Table of Contents
Ready to See Results?
From strategy through execution, Atlantic Health Strategies integrates compliance, operations, and growth into durable, measurable results. Let’s put our expertise to work for your organization.
The five risk domains a buyer must validate before closing
Operational due diligence for a behavioral health acquisition should validate five risk domains: licensure and change-of-ownership (CHOW) exposure, accreditation status, payer contracts and credentialing continuity, clinical documentation and utilization review integrity, and compliance program maturity covering HIPAA, 42 CFR Part 2, and state corporate practice of medicine doctrines. Buyers who skip any one of these routinely surface post-close liabilities that erode the model inside twelve months.
The market context matters. Mertz Taggart reported closed deals totaled 69, down 20% year over year, in the first half of 2026, and buyers with capital are being deliberate, paying up for clean, in-network, growing businesses and being more diligent on everything else. Sellers who cannot produce clean regulatory files are getting repriced or passed over. Buyers who rely only on a financial quality-of-earnings analysis are underwriting a snapshot, not a going concern.
Sophisticated sponsors already know this. What they under-invest in is the operational-regulatory workstream that sits between the LOI and the wire. That is where deals lose value between signing and integration.
Licensure, CHOW, and the state-by-state transferability trap
Most state behavioral health licenses do not transfer with the entity. A stock deal may preserve the license; an asset deal almost never does. In Florida, the Agency for Health Care Administration (AHCA) requires a full CHOW application with fingerprinting, background checks, and financial disclosures. Texas HHSC and Arizona DHS run their own CHOW processes with different documentation, different timelines, and different tolerance for gaps in licensure between closing and re-issuance.
Buyers should build a CHOW timeline before signing the LOI, not after. Ask three questions in writing: Does this license convey? What is the state’s re-application timeline? Can the seller lawfully continue billing under the existing license during transition, or does a management services agreement need to bridge the gap?
On the Medicare side, the CMS CHOW rules require timely filing of the 855A or 855B and impose specific successor-liability exposure. Missing the effective-date math can freeze cash flow for 90 to 120 days. Model that gap into your working capital assumption or you will fund it out of the equity check.
Accreditation, payer credentialing, and the revenue cliff
Joint Commission and CARF accreditation status is a binary risk. A facility on a one-year conditional accreditation or with unresolved Requirements for Improvement is a different asset than one holding a full three-year cycle. Pull the last survey report, every RFI, and the corrective action plan. Then run a mock survey before close. A surveyor focus on ligature risk, medication management, and seclusion and restraint documentation will tell you within a day whether the accreditation is stable or fragile.
Payer contracts are the second landmine. Most commercial contracts contain assignment clauses that require payer consent for a CHOW, and many trigger re-credentialing of the TIN and every rendering provider. Re-credentialing with a major commercial payer routinely runs 90 to 180 days per plan. During that window, claims either deny or sit in payer limbo. If a target does $18M in annual net revenue and 60% flows through three commercial payers, a four-month credentialing gap is a $3.6M working-capital event. That is a real number that belongs in the pro forma.
Diligence the CAQH profiles, the NPI Type 1 and Type 2 registrations, the delegated credentialing arrangements, and any single-case agreements the seller has been using to paper over network gaps. Single-case agreements do not survive a CHOW.
EKRA, Anti-Kickback, MHPAEA, and 42 CFR Part 2 exposure
This is the section most financial buyers get wrong. The Eliminating Kickbacks in Recovery Act (EKRA) applies to commercial payers, not just federal programs, and it applies specifically to recovery homes, clinical treatment facilities, and clinical laboratories. Violations of EKRA can result in criminal prosecution with fines up to $200,000 and imprisonment for up to ten years, or both, for each occurrence. The DOJ has been active. In one South Florida case, two operators of addiction treatment facilities were convicted for billing approximately $112 million for services that were never provided or medically unnecessary, and for paying and receiving kickbacks to patients and from testing laboratories.
What does this mean for diligence? Read every marketing contract. Read every call center compensation plan. Read every alumni referral program. If any of them pay per admission, per lead, or per conversion, you have inherited EKRA exposure. As the American Health Law Association put it after early convictions, “health care fraud prosecutions will extend to activities involving private payers.”
Then layer in parity risk. The 2024 MHPAEA Report to Congress notes that EBSA is currently devoting nearly 25 percent of its enforcement program to work focusing on MHPAEA NQTLs, and EBSA’s efforts under the CAA have cumulatively resulted in corrections that have benefited directly more than 7.6 million participants in more than 72,000 plans. Payers under parity pressure push that pressure downstream through prior authorization denials, level-of-care downgrades, and retrospective audits. Buyers should pull the last 24 months of denials by payer, by level of care, and by ASAM criteria applied. Patterns show up. High denial rates at PHP (an outpatient level of care) or at residential detoxification often trace back to weak medical necessity documentation, not payer bad faith.
Finally, 42 CFR Part 2. If the target treats SUD patients, the consent architecture in the EMR is either compliant or it is a data breach waiting to happen. Confirm the redisclosure notices, the qualified service organization agreements, and the segmentation of Part 2 records inside the EMR.
Frequently asked questions
How long does it typically take to transfer a state behavioral health license in a CHOW?
Depending on the state, 60 to 180 days is a realistic band. Florida AHCA, Texas HHSC, and Arizona DHS each have distinct filing requirements and inspection triggers. Some states allow the buyer to operate under the seller’s license during transition with a management services agreement; others do not. Confirm this in writing with the state licensing office before signing the LOI, not after.
What accreditation issues most commonly kill or reprice a behavioral health deal?
Unresolved Requirements for Improvement from The Joint Commission or CARF, a one-year conditional accreditation status, environment of care findings from the last EOC tour, and gaps in seclusion and restraint documentation. Any of these can force the buyer to hold back purchase price or restructure as an earn-out tied to full re-accreditation.
How do buyers diligence payer contract assignability and avoid a revenue cliff post-close?
Read the assignment clause in every material payer contract. Contact each payer’s provider relations team pre-close to confirm the re-credentialing pathway and timeline. Model 90 to 180 days of delayed cash for each commercial contract, and fund the working capital line accordingly. If the seller uses delegated credentialing, verify the delegation agreement survives the CHOW.
What EKRA and Anti-Kickback red flags should a buyer look for in marketing, call centers, and referral relationships?
Per-admission or per-lead compensation to marketers, W-2 or 1099 arrangements that vary pay by referral volume or payer mix, kickback-adjacent alumni programs, and any relationship with a lab that pays or receives anything of value tied to specimen volume. The OIG’s General Compliance Program Guidance is the baseline; EKRA is stricter and applies to commercial payers.
What clinical documentation and UR patterns signal future payer take-backs?
Cookie-cutter treatment plans, ASAM criteria applied inconsistently across similar patients, group notes that read identical across clinicians, discharge summaries that do not match the treatment plan, and utilization review notes that fail to justify continued stay at the billed level of care. SIU audits target exactly these patterns. If the target has a history of payer take-backs, request the take-back log and quantify the trailing exposure before you set the escrow.
References
- Behavioral Health Business: Behavioral Health Dealmaking Down 20% in the First Half of 2026
- Mertz Taggart: Q1 2025 Behavioral Health M&A Report
- U.S. Department of Labor: 2024 MHPAEA Report to Congress
- DOL Press Release: 2024 MHPAEA Report to Congress Issuance
- Maynard Nexsen: Eliminating Kickbacks in Recovery Act (EKRA) Updates
- Health Law Diagnosis: DOJ Focus on Toxicology Testing, EKRA and AKS Violations
- CMS: Medicare Change of Ownership (CHOW) Guidance
- HHS OIG: Compliance Program Guidance