The MATE Act Attestation: What Belongs in Every Behavioral Health Prescriber File

Most behavioral health operators can produce a prescriber’s DEA certificate in under a minute. Far fewer can produce the training record sitting behind the attestation that prescriber signed to get it. That gap is small, quiet, and entirely avoidable — and it is exactly the kind of thing a credentialing file review surfaces at the worst possible moment.

What the MATE Act attestation actually requires

The MATE Act — Section 1263 of the Consolidated Appropriations Act, 2023 — requires that, beginning June 27, 2023, any practitioner applying for a new DEA registration or renewing an existing one to prescribe Schedule II through V controlled medications must attest to having completed a total of at least eight hours of training on opioid or other substance use disorders, as well as the safe pharmacological management of dental pain. SAMHSA states that the eight hours may be cumulative and do not have to be completed in a single session.

SAMHSA describes three ways a practitioner can satisfy that attestation. They can complete at least eight hours of training approved by one of the organizations named in the statute. They can hold a current board certification in addiction medicine or addiction psychiatry from the American Board of Medical Specialties, the American Board of Addiction Medicine, or the American Osteopathic Association. Or they can have graduated within five years, in good standing, from a United States medical, advanced practice nursing, or physician assistant school whose curriculum included opioid or other substance use disorder content covering the treatment and management of patients with substance use disorders and the appropriate clinical use of all drugs approved by the FDA for treating a substance use disorder. The full requirement and the current list of approved organizations are published by SAMHSA.

Read that list again from an operator’s seat. Two of the three paths expire. Board certification lapses if it is not maintained. The five-year graduation window closes on a rolling basis, which means the nurse practitioner you credentialed in 2024 on the strength of recent schooling may need documented coursework before her next DEA renewal. Only the training path is permanent once earned — and only if somebody kept the certificate.

Why this lands on operations rather than on the prescriber

No artifact is issued: The attestation is a checkbox on the DEA application, and DEA does not send back a certificate, letter, or confirmation naming the training the practitioner relied on.

Renewal is the trigger, not the hire date: The obligation attaches to the DEA application cycle rather than to your onboarding calendar, so a prescriber hired years ago can hit it mid-employment with no signal reaching your credentialing coordinator.

The approved-source list has moved: Congress expanded the roster of organizations whose training counts after the original 2023 statute, so a course judged ineligible under your first policy memo may be eligible now.

Contracted and locum prescribers sit outside the file: Telepsychiatry vendors, moonlighting medical directors, and per-diem NPs are the registrations most likely to renew without anyone at your organization noticing.

Self-certification transfers the exposure: The practitioner signs the attestation, but the organization is the one holding the medication cabinet, the orders, and the survey file.

The approved training sources, and what changed in 2025

The original statute named a specific set of organizations whose training satisfies the requirement, including the American Society of Addiction Medicine, the American Academy of Addiction Psychiatry, the American Medical Association, the American Osteopathic Association, the American Dental Association, the American Association of Oral and Maxillofacial Surgeons, the American Psychiatric Association, the American Nurses Credentialing Center, the American Association of Nurse Practitioners, and the American Academy of Physician Associates — along with organizations accredited by the Accreditation Council for Continuing Medical Education or by a recognized state medical society accreditor.

As of SAMHSA’s most recent update to its training requirements page, additional approved training and accrediting organizations were added under H.R. 2483, the SUPPORT for Patients and Communities Reauthorization Act of 2025: the Academy of General Dentistry, the Accreditation Council for Pharmacy Education, the American Academy of Family Physicians, the American Academy of Nursing, the American Optometric Association, the American Pharmacists Association, the American Podiatric Medical Association, and the American Psychiatric Nurses Association, plus organizations accredited or approved by ACPE or AAFP and their recognized state medical society accreditors.

The practical consequence is narrow but useful. A course your credentialing committee set aside in 2024 because the provider was not on the list may qualify today. Before you send a prescriber back through eight hours they have arguably already completed, re-check the source against SAMHSA’s current page rather than against the internal memo someone wrote two years ago.

What this looks like in a file review

Related: what surveyors sample in behavioral health personnel files.

Surveyors and payer auditors do not open a prescriber file looking for the MATE Act. They open it in a predictable order: current state license, DEA registration with the expiration date visible, professional liability coverage, primary source verification, then education and training. The DEA certificate satisfies the second item in about ten seconds. The question that follows it — how does the organization know this registration was validly obtained and maintained — is where thin files show.

No accreditor enforces the MATE Act; DEA administers the registration and the attestation sits on DEA’s application. But The Joint Commission and other accrediting bodies expect organizations to verify practitioner qualifications and to keep evidence that the verification happened, and a file that contains a DEA number with nothing behind it invites the follow-up question. The fastest way to close it is a one-page training log with the certificates attached. The slowest way is to explain, live, that the prescriber told you it was handled.

Payers ask a blunter version of the same thing. Credentialing and re-credentialing packets increasingly request controlled-substance prescribing attestations, and a network department that cannot substantiate one tends to park the application rather than deny it. Parked applications do not generate a denial letter you can appeal. They generate silence, and then a roster date you miss.

What to do this week

This is a two-hour job if your credentialing roster is in reasonable shape.

1. Export the prescriber roster with each practitioner’s DEA registration number and the expiration date printed on the certificate. Do not assume a uniform renewal cycle across the group — read each certificate.
2. Add two columns: MATE basis (training hours, board certification, or graduate within five years) and evidence on file (yes or no).
3. For every prescriber whose registration expires within the next twelve months and shows “no,” request the CE certificates now. Ask for documents totaling at least eight hours, with the issuing or accrediting organization named on the face of each certificate.
4. Amend the credentialing policy so that DEA renewal is a file-update event, not a background fact. One line is enough: evidence supporting the controlled-substance training attestation is collected at initial appointment and refreshed at each DEA renewal.
5. Put the same requirement into contracted-prescriber, telehealth-vendor, and locum agreements at the next renewal, with a named individual responsible for sending it.

If your organization does not have a credentialing coordinator who owns DEA expiration dates, that is the finding underneath the finding. Our fractional compliance officer engagements often start exactly here, because the gap is rarely one prescriber — it is the absence of a tracking mechanism.

The inconvenient part

The eight-hour requirement is not clinically demanding, and most prescribers in behavioral health cleared it years ago, often through training they took for the old DATA waiver. That is precisely why it gets neglected. Requirements that everyone assumes are already met are the ones that go unevidenced, and unevidenced is the only state that matters in a file review. We have yet to see an organization that could not eventually produce the certificates. We have seen plenty that needed three weeks and four emails to do it, during a survey window measured in days.

A useful test: pick one prescriber at random right now and ask your credentialing coordinator for the documents supporting their controlled-substance training attestation. If the answer arrives in under ten minutes, your system works. If it starts with “let me check with,” it does not.

Getting it in order

Circa Behavioral Healthcare Solutions builds and audits credentialing and personnel systems for behavioral health operators across licensure, accreditation, and payer requirements. If you want a second set of eyes on your prescriber files before a survey or a re-credentialing cycle, call (888) 458-6619 or review our compliance services. For a broader look at what reviewers examine, see our guide to what surveyors check in credentialing files.

Regulatory requirements change and applications vary by discipline and state. Confirm current requirements against SAMHSA’s statutes, regulations, and guidelines page and the DEA application itself before setting policy. This article is operational guidance for behavioral health operators, not legal advice. Questions about your own program? Call (888) 458-6619.