If your organization provides Outpatient Mental Health (OMHC), Psychiatric Rehabilitation Program (PRP), Substance Use Disorder (SUD), IOP, SOP, or community-based behavioral health services, the 2026 CARF Behavioral Health Standards Manual includes several changes that deserve your attention.

Some changes are minor wording updates or renumbering. Others reflect broader shifts in how CARF expects organizations to approach technology, cybersecurity, strategic planning, workforce development, medication safety, and specialty programming.

Here’s a practical breakdown of what matters most for behavioral health providers.

1. CARF Is Leaning Further Into Technology, Data, and Cybersecurity

One of the clearest themes in the 2026 manual is that technology governance is no longer optional or siloed.

Strategic Planning Now Includes Technology and Data

CARF updated Strategic Planning (1.C.) to explicitly require organizations to consider:

• Technology use
• Data use
• Technology gaps
• Opportunities for improvement

For OMHC, PRP, and SUD organizations, this means your strategic plan should move beyond census growth and staffing projections.

You should be asking:

• How are we using our EHR effectively?
• Are we leveraging data to improve outcomes, compliance, or operations?
• What technology risks or limitations exist?
• Do we have a roadmap for AI, telehealth, cybersecurity, or workflow automation?

Organizations still using “generic” strategic plans may need revisions before their next survey.

Leadership Input on Technology Planning Is New

CARF added a new standard requiring leadership involvement in technology planning.

This matters because technology decisions are often handled informally in smaller behavioral health programs.

Surveyors will increasingly expect evidence that leadership is actively involved in decisions related to:

• EHR systems
• HIPAA compliance tools
• Cybersecurity safeguards
• Telehealth platforms
• Data reporting systems
• AI or augmented/artificial intelligence use

New Requirement: Policies on AI Use

CARF added a requirement for policies and written procedures regarding augmented or artificial intelligence (AI).

This is a major update.

If your organization uses tools such as:

• AI documentation tools
• Ambient listening or transcription software
• ChatGPT or generative AI for administrative tasks
• AI-assisted treatment documentation
• Automated workflows or data analysis tools

…you should strongly consider developing policies addressing:

• Approved uses
• HIPAA/privacy considerations
• Human oversight
• Staff training
• Risk management
• Documentation expectations

This will likely become a growing area of survey focus.

2. Workforce Development Now Includes Cybersecurity Training

CARF relocated and clarified standards related to staff training on cybersecurity and technology use.

Behavioral health organizations should review whether staff training programs adequately address:

• Password security
• Phishing awareness
• Protected health information (PHI) security
• Safe use of technology in job duties
• Device security
• Remote work/telehealth safeguards

For many OMHC, PRP, and SUD providers, cybersecurity training is still informal or embedded inside HIPAA orientation.

The 2026 standards signal that CARF expects organizations to treat cybersecurity training as its own documented workforce competency area.

If you are preparing for accreditation, ensure your files include:

• Training content
• Attendance documentation
• Orientation evidence
• Ongoing refresher training

3. Risk Management Expectations Continue to Expand

CARF updated Risk Management standards related to policies governing the use of technology and data.

This reinforces a trend we have been seeing for several years: technology management is increasingly becoming a compliance and risk-management function—not just an IT issue.

Behavioral health organizations should evaluate whether their risk management process addresses:

• Cybersecurity threats
• Data breaches
• Technology downtime
• Telehealth risks
• AI risks
• Business continuity concerns
• Vendor management

Small organizations often overlook these areas until accreditation preparation begins.

CARF is signaling that they belong squarely inside your formal risk-management framework.

4. Medication Standards Now Address Overdose Recognition

For programs involving medication-related services, CARF added a new element requiring attention to signs of overdose within medication-use standards.

This is particularly relevant for:

• SUD providers
• MAT programs
• OMHCs with medication management services
• Integrated behavioral health programs

Organizations may want to review:

• Staff training
• Medication safety policies
• Emergency response procedures
• Overdose identification education
• Naloxone/Narcan protocols (where applicable)

This update aligns with ongoing behavioral health trends emphasizing overdose prevention and safety.

5. Changes Affecting SUD Programs and Withdrawal Management

Substance use providers should pay close attention to updates within Withdrawal Management standards (3.G.).

CARF modified language regarding:

• Qualified personnel providing services 24/7
• On-site licensed nursing availability
• Withdrawal management program descriptions

Programs providing detoxification, withdrawal management, or medically monitored services should carefully compare their current policies and staffing models against the updated language.

Additionally, Health Home standards were updated and may affect organizations operating integrated service models.

6. Integrated Primary Care Has Arrived as a Specialty Designation

One of the more notable structural changes is the addition of Integrated Primary Care as a specialty designation.

This reflects continued movement toward integrated healthcare delivery.

While not every provider will pursue this designation, it is relevant for organizations that offer or are developing:

• Behavioral health + primary care integration
• Collaborative care models
• Co-located services
• Whole-person care initiatives
• Health home–style programming

Organizations expanding integrated service models may want to explore whether this accreditation pathway aligns with future growth plans.

7. Smaller Changes Still Worth Reviewing

Several additional updates may still affect behavioral health organizations:

Accessibility and Stakeholder Language Updates

CARF revised language related to:

• Diversity of stakeholders
• Accessibility planning
• Persons served, personnel, and stakeholder inclusion

Performance Improvement Changes

Performance Improvement standards now include new expectations related to analysis of service delivery indicators across specialty programs and designations.

Terminology Updates

The manual includes updated terminology for consistency, including revisions involving:

• Substance use terminology
• Health-related social needs language
• Stakeholder terminology

These wording changes may eventually affect policy language, forms, training materials, and documentation templates.

What OMHC, PRP, and SUD Providers Should Do Next

If your organization is CARF accredited—or preparing for accreditation—consider adding these items to your action list:

Immediate Review Checklist

Review your:

□ Strategic Plan
□ Technology Plan
□ Risk Management Plan
□ Cybersecurity Training Program
□ Workforce Training Documentation
□ AI/Technology Policies
□ Medication Safety Procedures
□ Withdrawal Management Policies (if applicable)
□ Performance Improvement Program

Prepare Before Your Next Survey

The organizations that struggle most during survey preparation are usually not missing huge systems—they are missing small documentation updates tied to evolving standards.

The 2026 changes suggest CARF continues moving toward stronger expectations around:

• Technology governance
• Cybersecurity readiness
• Data-informed leadership
• Medication safety
• Integrated care
• Workforce competency

Behavioral health organizations that proactively update these areas will be in a much stronger position for survey readiness.

Need Help Translating the 2026 CARF Changes Into Action?

If your OMHC, PRP, or SUD organization needs help updating policies, strategic plans, training programs, risk management systems, or accreditation readiness materials to align with the 2026 CARF Behavioral Health Standards, Curry Coaching & Consulting^TM can help.

Because understanding the standards is one thing. Implementing them operationally is another.