Free printable checklist · Cima Consulting
Intake packet checklist for SUD and mental health programs
A behavioral health intake packet is the set of forms a client signs before the first service: consent to treatment, the notice of privacy practices with its acknowledgment, the financial agreement, client rights and responsibilities, the grievance procedure, program rules, releases of information and, for a substance use program, a 42 CFR Part 2 consent. Around it sit the pre-admission screen, the benefits check, an orientation checklist and the clinical intake with its deadlines. Each item below says what it is, when it's signed, and why a surveyor, a payer or the client needs it.
Updated October 24, 2026. Built from the intake forms and admission policy we write for programs, and the packet our own licensed Texas outpatient program uses. Not legal advice: have your attorney review your forms.
Who this is for
Programs (PHP, IOP, outpatient) and practices that treat substance use or mental health conditions. A solo therapy practice needs the core forms (consent, privacy notice, financial policy, releases, telehealth consent and a good faith estimate); a licensed Texas SUD program needs all of it, with the client rights wording and intake timelines its license rules set in 26 TAC chapter 564. Tick each item as your packet has it, or print the list for the person building your forms. The where-it-fits view is in the IOP opening checklist; the words are in the glossary.
Cima Consulting · consulting.cimaehr.com/checklists/intake-packet-checklist
Intake packet checklist: SUD and mental health
Program: ____________________________Reviewed by: ______________________Date: ____________
Before the first day 5 items
Done by the intake coordinator from the first call to the scheduled admission.
-
Why the person is seeking care, symptoms, recent and last use, withdrawal history, medical conditions and medications, suicide and violence risk, living situation and insurance. Why: any positive safety answer goes to a licensed clinician the same day, and the screen documents why you admitted or referred the person, never because of a referral source or payment.
-
Active coverage, benefits for this level of care, deductible, copay, out-of-pocket, whether prior authorization is needed and who gives it, the call reference number and the rep's name. Why: it's your evidence if a claim is denied, and it lets you tell the client in writing what they'll likely owe. Our sister site's VOB checklist lists the questions by level of care.
-
Expected services and charges in writing. Why: the No Surprises Act requires it for uninsured and self-pay clients, and a client billed at least $400 more than the estimate can dispute the bill.
-
Detox, hospital, residential, prescriber. Why: "outpatient was tried and failed" needs records, and so does a safe medication plan. Each release names the provider, the information and the purpose.
-
Why: identity, the member ID and the payer phone numbers for the authorization, and the behavioral health company if the plan carves out those benefits.
Signed on day 1, before services 11 items
The packet itself. Each form is explained, signed and dated, with a copy offered to the client.
-
The services, benefits and risks, other options, the limits of confidentiality (danger to self or others, abuse reporting, court orders, emergencies), how to reach the program and what to do in a crisis (911, or call or text 988), the right to refuse or stop, and, for programs, attendance and the possibility that the health plan reviews progress. Why: it's informed consent, and the first thing a chart auditor looks for: signed before the first service.
-
How information is used and shared, the client's rights (copies, corrections, a list of disclosures, restrictions, private contact), and how to complain to the program and to HHS. SUD programs add the Part 2 section. Why: HIPAA requires the notice; if the client won't sign the acknowledgment, record the reason and what you tried.
-
Written consent to disclose substance use disorder records, including to the health plan for payment. Since the 2024 rule, one consent can cover all future treatment, payment and health care operations. Why: without it you can't send a claim or an authorization request that identifies the client as an SUD patient. More in Part 2: the consent that's different.
-
What insurance covers and what the client owes, copays, self-pay rates, payment plans, statements and collections, and the client's request that the plan pay the program directly. For programs: plans approve days in advance, and the client is told promptly if days are denied. Why: it prevents billing disputes and authorizes you to bill the plan; for SUD care, information still goes to the plan only under the Part 2 consent.
-
Dignity and respect, freedom from abuse, neglect and retaliation, privacy, taking part in treatment planning, refusing treatment, seeing the record, interpreters and accommodations, and knowing why a discharge is recommended. Why: licensed Texas chemical dependency programs must give and post the client rights listed in 26 TAC chapter 564, in the rule's wording where it gives one; accreditors check them too.
-
How to complain (in person, by phone, in writing or anonymously), who answers and by when, how to appeal, and the outside options: the clinician's licensing board, the state agency that licenses the program, the health plan, the accreditor and, for privacy, HHS's Office for Civil Rights. Why: a client who can't find the process can't use it, and surveyors ask clients whether they know it.
-
Attendance for the level of care, keeping what other group members share confidential, no weapons, alcohol or drugs on site, and how changes in level of care or discharge are decided. Why: it sets expectations a discharge decision can rely on later.
-
Often a section of the consent to treatment: testing is part of treatment, results guide care rather than punish, and results are protected like the rest of the record. Why: consent before collection, and a policy that matches it (instant cups need a CLIA certificate of waiver).
-
The client's location at each session, technology limits and privacy, the emergency plan, and the right to in-person care. Why: the clinician must know where the client is to act in an emergency and to stay within their license.
-
Family, referral source, court or probation, primary care, aftercare provider. Each names the recipient, what may be shared, the purpose, an end date or event, and the right to revoke. Psychotherapy notes and SUD counseling notes need their own separate authorization. Why: every call to someone outside the program needs one first, and auditors check each contact in the chart against a release.
-
Who to call in an emergency (with consent to contact them), and whether the client accepts appointment reminders by text or email, knowing they aren't fully secure. Why: a reminder that reveals treatment to the wrong person is a privacy breach.
Orientation 1 item
A signed checklist showing the client was walked through the program on day 1.
-
The tour and the emergency exits and evacuation route; the schedule and what each group is for; the program rules; where rights and the grievance process are posted; confidentiality in groups; how to reach staff, and after hours (988 and 911); drug testing; medications on site; that the health plan reviews progress to approve more days; and what discharge and step-down look like. Why: it proves the rights and rules were explained, not just handed over.
The clinical intake, with its deadlines 5 items
Not forms the client signs on paper, but the intake isn't complete without them. Set each deadline in your admission policy; where a state rule or payer contract sets a shorter one, it wins.
-
Why: safety first; a positive screen leads to a safety plan, a higher level of care or a call to 988 or 911, documented the same day.
-
Why: it shows this level is the least intensive one where the client can be treated safely, which is what the plan's reviewer reads (The ASAM Criteria). Texas: 26 TAC 564 sets assessment timelines for licensed chemical dependency programs; put the rule's timeframe in your policy.
-
Why: every group and individual note links back to a plan goal; without a plan, notes can't show why the client was there.
-
Why: co-occurring conditions and medications for opioid or alcohol use disorder are part of the plan; taking a prescribed medication is never by itself a reason to refuse admission.
-
Why: Joint Commission expects a standard measure repeated over time, and the trend is your best continued-stay evidence.
Keeping the packet right 5 items
The habits that keep a packet survey-ready after the first client.
-
Who may consent for a minor or another adult, and the papers that show it (custody order, guardianship, power of attorney). Check your state's rules on when minors may consent to their own care.
-
And recorded when used, so consent is informed for everyone.
-
Where clients can see them, with how to complain to the state licensing agency, and the privacy notice on your website.
-
"42 CFR part 2 prohibits unauthorized use or disclosure of these records," with a record of each disclosure in the chart.
-
Dated, approved by the owner or governing body, with old versions kept. The 2024 Part 2 rule, for example, required updated notices and consents by February 16, 2026.
As of October 24, 2026. Use your state's required wording where its rules give one. Cima Consulting isn't a law firm; have your attorney review your forms.
Part 2: the consent that's different
A program that holds itself out as treating substance use disorders and is federally assisted (Medicare or Medicaid, a DEA registration or federal funds all count) keeps its SUD records under 42 CFR Part 2, on top of HIPAA. Three things change in the packet:
- The consent has its own required elements (42 CFR §2.31): who may disclose, to whom, what, the purpose, the right to revoke, an end date or event, and the signature. A generic HIPAA release that leaves one out doesn't cover SUD records.
- One consent can now cover treatment, payment and operations. The 2024 final rule lets a client sign a single consent for all future uses and disclosures for treatment, payment and health care operations, and lets HIPAA-covered recipients share further as HIPAA allows. Its compliance date was February 16, 2026.
- Records stay out of proceedings against the client without the client's separate written consent or a court order that meets the Part 2 rules, and every disclosure carries the federal notice.
Court, probation and parole referrals are the case that trips programs up: the release names the event that ends it (for example the end of probation), and the client can't revoke it before then.
What surveyors and auditors find
| Finding | Why it matters | The fix |
|---|---|---|
| Consent signed after the first service | The first session happened without informed consent | The EHR blocks the first note until consent is signed |
| A call to family or a referral source with no release | An unauthorized disclosure, and for SUD records a Part 2 violation | Check the release list before any outside call |
| A release missing an end date or purpose | It doesn't meet the required elements | One template with every element, no free-form releases |
| Rights given but not posted, or old wording | Texas SUD programs must post the 26 TAC 564 rights | Post the current version; date it; review yearly |
| Treatment plan late or not signed by the client | Notes have no goals to link to; payers question medical necessity | Due dates in the EHR, with reminders to the counselor |
Comply's chart audit checklist scores these lines chart by chart.
Getting the forms written
We write intake packets under your program's name, in Word, for your attorney to review. A program's packet is part of the IOP / PHP Program Launch and of the policy manual; a practice's is in the forms kit:
| Service | Price |
|---|---|
| Program policy and procedure manual A full policy manual written for your program, organized by accreditation chapter, in Word. Includes: Every chapter: rights, care, records, medications, infection control, safety, emergency management, HR, leadership, performance improvement; Environment-of-care and emergency plans; State-rule crosswalk; Editable Word files. | $4,500 |
| Practice policies and forms kit HIPAA policies, privacy notice, consents and client forms under your practice's name, in Word. Includes: HIPAA privacy and security policies and risk assessment worksheet; Notice of privacy practices; Consent to treatment, telehealth, financial policy, good faith estimate; Release of information (42 CFR Part 2 ready); Editable Word files. | $750 |
Signing them is easier in software: in Cima EHR for IOP and PHP clients read each consent and sign it with a finger on their phone before they arrive (consent to treatment, privacy notice, telehealth and financial policy come ready for you to edit), the signed forms become a locked PDF in the chart, and records released under a Part 2 consent carry the federal notice. Staff files have their own list: the staff credential file checklist.
Questions
What forms are in a substance abuse intake packet?
Consent to treatment (including drug testing consent), the notice of privacy practices and acknowledgment, a 42 CFR Part 2 consent, the financial agreement, client rights and responsibilities, the grievance procedure, program rules, releases of information, a telehealth consent if needed, emergency contacts and an orientation checklist. Uninsured and self-pay clients also get a good faith estimate.
Does every client have to sign the privacy notice?
HIPAA requires you to give the notice and make a good faith effort to get a written acknowledgment. If the client won't sign, record that you offered it, the reason given and what you tried.
Can the intake packet be signed electronically?
Yes, generally, when your system records who signed, when, and keeps the signed version. Check your payer contracts and accreditor for any form they want in a particular way.
Is a HIPAA release enough for substance use records?
Only if it also has every Part 2 element. Part 2 consents need specific content, and SUD counseling notes need their own separate consent. Use one template that meets both.
How long should intake take?
The day-1 forms, orientation and risk screen usually fit the first visit. The assessment and treatment plan follow within the days your policy sets; in Texas, 26 TAC 564 sets timelines for licensed chemical dependency programs, so take the timeframes from the current rule.
Opening a program?
The intake packet, the policy manual, the license and the payer contracts, on one dated roadmap: $24,500 flat.
Or book a free 30-minute call and we'll look at the packet you have. More free lists: all our checklists.
Sources
- Cima Consulting's client forms and admission policy templates, as of October 24, 2026.
- eCFR, 42 CFR Part 2 and §2.31; HHS, Part 2 final rule (89 Fed. Reg., February 16, 2024); Baker Donelson, compliance deadline for updated Part 2 protections
- HHS, HIPAA for professionals; HHS Office for Civil Rights, complaints; CMS, No Surprises Act; CMS, CLIA
- Texas HHSC, hhs.texas.gov (26 TAC ch. 564, chemical dependency treatment facilities); American Society of Addiction Medicine, The ASAM Criteria, 4th edition; 988 Suicide and Crisis Lifeline