Tribal Behavioral Health Compliance

The Compliance Framework for Tribal Behavioral Health Grants

Compliance for SAMHSA tribal behavioral health grants operates at multiple levels simultaneously. At the federal level, all SAMHSA grantees must comply with 2 CFR 200 (Uniform Administrative Requirements), the terms and conditions of the Notice of Award, and program-specific requirements outlined in the NOFO. For tribal behavioral health grants specifically, additional compliance requirements address evidence-based practice implementation, cultural adaptation fidelity, data collection and reporting through SPARS, and substance use confidentiality under 42 CFR Part 2. Tribal grantees also navigate the intersection of these federal requirements with tribal sovereignty, including tribal IRB oversight and data governance.

Understanding which compliance framework applies to which aspect of your grant is essential. Financial compliance follows 2 CFR 200. Program compliance follows SAMHSA's terms and conditions. Data compliance involves both SAMHSA's GPRA/NOMS requirements and your tribe's data sovereignty protocols. Clinical compliance includes evidence-based practice fidelity and 42 CFR Part 2 confidentiality. Each framework has its own documentation requirements, timelines, and consequences for non-compliance.

Evidence-Based Practice Requirements

SAMHSA tribal behavioral health grants require implementation of evidence-based practices (EBPs), programs, or policies. This requirement serves two purposes: it ensures that federal funds support interventions with demonstrated effectiveness, and it provides a measurable standard against which implementation quality can be assessed. However, SAMHSA applies this requirement with explicit recognition that tribal communities may need to adapt EBPs for cultural relevance.

What Qualifies as Evidence-Based

• SAMHSA's EBPRC: Practices listed in SAMHSA's Evidence-Based Practices Resource Center are presumptively acceptable. This is the first place to look when selecting an EBP for your application.
• Other recognized registries: The Blueprints for Healthy Youth Development, OJJDP Model Programs Guide, California Evidence-Based Clearinghouse, and other federal or state registries may also be acceptable depending on the NOFO.
• Tribally developed practices: SAMHSA recognizes that some practices developed within tribal communities demonstrate effectiveness but may not appear in mainstream registries. If you propose a tribally developed practice, you must provide evidence of its effectiveness — published evaluation data, documented outcomes from prior implementation, or recognition by tribal health authorities.
• Practice-based evidence: Some NOFOs accept "practice-based evidence" — interventions that have been used successfully in tribal communities and have documentation of positive outcomes, even without formal randomized controlled trials. This is particularly relevant for culturally grounded practices like traditional healing approaches.

Cultural Adaptation Compliance

SAMHSA explicitly allows cultural adaptation of EBPs for tribal communities. However, adaptation is itself a compliance obligation — you must document what you adapted, why, and how the adaptation maintains the practice's core components. During the grant period, SAMHSA project officers will review your adaptation documentation and may ask for clarification on how adapted practices maintain fidelity.

• Adaptation protocol: Document your systematic approach to adaptation. Which framework did you use? (Bernal's ecological validity model, Barrera & Castro's cultural adaptation framework, or another recognized approach.) How did you identify which components to adapt and which to maintain?
• Community involvement documentation: Record who participated in adaptation decisions — elders, cultural practitioners, clinical staff, community advisory members. Document meeting dates, attendees, and the specific decisions made at each session.
• Core component analysis: For each adaptation, document which core component of the original EBP it affects and your rationale for why the adaptation maintains (or enhances) the practice's effectiveness in your community.

Fidelity Monitoring in Tribal Contexts

Fidelity monitoring ensures that the EBP is implemented as designed — or, in the case of adapted practices, as the adaptation protocol specifies. For tribal programs, fidelity monitoring must balance the need for implementation quality with cultural sensitivity and community trust.

Adapted Fidelity Frameworks

Standard fidelity tools developed for mainstream populations may not capture the cultural components of your adapted practice. Consider developing a culturally adapted fidelity checklist that includes:

• Core clinical components from the original EBP (retained elements)
• Cultural components added through the adaptation process (language use, ceremonial elements, elder involvement, traditional healing integration)
• Delivery setting and context indicators (community-based vs. clinical, group vs. individual, indoor vs. land-based)
• Facilitator competency indicators (both clinical credentials and cultural knowledge)

Tribal IRB Requirements

Many tribes operate their own Institutional Review Boards (IRBs) or participate in regional tribal IRB processes. While SAMHSA behavioral health grants are service delivery programs rather than research, many tribal IRBs require review of any project that collects data from tribal members, particularly when that data is submitted to federal systems.

Even when formal tribal IRB review is not required, SAMHSA encourages tribal grantees to engage their tribal IRB or equivalent oversight body in the data collection and reporting plan. This demonstrates respect for tribal sovereignty and helps prevent data governance conflicts during the grant period.

Common Tribal IRB Considerations

• Data collection instruments: Tribal IRBs may review surveys, assessment tools, and intake forms to ensure cultural appropriateness and that questions do not violate cultural norms or collect sensitive ceremonial information.
• Data sharing agreements: The tribal IRB may require formal agreements governing what data is shared with SAMHSA, how it is de-identified, and what happens to the data after the grant period ends.
• Informed consent processes: Tribal IRBs often require culturally adapted consent processes that explain data collection in accessible language and provide clear information about how data will be used, stored, and shared.
• Publication and dissemination review: Some tribal IRBs require review and approval before any data, findings, or reports are disseminated outside the tribe, including SAMHSA progress reports.

Data Sovereignty Protocols

Data sovereignty is the principle that tribes have inherent authority to govern the collection, ownership, and application of data about their people and communities. This principle, articulated through frameworks like OCAP (Ownership, Control, Access, and Possession) and the tribal data sovereignty movement, directly intersects with SAMHSA's federal reporting requirements.

Establishing data sovereignty protocols at the beginning of the grant period — or ideally during the application — prevents conflicts later. Key protocol elements include:

• Data ownership statement: Clear declaration that the tribe owns all data collected under the grant, even when submitted to federal reporting systems.
• Access controls: Define who within and outside the tribal organization can access raw data, aggregate data, and reports. Include provisions for SAMHSA project officers, evaluators, and site visitors.
• De-identification standards: Specify how data will be de-identified before submission to SPARS, particularly for small tribal communities where demographic data alone could identify individuals.
• Data retention and destruction: Document how long data will be retained, where it will be stored, and when it will be destroyed. Address both local copies and data in federal systems.
• Secondary use restrictions: Prohibit use of grant-collected data for purposes beyond the grant without explicit tribal approval. This includes academic publications, conference presentations, and use in other federal reports.

42 CFR Part 2: Substance Use Confidentiality

Any SAMHSA-funded program that provides substance use disorder treatment or receives substance use disorder records is subject to 42 CFR Part 2, the federal regulation governing the confidentiality of substance use disorder patient records. Part 2 provides protections beyond HIPAA, restricting when and how substance use disorder treatment information can be disclosed.

Key Part 2 Compliance Requirements

• Written patient consent: Disclosure of substance use treatment records requires specific written consent from the patient. General HIPAA authorizations are not sufficient. Part 2 consent forms have specific required elements including the name of the person or entity to receive the information, the purpose of the disclosure, and an expiration date.
• Re-disclosure prohibition: Recipients of Part 2-protected information may not re-disclose it to third parties without additional patient consent. This has implications for data sharing between tribal programs and IHS, between clinical and prevention staff, and for SPARS reporting.
• Qualified Service Organization Agreements (QSOAs): If your program uses external evaluators, data systems, or consultants who may access substance use treatment records, you need QSOAs in place. This is separate from standard contractor or subcontract agreements.
• Audit and compliance trail: Maintain a record of all disclosures of Part 2-protected information, including the patient consent form, the recipient, the purpose, and the date.

Part 2 compliance is particularly significant in small tribal communities where behavioral health staff may have personal relationships with clients. The Common Mistakes guide discusses Part 2 violations that frequently occur in tribal settings.

Prevention vs. Treatment Compliance Distinctions

SAMHSA tribal behavioral health grants span both prevention and treatment services, and the compliance requirements differ significantly between the two. Understanding these distinctions prevents over-compliance (which wastes resources) and under-compliance (which creates risk).

SAMHSA Site Visit Preparation

SAMHSA conducts site visits to tribal grantees, typically during Years 2 through 4 of a 5-year project. Site visits serve both monitoring and technical assistance purposes. Your SAMHSA project officer will provide advance notice of the visit and an agenda outlining what the team wants to review.

Documents to Prepare for Site Visits

• Current organizational chart showing grant-funded positions and reporting relationships
• Cultural adaptation documentation including adaptation protocol, community advisory meeting minutes, and adapted materials
• Fidelity monitoring records showing implementation quality checks
• GPRA/NOMS data collection procedures and current SPARS submission status
• Financial records including expenditure reports, time-and-effort documentation, and IDC calculations
• Data sovereignty protocols and tribal IRB documentation
• 42 CFR Part 2 consent forms and disclosure logs (for treatment programs)
• Progress toward project goals and objectives as stated in the approved application

Community-Level Intervention Documentation

Many tribal behavioral health grants fund community-level interventions — awareness campaigns, gatekeeper training, community mobilization, environmental strategies, and policy change efforts. These interventions require different documentation approaches than individual-level clinical services.

• Activity logs: Record every community event, training session, meeting, and outreach activity with dates, locations, participant counts, and a brief description of content delivered.
• Reach documentation: Track how many community members are exposed to or participate in prevention activities. For media campaigns, document distribution channels and estimated reach.
• Policy and systems change: Document any policy changes, institutional practices, or system modifications that result from your community-level work. These often represent the most significant and sustainable impacts but are easy to forget to document.
• Community readiness progress: If you conducted a baseline community readiness assessment, track movement along the readiness continuum. Shifts in community readiness are meaningful outcomes for prevention programs.

Financial Compliance and 2 CFR 200

All SAMHSA grantees must comply with 2 CFR 200 (Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards). For tribal organizations, key financial compliance areas include:

• Cost allocation: If your organization manages multiple federal grants, costs must be properly allocated to the correct funding source. Shared costs (facilities, administrative staff) must be allocated using a reasonable, documented methodology.
• Time and effort reporting: Staff funded by the grant must document their time. For employees working on multiple grants, time must be distributed based on actual effort, not budget ratios.
• Procurement: Purchases using grant funds must follow your organization's procurement policies, which must comply with 2 CFR 200.318–200.327. Tribal organizations should ensure their procurement policies meet these federal standards.
• Single Audit: Organizations expending $750,000 or more in federal awards in a fiscal year must complete a Single Audit under 2 CFR 200 Subpart F.