By Matt Harrington, BCBA · Behaviorist Book Club · Research-backed answers for behavior analysts
Key formation decisions include selecting an entity structure that provides appropriate liability protection for a healthcare business (typically LLC, PLLC, or S-Corp), registering with relevant state agencies, applying for necessary business licenses, obtaining an EIN, and establishing foundational governance documents such as operating agreements. Healthcare-specific considerations include verifying that the chosen entity type is permitted to provide behavioral health services under state law and beginning the credentialing process with payers in parallel with entity formation.
Worker classification determines whether a worker is treated as an employee (subject to payroll tax withholding, benefits eligibility, and labor law protections) or an independent contractor (responsible for their own taxes, not entitled to benefits). The IRS and most state agencies apply behavioral and financial control tests to classify workers. BCBAs and RBTs who work under organizational supervision on client caseloads frequently meet the legal definition of employees — misclassification creates significant back-tax and penalty liability.
ABA business owners should understand: federal and state wage and hour laws (including overtime rules under the FLSA), anti-discrimination requirements (Title VII, ADA, FMLA eligibility), requirements for employee handbooks and written employment policies, proper documentation of hiring and termination decisions, and state-specific requirements that may impose additional obligations. Healthcare employers in many states have additional obligations related to background checks, immunization records, and professional license verification.
Regulatory requirements vary significantly by state but commonly include: state behavioral health facility licensure, individual BCBA or behavior analyst state licensure, HIPAA compliance for records management and information security, Medicaid provider enrollment requirements (if serving Medicaid beneficiaries), billing compliance requirements under payer contracts and the False Claims Act, and in some states, specific staffing ratio requirements or documentation standards for ABA services. BCBAs should conduct a state-by-state compliance mapping before operating in any new geography.
Commercial leases for ABA service locations should be reviewed with a healthcare-experienced real estate attorney. Key provisions to evaluate include: the permitted use clause (must explicitly allow clinical ABA services), certificate of occupancy and build-out obligations, zoning compliance for behavioral health use, lease length in relation to business risk tolerance, early termination rights and penalties, and assignment provisions if the business is sold or restructured. Standard commercial leases often lack these protections and can create substantial liability.
A Business Associate Agreement (BAA) is a HIPAA-required contract between a covered entity (such as an ABA provider) and any vendor or subcontractor who handles protected health information (PHI) on their behalf. BAAs are required for EMR vendors, billing services, cloud storage providers, and any other third party with access to client records. Operating without BAAs in place is a HIPAA violation and creates liability if a data breach occurs. BCBAs should verify that all vendors handling PHI have signed BAAs before sharing any client data.
Billing compliance requirements — which vary by payer contract, state Medicaid rules, and federal law — typically specify what documentation must exist before a claim is submitted, who is authorized to supervise billable services, what authorization limits apply, and what record retention requirements govern clinical files. BCBAs who sign billing documentation take on personal liability for its accuracy. Building clinical documentation processes that are aligned with billing requirements from the start — rather than retrofitting documentation after claims are submitted — is the most effective compliance approach.
Multi-state ABA operations face a layered compliance challenge because state requirements for licensure, facility regulations, employment law, and Medicaid are each jurisdiction-specific and often inconsistent. A BCBA licensed in one state is not automatically licensed to practice in another. Each state of operation may require separate entity registration, provider enrollment, and facility licensure. Employment law varies at the state level on issues such as non-compete enforceability, final paycheck timing, and leave requirements. Organizations expanding geographically should conduct a compliance review for each new state before beginning operations.
The False Claims Act (FCA) creates federal civil and criminal liability for knowingly submitting false or fraudulent claims to government payers, including Medicare and Medicaid. For ABA providers, FCA exposure arises from billing for services not rendered, billing for services by unqualified providers, billing for hours exceeding authorization, and submitting claims with falsified documentation. The FCA includes whistleblower provisions (qui tam) that allow staff to file suits on the government's behalf, making internal billing compliance controls an important operational priority.
When reviewing any third-party contract — whether with a staffing agency, EMR vendor, or billing service — BCBAs should focus on: indemnification clauses (who bears liability if the vendor's error creates harm?), data security obligations and BAA requirements, termination rights (can you exit the agreement if service quality deteriorates?), intellectual property provisions (who owns data and materials?), and non-solicitation clauses that may restrict hiring from the vendor's staff pool. Any contract where the financial or operational risk is material should be reviewed by a healthcare attorney before signing.
The ABA Clubhouse has 60+ on-demand CEUs including ethics, supervision, and clinical topics like this one. Plus a new live CEU every Wednesday.
Ready to go deeper? This course covers this topic with structured learning objectives and CEU credit.
An Overview Of Legal Issues Facing ABA Providers — Michael Costa · 0 BACB General CEUs · $0
Take This Course →BACB General CEUs · $0 · BehaviorLive
Research-backed educational guide with practice recommendations
Side-by-side comparison with clinical decision framework
All behavior-analytic intervention is individualized. The information on this page is for educational purposes and does not constitute clinical advice. Treatment decisions should be informed by the best available published research, individualized assessment, and obtained with the informed consent of the client or their legal guardian. Behavior analysts are responsible for practicing within the boundaries of their competence and adhering to the BACB Ethics Code for Behavior Analysts.