Agency operationsChecklist5 minUpdated Oct 16, 2026

CMS ABA toolkit: a self-audit checklist for your agency's billing and documentation

The 30-second answer

The CMS ABA toolkit of August 2026 is guidance for state Medicaid agencies, not a regulation, and CMS says it creates no new federal requirements. It still lists the billing and documentation flags that states and plans may screen for: group therapy above 10% of treatment time, two ABA providers with one child, identical notes across children, hours that continue without progress and no caregiver involvement. You can check each flag against your own records, one child and one month at a time. None of it is a Florida rule unless Florida adopts it.

Leer en español

Key facts

9flagsin the toolkit's Figure 6 for possible erroneous or improper billing, from overlapping treatments to lack of caregiver engagementABA Toolkit · CMS · Aug 2026, p. 34

>10%of treatment time spent in group therapy is one of those flagsABA Toolkit · CMS · Aug 2026, p. 34

160units a week(32 a day) is the toolkit's example of high service hours per beneficiary for states to monitorABA Toolkit · CMS · Aug 2026, p. 121

Dec 312026deadline for the recommendations of Florida's ABA Task Force, which received the toolkit on Aug 31ABA Task Force · AHCA · accessed Oct 16, 2026

Step 1 of 7

What the toolkit is, and what it is not

The State Medicaid & CHIP Applied Behavior Analysis Toolkit is a CMS document dated August 2026, written for state Medicaid and CHIP agencies¹. It says it is not a regulation and should not be read as setting a standard of care¹. CMS adds that it creates no new federal requirements and that solutions will vary by state².

So the toolkit itself creates no new requirements for your agency, and none of it is a Florida rule unless Florida adopts it; the existing federal and Florida requirements it describes still apply. It still matters, because states, and the managed care plans that pay claims, can build audits and claim edits from it. Its Figure 6 lists documentation flags states could use to spot possible improper billing, and its program integrity chapter adds data checks, unannounced site visits and supervision logs¹. Figure 6 cites an AHIP paper of February 2026 that the toolkit lists as “on file with authors”, with no link, and a 2023 journal article¹. Read the flags as screening signals, not findings.

A flag is a reason to look

The toolkit itself says that frequent billing of time-based and supervision codes does not by itself show inappropriate use, and that utilization thresholds should not act as absolute caps when more medically necessary care is needed.¹

Step 2 of 7

How to run the check

Work one child and one month at a time. For each flag below, pull a few child-months and set the claims beside the notes. Write down your own definitions and keep them stable between audits. The toolkit does not define, for example, what counts as treatment time for the group flag. For the research behind weekly hours, see is 40 hours a week of ABA backed by evidence.

States do not all lean the same way on group time. Indiana encourages group ABA and prices it by group size⁸, while the toolkit flags group time above 10%¹. For how the OIG samples child-months, see what the OIG found in ABA Medicaid audits.

Step 3 of 7

Time and billing flags

0 of 17

Group time does not go above 10% of each child’s treatment time (p. 34)¹
No session has two providers working with one child at once unless the plan says why (p. 34)¹. Florida does not cover simultaneous services by more than one provider unless medically necessary, prior authorized and in the approved plan³
No duplicate claims and no provider billed in two places at once; simultaneous services for one child only when medically necessary, prior authorized and in the approved behavior plan (pp. 34 and 123)¹³
Schedules show breaks, a written policy covers toileting, eating and napping, and no run of back-to-back units goes unbroken (pp. 36 and 37)¹. The toolkit sets no number; it suggests states set one
Claim lines show where therapy stopped, since the toolkit suggests states may bar putting all 15-minute units on one claim line (p. 36)¹
Any child at 32 units a day or 160 units a week has an individual written reason (p. 121)¹. In Florida, 160 units is the 40 hours a week the policy covers when the prior-authorized plan indicates it³
Notes and claims keep therapy apart from travel, idle time and administrative work (p. 148)¹. Florida does not cover travel time³
No child is kept from sleeping, eating or toileting to protect billable time: the toolkit tells states to refer providers who do this to the special investigative unit or the OIG (p. 153)¹

Step 4 of 7

Documentation flags

No identical notes across different children, by technician or by clinic (p. 34), and no treatment plan copied from one child to the next (p. 33)¹
Hours follow progress: each reevaluation shows what changed when progress stalled (p. 34)¹. Florida requires an explanation when significant progress was not made in an authorization period³
Progress is measured with established instruments, not measures you created (p. 34)¹
The plan states the expected length of treatment and a transition plan (p. 34)¹
Goals and interventions fit the child’s age and needs (p. 34)¹
Caregiver involvement, or the reason it is missing, is documented (p. 34)¹. Florida requires those reasons in the plan and the session notes, and participation data in continuation requests³

For the note itself, see what makes a session note hold up.

Step 5 of 7

Supervision, diagnosis and telehealth

Supervision hours are logged per child per month (p. 124) and compared with your payer’s rule. The toolkit sets the BACB’s 5% minimum for RBTs beside the 10% to 20% it reports in clinical guidelines (pp. 86 and 87)¹. See ABA supervision ratios as billing rules
Before comprehensive ABA starts, a qualified clinician independent of your agency has confirmed the diagnosis, any financial or ownership tie between that clinician and you is disclosed, and no pay varies with referral volume (pp. 26 and 27)¹. Florida already requires referral by an independent physician or practitioner³
Telehealth is a limited adjunct: caregiver coaching, follow-ups and supervisory contacts with direct observation, never the diagnosis or the initial assessment (p. 91)¹. Florida allows up to two hours a week of parent training by telemedicine³

On diagnosis, the toolkit does not call for splitting diagnosis from treatment. It points to financial ties and to monitoring referral patterns instead, and it recognizes that some states authorize limited, time-bound services under EPSDT while an evaluation is pending (pp. 26 and 27)¹.

Step 6 of 7

Where Florida stands

Florida’s rule is the December 2024 coverage policy, in force since February 10, 2025³⁴. It has no 10% group cap and no supervision ratio. It limits groups to six participants, covers up to 40 hours a week as the prior-authorized plan indicates, and requires services to follow CASP’s current practice standards³. The toolkit calls 40 hours a week not a best practice¹.

The toolkit is already in front of the state. On August 31, CMS presented it to the ABA Task Force, and AHCA compared Florida’s coverage with it, noting areas of alignment and areas for further consideration⁵. The minutes list, among the recommendations CMS emphasized, eliminating consolidated billing and using 40 hours a week as an audit flag⁵. On October 5, AHCA’s slides listed measures it could track, including the supervision ratio and caseload, average hours a week, the percentage above 40 hours, authorized against delivered hours and the percentage of sessions with a caregiver present⁶. These are discussion items, not audit rules. Read more in Florida’s ABA Task Force.

Step 7 of 7

What is in force and what may change

In force today: the toolkit as guidance only¹², and Florida’s coverage policy of December 2024³⁴. What may change: the task force’s recommendations, due December 31, 2026⁷, and each plan’s own manual, so ask your plan which edits and documentation rules it applies. This article is not legal or billing advice: before you change how you bill, confirm with your plan, a billing specialist or an attorney.

Next step of the path · 3 of 4ABA supervision ratios are becoming billing rules: Indiana, Massachusetts and what CMS recommends

Frequently asked questions

Is the CMS ABA toolkit a new rule for ABA agencies?

No. It is a resource for state Medicaid and CHIP agencies. The toolkit calls itself not a regulation, and CMS says it does not establish new federal requirements. States and plans can use its flags in their own audits and policies.

Does Florida Medicaid apply the toolkit's flags?

Not as rules. Florida's rule is the December 2024 coverage policy, which has no 10% group cap and no supervision ratio. CMS presented the toolkit to Florida's ABA Task Force on August 31, 2026 and AHCA compared the two, but the task force's recommendations are due December 31, 2026.

What documentation flags does the toolkit list?

Identical documentation across individuals by provider or clinic, reevaluations that show no progress or no change to the plan, service hours that continue without documented improvement, and lack of parent or caregiver engagement, among others, in Figure 6 on page 34.

How many consecutive units without a break does the toolkit allow?

It gives no number. It says best practice is for states to set a limit on consecutive units without a break, suggests they consider barring consolidated billing, and says clinics should have written policies on activities of daily living.

How should an agency use these flags?

As screening signals, one child and one month at a time. Compare claims with notes and write down the clinical reason behind any flagged pattern. The toolkit itself says frequent billing of these codes alone does not necessarily indicate inappropriate use.

Sources

State Medicaid & CHIP Applied Behavior Analysis Toolkit. Centers for Medicare & Medicaid Services (CMS), copy hosted by AHCA, August 2026.
CMS Launches New State Toolkit to Protect Children with Autism, Strengthen Oversight of Applied Behavior Analysis Services. Centers for Medicare & Medicaid Services (CMS), Aug 4, 2026.
Florida Medicaid Behavior Analysis Services Coverage Policy. Agency for Health Care Administration (AHCA), December 2024, Rule 59G-4.125.
Rule 59G-4.125, Behavior Analysis Services. Florida Administrative Rules (flrules.org), accessed Oct 16, 2026.
ABA Task Force, meeting 2 minutes. Agency for Health Care Administration (AHCA), meeting of Aug 31, 2026, approved Sep 28, 2026.
ABA Task Force, meeting 4 materials (AHCA presentation "Optimizing Quality in Florida Medicaid Behavior Analysis Services"). Agency for Health Care Administration (AHCA), Oct 5, 2026.
Applied Behavior Analysis Task Force. Agency for Health Care Administration (AHCA), accessed Oct 16, 2026.
IHCP Bulletin BT202627: IHCP announces changes to applied behavior analysis (ABA) therapy services. Indiana Health Coverage Programs (IHCP), Feb 26, 2026.