ABA Compliance Chronicle
ABA Compliance Chronicle keeps ABA companies informed and prepared when it comes to compliance and quality assurance. Get expert insights, practical tips, and regulatory updates to confidently navigate requirements. Stay ahead with best practices and industry news, so you can focus on delivering exceptional services while staying compliant.
Positioning Compliance Officers for Success in ABA Organizations
In ABA organizations, compliance failures are rarely the result of bad intentions or unethical behavior. More often, they stem from something far less visible: how the compliance function is positioned within the organization.
ABA is uniquely vulnerable to compliance risk. Revenue is tightly lin...
by Rose Feddock —
Jan 22, 2026
governance
When Is a Privacy Incident Reportable? What ABA Leaders Need to Know
Privacy breaches are an ongoing compliance risk for ABA providers, and knowing when a breach is reportable is critical for protecting your organization, your clients, and you. Many ABA business and clinical leaders are surprised to learn that not every privacy incident has to be reported (but pl...
Jan 08, 2026
breach
privacy
reporting
HIPAA Training Isn’t About HIPAA (Really)
Â
Effective HIPAA training for ABA agencies isn’t really about teaching the HIPAA rules at all. It’s about helping your team understand and follow your agency’s own privacy and security policies. In this article, we break down what HIPAA actually requires, why generic trainings fall short, and h...
by Michael A. Fabrizio —
Dec 11, 2025
hipaa
privacy rule
security rule
training
Is Your Record Retention Policy Protecting You — or Creating Risk?
If you run an ABA organization, your documentation practices play an important role in your corporate compliance program. But even with the best session notes, billing systems, and employee files, your agency could still face risk if your record retention policy isn’t clear, consistent, and up t...
by Michael A. Fabrizio —
Nov 13, 2025
information management
reducing data risk
How to Know What to Audit: A Practical Guide for ABA Leaders
If you’re responsible for compliance in an ABA organization, you already know how important regular audits are, but deciding what to audit next isn’t always clear. Maybe you’ve already reviewed session notes, billing, and supervision records and are wondering, “What else should I be looking at?”...
Oct 16, 2025
audits
monitoring
From Checking Boxes to Building Strategy: How Risk-Based Compliance Training Builds a Safer ABA Organization
Â
Most ABA organizations already provide compliance training — but let’s be honest, too often it feels like a box-checking exercise. Everyone sits through the same modules, signs off, and moves on. But generic training doesn’t reflect the real risks your team faces in their actual roles.
The tru...
by Rose Feddock —
Oct 03, 2025
aba compliance
compliance training
culture
role based training
training
Waitlists, Referrals, and Compliance: Protecting Families While Supporting Access
Families waiting for ABA services are often under tremendous stress, and providers feel that urgency too. Many BCBAs and agency leaders naturally want to help by pointing families toward another provider that may have availability. This impulse comes from a kind and loving place: a genuine desir...
by Michael A. Fabrizio —
Sep 18, 2025
baa
ethics
hipaa
phi
privacy
waitlist
The Overlooked Security Gaps That Could Cost Your ABA Business
We’re excited to welcome guest writer Joshua Nelson to this week’s ABA Compliance Chronicle. As co-creator and CXO/CMO of ABA Impact, Joshua helps mission-driven clinician-entrepreneurs build ABA therapy practices that scale without sacrificing ethics, client care, or team well-being. He also se...
Sep 04, 2025
hipaa
risk assessment
security
Telehealth Beyond the PHE: What ABA Agencies Need to Know
A New Telehealth Landscape After October 1
Telehealth rules are changing—again. On October 1, 2025, CMS will roll back several COVID-era telehealth waivers. For most healthcare services, this means tighter rules on patient location, approved sites, and technology requirements.
For ABA services, ...
by Michael Fabrizio —
Aug 21, 2025
policy
telehealth
Why Data Minimization Should Be a Core Practice in Your ABA Agency
Â
Information flows through every part of your agency, from prospective client inquiries to employee files to vendor emails.
But here’s the truth: every piece of data you collect becomes something you’re responsible for.
What you collect you must protect.
That’s where data minimization comes in....
by Michael Fabrizio —
Aug 07, 2025
client privacy practices
data minimization
information management
reducing data risk
QA is not Compliance: Why Quality Alone Won't Protect You in an Audit
Â
Â
Many ABA organizations are doing good clinical work. They have a quality assurance (QA) program. They provide ongoing supervision. They monitor fidelity. On the surface, it may seem like these systems are enough to keep the organization compliant.
But here’s the challenge: Quality assurance ...
by Rose Feddock —
Jul 10, 2025
audit
compliance
qa
quality assurance
Rethinking External Compliance Audits in ABA Agencies
Â
Â
What If an Audit Could Actually Make Your Life Easier?
Let’s be honest: the word “audit” doesn’t usually inspire excitement.
For many ABA leaders, an audit feels like an inevitable stressor, a high-stakes test that appears on your doorstep with little warning and potentially hefty consequenc...
by Michael Fabrizio —
Jun 26, 2025
auditing