What Belongs in an Oregon Plan of Correction After an OHA Behavioral Health Review

This article is a practical guide for program directors and compliance leads who just received a statement of deficiency, or who want a template ready before they do. It is general information, not legal advice. Confirm current text on the Oregon Secretary of State OAR pages before you file.

When a POC is required

OAR 309-008-0700 describes three review types that matter here: an initial certification review, a renewal review at least once every three years, and discretionary reviews that can arrive with or without notice after a complaint, a safety concern, or another compliance trigger. Desk reviews are allowed when the Division chooses, including document requests and phone interviews.

After an initial or renewal certification review, OAR 309-008-0800 says the Division shall issue a report within 30 days. That report includes any statement of deficiency and the corrective actions required. When the Division finds you are not in substantial compliance and decides a POC process is appropriate, it gives written notice that a Plan of Correction is due.

For a discretionary review, the same rule says the Division may issue a report and require a POC within 30 days of completing the review. Do not wait for a perfect narrative from the surveyor. Start drafting against the findings as soon as you have the written statement.

The four elements every finding needs

OAR 309-008-0800(4)(b)(B) is specific. For each finding of non-compliance, the POC must include:

1. The planned action already taken or still to be taken
2. The anticipated or requested timeframe for each action that is not finished when you submit
3. A description of, and plan for, quality assurance activities that keep the issue from coming back
4. The name of the individual responsible for making sure each corrective action happens

Programs lose time on the third and fourth items. A sentence that says "we will retrain staff" without a named owner, a date, and a way to check charts or personnel files later is not a quality assurance plan. Name the clinical director, compliance lead, or program manager who will check completion, and say how often they will sample records after the fix.

Deadlines that actually move the certificate

You must submit the POC within 30 days of receiving the statement of deficiency. The Division may grant up to a 90-day extension of the existing certificate so the POC process can finish. If the Division needs clarification, you get 14 calendar days to send an amended POC after notice.

Until the Division approves a sufficient POC, you do not get the certificate that depends on that approval. OAR 309-008-0800(4)(d) is blunt: a sufficient POC approved by the Division comes before the certificate. OAR 309-008-1100 lists failure to submit or implement a sufficient POC among the grounds for revocation or refusal to renew.

Treat the clock as calendar days from the date on the written notice, not from the exit interview. Assign one person to track every finding, every owner, and every due date in one place.

What "quality assurance activities" should look like

Outpatient service delivery rules already expect a structured quality process. OAR 309-019-0210 requires providers to develop and implement an ongoing process to assess, monitor, and improve the quality and effectiveness of services. Your POC quality assurance section should connect to that process, not invent a one-off checklist that dies after the deficiency clears.

For documentation findings, say which charts will be audited, how many, how often for the next 90 days, and who signs off. For personnel file gaps, say which credentials or trainings will be verified on a schedule, and where the verification is stored. For policy gaps, attach or cite the revised procedure and the date staff were trained on it.

If your organization also answers to a Medicaid coordinated care organization, remember that federal managed care rules at 42 CFR 438.330 require MCOs to run QAPI programs with performance improvement projects, measurement, and utilization checks. Network agreements often push related expectations onto providers. A POC that only patches the single finding, with no ongoing monitoring, is harder to defend when a CCO or surveyor asks what changed.

Conditions are not a softer POC

OAR 309-008-0905 lets the Division put conditions on a certificate when, among other reasons, a provider fails to fully implement a POC, fails to maintain a corrective action, or shows similar findings across two or more consecutive reviews. Conditions can limit enrollment, narrow the population you serve, limit the scope of services, or require corrective actions with deadlines.

The same rule says the Division weighs whether you submitted a POC that shows reasonable, sustained, and timely resolution, and whether you have a history of complying with prior plans. A vague POC that you cannot implement is worse than a narrower, dated plan you can prove.

How reviews are conducted, so your POC matches reality

Under OAR 309-008-0800(1), reviewers may enter and inspect service locations, review documents, and interview staff, managers, board members, allied agencies, individuals, and family members. Staff must cooperate. Your corrective actions should assume another reviewer will ask the same people the same questions and open the same files.

OAR 309-008-0300 also ties certification to inspection of records, including utilization and quality assurance reviews you already run. Keep copies of meeting minutes, audit tools, and training logs with the POC packet so you can produce them without scrambling.

OHA's outpatient program page confirms that outpatient certificates last up to three years and that additional site reviews may be scheduled with or without advance notice. Build for that cadence, not for one survey day.

A working sequence after the report arrives

1. Read every finding aloud with clinical and operations leadership the same day the report lands.
2. Map each finding to the exact OAR or statute cited, then to the policy, chart, or personnel file that failed.
3. Write the four required elements for each finding before you polish the narrative.
4. Put owner names and calendar dates in the document, not in a side Slack thread.
5. Attach revised policies, training agendas, blank audit tools, and sample corrected forms.
6. Submit inside 30 days, then run the quality assurance checks you promised and file the evidence.
7. If the Division asks for an amended POC, respond inside 14 calendar days with the clarification they named.

Checklist before you hit send

• Every finding has action, timeframe, quality assurance plan, and a named owner
• Dates are calendar-realistic for your staffing, not aspirational
• Quality assurance steps produce a record a reviewer can open later
• Revised policies are dated and trained, not just rewritten
• One person owns the submission and tracks Division replies
• Leadership knows that an inadequate or late POC can block certification and support conditions or revocation

Programs that treat the POC as the start of a monitoring cycle usually clear faster and look cleaner at the next review. Programs that treat it as a letter to make the deficiency go away often see the same finding return, sometimes with conditions attached.

Easton Hallock is Managing Partner of Saint Health Group, which helps behavioral health and addiction treatment organizations with licensing, compliance, payer contracting, revenue cycle operations, and compliance and risk.