State law table
State laws on medical-necessity criteria for mental health and substance use care
A primary-source table of state laws that control which criteria insurers must use for mental health and substance use reviews, with each citation, the plans reached, and the ERISA limit that decides whether the table helps at all.
By the ClaimParrot editorial team · Who we are · Fact-checked against cited sources on · not reviewed by a clinician or attorney · 9 min read · 10 cited sources
Quick answer
The eleven states in this table have laws controlling which medical-necessity or level-of-care criteria insurers must use for mental health and substance use care, but those laws generally reach only plans the state regulates. Self-funded employer plans under ERISA generally fall outside them, so confirm the plan type first. This page is general information, not legal advice, and the list is not exhaustive.
| Question | Short answer |
|---|---|
| First check on any denial | Is the plan insured or self-funded? State insurance law generally does not reach a self-funded ERISA plan |
| States listed | Eleven, each read in statute, regulation or enacted bill text; the list is not exhaustive |
| Laws naming ASAM | Colorado, Connecticut, Illinois, Maryland, New Jersey (by rule) and Rhode Island, for substance use |
| Laws pointing to nonprofit associations | California, Colorado, Illinois and Oregon, without naming a specific association for mental health |
| Laws naming LOCUS or CALOCUS | None of the eleven texts; Connecticut names the Child and Adolescent Service Intensity Instrument |
| Where the text came from | Official sites for California, Colorado, Connecticut, Georgia, Maryland, New York and Virginia; FindLaw, Cornell LII or Oregon.public.law for Illinois, New Jersey, Oregon and Rhode Island, where official pages would not open. FindLaw showed Illinois current to January 1, 2025, New Jersey's statute to January 1, 2024, and Rhode Island to January 1, 2026; Georgia was read as enacted in 2022 |
| Status of this page | General information, not legal advice, and not reviewed by an attorney |
Does a state criteria law reach this patient's plan?
Only if the state regulates the plan. State insurance laws generally bind insurers and the policies they issue, while self-funded employer plans under ERISA generally fall outside them. Check the plan type before citing any law below, because a correct citation to a law that does not reach the plan adds nothing to the appeal.
ERISA saves state insurance laws but says a covered plan is not itself deemed an insurer (29 U.S.C. 1144(b)(2)). In general terms, an insurance law can shape an insured plan through its policy but does not bind a self-funded plan. KFF's 2026 survey of employers with ten or more workers found 71% of covered workers, and 85% at firms with 200 or more workers, in self-funded plans (KFF).
- Summary plan description (SPD): federal rules require it to say whether and to what extent benefits are guaranteed under an insurance policy (29 CFR 2520.102-3(q)).
- The employer's benefits office: ask if the plan is fully insured or self-funded. An insurer's name on the card may mean only that it administers claims.
- ID card or member services: New Jersey's regulator says cards issued there must state which it is (Bulletin 17-05); other states may differ.
A self-funded plan is still subject to ERISA's claims rules and, unless exempt, federal parity law, and its plan document may adopt a criteria set. Use those arguments there, not the state statute.
Which states control the criteria insurers use for mental health and substance use reviews?
At least eleven do, in different ways. The table lists each law read in statute, regulation or enacted bill text on October 31, 2026, with its citation, requirement, named criteria, plans reached and any confirmed effective date. Absence from this table says nothing about a state, and the list is not exhaustive.
| State and citation | What it requires | Criteria it names | Plans it reaches | Effective date |
|---|---|---|---|---|
| California Health & Safety Code 1374.721; Insurance Code 10144.52 | Base decisions on current generally accepted standards. Apply the latest criteria from the relevant nonprofit association, with nothing more restrictive for level of care within their scope. Provide the criteria free. | No tool; the nonprofit professional association for the relevant specialty | Health care service plans (not Medi-Cal contracts) and disability insurers (not limited policies such as dental-only). | January 1, 2021 |
| Colorado C.R.S. 10-16-104(5.5), HB25-1002 | Utilization review must fit current generally accepted standards, with nothing more restrictive for level of care. Adverse decisions must give the full assessment. | SUD: latest ASAM Criteria. Mental health: unaffiliated, nationally recognized not-for-profit specialty associations | Health benefit plans under parts 2, 3 or 4 of article 16, except those in 10-16-102(32)(b). | January 1, 2026, absent a referendum petition |
| Connecticut Gen. Stat. 38a-591c(a)(3) to (5) | Use the named criteria, or criteria shown to the Insurance Department to be consistent with them. Others only for advances those sources omit. | SUD: latest ASAM edition. Youth: Child and Adolescent Service Intensity Instrument. Adults: American Psychiatric Association or Association for Ambulatory Behavioral Healthcare | Health carriers offering health benefit plans, and review companies acting for them. | Not confirmed |
| Georgia O.C.G.A. 33-1-27, HB 1013 | Apply the act's definitions of medically necessary and generally accepted standards in medical-necessity, prior-authorization and review decisions. | None required; nonprofit guidelines and placement criteria count as valid sources | Health insurers under Georgia insurance law. Section 33-21A-13 applies the same definitions to Medicaid and PeachCare entities. | Not confirmed |
| Illinois 215 ILCS 5/370c(h) to (n) | Base decisions on current generally accepted standards, with nothing more restrictive for level of care. Authorize the level the assessment supports, or the next higher if unavailable. | SUD: latest ASAM placement criteria. Mental health: unaffiliated nonprofit association; state-set criteria for Medicaid plans | Group and individual policies, marketplace plans and Medicaid managed care organizations. | Coverage on or after January 1, 2023 |
| Maryland Insurance 15-802(d)(5) | Use the ASAM criteria for all medical-necessity and utilization-management decisions on SUD benefits. | ASAM, most recent edition. No mental health criteria in this section | Individual, group and blanket plans issued in Maryland, except small-employer grandfathered coverage. | Not confirmed |
| New Jersey N.J.S.A. 17B:27-46.1nn(h) and parallel sections; N.J.A.C. 10:163-2.1 | SUD medical-necessity review must use a peer-reviewed tool designated by rule. Review of early treatment days is limited separately. | ASAM criteria; LOCI, the ASAM Criteria Assessment Interview Guide, or a similar tool faithful to ASAM | Fully insured New Jersey plans and state and school employee plans, per Bulletin 17-05; not self-funded, Medicare, Medicaid, Tricare or out-of-state plans. | Law May 16, 2017, per the bulletin; rule October 16, 2017 |
| New York Insurance Law 4902(a)(9), (12); Public Health Law 4902(1)(i), (j) | Use evidence-based, peer-reviewed, age-appropriate criteria. For SUD care in New York, use a state-designated tool. Mental health criteria need state approval. | Statute names none. State guidance lists LOCADTR 3.0 unless the state approves another | Insurers under articles 32 and 43, certified municipal cooperatives and their review agents. | SUD tool: January 1, 2017, per state guidance; mental health not confirmed |
| Oregon ORS 743A.168(5) | Base reviews solely on current generally accepted standards and, for placement, the latest nonprofit criteria. Authorize the indicated level, or the next higher if unavailable. | No tool; the nonprofit professional association for the relevant specialty | Group policies and non-grandfathered individual plans with hospital or medical coverage, not limited benefit coverage. | Not confirmed |
| Rhode Island Gen. Laws 27-38.2-1(g) | Payors must rely on ASAM criteria when developing coverage for SUD levels of care. | ASAM. No mental health criteria in this section | Group health plans and individual or group health insurance plans. | Not confirmed |
| Virginia Code 38.2-3412.1(B) | Apply the section's definitions in medical-necessity, prior-authorization and review decisions, with no more restrictive criteria within generally accepted standards. | None required; placement criteria and service intensity instruments are listed as sources | Group and individual health insurance coverage as defined in 38.2-3431, with listed exceptions. | Not confirmed |
Which state's law applies when the plan, employer and patient are in different states?
Often the state where the policy was issued, not where the patient is treated. Maryland's law covers plans delivered or issued for delivery in Maryland, and New Jersey's regulator says out-of-state plans are not subject to its law. New York's tool rule differs: state guidance applies it to care provided in New York. Check the certificate of coverage.
Do these laws name a tool, point to nonprofit associations, or set a general standard?
All three appear. Some laws name a tool, usually ASAM for substance use. Some require criteria from nonprofit associations without naming one. Georgia and Virginia define medical necessity and generally accepted standards. New York relies on state agencies. A state-law argument should match the form the statute actually takes, because the forms ask different questions.
None of the eleven texts names LOCUS or CALOCUS, so whether either satisfies a nonprofit-association rule is a matter of interpretation. ASAM, LOCUS and CALOCUS-CASII are licensed: name them, and do not paste their content.
- Named tool: ask whether the reviewer used it, and which edition.
- Nonprofit association criteria: ask who developed the criteria applied. Oregon's nonprofit rule covers level-of-care placement.
- Level-of-care duties: Illinois and Oregon require the next higher level when the indicated level is unavailable, and Colorado, Illinois and Oregon require the plan to share its assessment.
How do you use a state criteria law in a behavioral-health appeal?
Use the law as a second argument alongside the clinical one, and only after confirming it reaches the plan. Find out which criteria the reviewer applied, compare them with what the statute requires, and state any mismatch in a sentence or two with the citation. Read the current text before you cite it.
- 01Confirm from the SPD or employer that the plan is insured, and note the state of issue.
- 02Read the statute's current text, because this page is a snapshot.
- 03Ask for the criteria in writing. Group health plans and their insurers must provide MH/SUD medical-necessity criteria to participants and contracting providers on request (29 CFR 2590.712(d)(1)); the criteria request letter drafts it.
- 04Compare the criteria in the denial with the law's requirement: source, edition and added conditions.
- 05State the mismatch with the citation, and center the appeal on dated clinical evidence, as the level-of-care guide describes.
Do these state laws cover Medicaid managed care, Medicare Advantage or FEHB plans?
Generally not in the same way, because each follows its own rules. Medicare Advantage standards supersede most state law, FEHB contract terms on coverage preempt state health insurance law, and Medicaid managed care depends on the state's program and contract. Check the rule for that coverage before citing anything in the table.
The federal texts are 42 U.S.C. 1395w-26(b)(3) and 5 U.S.C. 8902(m)(1). For Medicaid, California's section excludes Medi-Cal contracts, Illinois includes Medicaid plans with state-set criteria, Georgia has a separate section, and New Jersey's regulator says its law does not reach Medicaid. Governmental and non-electing church plans sit outside ERISA (29 U.S.C. 1003(b)), so ask those plans which rules they follow.
How do federal parity law and the Wit decision fit with state criteria laws?
Federal parity law is a separate layer. The Departments are not enforcing the new parts of the 2024 parity rule, but the statute, the 2013 rule and the 2021 comparative-analysis duty still apply. Wit v. United Behavioral Health turned mainly on ERISA plan wording and did not disturb an unappealed ruling on state-mandated criteria.
The parity status timeline tracks the rulemaking since the May 2025 statement, and Field Assistance Bulletin 2026-03 lists medical-necessity standards and review among EBSA's enforcement priorities.
In Wit, filed August 22, 2023, the Ninth Circuit held the district court erred to the extent it read the ERISA plans to require guidelines coextensive with generally accepted standards, and reversed the denial-of-benefits judgment. The opinion says UBH did not appeal the finding that its guidelines were inconsistent with state-mandated criteria, so that portion “remains intact.” The state-mandate class covered fully insured plans under Connecticut, Illinois, Rhode Island or Texas law. The case was remanded (N.D. Cal. No. 3:14-cv-02346); check the docket before citing it.
How was this table compiled, and what could be out of date?
Each listed law was opened in statute, regulation or enacted bill text on October 31, 2026 and paraphrased here. A law-firm summary alone did not qualify. Nobody licensed has reviewed the page, which is general information and not legal advice. Laws change and mirrors lag, so read the current official text before relying on any row.
Two residential denials at one Illinois program
Birch Landing, an Illinois residential program, receives two substance use denials in one week. Both cite the payer's own guideline, and both cards carry the same insurer's name.
The first patient's certificate shows a fully insured policy issued in Illinois. The review lead requests the criteria and adds a short paragraph citing 215 ILCS 5/370c(l) and (m), keeping the clinical argument at the center.
The second patient's employer pays claims itself and the insurer only administers them, as the SPD says. The lead leaves the statute out and builds on the plan's terms, ERISA's claims rules and a parity question. The statute chooses the argument, not the result.
Names, dates, payers and amounts are invented for illustration.
What a ClaimParrot packet does here
- A level-of-care packet sets each factor the denial turns on against the evidence you have, partly have or lack.
- Packets are built from a de-identified summary and checked by a person; your clinician reviews, signs and submits. See pricing and Trust & security.
- ClaimParrot does not give legal advice or decide whether a state law reaches a plan.
Every draft is reviewed and approved by your team. ClaimParrot does not make medical-necessity determinations or give legal advice.
Frequently asked questions
Does a state criteria law apply to a self-funded plan?
Generally no. A self-funded ERISA plan is generally outside state insurance law, though its plan document may adopt a criteria set. Confirm the plan type from the SPD or benefits office.
Does citing one of these laws mean the plan must approve the care?
No. These laws control which criteria a reviewer applies, not the clinical facts. An appeal still has to show the patient meets those criteria for the dates in dispute.
Do any state laws name LOCUS or CALOCUS-CASII?
None of the eleven texts read for this table names either. Connecticut names the Child and Adolescent Service Intensity Instrument. Payers may still use these tools under their own policies.
When should a program ask an attorney about one of these laws?
Ask when a denial turns on whether the law reaches the plan, when a plan disputes the citation, or before a regulator complaint or court filing.
Primary sources and references
- California Health and Safety Code section 1374.721 (SB 855): MH/SUD medical-necessity criteria for health care service plans · California Legislative Information · checked
- HB25-1002, signed act: amends C.R.S. 10-16-104(5.5) on behavioral health utilization review criteria · Colorado General Assembly · checked
- Connecticut General Statutes section 38a-591c: utilization review criteria for substance use, child and adolescent, and adult mental health care · Connecticut General Assembly · checked
- 215 ILCS 5/370c, subsections (h) to (n): medical necessity and utilization review criteria (current as of January 1, 2025) · FindLaw mirror of the Illinois Compiled Statutes · checked
- New York Insurance Law section 4902: utilization review program standards, paragraphs (a)(9) and (a)(12) · New York State Senate · checked
- ORS 743A.168, subsection (5): behavioral health review criteria and level of care placement · Oregon.public.law mirror of the Oregon Revised Statutes · checked
- 29 U.S.C. 1144: ERISA preemption, including the insurance saving clause and the clause on plans not deemed insurers · Legal Information Institute, Cornell Law School · checked
- 29 CFR 2520.102-3(q): summary plan description contents on funding and any insurance policy · Legal Information Institute, Cornell Law School · checked
- 2026 Employer Health Benefits Survey: share of covered workers in self-funded plans · KFF · checked
- Wit v. United Behavioral Health, Nos. 20-17363 and 20-17364: order and opinion filed August 22, 2023 · U.S. Court of Appeals for the Ninth Circuit · checked
General information, not legal or medical advice. Payer rules change; confirm deadlines and requirements in the notice and the plan documents. Read our editorial policy.
Send the denial. Get the level-of-care packet back.
A Level-of-care packet adds a criteria crosswalk and a peer-to-peer brief to the appeal letter draft, evidence checklist and deadline plan. It is built from one de-identified denial and checked by a person before it reaches you: $99, within 3 business days. Your first packet is free.