To transfer ABA records, identify the records and date range needed, who has authority to request or receive them, the valid disclosure or access route, preferred format, secure destination, timing, and any fee. Track request, identity verification, processing, delivery, receipt, reconciliation, and missing items separately. Send only what the new provider needs for the stated purpose while protecting continuity and privacy.

Ask the new provider what it actually needs

Request a list tied to the next decision. Examples may include assessment reports, treatment plans, progress summaries, graphs with definitions, discharge or transition plans, health and safety information, AAC supports, authorizations, service dates, provider qualifications, and relevant correspondence. Ask for the date range, format, and deadline. The complete old chart may include material the new provider neither needs nor can efficiently review. A purpose-specific list reduces delay and helps the family spot unavailable or duplicative items.

Inventory available records before requesting

List the record type, authoring organization, responsible contact, dates covered, version, and whether the family already has a usable copy. Separate clinical, billing, payer, school, medical, and family-held records. The ABA provider may not control records created by a school, physician, payer, or another practice. Ask each source for its own records through the applicable process. Label summaries and exports accurately so a receiving clinician knows whether they are complete records, family copies, portal downloads, or reconstructed timelines.

Verify who may request and receive

The client, personal representative, parent, caregiver, financial guarantor, and new provider may have different rights and authority. Confirm identity and scope for the particular record. Ask the capable client how they want the transfer handled and who should receive updates. A caregiver's role in treatment does not automatically create broad record-access authority. If custody, adulthood, emancipation, or limited authority matters, route the question to the provider's privacy or legal process rather than asking front-desk staff to guess.

Distinguish access from provider disclosure

For HIPAA covered entities, HHS access guidance explains the individual's broad right to inspect or obtain a copy of PHI in a designated record set, subject to rule-specific limits, and discusses requests to direct a copy to another person or entity. Provider-to-provider treatment disclosure can use a different HIPAA pathway. A HIPAA authorization serves another defined purpose. Ask the privacy office which route applies, and check state, payer, contract, and professional requirements as well.

Write a complete request

Include the person and identifiers needed to match the record, exact record types, date range, whether summaries or raw data are requested, format, recipient name and secure destination, purpose if required, authority, signature, date, and delivery deadline. Ask for an itemized response when any requested record is withheld, unavailable, or maintained elsewhere. Avoid putting sensitive details in an email subject line. Keep a copy of the request and proof of delivery. Confirm the address or portal route directly with the recipient.

Choose a usable and secure format

Ask whether the new provider can use searchable PDF, native data export, structured file, image, paper, secure portal, or another format. Graphs need labels, operational definitions, units, phase dates, and relevant intervention changes to be interpretable. A huge image-only scan can satisfy delivery while slowing clinical use. Protect passwords and access links through separate channels where appropriate. Confirm encryption, expiration, download limits, and the receiving person's ability to open the file before the old provider closes access.

Plan around timing, fees, and continuity

Ask when the request is considered received, which verification step starts processing, the expected completion date, allowed extension or delay, fee basis, and urgent continuity process. HHS access guidance addresses HIPAA timing and fee limits for covered requests; other routes may differ. Avoid ending necessary access to the old portal before the family saves permitted records. If service is changing quickly, ask both providers which critical safety, health, AAC, and current-plan information can transfer first while the fuller record follows.

Keep AAC and the person's priorities visible

The ASHA AAC portal says AAC users should always have access to their tools or devices. Ensure the transfer includes current access method, vocabulary, backup, positioning, partner response, and reliable messages when relevant and authorized. Include the person's goals, preferences, dissent, and definition of useful support in an accessible transition summary. Devices, passwords, and vocabulary files may be owned by different parties, so confirm what can be copied and who supports setup.

Reconcile receipt instead of assuming delivery equals transfer

The sender should record what was sent, when, how, to whom, and whether the system reported delivery. The receiver should inventory what opened and matched the request. Compare requested records with received records row by row. Mark complete, partial, corrupted, duplicate, wrong person, wrong date range, unavailable, or pending. A successful upload does not prove that the right clinician can access or interpret the record. Close each gap with an owner, next action, and due date.

Protect correction history and provenance

Ask that late entries, amendments, corrected reports, and superseded plans retain dates, authorship, and status. The new provider should know which document is current and why earlier material changed. If the family disputes an entry, use the old provider's correction or amendment route and tell the new provider that review is pending when authorized. Avoid editing a source record before transfer. Add a separate family statement or timeline with clear authorship instead. HHS medical-record guidance describes amendment requests for covered records.

A fictional transfer register

Sofia's new provider requests ten record categories covering the prior 18 months. The old provider sends eight. Seven open correctly, one PDF is corrupted, and two categories are missing. Receipt completeness is 7 of 10 usable categories, while delivery is 8 of 10 sent categories. The family keeps the corrupted file and missing categories open, receives a corrected export, and learns that one medical report must come from the physician. The new clinician reviews critical safety and AAC information first rather than waiting for every historical billing document.

Close the transfer with both providers

Ask the old provider to confirm final delivery, unresolved items, portal end date, final bill, equipment or record-custody questions, and transition contact. Ask the new provider to confirm receipt, assigned reviewer, clinical questions, missing critical information, and first decision date. For covered behavior analysts, the BACB Ethics Code addresses confidentiality, documentation, interruption, discontinuation, and transition. Keep the family's transfer register until every item has a final disposition.

Build the transfer around the receiving provider's purpose and receipt

Ask the receiving provider which record categories, date ranges, formats, deadlines, and secure route support the next decision; verify who may direct or receive each record; request access or transfer through the applicable process; inventory assessments, plans, definitions, graphs, progress, incidents, communication, health, authorizations, service dates, and discharge information; preserve request and delivery evidence; and require the recipient to confirm that files open, match the person, and are usable. Use the person and family's actual records, dates, communication, health context, access needs, schedule, payer information, household constraints, and ordinary supports. Preserve the person or authorized decision-maker's direct route to correct the record, limit help, pause, or change course.

Define every handoff and receipt. A provider statement, registry search, contract revision, file upload, projected date, home walk-through, message, correction, record delivery, or referral remains open until the responsible recipient confirms a usable result. Record inaccessible routes, missing evidence, conflicting versions, delayed responses, and failed supports in the records transfer manifest as process or system gaps rather than automatically treating them as family noncooperation.

This walkthrough tests the records transfer under the recorded facts. It cannot establish clinical appropriateness, professional quality, legal authority, contract interpretation, privacy compliance, coverage, network status, claim payment, a confirmed start, treatment effectiveness, safety, or successful continuity. Pair process evidence with the person's report of clarity, access, privacy, burden, unwanted help, and daily-life effects.

Use a release gate and keep the fallback active

Before the next action, confirm that the transfer has a defined purpose and recipient, valid authority or another applicable disclosure route, a purpose-limited record inventory, secure destination, request and delivery receipts, and owners for missing, unreadable, disputed, or corrected material. Mark each applicable condition confirmed, held, or inapplicable with its source and reason. A held condition stays visible with one owner, due date, interim protection, and escalation or alternate route.

Prepare for a broad release exceeds the purpose, the recipient cannot open files, graphs lose definitions, a record is omitted, the destination is wrong, an authorization expires, or a later correction changes transferred information. The fallback may preserve current care, communication, medication, school, work, housing, family routines, an application or appeal date, a corrected record, a second provider option, or qualified legal, privacy, payer, access, or clinical help. Temporary arrangements need an expiration and return condition. Provider policies, payer dates, record processes, contract terms, and legal requirements may differ, so use the current controlling source for each decision.

After the event for the records transfer, compare expected and actual dates, people, records, access, communication, cost, care, privacy, and household work. Return each discrepancy to the records transfer manifest. Close the next step as continue, correct, clarify, document, submit, escalate, refer, pause, transfer, or end. One named owner remains accountable for every unresolved item.

Review one complete real-world cycle

Predeclare the first verification cycle: the actual transfer through delivery, opening, identity matching, clinical usability, missing-item follow-up, and any later correction. Record what the family expected, what actually happened, who participated, which ordinary supports were present, what required extra work, and which decision or record changed. Keep counts attached to defined opportunities and preserve the person's direct report in an accessible form.

Review the cycle with the records transfer manifest. A completed task can still expose an unusable channel, unexpected cost, missing owner, inaccessible setting, inaccurate record, or unsustainable family burden. Reopen only the affected condition and preserve the history rather than rebuilding the entire plan. Decide whether to continue, correct, narrow, seek qualified advice, use the fallback, compare another provider, or end the arrangement. The cycle tests implementation under those facts; it does not prove future reliability, treatment benefit, compliance, or causation.

Related resources

Sources

Finni resources

Ready for the next step?

Find ABA care near you