Behavioral health policies and procedures: the complete list by level of care
Every behavioral health program needs written policies in four areas: client rights and access, privacy and security, clinical care, and operations and staff. Telehealth, IOP and PHP, substance use and ABA programs add their own policies on top. Your level of care, state and payers set the exact list, so use the list below to find gaps.
What policies does every practice need?
Client rights and access
- Client rights and responsibilities
- Informed consent for treatment
- Grievances and complaints
- Non-discrimination and language access
- Fees, billing and collections
Privacy and security
- Notice of Privacy Practices and how it is given
- Use and disclosure of client information
- Psychotherapy notes, if you keep them
- Client access to records
- Security policies: passwords, devices, encryption, remote work
- Breach response and notification
- Business associate management
Clinical care
- Intake and assessment
- Treatment planning and review
- Suicide risk screening and safety planning
- Crisis and emergency response
- Coordination of care and releases of information
- Discharge and transfer
Operations and staff
- Credentialing and licensure verification
- Clinical supervision
- Training and competency
- Incident reporting
- Record retention and destruction
- Annual policy review
What do telehealth programs add?
For a section-by-section starting point, see the free telehealth policy template.
- Telehealth informed consent
- Verifying client identity and location
- Emergency plans for remote sessions
- Approved platforms and recording rules
- Licensure across state lines
What do IOP and PHP programs add?
- Admission and continued stay criteria
- Program schedule and minimum attendance
- Group therapy confidentiality
- Utilization review
- Staffing ratios and coverage
- Medication management and prescriber access
What do substance use programs add?
- 42 CFR Part 2 consent and disclosure
- Medication for addiction treatment, if offered
- Drug testing procedures
- Overdose response and naloxone
What do ABA programs add?
- Treatment plan authorization and reauthorization
- Parent or caregiver training
- Behavior intervention and restrictive procedures
- Supervision of behavior technicians
How do you keep policies current?
- Assign an owner to each policy.
- Review every policy at least once a year and when rules change.
- Record review dates and what changed.
- Have staff attest that they read new or changed policies.
- Make sure the written policy matches what staff actually do.
Frequently asked questions
Do I need different policies for each state?
Your core policies can be shared, but add state addenda where state rules differ.
Are accreditation standards the same as policies?
No. Standards describe what is expected. Your policies describe how your organization meets them. For a planning view of what surveyors often look for, see the Joint Commission and CARF written policies crosswalk.
How long should a policy be?
As short as possible while still being specific enough that a new staff member could follow it.
Checklist next step
Print or copy the lists above and mark each item as present, missing or in progress. That gives you a gap list for your next policy work session.
How Binder helps
Binder offers ready-to-adopt policy manuals by level of care and state, with free sample policies to start. Download a sample policy to see the format.
General information only. Confirm requirements with your state, payers and counsel. Checked against common BH program expectations as of October 2026.