ABA Therapy Binder and Records Index for Families

Important boundary: This is a family-owned working index. It is not the provider's, health plan's, or school's official record. It is not a HIPAA authorization, proof of coverage, a clinical treatment plan, legal advice, or a universal retention schedule. Keep the source document unchanged and ask the organization that issued it which rule or notice controls.

Families and Caregivers / Starting ABA and What to Expect.

Start with one master index

Create one row for each document version. If a new version arrives, add a new row instead of overwriting the old one. Mark the earlier row as superseded and point to the replacement.

CategoryDocument and child or memberIssuer or record holderService, effective, or meeting dateVersion and statusRequest or receipt status and dateSecure locationSharing statusOpen action, owner, and controlling deadlineSuperseded by________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

Use the printed date when available. “Received August 8” is not the same as “effective August 1.” If no version date appears, say so. Sharing-status entries can include not checked, separate authorization on file, or authorization expired. The index itself gives no permission to disclose records.

ABA records section

Start with records your family actually has. A family does not automatically have a right to every internal draft, supervision note, quality file, or data record. HHS medical-record guidance describes access to a covered provider's or plan's designated record set, with exceptions. The BACB Ethics Code separately requires covered certificants to follow applicable documentation rules. Other providers may follow different state, contract, or organizational requirements.

Use this checklist to label what is current and what is missing:

• ☐ Provider name, location, main phone, records contact, and after-hours route
• ☐ Signed service agreement and financial agreement
• ☐ Notice of Privacy Practices, when supplied
• ☐ Assessment or reassessment report, with author and date
• ☐ Current treatment plan, service period, and version
• ☐ Authorization decision that matches the plan, member, provider, service, and dates
• ☐ Progress report or other summary received by the family
• ☐ Records-request confirmation, status, and response
• ☐ Transition, discharge, or continuity document, when applicable

Add a short status line for each open request:

• Record holder: ______________________________
• Exact records and date range requested: ______________________________
• Who requested them and authority used: ______________________________
• Requested format and secure destination: ______________________________
• Request date, response date, and current status: ______________________________
• Missing item or follow-up question: ______________________________

Record a clinical document's title, source, date, and location rather than rewriting its conclusion in the index.

Permission and sharing section

Keep permissions separate from the records they cover. HHS distinguishes a general consent from a HIPAA authorization. When HIPAA authorization is required, the authorization identifies the information, the person allowed to disclose it, the recipient, an expiration date or event, and sometimes the purpose. State law may be more restrictive.

Form or authorityPerson signing and authorityInformation coveredDisclosing organizationRecipientSignedExpiresRevocation sent and receivedOfficial form location____________________________________________________________________________________________________________________________________________________________________________________

For a child, do not assume that any caregiver can authorize every disclosure. HHS explains that personal-representative authority for a minor can depend on state law, custody, the scope of representation, minor-consent rules, and safety exceptions. Ask the provider or school which documentation it needs.

If a permission is revoked, record when the written revocation was sent and when the covered entity received it. HHS revocation guidance explains that a HIPAA revocation is not retroactive to actions already taken in reliance on a valid authorization.

Insurance and payment section

Mark the health plan and coverage period on every insurance item. A Summary of Benefits and Coverage can explain an individual or job-based plan, but governing documents and product-specific notices control. Medicaid and CHIP rules are state and product specific.

ItemPlan or productMember, claim, or authorization referenceService or coverage datesDate receivedAmount or decisionAction neededDeadline shown on controlling noticeContact and submission proofPlan document or SBC________________________________________________________________________________Authorization request or decision________________________________________________________________________________Claim and EOB________________________________________________________________________________Provider bill or receipt________________________________________________________________________________Denial or appeal________________________________________________________________________________

CMS explains that an Explanation of Benefits is not a bill. Keep both when reconciling charges. For a denial, preserve the notice, appeal request and supporting documents, representative form if used, dated call notes, delivery confirmation, and decision. The CMS denial tracking sheet offers a useful contact log. Use the deadline and route in the family's actual notice instead of a general appeal timeline.

School records section

School records need their own tab. Federal education guidance explains that a school-maintained health record may be an education record under FERPA, while a private ABA provider's copy may be governed differently. Keep each source labeled.

School documentSchool, author, or record holderMeeting, evaluation, or service dateFinal or draftDate received or requestedPermission needed before sharing?Secure locationFollow-upEvaluation______________________________________________________________________Current IEP or Section 504 plan______________________________________________________________________Progress report______________________________________________________________________Meeting notice or written decision______________________________________________________________________Record request______________________________________________________________________

Families can separately track an education-record access request and the response required under the applicable process, including IDEA access rights when they apply. For an IEP, index the current version, present levels, goals, progress measures, services, supports, accommodations, frequency, location, and duration. A meeting notice belongs with the meeting record. The binder does not change the IEP or authorize provider attendance or record sharing.

Health, medication, and contact section

The CDC care-plan guidance and FDA medication-list guidance support keeping a concise, current handoff page. Copy instructions from the current label or prescriber record. Do not use the binder to change a medication or create medical directions.

• Child's preferred name and date of birth: ______________________________
• Caregiver and emergency contacts: ______________________________
• ABA provider and records contact: ______________________________
• Primary care and other healthcare contacts: ______________________________
• Health plan and member-services contact: ______________________________
• School contact: ______________________________
• Allergies or important health information from the source record: ______________________________

Medicine, vitamin, or supplementStrengthReason listedWhen, how, and how much according to current instructionsPrescriber or sourceLast verified________________________________________________________________________________________________________________________

Update this page when a source changes. Keep older medication lists labeled as superseded rather than mixing old and current instructions on one page.

Questions, meetings, and follow-up

A family log does not become a clinical or school record. Label who supplied each fact and where the official decision appears.

DateMeeting or callParticipantsQuestionSource discussedDecision and decision ownerFollow-up owner and dateGoverning record location________________________________________________________________________________________________________________________________________________________________

Write “open” when no decision was made. A family recollection, provider explanation, school decision, and plan decision should not be merged into one unattributed note.

Fictional update cycle: Leo's August folder

Leo is fictional. His family receives treatment-plan version 4 on August 6, covering August through January. His parent adds a row, stores the unchanged PDF, and marks version 3 as superseded by version 4 rather than deleting it.

On August 9, an authorization decision arrives. Leo's parent records the plan, member, provider, reference, service span, received date, and location. One date is unclear, so the action field says, “Confirm service span with plan using number on decision.” The index makes no coverage conclusion.

The school sends a meeting notice on August 12. The family files it under school records. It does not authorize a school-clinic exchange, so sharing remains not checked. The parent adds a meeting question instead of sending the binder.

Later, Leo's prescriber changes a medicine. His parent copies the new label instructions into a fresh row and supersedes the old list. The family does not alter the treatment plan. The log assigns the BCBA a discussion about whether the health change affects services.

Each item now has a source, date, location, and next owner. The binder shows where each unresolved question belongs.

Keep the binder current without inventing a retention rule

Review the index when a treatment plan, authorization, medication, school program, provider, contact, permission, or deadline changes. A brief calendar check can also surface open actions and expiring permissions.

When a newer document arrives, preserve its source trail before labeling the previous version superseded:

1. Confirm that the newer document covers the same child, plan, provider, and purpose.
2. Preserve the source file without editing its content.
3. Add the new version as a separate row.
4. Mark the old row as superseded and link it to the replacement.
5. Confirm whether a legal hold, appeal, contract, payer rule, provider policy, or state retention rule affects disposal.

HIPAA does not create a universal medical-record retention period. Do not publish a single “delete after” schedule for families or providers. Ask the issuing organization what applies before destroying a record that may still matter.

Store copies where others cannot casually browse them. Use device and account protections, know which backups contain the records, and verify the recipient and route before sharing. These are cautious family practices, not proof that a household binder is HIPAA compliant. Share the relevant document rather than the complete binder unless the full set is needed and authorized.