What LA County's Focus on Finance Mandate Actually Requires

If you run a substance use disorder treatment program under an LA County SAPC contract, you've probably heard "Focus on Finance" mentioned in a training, an email, or a hallway conversation — and walked away without a clear sense of what it actually requires you to do differently. That's not a knowledge gap on your part; the County rolled this out across three separate presentations between April and June 2026, and the practical requirements are spread across two policy notices plus a federal rule that predates all of it.

Here's what's actually in scope.

SAPC IN 26-06 standardizes fiscal reporting. Providers now report financial data to the County in a standardized format tied directly to rate-tier determination — meaning how you report affects what you get paid, not just whether you're in compliance. If your current process is a patchwork of spreadsheets built up over years, the risk isn't just inefficiency; it's inconsistent numbers feeding into a determination that sets your rates.

SAPC IN 26-05 adds annual fiscal compliance reviews. This is a different kind of scrutiny than a standard audit. The County Auditor-Controller is reviewing your cost-allocation methodology directly — how you arrive at the numbers, not just whether the numbers you report match your books. A provider can pass a conventional audit and still fail this review if the underlying allocation logic isn't defensible.

42 CFR Part 2 governs the data itself. This one isn't new, but enforcement posture has changed — civil enforcement began in February 2026. It governs how SUD treatment records are stored, accessed, and disclosed, and it applies regardless of your Focus on Finance status. Any system that touches both financial reporting and underlying client records has to satisfy this on top of everything else.

Put together, this is three requirements at once: a reporting requirement, a cost-allocation requirement, and a data-confidentiality requirement. Providers who treat it as "one more report to submit" tend to build a system that satisfies the reporting piece and gets caught on the audit or the data-handling piece six months later.

What "compliant" actually looks like in practice: a reporting process that produces the same numbers every time regardless of who runs it, a documented and defensible cost-allocation methodology the Auditor-Controller can follow without a meeting, and data-access controls that satisfy 42 CFR Part 2 by design rather than by policy memo. That's a systems and process question, not a paperwork question — which is why providers who wait until the review is scheduled tend to be building under pressure instead of on their own timeline.

If you're trying to figure out where your organization actually stands against these three requirements, that's a scoping conversation, not a sales pitch — happy to walk through it.