Utilization review is the process that decides whether behavioral health treatment is covered: whether it is medically necessary, whether it is happening at the right level of care, and whether it is still needed as treatment continues.
A UR specialist is the provider-side staff member who assembles the clinical record those decisions turn on.
Federal rules shape who decides, how quickly some answers must come back, and which criteria the decisions cite.
What utilization review is — and who actually does it
Utilization review (UR) is the review process behind behavioral health coverage decisions: whether treatment is medically necessary, whether it is delivered at the right level of care, and whether it remains so as treatment continues.
Medicare's hospital rules describe the provider side plainly — a hospital "must have in effect a utilization review (UR) plan that provides for review of services furnished by the institution and by members of the medical staff to patients entitled to benefits under the Medicare and Medicaid programs" (42 CFR 482.30).
UR work exists on both sides of the coverage decision.
On the payer side, plan reviewers decide whether to authorize care — and for Medicare Advantage, Medicaid, and CHIP, federal rules set how fast those answers must come back.
On the provider side, hospitals and treatment programs run their own UR functions: assembling the clinical record, submitting it, and answering the plan's questions.
The "UR specialist" is the provider-side job title: the staff member who prepares that record, matches it against the criteria the plan uses, and responds when a request is denied or cut short.
No federal rule defines the title.
What the federal hospital rule does define is who holds the decisions: "a UR committee consisting of two or more practitioners," at least two of them doctors of medicine or osteopathy, "must carry out the UR function" (42 CFR 482.30(b)).
The committee decides — the specialist supports
Prior authorization: the review before treatment begins
The most familiar UR stage happens before care starts.
Prior authorization asks the plan to approve a treatment — a residential stay, an intensive outpatient program, a course of therapy — before the program delivers it and bills for it.
The clearest federal deadline is CMS's Interoperability and Prior Authorization final rule (CMS-0057-F), which requires the payers it covers to decide prior authorization requests "within 7 calendar days for standard requests and 72 hours for expedited requests" (89 FR 8758), with compliance dates in 2026.
The scope matters as much as the numbers.
The deadlines cover Medicare Advantage organizations and state Medicaid and CHIP fee-for-service programs by January 1, 2026, and Medicaid managed care and CHIP managed care plans for rating periods beginning on or after that date.
Employer and commercial group plans are generally outside the rule and decide on the timeframes set by other federal (ERISA) and state rules — check the plan.
Qualified Health Plan issuers on the federal exchange are in the rule but exempt from the timeframes.
Two more requirements land with the 2026 dates: a denied request must carry a "specific reason for denial," and the covered payers' prior authorization metrics become publicly reported.
For a UR specialist, that makes documentation quality auditable — vague clinical summaries get harder to defend when every denial has to say exactly why.
Concurrent review: why ongoing care keeps getting re-reviewed
Coverage decisions do not stop once treatment is authorized.
The hospital UR plan covers "services furnished by the institution" — review during the stay, not only at admission — and Medicaid's coverage limits give that review concrete dates to circle.
The limits most visible in behavioral health are the day caps tied to institutions for mental diseases (IMDs).
An IMD is "a hospital, nursing facility, or other institution of more than 16 beds that is primarily engaged in providing diagnosis, treatment or care of persons with mental diseases" (42 CFR 435.1010) — a Medicaid payment rule, not a licensing rule.
Absent a waiver, Medicaid managed care caps an IMD stay at "a short term stay of no more than 15 days during the period of the monthly capitation payment" (42 CFR 438.6(e)) — and routes past that cap exist: the SUD state-plan option under Social Security Act §1915(l) pays for IMD services "for not more than a period of 30 days (whether or not consecutive) during such 12-month period," an option made permanent by Public Law 118-42 §204(a) (2024), and the 1115 demonstrations exist to fund residential treatment that is "not ordinarily" payable because of the exclusion.
Those caps are one reason residential and inpatient stays get reviewed partway through: in Medicaid, they put fixed dates in the stay where the program documents continued medical necessity and the plan checks it against the coverage that actually exists.
CMS's SUD demonstration guidance aims residential stays at "a statewide average LOS of 30 days" under the 1115 demonstrations — a statewide average target, not a cap on any one patient — and CMS lists 37 jurisdictions with approved SUD 1115 demonstrations (retrieved September 2026).
Level-of-care criteria give the mid-stay review its yardstick.
Utah's Medicaid manual, for one, requires SUD residential services to be "individualized and provided according to each patient's ASAM assessment/reassessment and treatment plan" — the reassessment being the mechanism that either supports the continued stay or moves the patient to a different level.
One workflow rule shapes part of this: records from a federally assisted Part 2 program stay governed by 42 CFR Part 2, the SUD confidentiality rule — fully in force since its February 16, 2026 compliance date — even when they travel to a payer for review.
The Part 2 guide covers which programs it reaches, and what can be shared under what consent.
The criteria UR decisions hang on: ASAM and LOCUS
A UR decision is only as consistent as the criteria it cites, and behavioral health has two named frameworks.
For substance use treatment, The ASAM Criteria — owned by the American Society of Addiction Medicine — organizes care into four broad levels with decimal gradations; the fourth edition was released digitally in October 2023 and in print that December.
ASAM is explicit about its own authority: "ASAM is not a regulatory body," and "payers will determine if and when they want to implement these standards in their networks or embed them in their regulatory frameworks."
The federal lever that pushed placement criteria into payer practice is the Medicaid 1115 SUD demonstration opportunity.
CMS's guidance for it lists, as its second of six milestones, the "widespread use of evidence-based, SUD-specific patient placement criteria" — which is how a voluntary industry framework becomes a coverage requirement in the states that take the demonstration.
For mental health level-of-care decisions, the named tool is LOCUS — the Level of Care Utilization System for Psychiatric and Addiction Services — released in 1996 by the American Association for Community Psychiatry, which describes it as "an assessment tool that helps clinicians, insurers, and those in need of behavioral health services, to make decisions about level of care in a way that is consistent, fair, and effective."
Neither framework is law until a payer or a state adopts it, and adoption moves state by state.
The levels themselves — what each ASAM level is and what the fourth edition changed — are covered in depth by the levels-of-care guide.
Two AACPs — the acronym collides
Parity: the rule that keeps UR answerable
The federal parity law — the Mental Health Parity and Addiction Equity Act (MHPAEA) — is why "the plan reviews mental health care more harshly than medical care" is a legal question rather than just a complaint.
Its 2024 final rule, "Requirements Related to the Mental Health Parity and Addiction Equity Act," was published in September 2024 and took effect on November 22, 2024, with applicability phased in for plan years starting on or after January 1, 2025 (and, in the individual market, policy years starting on or after January 1, 2026).
The enforcement status is unusual and worth getting exactly right.
In a May 15, 2025 statement, the Departments of Labor, Health and Human Services, and Treasury said they will not enforce the 2024 rule's new provisions until a final decision in the industry lawsuit challenging the rule — filed January 17, 2025 — plus an additional 18 months.
The same statement is explicit that "MHPAEA's statutory obligations, as amended by the CAA, 2021, continue to have effect," and no proposal to rescind or modify the rule had been published as of late September 2026.
So both shorthand claims in circulation are wrong: the rule is not "being enforced," and it was not "repealed."
The statute still binds plans; the newest regulatory provisions sit in enforcement abeyance pending litigation.
For UR work, the practical point is that parity remains a live federal obligation — the question of whether utilization management lands harder on mental health and substance use care than on medical care is asked under MHPAEA, and the statutory core of MHPAEA is still in force.
What a UR specialist actually does
Day to day, a provider-side UR specialist runs the paper trail that keeps treatment covered.
The work is documentation and deadlines: assembling assessments and treatment plans, matching the clinical record to the criteria the plan uses — an ASAM level for a residential stay, for instance — submitting requests inside the decision windows, tracking the 7-day and 72-hour clocks where they apply, and answering denials with the specific clinical reasoning the criteria require.
It is a clinical-adjacent job built on clinical fluency.
The Medicare hospital rule names no specialist post; the people supporting UR are often RNs or licensed therapists, and their qualifications are employer- or payer-set.
In job ads the licence line varies accordingly — which is also why this article quotes no salary for the title.
There is no federal wage series behind "UR specialist," and a plausible-looking band is not evidence.
Career-wise, UR sits on the operations ladder of behavioral health organizations.
In the one federal rule that names the accountability, a psychiatric hospital's clinical director "must monitor and evaluate the quality and appropriateness of services and treatment provided by the medical staff" (42 CFR 482.62(b)) — the same appropriateness UR exists to establish, one seat up.
SAMHSA counts over 500 Certified Community Behavioral Health Clinics operating nationally, and the residential, outpatient, and opioid treatment programs around them each carry the payer-facing workload described above.
For a clinician weighing the move, the honest entry route runs through the documentation side of a clinical job.
The rules behind the leadership seats this work sits beside are covered by the clinical-director path guide and the role hub; live clinical director roles show how employers actually write the UR-adjacent requirements.
One boundary keeps this page honest: whether a clinician's work can be billed at all, and under whose name, is a different payer question from whether it gets authorized.
The associate billing guide covers that side.
Before you rely on any of this
Different systems make the rules in this article, and they do not move together.
CMS sets the hospital UR Condition of Participation and the prior-authorization deadlines.
The parity statute and its 2024 rule are administered by the Labor, Health and Human Services, and Treasury Departments, and the enforcement question is in litigation.
ASAM and the American Association for Community Psychiatry own criteria that payers adopt or ignore, state by state — no public tracker covers fourth-edition adoption.
Medicaid's day limits are payment rules administered by state agencies.
And employers write the job descriptions on top of all of it.
Dates matter here.
The CMS-0057-F deadlines took effect in 2026, the parity litigation was unresolved as of late September 2026, and the Part 2 compliance date passed in February 2026.
For anything that matters to a job decision or a coverage decision, confirm with the body that makes the rule — the payer for a specific authorization, the state Medicaid agency for its limits, CMS or SAMHSA for the federal program rules, and the employer for the job.
If you or someone close to you is struggling, this site is about careers, not treatment — the 988 Suicide & Crisis Lifeline (call or text 988) is the resource for a crisis.
This article is general career information, not legal, clinical, or medical advice, and it is not guidance for anyone seeking treatment. Utilization review rules are set by federal agencies, state Medicaid programs, payers, and employers, and they change — verify with the body that makes the rule before relying on any of it.