Good behavioral health billing services own the full claim path: consent-aware intake, time-based coding, authorization tracking, scrubbing, denial rework and payment posting. For substance use records they also follow 42 CFR Part 2. Choose a partner that can show how it handles each step, in writing, before you sign.
Most practices look for outside help after the same few things keep happening: a session-length denial, an authorization that lapsed mid-treatment, or a substance use claim nobody is sure how to release. This guide is for the owner or manager deciding who should handle that work. It covers what a partner should do, what changed under Part 2, how in-house, outsourced and hybrid models compare, and what to ask before you commit. Our earlier version of this post included client results and fee ranges we could not support, so we removed them.
Key takeaways
- Behavioral health billing breaks at predictable points: session documentation, authorizations, plan limits, network status and consent.
- Part 2 compliance was required by February 16, 2026, and OCR enforces it, so ask every vendor how it handles substance use records.
- Get a Business Associate Agreement signed before any patient data is shared.
- Compare quotes by scope and fee base, not by headline rate; we found no reliable public benchmark.
- Parity rules are in flux; the statute stands, but confirm current status before citing the 2024 rule in an appeal.
What should behavioral health billing services actually cover?
They should cover every step between a patient’s first call and a posted payment, and they should be able to explain how each step differs for therapy, psychiatry and substance use treatment.
The work breaks into six stages. Each stage has a failure point that a generic billing process tends to miss, so ask about them one at a time.
- Intake and consent: insurance details captured once and checked against the plan, plus the right consent on file for substance use patients. Our behavioral health eligibility verification guide covers the benefits questions to settle before the first visit.
- Session documentation and coding: the note supports the code billed, including time, service type and any add-on code.
- Authorization tracking: approvals, unit counts and end dates sit next to the schedule, not in a separate spreadsheet.
- Claim scrubbing and submission: missing or mismatched data is caught before the payer sees it.
- Payer follow-up and denial rework: each denial is worked by cause, with the root fix passed back to the front end.
- Payment posting and reporting: payments and adjustments match what the contract should pay, and you can see the results by payer and service line.
Why do behavioral health claims get denied?
Most denials trace back to a short list of causes that a workflow can catch before submission. None needs unusual coding knowledge. They need someone checking the right thing at the right time.
| Denial trigger | What usually goes wrong | Check that prevents it |
|---|---|---|
| Session length does not support the code | The note records total minutes but not start and stop times, or the time falls below what the billed code needs | Record start and stop times on every note; audit a sample of long-session claims against the notes each month |
| Authorization expired or units used up | Approvals are tracked by hand, so an end date or visit count slips by mid-treatment | Keep authorization dates and unit counts beside the schedule; confirm before each session that needs one |
| Visit or benefit limit reached | The plan caps covered visits, and nobody was watching the count | Record each patient’s limits at intake and flag the account before the cap |
| Wrong plan or network status | Coverage was checked for the payer, not the specific plan product | Verify the plan product and network status at intake and again after any coverage change |
| Missing consent for a substance use record | Consent handling for Part 2 records is treated like a standard HIPAA authorization | Keep the right consent on file for every substance use patient and know who may receive the record |
Source: RCM Finder operational checklist based on common payer workflows; not a statistical analysis.
If your denial queue mixes causes like these, sort it by cause before you decide anything. A session-limit denial and a consent gap need different people and different fixes.
Time-based coding is the other recurring problem. Psychotherapy codes are chosen by documented time, and the add-on codes used with an E/M visit have their own ranges. The AAFP lists them as 16 to 37 minutes for 90833, 38 to 52 minutes for 90836 and 53 minutes or more for 90838, and says E/M time must be recorded separately from psychotherapy time (AAFP). For the add-on logic, see our 90836 billing guide. For choosing between the standalone codes, see our 90834 vs 90837 guide.
What does 42 CFR Part 2 change for your billing partner?
If you treat substance use disorders, your billing partner will handle records that Part 2 protects on top of HIPAA. HHS says the 2024 final rule has been effective since April 16, 2024, and that compliance was required by February 16, 2026 (HHS). That date has passed, so “we will get to it” is no longer an acceptable answer from a vendor.
| What the rule says | What it means for billing | What to ask the partner |
|---|---|---|
| A single consent can cover future uses and disclosures for treatment, payment and health care operations | Your billing partner can be covered by one properly written consent instead of a new authorization for each claim | “Which consent language do you expect from us, and how do you confirm it covers billing?” |
| HIPAA covered entities and business associates that receive records under that consent may redisclose them under the HIPAA rules | The rules for passing records along differ from the original Part 2 limits, so staff need to know which applies | “How does your team decide whether a Part 2 record can go to a clearinghouse or payer?” |
| The HIPAA Breach Notification Rule applies to breaches of Part 2 records | A breach involving substance use claims data starts the same notification clock as any other PHI breach | “What is your breach reporting process, and who calls us first?” |
| Records and testimony cannot be used in proceedings against a patient without consent or a court order | Subpoenas and legal requests that touch substance use claims need a documented response path | “Who handles a legal request for our claims data, and what do they do first?” |
| Penalties now align with HIPAA’s, and OCR enforces Part 2 | Complaints go to OCR, which can impose a civil money penalty | “Have you trained staff on Part 2 specifically, not just HIPAA?” |
Source: HHS, Fact Sheet 42 CFR Part 2 Final Rule, and HHS Part 2 page (reviewed 2026).
HHS also says OCR enforces Part 2, may investigate complaints, and that beginning February 16, 2026 anyone can file a Part 2 complaint (HHS). The rule does not require you to segregate Part 2 records, according to the HHS fact sheet, but it does require that you handle them under the right consent and disclosure limits.
Part 2 is not a vendor checkbox
No billing company can make your practice “Part 2 compliant” by itself. The practice remains responsible for consent and for what it sends out. A good partner makes your process easier to follow and easier to prove. Ask your own counsel how the rule applies to your program.
Does mental health parity change how you appeal denials?
It can, but the rules are in flux, and only the statute is settled. The Mental Health Parity and Addiction Equity Act (MHPAEA) governs how plans treat behavioral health benefits compared with medical benefits. Your billing partner should know the difference between a coding denial and a plan limit that may deserve a parity challenge.
According to a Mayer Brown summary of the Department of Labor’s September 8, 2026 Field Assistance Bulletin 2026-03, the Departments announced in May 2025 that they would not enforce certain new provisions of the 2024 final rule, and DOL continues that nonenforcement for plan years beginning on or after January 1, 2026. The same summary says the underlying statutory requirements, including the nonquantitative treatment limitation (NQTL) comparative analysis, remain in effect.
In plain terms: do not assume the 2024 rule’s new standards are being enforced, and do not assume parity protection has disappeared. If a plan applies a stricter prior authorization process to behavioral health than to comparable medical care, document it and ask for the plan’s comparative analysis. A partner that tracks denials by cause can show you whether a pattern exists.
How do you test a partner's behavioral health coding?
Give them a few anonymized notes and ask what they would bill and why. Strong coding depth shows up in the reasoning, not in a list of code numbers. A team that cannot explain why a note supports one session code over another has not reviewed the note.
Pay special attention to substance use treatment. CMS says certain State Medicaid agencies use H codes to identify services such as alcohol and drug treatment, while S codes are used mainly by private insurers and, although Medicaid programs may use them, are not payable by Medicare (CMS). That is why intensive outpatient billing depends on the payer. Our IOP billing guide for co-occurring disorders shows how the code sets differ.
Should you keep billing in-house, outsource it or split it?
Choose the model that fits your claim volume, your payer mix and the people you can realistically keep trained. None of the three is automatically better. The question is whether your current team can keep pace with denial rework, authorization tracking and coding review as you add clinicians.
| Factor | In-house | Outsourced | Hybrid |
|---|---|---|---|
| Control | Highest. Your staff see every claim. | Shared. You depend on the partner’s reporting and access. | Split by task. You keep what you want to own. |
| Coding depth | Depends on one or two trained people | Depends on the partner’s behavioral health experience; test it | You keep clinical coding questions in-house and send the rest out |
| Denial follow-up | Competes with front-desk work | A dedicated queue, if the contract says so | Partner works denials; your staff handle consent and documentation fixes |
| Cost structure | Salaries, benefits and software | Quoted by the vendor; confirm the fee base and what is excluded | A mix of both; compare total cost, not the headline rate |
How is outsourced billing priced?
Vendors price in different ways, including a percentage of collections, a flat monthly fee or a per-claim rate, and we have not found a reliable published benchmark to quote. So compare quotes by what they include, not by the headline rate. Ask what the fee is calculated on, whether denial rework, patient statements, credentialing follow-up and prior authorization are included, and what happens to old A/R. A low rate that excludes denial work can cost more than a higher one that includes it. Our checklist of questions for choosing a medical billing company covers the contract side.
What should you ask any billing partner before you sign?
Ask about access, contracts and accountability first. If a vendor cannot answer these in writing, the coding and denial work will be hard to trust either.
- Business Associate Agreement: HHS lists billing, claims processing and practice management among the activities a business associate performs, and says a covered entity may disclose PHI to one only with satisfactory written assurances (HHS). Ask to sign the agreement before any patient data moves.
- What the agreement covers: HHS says it must set permitted uses, require safeguards, require reporting of unauthorized uses and breaches, extend the same limits to subcontractors, and provide for return or destruction of PHI at termination (HHS).
- Access controls: who can see substance use claims, how access is limited by role, and whether the system keeps an audit log of who opened what.
- Your EHR: whether the team works inside your existing system, which tasks stay with your staff, and how you will see claim status.
- Reporting: which reports you will get, how often, and whether you can see denials by cause and by payer.
- Exit terms: how you get your data and your A/R detail back if you leave.
Not sure where your billing breaks first?
Send us a sample of recent denials. We will group them by cause and show which fixes belong to your front desk, your clinicians and your billing process.
How does RCM Finder handle behavioral health billing?
We start with a free practice audit, then work out the scope together. Our team works inside your existing EHR (for example PrognoCIS, eClinicalWorks or athenahealth), and we are not an official partner of any of them. Pricing is quoted after the audit, not before.
Our billing pipeline was built and tested against real claim data from an affiliated multi-provider pain management and neurology practice in Indiana. We apply specialty-aware billing logic to each claim rather than to the practice as a whole. Our medical billing services cover charge entry, coding support, claim submission and follow-up, and our behavioral and mental health RCM operations page shows how this applies to therapy, psychiatry and intensive outpatient programs.
On the security side, we use role-based staff permissions, an audit log and encrypted HTTPS connections. We put a Business Associate Agreement in place before we access patient data. We do not claim any third-party security certification, and you should ask any vendor, including us, for its current documents.
If you want to size the financial side first, the revenue calculator lets you test your own claim volume and denial rate before you talk to anyone.
Our recommendations
- Rank your denials by dollars and cause. We would sort the last quarter’s denials by cause and by dollar value before looking at vendors. A few expensive causes usually matter more than many small ones.
- Put start and stop times in every session note. We recommend recording the times, not just total minutes, so the note can support the code billed if a payer asks.
- Track authorizations beside the schedule. Keep the approval number, unit count and end date where schedulers can see them, and confirm before each session that needs one.
- Settle Part 2 consent before you change vendors. If you treat substance use disorders, get your consent form and disclosure process reviewed by counsel first. A new billing partner should fit that process, not replace it.
- Make the partner explain a real denial. Hand over one anonymized denial and one session note. Ask what they would bill, what they would appeal and what they would change at the front end.
- Get scope and exit terms in writing. List exactly what is in the fee, what is excluded and how you get your data back if you leave.
Choosing an RCM partner is partly choosing how much you can see.
The portal gives behavioral health practices a client portal with claim status by stage and owner, and reporting dashboards.
See how the RCM Finder portal works · Create a portal account
Disclosure: RCM Finder builds and sells this portal. It is a practice management system, not an EHR.
Bottom line
Choose the partner that can show you how it handles each stage of the claim, signs a Business Associate Agreement before it sees patient data, and tells you plainly what it will and will not own. If your denials are the main problem, our denial management services are a practical starting point, and you can talk to our team or request a free practice audit first.
Frequently asked questions
What do behavioral health billing services include?
They typically include insurance and benefits checks, charge entry, coding support, claim submission, payment posting, denial follow-up and reporting. For substance use programs, the work also includes handling records protected by 42 CFR Part 2. Ask any provider to list which steps it owns and which stay with your staff.
Do billing companies need a Business Associate Agreement?
Yes, in general. HHS lists billing, claims processing and practice management among activities a business associate performs, and a covered entity may disclose PHI to one only with satisfactory written assurances, usually a business associate agreement. Ask for the agreement before any patient data is shared.
What did 42 CFR Part 2 change for billing?
HHS says the 2024 final rule allows a single consent to cover future treatment, payment and operations disclosures, and applies HIPAA breach notification to Part 2 records. HHS says compliance was required by February 16, 2026, and OCR enforces the rule. Check the details with your counsel.
Is mental health parity still enforced?
The statute is. A summary of DOL’s September 2026 bulletin says nonenforcement continues for certain new provisions of the 2024 final rule, while statutory requirements, including the NQTL comparative analysis, remain in effect. Rules are changing, so confirm the current status before you cite parity in an appeal.
Should a small therapy practice outsource billing?
It depends on volume and who would do the work otherwise. If the owner is handling denials after hours, or one person holds all the billing knowledge, outside help may be worth pricing. If claims are few and your biller is strong, a hybrid for denials may be enough. Compare scope, not only fee.
How do I compare quotes from billing companies?
Ask what the fee is based on and what it excludes. Check whether denial rework, prior authorization, credentialing follow-up, patient statements and old A/R are included. Then ask for sample reports, the agreement terms and exit terms. The cheapest headline rate often leaves work with your staff.
Get your free practice audit
Tell us about your practice. We will contact you using the details you give.
- A review of your recent claims, denials and A/R aging
- Where your front desk and prior authorizations slow payment
- A prioritized fix list you keep, whether or not you hire us
Pricing is quoted after the audit, based on your volume and the services you choose. Prefer to talk? Call +1 (302) 556-2288.
Sources
- 42 CFR Part 2 — HHS Office for Civil Rights (2026)
- Fact Sheet 42 CFR Part 2 Final Rule — HHS (2026)
- Business Associates — HHS (2026)
- Sample Business Associate Agreement Provisions — HHS (2026)
- HCPCS Level II Coding Procedures — CMS (2015)
- Potential pitfall in Medicare billing: psychotherapy in conjunction with an E/M service — AAFP Family Practice Management (2026)
- DOL Announces New Enforcement Policy for Mental Health Parity NQTL Requirements — Mayer Brown (2026)
Disclaimer: This article is educational and is not legal, coding, billing or compliance advice. CPT and HCPCS codes, payer policies and federal rules change and vary by payer and state. Verify current requirements with the official sources, your payers and your counsel before you act.
