |
| Decision and written report | About six to eight weeks after the survey | carf.org, Steps to accreditation |
| Certificate of accreditation | Within 60 days of the decision | carf.org, Steps to accreditation |
| Quality Improvement Plan (QIP) | Within 90 days of being notified of the decision | carf.org, Steps to accreditation |
| SAMHSA Implementation Report | Within 180 days of the decision, for SAMHSA-certified OTPs | carf.org, Steps to accreditation |
| Annual Conformance to Quality Report (ACQR) | Annually; CARF sends the form about ten weeks before it is due | carf.org, Steps to accreditation |
The decisions are Three-Year Accreditation, One-Year Accreditation, Provisional Accreditation, Inaugural One-Year Accreditation (formerly Preliminary), accreditation with stipulations, and Nonaccreditation (carf.org, Accreditation decisions).
Audit the personnel files when the survey application goes in, not when the 30-day notice arrives. A record obtained during the audit carries the date it was obtained; a correction that names the gap reads better to a surveyor than a backdated document.
After license and accreditation: the clocks that keep running
Accreditation does not retire the state's interest in the files, and the license does not retire the accreditor's.
Florida.
- Rescreening is due "within five (5) years from the date of their last screening results and every five (5) years thereafter" (r. 65D-30.004(4)(b)3.), while s. 408.809(2), F.S. measures five years from licensure, employment or entry into the contract. Track whichever date falls first, with a new CF 1649 at every rescreen. How each date is read is in the Florida Level 2 rescreening guide.
- Report initial Clearinghouse status and every status change, including terminations, within five business days (s. 435.12(2)(c), F.S.). DCF's Clearinghouse guidance says renewal notifications go out at 60, 30 and 21 days before the retained print expiration date, and only for people on the roster without an end date.
- DCF accepts the accreditor's survey "in lieu of its own inspections for licensure" (s. 397.411(2), F.S.) but still conducts full licensure inspections of substance abuse services every 3 years (s. 394.741(4), F.S.). Accredited providers submit the accreditation survey report annually and notify DCF within 10 days of noncompliance with accrediting standards (r. 65D-30.0036(7); 65D-30.003(2)(b)).
- "A license will not be renewed if a licensee has not paid all previously owed fines to the Department" (r. 65D-30.0038(6)).
California.
- Since January 1, 2026, counselor registration lasts one year, and a first-year registrant applies for renewal at least 120 days before it expires (BHIN 25-029). TB testing is renewable every year (9 CCR §10564(e)(1); Standards §36(d)).
- DHCS reviews licensed residential facilities at least once during the license period, certified programs at least once each certification period, and narcotic treatment programs not less than annually (HSC §11834.01(b)-(c); HSC §11832.12; 9 CCR §10080(a)). Accreditation does not change that schedule.
New Jersey.
- A residential license runs one year (8:111-2.2(b)); an outpatient license under 8:43K runs two years (8:43K-2.5(c)).
- Accredited outpatient programs may renew by deemed status (8:43K-2.6), but deemed-status site reviews "primarily focus on, but may not be limited to, staffing and clinical records" (N.J.A.C. 8:121-1.7(g)). Since April 6, 2026, a program licensed under 8:43K must comply "with any applicable accrediting organizations" (N.J.A.C. 10:36-3.1(b)), which makes an accredited program's CARF standards part of its state program standards.
- Residential counselor-interns' progress toward the CADC or LCADC is reviewed and documented at least semi-annually (8:111-1.9(a)2i).
CARF. The Annual Conformance to Quality Report comes due every year, and between surveys licenses renew, training comes due and staff turn over. Repeat the personnel file audit at least once a year and again whenever a survey application goes in.
The timeline on one page
| Stage | Personnel file work | Who reads it |
|---|---|---|
| Before the first hire | Job descriptions; personnel policies with a written interval for each CARF frequency; exclusion screening and background check procedures; I-9, FCRA, HIPAA and bloodborne pathogens processes; in Florida, Clearinghouse registration | You now; the accreditor later, against what you wrote |
| Each hire, before client contact | I-9; exclusion check; state screening initiated or cleared as the state requires; credentials verified at the source; in California, counselor registration and the TB test window | The state at licensure; the accreditor at survey |
| License application | In Florida, the competency and ability packet and proof that screening was submitted; in California, DHCS 5082 with the certification application; in New Jersey residential, staffing patterns and contract arrangements | The state licensing office |
| First six to twelve months | Florida's six-month and first-year training deadlines; HIPAA training within a reasonable period; annual bloodborne pathogens training; the first appraisals on your own schedule | The state; the accreditor |
| Survey application | At least three months before the preferred survey window; full personnel file audit | CARF |
| Survey and after | 30-day notice; decision in about six to eight weeks; QIP within 90 days; ACQR every year | CARF, while the state keeps its own review schedule |
| Each renewal and rescreen | Florida: accreditation proof and five-year rescreens. California: annual counselor registration and TB. New Jersey: one-year residential and two-year outpatient renewals | The state |
Every row traces to a citation in the sections above or in the checklist below.
What changed
The 2024 Part 2 amendments are now in force
Programs had to comply with the amended 42 CFR part 2 by February 16, 2026. Part 2 still sets no workforce training requirement; a program that is also a HIPAA covered entity trains under 45 CFR 164.530(b).
89 FR 12472 (Feb. 16, 2024); 89 FR 12590
New Jersey moves outpatient programs to an integrated license
N.J.A.C. 10:161B was repealed April 6, 2026. Outpatient programs are licensed under N.J.A.C. 8:43K, which allows license renewal by deemed status, and DHS program standards now require compliance with any applicable accrediting organizations.
N.J.A.C. 8:43K-2.6 (R.2026 d.045); N.J.A.C. 10:36-3.1(b) (R.2026 d.043)
CARF reletters Section 1 for surveys from July 1, 2026
The 1.J Technology subsection is gone and the later subsections are relettered: 1.J Rights of Persons Served, 1.K Accessibility, 1.L Performance Measurement and Management, 1.M Performance Improvement. Personnel cybersecurity training is now Standard 1.I.13, and a new AI policy standard calls for training for staff who use or oversee AI tools. Policies written from an older crosswalk need their CARF references checked.
CARF, 2026 CCRC Standards Manual, Changes in the 2026 Manual; CARF, 2026 Supplement for Networks; CARF news release (Apr. 21, 2026)
California counselor registration becomes a one-year credential
From January 1, 2026, registration is valid for one year, and a first-year registrant applies for renewal at least 120 days before it expires. Counselors first registering on or after July 1, 2025 complete 80 hours of education, including the core competency topics, within six months.
BHIN 25-029 (July 31, 2025), effective January 1, 2026; HSC §11833(b), AB 2473
North Carolina sets an April 20, 2027 accreditation deadline for existing Medicaid providers
Providers with an active service as of April 20, 2026 that requires national accreditation have until April 20, 2027 to complete post-enrollment accreditation and add it to their NCTracks record. New providers must be accredited within one year of Medicaid enrollment.
NC Medicaid, Post-Enrollment National Accreditation Update (Apr. 16, 2026); G.S. 122C-81(d)
Ohio now requires accreditation for certification renewals
Initial state certification of mental health and addiction services has required national accreditation, where it exists for the service, since October 3, 2023, and renewals since October 1, 2025. The statute names CARF among the accepted accreditors.
Ohio Rev. Code 5119.36(B)
Florida's CF 1649 is now the Attestation of Good Moral Character (June 2025)
Rule 65D-30.004(4)(b)3., effective 10-16-2025, incorporates the Attestation of Good Moral Character, form CF 1649 (June 2025), in place of the Affidavit of Good Moral Character (April 2021). The duty to submit it at the initial screening and every rescreening is not new; the edition and title are. Download it from the incorporation-by-reference link rather than reusing a saved copy.
Fla. Admin. Code R. 65D-30.004(4)(b)3. (History: New 5-25-00, Amended 4-3-03, 12-12-05, 8-29-19, 5-10-23, 10-16-25); prior text effective 5-10-2023 (flrules Final notice 27073202; Cornell LII mirror with history ending 5-10-23) incorporating form CF 1649 (April 2021); current text effective 10-16-2025 (flrules Final notice 30037522) incorporating Ref-18473 CF 1649 Attestation of Good Moral Character (June 2025)
Annual HIPAA security training is proposed, not final
A January 6, 2025 proposal would require security training for each workforce member at least once every 12 months. No final rule had been published as of October 15, 2026.
90 FR 898 (Jan. 6, 2025)
The checklist
Every item below cites the rule it comes from. Take the PDF into the file room, or print this page.
Before the first hire
Written intervals for job description review, re-verification of backgrounds, credentials and fitness for duty, competency assessment, performance appraisal and driver record review
The organization · Before the first hire; surveyors check the files against these schedules
CARF 1.I.4, 1.I.5, 1.I.8, 1.I.9 and 1.H.13, 2026 Behavioral Health manual · CARF accreditation
Register with the Care Provider Background Screening Clearinghouse and initiate each check there before referring anyone for fingerprinting
The provider · Before the first screening referral
s. 435.12(2)(d), F.S. · Florida DCF-licensed providers
Federal, from the first hire
Form I-9 Section 1, completed and signed by the employee
Every employee · At the time of hire, the day employment begins
8 CFR 274a.2(b)(1)(i)(A); 274a.1(c) · Federal (all employers)
Form I-9 Section 2, completed after examining the employee's documents
Every employee · Within three business days of hire
8 CFR 274a.2(b)(1)(ii)(B) · Federal (all employers)
OIG exclusion list check, with the result and date saved
Every employee and contractor · Before hire, then monthly: OIG's recommendation, binding only where a contract or state rule makes it so
42 CFR 1001.1901(b)(1); 42 CFR 1003.200(b)(4); OIG, Updated Special Advisory Bulletin (May 8, 2013), p. 15 · Federal (payment bar); frequency is a recommendation
Stand-alone background check disclosure and the person's written authorization
Applicants and employees checked through a consumer reporting agency · Before the report is obtained
15 U.S.C. 1681b(b)(2)(A) · Federal (Fair Credit Reporting Act)
Copy of the report and the written summary of rights, sent before any adverse action
Anyone you may act against based on the report · Before the adverse action; the statute sets no waiting period
15 U.S.C. 1681b(b)(3)(A) · Federal (Fair Credit Reporting Act)
HIPAA privacy training on your policies, documented
Every workforce member, including volunteers and trainees · Within a reasonable period after joining; again after a material policy change that affects the job
45 CFR 164.530(b)(2); 160.103 · HIPAA covered entities
Medical information kept in a separate, confidential medical file, not the personnel file
Anyone given a post-offer or employee medical examination or inquiry · Whenever medical information is collected
29 CFR 1630.14(b)(1), (c)(1); 1630.2(e)(1) · Federal (employers with 15 or more employees)
Bloodborne pathogens training
Employees with occupational exposure · At initial assignment to tasks with exposure
29 CFR 1910.1030(g)(2)(ii)(A) · Federal OSHA
Hepatitis B vaccination offered, or the signed declination
Employees with occupational exposure · After training and within 10 working days of initial assignment
29 CFR 1910.1030(f)(2)(i), (iv) · Federal OSHA
Before the license: Florida (DCF, ch. 397)
Personnel record with the seven items: job description and proof of minimum qualifications, application or resume, annual appraisal, signed orientation and policy acknowledgment, verified or certified credentials, screening documentation, training documentation
All staff · At hire; appraisal annually
Fla. Admin. Code R. 65D-30.004(4)(a)1.-7. · All DCF-licensed providers
Level 2 eligibility determination, role-based route
All owners, directors, chief financial officers and clinical supervisors · Before the person has contact with any vulnerable person in the screened role; hire for training and orientation only is permitted before results arrive
s. 397.4073(1)(a)1., F.S.; s. 435.06(2)(a) and (2)(d), F.S.; s. 397.4073(1)(h), F.S. · All DCF-licensed providers; inmate substance abuse programs operated directly or under contract with the Department of Corrections are exempt
Documented orientation-only status with the start date, the no-direct-contact-with-vulnerable-persons restriction, and the date the restriction was lifted
Anyone hired into a screened position before screening completes · During the pre-clearance period
s. 435.06(2)(d), F.S.; s. 435.02(5), F.S. · All DCF-licensed providers; the written record is recommended practice
Attestation of Good Moral Character, form CF 1649 (June 2025)
Individuals subject to level 2 background screening · At the initial screening and with every rescreening
Fla. Admin. Code R. 65D-30.004(4)(b)3. · All DCF-licensed providers
Competency-and-ability packet for the applicant, chief executive officer, chief financial officers and clinical supervisors: education, previous employment history, and list of references
Applicant, CEO, CFO(s), clinical supervisors · With a new application, and whenever there is a change in chief executive officer, chief financial officer or clinical supervisor
Fla. Admin. Code R. 65D-30.0036(1)(c) and (2)(a) · All DCF-licensed providers
Before the license: California (DHCS)
Registration or certification with CAADE, CADTP or CCAPP, verified on the organization's registry
Staff providing counseling services, unless exempt · Before the first counseling service
HSC §11833(c)(1); 9 CCR §10564(c); Standards §36(c); MHSUDS IN 18-056 · DHCS licensing and certification
Health screening with a TB test
Licensed residential and certified program staff · 60 days before to 7 days after employment; TB renewed every year
9 CCR §10564(e)(1); Standards §36(d) · DHCS licensing and certification
Program director information form DHCS 5082 with the initial certification application, and evidence of at least two years of SUD work experience
Certified program director · With the initial certification application
Standards §§10(a)(24), 36(a)(2) · DHCS licensing and certification
Before the license: New Jersey (DOH)
State-level criminal history background check supported by fingerprints, with the initiation date documented
All staff, student interns and volunteers · Initiated not later than the time of hiring
N.J.A.C. 8:111-3.5(a)2 · residential (8:111)
Contract arrangements with outside agencies disclosed as part of the facility's staffing patterns, criteria and credentials at licensure
contracted staffing arrangements · At licensure application and renewal
N.J.A.C. 8:111-2.3(i)3 · residential (8:111)
Written designation of the program director, clinical supervisor and counseling and/or therapy staff
Behavioral health services facilities · Before services begin; updated on any change
N.J.A.C. 8:43K-6.2(a) · outpatient (8:43K)
Written policies identifying the circumstances and methods for criminal history record review of prospective and current employees
The facility · Before hiring; applied to each hire
N.J.A.C. 8:43K-4.11(a)7 and (a)7i · outpatient (8:43K)
Accreditation (confirm in your current manual)
Verification of backgrounds, credentials and fitness for duty, with the source, method and date recorded
All personnel, under your written verification procedures · Before the person provides services, then on the schedule your written procedures set
CARF 1.I.5, 2026 Behavioral Health manual; Section 1.I key area (CARF behavioral health survey report, Nov. 2025) · CARF accreditation
Competency-based training on health and safety
All personnel · At orientation and at least annually
CARF 1.H.4, 2026 Behavioral Health manual; Section 1.H key area (CARF behavioral health survey report, Nov. 2025) · CARF accreditation
Survey application submitted, and a full personnel file audit run at the same time
The organization · At least three months before the preferred two-month survey window
carf.org, Survey preparation; Steps to accreditation · CARF accreditation; the audit is recommended practice
Quality Improvement Plan responding to the survey report
The organization · Within 90 days of being notified of the accreditation decision
carf.org, Steps to accreditation · CARF accreditation
Proof of application for accreditation at the first renewal, and proof of accreditation at later renewals, for each licensed component providing clinical treatment
The provider · First and subsequent license renewals
s. 397.403(3), F.S.; Fla. Admin. Code R. 65D-30.003(2)(a) · Florida DCF-licensed providers of clinical treatment
Notice to DCF of noncompliance with accrediting standards
Accredited providers · Within 10 days
Fla. Admin. Code R. 65D-30.003(2)(b) · Florida DCF-licensed providers
Opioid treatment programs
Current, valid accreditation by an approved accreditation body
The program · Before SAMHSA certification, then maintained
42 CFR 8.11(a)(2) · Federal (SAMHSA-certified OTPs)
Physician license in the jurisdiction where the OTP is located
Medical director · At appointment and at each renewal date
42 CFR 8.2 (medical director) · Federal (SAMHSA-certified OTPs)
Written notice to SAMHSA of the change
Program sponsor or medical director replaced or changed in status · Within 3 weeks
42 CFR 8.11(e)(5) · Federal (SAMHSA-certified OTPs)
After licensure: recurring
Rescreening result
Everyone subject to screening · Within five years of the last screening results or five years from licensure, employment or entry into the contract, whichever falls first
Fla. Admin. Code R. 65D-30.004(4)(b)3.; s. 408.809(2), F.S. · All DCF-licensed providers
Clearinghouse roster reconciled against the actual staff list, with a dated log of status changes reported
All screened staff · Initial status and any change in status reported within 5 business days
s. 435.12(2)(c), F.S. · All DCF-licensed providers
Counselor registration renewed every year, since a registration is valid for one year
Registered counselors · Before expiration; first-year registrants apply at least 120 days before
BHIN 25-029 §2.C · DHCS licensing and certification
Annual bloodborne pathogens training
Employees with occupational exposure · Within one year of the previous training
29 CFR 1910.1030(g)(2)(ii)(B), (iv) · Federal OSHA
Annual Conformance to Quality Report
CARF-accredited organizations · Annually; CARF sends the form about ten weeks before it is due
carf.org, Steps to accreditation · CARF accreditation
Questions administrators ask
Do we need accreditation before we can get a state license?
It depends on the state and the program. In Florida the license comes first: accreditation is required for clinical treatment services but cannot be attained without a Department-issued license, and proof of an accreditation application is due at the first renewal (r. 65D-30.003(2)(a); s. 397.403(3), F.S.). Ohio has required accreditation for initial state certification of mental health and addiction services, where national accreditation exists for the service, since October 3, 2023 (Ohio Rev. Code 5119.36(B)). North Carolina gives a new provider one year from Medicaid enrollment (G.S. 122C-81(d)). New Jersey does not make accreditation a licensing condition, except for an opioid treatment program, which must hold federal certification. An opioid treatment program anywhere needs "a current, valid accreditation by an Accreditation Body or other entity designated by the Secretary" to be certified by SAMHSA (42 CFR 8.11(a)(2)).
Can new staff start work before their background check clears?
In Florida, only in a limited way. A person may be hired "for training and orientation purposes" before the screening completes, but "the employee may not have direct contact with vulnerable persons" until it does (s. 435.06(2)(d), F.S.), and "vulnerable person" means a minor or a vulnerable adult (s. 435.02(5), F.S.). In a New Jersey residential program the duty is to initiate the fingerprint-supported check not later than the time of hiring (N.J.A.C. 8:111-3.5(a)2). In California, DHCS requires criminal record clearance only for staff who work with adolescents in waiver facilities (9 CCR §10624). Document whatever restriction applies, with its start and end dates.
Which federal requirements apply before we are licensed?
The employment rules apply from the first hire. Form I-9 Section 1 is due at the time of hire and Section 2 within three business days (8 CFR 274a.2(b)(1)(i)(A), (b)(1)(ii)(B)). A background check through a screening company needs the stand-alone disclosure and written authorization first (15 U.S.C. 1681b(b)(2)(A)). Staff with occupational exposure to blood are trained at initial assignment (29 CFR 1910.1030(g)(2)(ii)). OIG recommends an exclusion check before employing or contracting with anyone (OIG, Updated Special Advisory Bulletin, May 8, 2013, p. 15). HIPAA training applies once you are a covered entity, within a reasonable period after each person joins (45 CFR 164.530(b)).
How far ahead of a CARF survey should the personnel files be ready?
Ready when the survey application goes in, which CARF asks for at least three months before your preferred two-month survey window. CARF gives written notice of the survey dates at least 30 days ahead (carf.org, Survey preparation; Steps to accreditation), which is not enough time to rebuild verifications across a roster. CARF's accreditation conditions give it access to "human resource files," and the survey team reviews documentation alongside observation and interviews.
What personnel schedules does CARF leave to us?
Five, in the 2026 Behavioral Health manual: job description review (1.I.4), re-verification of backgrounds, credentials and fitness for duty (1.I.5), competency assessment (1.I.8), performance appraisal (1.I.9) and driver record review (1.H.13). CARF lists them among the manual's operational timelines. Write a number for each into policy before the first hire, because surveyors check the files against your own schedule.
Does accreditation replace state inspections?
Partly in some states, not at all in others. Florida accepts the accreditor's survey "in lieu of its own inspections for licensure" (s. 397.411(2), F.S.) but still conducts full licensure inspections of substance abuse services every 3 years (s. 394.741(4), F.S.). New Jersey can grant deemed status, but its deemed-status site reviews still "primarily focus on, but may not be limited to, staffing and clinical records" (N.J.A.C. 8:121-1.7(g)). We found no California statute, regulation or DHCS guidance that gives an accredited SUD program deemed status or fewer reviews. Personnel files stay in scope everywhere.
How often do we have to check the OIG exclusion list?
No federal statute or regulation sets a frequency for providers: OIG states that "Providers are not required by statute or regulation to check the LEIE," and recommends checking before employing or contracting and then monthly (OIG, Updated Special Advisory Bulletin, May 8, 2013, p. 15). Monthly becomes binding through a state Medicaid rule or a contract. In Florida, paragraph 5(r) of the December 2023 Medicaid provider agreement forms requires a monthly search of the LEIE, SAM and AHCA's final order database. The payment bar applies regardless: no federal health care program pays for an item or service furnished by an excluded person (42 CFR 1001.1901(b)(1)).
Do contractors, interns and volunteers need personnel files?
Usually, yes. Florida's "service provider personnel" includes owners, directors, chief financial officers, staff and volunteers (s. 397.311(46), F.S.). California certified programs keep personnel records for all staff, and staff "means employees, interns, or volunteers" (Standards §§37(a), 2(a)(34)). New Jersey residential programs treat volunteers as staff for criminal history checks, physical examination and testing, credential verification and photo identification (N.J.A.C. 8:111-23.2(c)). HIPAA counts volunteers and trainees as workforce (45 CFR 160.103), and CARF's definition of workforce in 1.I.1 includes contractors, volunteers, students and peer support specialists.
Sources
- CARF online store, 2026 Behavioral Health publications (edition, survey dates, prices)
- CARF online store, 2026 Behavioral Health Standards Manual (contents description; this guide's 2026 standard numbers were checked against a licensed copy)
- CARF online store, 2026 Opioid Treatment Program Standards Manual
- CARF, Steps to accreditation (survey application, decision, QIP, ACQR, SAMHSA Implementation Report)
- CARF, Survey preparation (application timing, survey notice, files)
- CARF, Accreditation decisions
- CARF, 2026 Continuing Care Retirement Community Standards Manual (Section 1 contents, changes in the 2026 manual, appendices)
- CARF, 2026 Standards Manual Supplement for Networks
- CARF news release, CARF implements first AI standard (Apr. 21, 2026)
- CARF Accreditation Report, Division of Prevention and Behavioral Health Services (November 2025), published by the Delaware DSCYF
- SAMHSA, Approved accreditation bodies for opioid treatment programs (updated 04/24/2026)
- 42 CFR 8.2, definitions (opioid treatment programs)
- 42 CFR 8.4, accreditation body responsibilities (survey cycle)
- 42 CFR 8.11, opioid treatment program certification
- 42 CFR 441.151, inpatient psychiatric services for individuals under 21 (accreditation)
- 8 CFR 274a.1 and 274a.2, employment verification (Form I-9)
- 42 CFR 1001.1901, effect of exclusion
- 42 CFR 1003.200, civil money penalties (excluded persons)
- HHS OIG, Updated Special Advisory Bulletin on the Effect of Exclusion from Participation in Federal Health Care Programs (May 8, 2013)
- Non-Institutional Medicaid Provider Agreement, MPA Non-Institutional (December 2023)
- Institutional Medicaid Provider Agreement, MPA Institutional (December 2023)
- 15 U.S.C. 1681b, Fair Credit Reporting Act, permissible purposes (employment)
- 45 CFR 160.103, HIPAA definitions (workforce)
- 45 CFR 164.308, HIPAA administrative safeguards (security awareness and training)
- 45 CFR 164.530, HIPAA administrative requirements (training, sanctions, documentation)
- 90 FR 898 (Jan. 6, 2025), HIPAA Security Rule proposed rule
- 89 FR 12472 (Feb. 16, 2024), Confidentiality of Substance Use Disorder Patient Records, final rule
- 29 CFR 1630.14, ADA medical examinations and inquiries
- 29 CFR 1910.1030, OSHA bloodborne pathogens
- 2 CFR part 182, drug-free workplace requirements (financial assistance)
- 2 CFR part 382, HHS drug-free workplace requirements
- Fla. Admin. Code R. 65D-30.003, Department Licensing and Regulatory Standards
- Fla. Admin. Code R. 65D-30.0034, Change of Ownership
- Fla. Admin. Code R. 65D-30.0036, Licensure Application and Renewal
- Fla. Admin. Code R. 65D-30.0038, Violations; Imposition of Administrative Fines
- Fla. Admin. Code R. 65D-30.004, Common Licensing Standards
- Fla. Admin. Code R. 65D-30.0046, Staff Training, Qualifications, and Scope of Practice
- Attestation of Good Moral Character, form CF 1649 (June 2025) (incorporated by reference)
- s. 397.311, F.S., Definitions
- s. 397.403, F.S., License application
- s. 397.411, F.S., Inspection; right of entry; classification of violations; records
- s. 397.4073, F.S., Background checks of service provider personnel
- s. 394.741, F.S., accreditation requirements for providers of behavioral health care services
- s. 435.02, F.S., Definitions
- s. 435.06, F.S., Exclusion from employment
- s. 435.12, F.S., Care Provider Background Screening Clearinghouse
- s. 408.809, F.S., Background screening; prohibited offenses
- Florida DCF, Substance Use Disorder Licensing and Regulation (recognized accrediting agencies)
- Florida DCF, Clearinghouse Fingerprint Renewal FAQ
- HSC Division 10.5, Part 2, Chapter 7.5, licensing of adult alcohol or other drug recovery or treatment facilities (§§11834.01 et seq.)
- HSC Division 10.5, Part 2, Chapter 7.1, certification of alcohol or other drug programs (§§11832 et seq., AB 118)
- HSC §11833, counselor registration and certification
- 9 CCR §10564, residential staffing standards (personnel, health screening, training)
- 9 CCR §10624, criminal record review for adolescent services
- 9 CCR §10080, NTP inspections
- DHCS BHIN 25-003, Certification of Alcohol and Other Drug Programs (February 3, 2025)
- DHCS Certification for Alcohol and Other Drug Programs (BHIN 25-003, Attachment 1)
- DHCS 5082, Program Director Information (Revised 06/2025)
- DHCS MHSUDS Information Notice 18-056, oversight of certifying organizations
- DHCS BHIN 25-029, AOD counselor educational requirements (AB 2473)
- DHCS BHIN 21-001, level of care designations and certifications
- Government Code §12952, Fair Chance Act
- Notice of Readoption, Readoption with Technical Changes and Recodification: N.J.A.C. 10:161A as 8:111
- N.J.A.C. 8:111-3.5, Personnel (Cornell LII)
- N.J.A.C. 8:111-1.9, Qualifications and responsibilities of the substance abuse counseling staff (Cornell LII)
- N.J.A.C. 8:111-23.2, Volunteer services policies (Cornell LII)
- N.J.A.C. 8:43K Notice of Adoption (adopted January 15, 2026; filed January 16, 2026 as R.2026 d.045; effective April 6, 2026)
- NJ DOH, N.J.A.C. 8:43K notice of proposal, 57 N.J.R. 743(a) (license renewal by deemed status; OTP certification)
- NJ DHS, N.J.A.C. 10:36 adoption, R.2026 d.043 (behavioral health program standards)
- NJ DHS, N.J.A.C. 10:190 licensing standards for mental health programs (deemed status site review)
- G.S. 122C-81, national accreditation benchmarks (North Carolina)
- NC Medicaid, Post-Enrollment National Accreditation Update (Apr. 16, 2026)
- Ohio Rev. Code 5119.36, certification of services and supports (accreditation)
This guide is general information for people opening or expanding a behavioral health or substance use treatment program, not legal advice, and reading it does not create an attorney-client relationship. It is compiled from facts already verified in other Corvara HR guides and carries their citations: federal regulations as read on eCFR as up to date on October 14, 2026 and CARF's public materials as read on October 15, 2026; California sources as read on October 16, 2026; Florida and New Jersey sources as reviewed on October 13, 2026; and OIG exclusion sources as read on or before September 9, 2026. CARF standards are summarized in our own words from CARF's public documents and, for standard numbers, from a licensed copy of the 2026 Behavioral Health Standards Manual, without reproducing its text; your current CARF manual governs. State law adds requirements this guide does not cover, and questions about licensing sequence belong with your state licensing office.