Back to Blog

How Do You Get a Behavioral Health Agency Ready for an Audit?

You get ready for an audit by making sure every billed service has a complete, signed, on-time note that matches the treatment plan. Then you check yourself before anyone else does: pull random charts, fix what you find, and check again. In Georgia, the DBHDD Provider Manual and your payer rules set the bar, so start there.

You get ready for an audit by making sure every billed service has a complete, signed, on-time note that matches the treatment plan. Then you check yourself before anyone else does: pull random charts, fix what you find, and check again. In Georgia, the DBHDD Provider Manual and your payer rules set the bar, so start there.

What auditors look for first

Most behavioral health audits come back to one question: does the record prove the service happened the way it was billed? The DBHDD Provider Manual says that for any claim sent to DBHDD or DCH, "a note must be present justifying that specific intervention." It also says the record must show that "the services billed are the services provided."

CMS gives the same message in its behavioral health fact sheet. Records should be complete, accurate, legible, signed and dated. They should show medical necessity and be coded correctly.

Know which rules apply to you

Georgia agencies can answer to more than one reviewer. Depending on your services, that can include:

  • DBHDD and the Georgia Collaborative ASO, which runs quality reviews for DBHDD providers.
  • DCH, the state Medicaid agency. Its Office of Inspector General reviews and audits Medicaid providers.
  • DBHDD as your licensing agency, if you hold a Drug Abuse Treatment and Education Program (DATEP) license. DBHDD took over this licensing from DCH on January 1, 2026. Under Georgia rule 82-10, surveys can happen "at any time."
  • Your accreditor, such as CARF or The Joint Commission.

Each one has its own tools and timelines. They also change. The DBHDD manual is updated every quarter, so check the current edition.

Build a simple self-audit habit

CMS suggests five steps for a self-audit:

  1. Have a written documentation policy.
  2. Use an audit tool or checklist.
  3. Pull a random sample, such as every "nth" chart.
  4. Don't let staff audit their own charts.
  5. Fix the problems, then re-audit.

Do this on a schedule, not just when a letter arrives. Keep a short log of what you checked, what you found and what you fixed.

Check timeliness and signatures

Late and unsigned notes are easy to find and hard to defend. The DBHDD manual says notes must be written and filed within a time set by your policy, not to exceed 7 calendar days. It calls notes within 24 hours best practice. Notes added later must be marked as a "late entry." Back-dating and post-dating are not allowed.

If you use an electronic health record (EHR), the manual says DBHDD and its reviewers must be able to see who wrote each document, when it was signed and every later edit.

Have records ready to hand over

The DBHDD manual says records must be kept onsite at approved service locations for at least 90 days after the last service or discharge. It also says records for audits must be turned in within the time frames in the Georgia Collaborative Provider Handbook. Records sent late will not be accepted.

So know where every chart lives, who can pull it and how fast. Practice once before you need to.

Don't forget staff files

Reviews often look at staff, not just charts. Keep proof of each person's license or credential, training and supervision. HHS-OIG says health care employers should routinely check its exclusion list (LEIE) for new hires and current staff. Hiring someone on the list can lead to penalties.

Key takeaways

  • Every billed service needs a note that justifies it and matches the plan.
  • DBHDD sets a 7-calendar-day outer limit for notes; 24 hours is best practice.
  • Run self-audits on a schedule with random charts and a second reviewer.
  • Know how fast you can pull records; late records may not be accepted.
  • Check staff licenses and the OIG exclusion list, not just charts.

How DIG helps

Ducere Investment Group (DIG) has consulted mental and behavioral health agencies for 14 years. We help Georgia owners set up documentation habits, self-audit routines and survey prep plans that fit their size. We are a business consultant. We do not give patient care, and we cannot promise any audit or survey result.

See our services or contact us to talk about your next review. Call 404-565-0181.

Sources

Written by Korey Akinbami, Founder & Principal. Published by Ducere Investment Group, Inc.

This article is general information, not legal, medical or billing advice.

Frequently Asked Questions

How often should we audit our own charts?

No single rule fits every agency. CMS suggests a written policy, a random sample and re-audits after you fix problems. Many agencies pick a set schedule, such as monthly or quarterly, and stick to it.

Who audits behavioral health agencies in Georgia?

It depends on your services and payers. It can include the Georgia Collaborative ASO for DBHDD, the DCH Office of Inspector General for Medicaid, your licensing agency and your accreditor. Ask each one which rules apply to you.

What is the most common audit problem?

Missing, late or weak notes are a frequent issue. If a note does not show what was done, why, for how long and how the person responded, the claim is hard to support.

Do we need to check the OIG exclusion list?

HHS-OIG says employers should routinely check the LEIE so they do not hire or keep excluded people. Hiring an excluded person can lead to civil penalties.