Regulatory and Compliance
HR and Workforce Compliance
Recovery Housing and Governance
| Source | URL | Used By |
|---|---|---|
| Arizona DHS: Sober Living Home Licensing | https://www.azdhs.gov/licensing/special/sober-living-homes/index.php | RH-06, RH-01 |
| Arizona DHS: Behavioral Health Facilities Licensing | https://azdhs.gov/licensing/bbbl-facilities/index.php | RH-06, RH-03 |
| Arizona DHS: Residential Facilities Licensing | https://www.azdhs.gov/licensing/residential-facilities/ | RH-01, RH-06 |
| ARS 36-2061 through 36-2068 (Sober Living Homes) | https://www.azleg.gov/arsDetail/?title=36 | RH-06 |
| AAC Title 9, Chapter 12 (Sober Living Home Rules) | https://regulations.justia.com/states/arizona/title-9/chapter-12/ | RH-01, RH-06 |
| NARR: National Standard for Recovery Residences 3.0 | https://narronline.org/standards/ | RH-01, RH-06 |
| Arizona Recovery Housing Association (AzRHA) | https://www.myazrha.org/ | RH-06 |
| HUD/DOJ: Fair Housing Act — Group Homes | https://www.justice.gov/opa/file/912366/dl | RH-01, RH-02 |
Finance & Accounting Compliance
Accreditation and Quality Measures
Interoperability Standards
| Source | URL | Used By |
|---|---|---|
| ONC USCDI (v3 baseline, v4 target) | https://www.healthit.gov/isa/united-states-core-data-interoperability-uscdi | CL-16, PM-01 |
| HL7 US Core IG 7.0 (FHIR R4) | https://hl7.org/fhir/us/core/ | CL-16 |
| US Behavioral Health Profiles IG (v0.1.0) | https://build.fhir.org/ig/HL7/us-behavioral-health-profiles/ | CL-16 |
| Da Vinci PAS STU 2.1 | https://hl7.org/fhir/us/davinci-pas | PM-10 |
| Da Vinci CRD STU 2.0.1 | https://hl7.org/fhir/us/davinci-crd | PM-10 |
| Da Vinci DTR STU 2.0.0 | https://hl7.org/fhir/us/davinci-dtr | PM-10 |
| LOINC | https://loinc.org/ | CL-09, PF-70 |
| NLM RxNorm | https://www.nlm.nih.gov/research/umls/rxnorm/ | CL-05, CL-06 |
Platform Foundation (Accessibility & Data)
| Source | URL | Used By |
|---|---|---|
| HHS Section 504: Web Accessibility Rule (WCAG 2.1 AA) | https://www.hhs.gov/civil-rights/for-individuals/disability/index.html | PF (platform-wide) |
| W3C: WCAG 2.1 | https://www.w3.org/TR/WCAG21/ | PF (platform-wide) |
| ADA.gov: Web Accessibility Guidance | https://www.ada.gov/resources/web-guidance/ | PF (platform-wide) |
Community Engagement (Communications)
| Source | URL | Used By |
|---|---|---|
| FTC: CAN-SPAM Act Compliance Guide | https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business | CE-09 |
| FCC: Do Not Call Registry | https://www.donotcall.gov/ | CE-10 |
| Arizona ARS 13-3005 (Call Recording / Wiretapping) | https://www.azleg.gov/ars/13/03005.htm | CE-10 |
| HIPAA Marketing Authorization (45 CFR 164.508) | https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/marketing/index.html | CE-09 |
ONC Certification Criteria
| Source | URL | Used By |
|---|---|---|
| ONC Health IT Certification (45 CFR Part 170) | https://www.healthit.gov/topic/certification-ehrs/certification-criteria | PF, CL-16, PM-01 |
IT and Security
| Source | URL | Used By |
|---|---|---|
| HIPAA Security Rule (45 CFR 164 Subpart C) | https://www.hhs.gov/hipaa/for-professionals/security/index.html | IT-05 |
| NIST SP 800-66r2 (Implementing HIPAA Security Rule) | https://csrc.nist.gov/pubs/sp/800/66/r2/final | IT-05 |
| NIST Cybersecurity Framework 2.0 | https://www.nist.gov/cyberframework | IT-05 |
| CIS Critical Security Controls v8 | https://www.cisecurity.org/controls | IT-05 |
| HITECH Act (Enforcement) | https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html | IT-05 |
| HHS: Breach Notification Rule | https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html | IT-05 |
| Arizona ARS 18-552 (Data breach notification) | https://www.azleg.gov/ars/18/00552.htm | IT-05 |
| PCI Security Standards Council | https://www.pcisecuritystandards.org/ | IT-05 |
Clinical Instruments
| Source | URL | Used By |
|---|---|---|
| Columbia C-SSRS | https://cssrs.columbia.edu/ | CL-07 |
| PHQ Screeners (PHQ-9, GAD-7) | https://www.phqscreeners.com/ | CL-02, CL-07, CL-10 |
| ASAM Criteria | https://www.asam.org/asam-criteria | CL-02 |
Content Licensing and Terminology
| Content | License Source | Cost | URL | Status |
|---|---|---|---|---|
| LOINC | Regenstrief Institute | Free | https://loinc.org/get-started/loinc-license/ | Not yet obtained |
| SNOMED CT US Edition | NLM UMLS Metathesaurus | Free (US) | https://www.nlm.nih.gov/databases/umls.html | Not yet obtained |
| RxNorm | NLM | Free | https://www.nlm.nih.gov/research/umls/rxnorm/ | Not yet obtained |
| ICD-10-CM | CMS | Free | https://www.cms.gov/medicare/coding-billing/icd-10-codes | Available |
| CPT | AMA | 500–3,500/yr | https://www.ama-assn.org/practice-management/cpt | Not yet licensed |
| CVX/MVX (vaccine codes) | CDC | Free | https://www2a.cdc.gov/vaccines/iis/iisstandards/vaccines.asp?rpt=cvx | Not yet obtained |
| NCPDP SCRIPT | NCPDP | Membership required | https://www.ncpdp.org/ | Not yet licensed |
| Surescripts | Surescripts | Staged certification | https://surescripts.com/enhance-prescribing/e-prescribing | Not yet certified |
ONC Certification and Interoperability Tools
| Resource | URL | Used By |
|---|---|---|
| Inferno Framework | https://inferno.healthit.gov/ | CL-16, PM-55 (g)(10) testing |
| SITE / Edge Testing Tool | https://site.healthit.gov/ | CL-48 C-CDA, Direct testing |
| Cypress (CQM testing) | https://www.healthit.gov/cypress/ | CL-51 CQM testing |
| eRx Testing Suite | https://erx.healthit.gov/ | CL-06 e-prescribing |
| CHPL (Certified Health IT Products List) | https://chpl.healthit.gov/ | Market reference |
| ONC Conformance Test Tools | https://healthit.gov/certification-health-it/certification-process/onc-conformance-test-tools/ | All criteria |
| Drummond Group (ATL/ACB) | https://www.drummondgroup.com/ | Certification engagement |
| USCDI v3 Data Classes | https://www.healthit.gov/isa/united-states-core-data-interoperability-uscdi#uscdi-v3 | CL-16, PM-55 |
| US Core 6.1.0 IG | https://hl7.org/fhir/us/core/STU6.1/ | FHIR profile conformance |
| SMART App Launch v2 | https://hl7.org/fhir/smart-app-launch/STU2/ | PM-55 OAuth |
| USCDI+ BH (SAMHSA/ONC) | https://uscdiplus.healthit.gov/uscdi | CL-16-EN-03 |
Beyond-ONC Compliance
| Resource | URL | Used By |
|---|---|---|
| HITRUST Alliance | https://hitrustalliance.net/ | PF-109 |
| DEA EPCS (21 CFR 1311) | https://www.deadiversion.usdoj.gov/ecomm/e_rx/ | CL-64 |
| EKRA (18 U.S.C. § 220) | https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title18-section220 | PF-107 |
| Contexture (Health Current) | https://contexture.org/ | PF-108 |
| AHCCCS DAP Program | https://www.azahcccs.gov/AHCCCS/Initiatives/HIT/ | PF-108 |
| SAMHSA SUPTRS/TEDS | https://www.samhsa.gov/data/data-we-collect | GR-26 |
Recommendations and Analysis
- PM-CL cross-core implementation plan — Rollout plan referencing PM/CL gap work (CL-21/22/23, PM-16/17 proposals)
- ONC Regulatory Readiness Implementation Plan — Skills, specs, and phased roadmap