N.Y. Comp. Codes R. & Regs. tit. 14, § 511-2.10
(c) The governing body shall be responsible for the following duties:
(7) to develop, approve, and periodically review and revise, as appropriate, all program and service policies and procedures. Such policies and procedures shall include, but are not limited to, the following:
(12) A provider of service shall ensure that any program subject to this Part does not:
(17) There shall be a written utilization review procedure to ensure that the child is receiving appropriate services and are being served at an appropriate level of care. Such policies and procedures shall include provisions ensuring that utilization review is performed and shall be performed only by professional staff trained to do such reviews, or by staff who are otherwise qualified by virtue of their civil service standing, and shall ensure to the maximum extent possible that the designated utilization review authority functions independently of the clinical staff that is treating the individual under review. Such utilization review procedure shall provide for: