How to start an IOP in Colorado: the BHA license, the IOP rule and the steps

Who wrote this, honestly

We're Texas operators: we run a licensed Texas outpatient program, PHP through outpatient, and built our own EHR to run it. When we help an owner open in another state, the first step on that client's roadmap is finding the state's licensing rule and checking it against the agency's current text. Colorado's rules changed hands in 2024, so a lot of what you'll find online describes the old Office of Behavioral Health system. This guide is our check of the current one, written up, and it's the same work our IOP / PHP Program Launch does for a client opening outside Texas. Where we couldn't confirm a detail, we left it out or told you who to ask.

Comparing states? Read how to start an IOP or PHP in Texas next to this one, or our guides for Utah, New Mexico and Arizona. The steps that don't change from state to state are in how to start an IOP.

Colorado at a glance

Question	Colorado's answer
Who licenses SUD programs	The Behavioral Health Administration (BHA), in the Colorado Department of Human Services, since January 1, 2024
The license	Behavioral health entity (BHE) license, with endorsements and sub-endorsements for the services you provide; IOP is a sub-endorsement
Statute	The BHE license came from HB19-1237; HB22-1278 created the BHA and made it unlawful from July 1, 2024 to run a BHE, including an SUD program, without a BHA license
Rules	2 CCR 502-1, the BHA provider rules: Chapter 2 for BHE licensing, section 4.6 for IOP, 4.7 for PHP
IOP hours	9 to 19 contact hours a week for adults; 6 to 19 for children under 18
When to apply	Letter of intent first; application and nonrefundable fee at least 90 days before you plan to open (2 CCR 502-1-2.18)
Counselor credentials	The State Board of Addiction Counselor Examiners (DORA): certified addiction technician (CAT), certified addiction specialist (CAS), licensed addiction counselor (LAC)
Medicaid	Health First Colorado (HCPF); behavioral health through four RAEs since July 1, 2025; billing requires a BHA license for each ASAM level you bill

The BHE license and the BHA

Colorado created the behavioral health entity license in 2019 as one license for mental health and substance use services, and in 2022 created the BHA to run it. The BHA's licensing, designation and approvals page says it took over BHE licenses, 27-65 designations, safety net approvals, recovery support organization licenses and controlled substance licenses on January 1, 2024.

• You need it. HB22-1278 makes it unlawful, on and after July 1, 2024, to conduct or maintain a behavioral health entity, including a substance use disorder program, without a BHA license.
• The license names your services. The rules license IOP as a sub-endorsement (2 CCR 502-1-4.6) and PHP as another (4.7). Decide your levels before you apply, because adding one later means a license modification.
• Medicaid ties to it. HCPF's SUD services overview says Medicaid reimbursement requires a BHA license for the specific ASAM levels of care you render and bill.

Old guides describe the Office of Behavioral Health (OBH) and a two-year OBH license. That system is gone; the BHA's own page says Colorado is in a period of regulatory transition and rule updates, so work from the current 2 CCR 502-1 and the BHA's instructions.

The rules to read

Rule or document	What it covers
BHA laws and rules	The BHA's three rule volumes: 2 CCR 502-1 (provider rules), 502-5 (system rules) and 502-6 (administrative rules), and current rulemaking
2 CCR 502-1-1.2	General definitions, including IOP as a more structured outpatient experience than standard outpatient services
2 CCR 502-1, Chapter 2	General BHE licensing standards: licensing requirements, the initial application (2.18), admission and discharge, medication administration, critical incident reporting
2 CCR 502-1-4.6 and 4.7	IOP services standards and PHP services standards
10 CCR 2505-10, 8.746	HCPF's Medicaid rule for outpatient fee-for-service SUD treatment

Cornell's and Justia's copies may lag the official text, so pull the current version of each section from the Secretary of State's Code of Colorado Regulations. Our launch package builds the policy manual as a crosswalk: every requirement in Chapter 2 and section 4.6 matched to a policy, form or record.

The IOP rule, line by line

This is what 2 CCR 502-1-4.6 required in the text we checked. Build your schedule, staffing plan and chart forms from it.

Requirement	What 4.6 says	What it means for your build
Who it serves	People who meet DSM-5-TR criteria for acute, moderate-severity mental illness, substance use or co-occurring disorders; higher-severity clients can qualify if stabilized or receiving medication treatment	A diagnosis with severity and an ASAM-based placement in every chart before admission
Hours, adults	9 to 19 contact hours a week, in regularly scheduled sessions on a planned format	A fixed weekly schedule (here are IOP schedule templates); past 19 hours you're in PHP territory
Hours, children	6 to 19 contact hours a week under age 18	A separate adolescent schedule and group roster
Staff mix	Certified addiction technicians may not exceed 25% of IOP personnel; peer support professionals may contribute under Chapter 3	Count heads before you hire: with four clinical staff, only one can be a CAT
Training	Staff trained to recognize mental health and substance use signs and symptoms, and in basic psychopharmacology	Training records in every staff file, with dates

Track continued stay against ASAM the way plans expect (ASAM continued-stay documentation), and see how the ASAM levels line up if you'll add PHP under 4.7.

Applying

• Letter of intent first. Under 2 CCR 502-1-2.18, anyone seeking a BHE license first notifies the BHA with a letter of intent.
• Then the application and fee. The application goes in with the nonrefundable fee for the license category you're requesting, at least 90 calendar days before your planned start-up date.
• The fee amount. We couldn't confirm the current BHA fee schedule; the BHA gives it with the application.
• The review. Ask your BHA licensing contact what the initial review includes (documents, a site visit or both) and have the building, policies and staff files ready either way.

Want the license work done for you? It's part of the program launch package, or $4,500 on its own as our state facility license application service.

Counselors and staffing

• Addiction counselors are regulated by the State Board of Addiction Counselor Examiners in DORA's Division of Professions and Occupations. Its addiction counselor page covers the three credentials: certified addiction technician (CAT), certified addiction specialist (CAS) and licensed addiction counselor (LAC).
• The rules changed in 2024 and 2025. The board held a rulemaking hearing on February 4, 2025, to carry out HB24-1045 and SB24-115, which changed the path to these credentials. Check each candidate's credential and any supervision requirement against the board's current rules.
• Training. The BHA runs the CAC clinical training program, addiction-specific training for counselors working toward a credential.
• The 25% cap. Because section 4.6 caps CATs at a quarter of IOP staff, most of your clinical team should be CAS, LAC or other licensed clinicians.
• Every hire gets checked against the federal OIG exclusion list; ask the BHA and each RAE which state background checks they require.

We build personnel files from our staff credential file checklist and add each state's items; in Colorado that means the DORA verification and the 4.6 training record.

Site, zoning and fire

• Zoning is local. Ask the city or county in writing whether an outpatient behavioral health or substance use program is allowed at the address, and lease with a way out if zoning or the license falls through. With a 90-day lead time on the application, the lease and the license run in parallel.
• Fire and building: get the certificate of occupancy for the use and keep the fire inspection report for the BHA.
• Plan the space for groups: group rooms sized for your groups, private offices for assessments, locked records storage and, if you'll test on site, a private collection area and a CLIA certificate of waiver.

Health First Colorado and the RAEs

• The regions. Under the Accountable Care Collaborative's Phase III, which started July 1, 2025, HCPF's ACC Phase III page lists four RAEs: Rocky Mountain Health Plans (Region 1), Northeast Health Partners (Region 2), Colorado Community Health Alliance (Region 3) and Colorado Access (Region 4). Denver Health's Medicaid Choice plan is a separate managed care organization.
• Enroll, then contract. RAEs run the capitated behavioral health benefit and build their own provider networks; behavioral health providers enroll with Health First Colorado and then contract and credential with the RAE. If you'll serve clients from more than one region, plan on more than one RAE contract.
• State-funded clients. Colorado's behavioral health administrative service organizations (BHASOs) handle state-funded behavioral health, and HCPF says the BHASO map matches the RAE map.
• Credential with each one. Our credentialing service files facility contracts in any state, and Medicaid enrollment is $350 per clinician.
• Medicare pays for IOP and PHP only through hospitals, community mental health centers and a few other provider types, so most freestanding programs plan without it (CMS 2024 outpatient rule).

Before every admission, verify benefits and authorization; our sister product's prior authorization guide covers what each kind of plan asks for.

The ASAM 4th edition deadline

The BHA's laws and rules page (updated February 12, 2026) says the BHA and HCPF are working with SUD providers to align 2 CCR 502-1 with The ASAM Criteria, 4th edition, with implementation on July 1, 2027. If you open in 2026 or 2027, you'll build to today's rule and retool within a year or so: write assessment and continued-stay forms you can update, and pick an EHR that won't make you rebuild every chart. Cima's IOP and PHP plan keeps levels of care, group notes, attendance, plan reviews and authorizations in one place.

Accreditation

We found no rule letting accreditation replace the BHA license or its review. Accreditation still matters for contracts: TRICARE requires it for IOP and PHP (see TRICARE credentialing), and many commercial plans contract only with accredited programs. Choosing between the two main accreditors? Start with Joint Commission vs CARF, or let Program Launch + Accreditation carry the work through the survey.

The steps, in order

1. Define the program: IOP, PHP or both, adults or adolescents, hours and days within 4.6, co-occurring track, and whether you'll offer medication (which brings in other approvals).
2. Send the BHA a letter of intent and ask for the current application, fee and initial review requirements.
3. Form the business with the Colorado Secretary of State, get the EIN and the organization NPI, and line up a health-care attorney and CPA.
4. Find a site local zoning allows, and lease with a way out.
5. Hire the leadership and counselors, keeping CATs at or under 25% of IOP staff, and verify each credential with DORA.
6. Write the policy manual from Chapter 2 and section 4.6, and add 42 CFR Part 2 and HIPAA.
7. File the application and fee at least 90 days before your planned opening.
8. Set up the EHR before the BHA review, with ASAM 4th edition forms in view.
9. Once licensed, enroll with Health First Colorado for the ASAM levels on your license, then contract with your RAE (or RAEs) and the commercial plans.
10. Open, then accredit, and keep renewals, drills and chart reviews on a schedule (the compliance calendar).

Questions

What license does a substance use IOP need in Colorado?

A behavioral health entity (BHE) license from the Behavioral Health Administration, with the IOP sub-endorsement under 2 CCR 502-1-4.6. Since July 1, 2024, it's unlawful to run an SUD program without a BHA license.

Who licenses substance use treatment in Colorado now?

The Behavioral Health Administration, in the Department of Human Services. It took over BHE licensing, along with designations and other approvals, on January 1, 2024.

How many hours a week is IOP in Colorado?

2 CCR 502-1-4.6 requires 9 to 19 contact hours a week for adults and 6 to 19 for children under 18, in regularly scheduled sessions.

How far ahead do I apply for a Colorado BHE license?

Send a letter of intent first, then submit the application and nonrefundable fee at least 90 calendar days before your planned start-up date (2 CCR 502-1-2.18).

Which Medicaid plans does a Colorado IOP contract with?

The regional accountable entity for each region you serve: Rocky Mountain Health Plans, Northeast Health Partners, Colorado Community Health Alliance or Colorado Access, under ACC Phase III since July 1, 2025. Health First Colorado pays only for the ASAM levels your BHA license covers.

Can a Texas company help with a Colorado program?

Yes, if it's honest about how. We run a Texas program, so in Colorado we work from 2 CCR 502-1 and the BHA's and HCPF's publications, check each against the current text, and tell you where the BHA, HCPF, the RAEs or your attorney has the final word. We don't guarantee a license, contract or date.

Not sure what it will cost all in? Start with what it costs to start an IOP, or book a free 30-minute call and we'll walk through what Colorado will ask of you.

Cima Consulting isn't a law firm or an accounting firm. Colorado agencies make their own decisions; we don't guarantee approvals, rates or dates. Never pay or accept anything of value for patient referrals: federal law (EKRA and the Anti-Kickback Statute) applies in every state, and ask your attorney about Colorado's own rules. Our guide to patient brokering laws explains the federal ones.

Sources

• BHA licensing, designation and approvals: bha.colorado.gov; laws and rules (updated February 12, 2026): bha.colorado.gov; CAC clinical training program: bha.colorado.gov
• HB22-1278: leg.colorado.gov; HB19-1237: leg.colorado.gov
• 2 CCR 502-1-1.2, definitions: Cornell LII; Chapter 2: Justia; 2.18, initial application: Cornell LII; 4.6, IOP: Cornell LII; 4.7, PHP: Cornell LII
• HCPF, SUD services overview and FAQ (January 2025): hcpf.colorado.gov; ACC Phase III: hcpf.colorado.gov; 10 CCR 2505-10-8.746: Cornell LII
• DORA, addiction counselors: dpo.colorado.gov
• OIG exclusions: oig.hhs.gov; CMS, CY 2024 outpatient rule: cms.gov; EKRA, 18 U.S.C. 220: Cornell LII

Comparing states? See Texas and our guides for Arizona, California, Florida, Georgia, Louisiana, Massachusetts, Nevada, New Jersey, New Mexico, North Carolina, Ohio, Oklahoma, Pennsylvania, Tennessee and Utah, or how to start an IOP for what every state has in common.