Client onboarding

Onboarding follows a defined disposition

Terminology varies. Here, inquiry gathers interest; intake gathers and routes information; an authorized role records a disposition; and onboarding prepares a conditionally accepted referral for a named event. This editorial model is not a legal, clinical, or payer standard. Acceptance guarantees none of assessment, treatment, staffing, coverage, or payment. A qualified clinician makes case-specific findings and recommendations.

The CASP Organizational Guidelines public overview covers business operations, clinical operations, and risk management. CASP sells the details; this article uses only the public framing.

Rules differ by event and source. Payers decide authorization; qualified clinicians decide clinical readiness; privacy, legal, and operations roles decide within their authority. For each gate, record its source, owner, effective period, exception path, and event. The record should surface, not make or collapse, these decisions.

Use separate gates for separate promises

This is an editorial control design, not a universal checklist.

These gates govern planned services. They do not delay emergency safety action, mandated reporting, or a use or disclosure otherwise permitted or required by law.

Benefits, network status, prior authorization, clinical appropriateness, and claim payment answer different questions. Rules vary by payer, product, contract, service, and date. Record source, reference, dates, limits, and verification date. Report only what was confirmed; verification or authorization does not promise claim payment. Give an estimate with assumptions and a recheck trigger.

A build-ready onboarding record

Create a role-limited record with owners, decision sources, due dates, and escalations. Collect purpose-needed data; restrict sensitive authority or custody documents.

• People and access: identity, contacts, authority source and scope when required, verified restrictions, language, interpreter, format, AAC, accommodations, and assent or dissent signals. Emergency-contact status confers no decision or disclosure authority.
• Clinical: named event, required order or referral, needed records, health and safety supports, qualified clinician, and that professional's decision. Operations may track, not infer, clearance.
• Funding: payer, product, member, benefits, network status, authorization, estimate, financial terms, and recheck trigger.
• Service and control: agreements, consent, applicable assent, notice delivery, purpose-specific disclosure authority, complaint paths, staffing, supervision, setting, schedule, source, effective date, owner, exception, and audit history.

The BACB Ethics Code applies to BCBA and BCaBA certificants and people who completed an application for either certification. It addresses competence and resources, communication, involvement, required consent and applicable assent, agreements, confidentiality, and documentation. The BACB has no separate jurisdiction over organizations or corporations. Practices must assign role-specific duties; the Code does not authorize nonclinical staff to make clinical decisions.

Verify who may act and for what purpose

A family or emergency-contact label confers no decision authority, access right, or power to sign a HIPAA authorization. HHS personal-representative guidance says applicable law determines the representative and scope. Limited authority covers only relevant protected health information; HHS also describes minor-specific rules and an abuse, neglect, or endangerment exception. Verify source, scope, restrictions, expiry, and review route.

HHS guidance on people involved in care permits directly relevant disclosures in specified circumstances when the individual agrees or does not object or, if absent or incapacitated, professional judgment supports the individual's interests. Personal-representative status is not always required, but this route transfers no consent or decision authority.

Service consent, applicable assent, agreements, notice acknowledgment, HIPAA authorization, and confidential-communication requests are distinct. HHS treatment, payment, and operations guidance permits specified uses and disclosures without authorization, subject to limits and role-based access. Its consent-versus-authorization FAQ explains when authorization is required and says treatment or coverage generally may not be conditioned on one. Other law may be stricter. Never make a blanket release a universal gate.

For covered direct-treatment providers, HHS notice guidance requires notice by first service and, outside emergencies, a good-faith acknowledgment effort. If none, document the effort and reason. HHS says refusal to sign does not stop permitted uses or disclosures. Acknowledgment is neither consent nor authorization and is not a universal hold. HHS's February 2026 model-notice page says covered plans and providers must include specified Part 2 substance-use-disorder-record information as of February 16, 2026.

Communication access starts before the first visit

Forms, calls, portals, orientation, and consent should work for the person and family. For private practices that are public accommodations, DOJ Title III guidance addresses equal opportunity, effective communication, and reasonable modifications, subject to limits. Access needs should drive implementation, not an adverse fit decision. Other duties may apply.

ASHA's AAC practice portal describes aided and unaided forms, says users should always have access to their tools or devices, and emphasizes partner support. During onboarding, preserve the system and record access method, backup, and wait time for choices, assent, dissent, discomfort, breaks, and emergencies. Speech, eye contact, or one motor response must not become the price of participation.

A fictional onboarding case

A fictional practice reviews twelve conditionally accepted referrals whose two-business-day authority-and-contact deadline fell during the reporting week. Nine met it. On-time completion is 9 of 12, or 75%. The other three remain in the denominator with an owner, next action, and age.

By week end, six have an assessment-release decision: four approved and two held. One needs payer authorization required for that member's assessment; one needs authority verified before consent. Report 6/12 reached review, 4/6 completed decisions were approvals, and 4/12 were currently approved. Do not call 4/6 cohort completion. Keep the six not reviewed visible with age and next action.

One approved family requests large-print forms and text reminders. Report both actions as fulfilled and confirm receipt; do not present one family as a representative access percentage. Preserve the client's AAC and record family-reported clarity of the first-visit plan.

Define each denominator: cohort-entry rule, full exposure window, gate eligibility, exclusions with reasons, and every record's status. Pair averages with medians, ranges, and aged outliers. Useful measures include first response, days in gate, preferred-channel contact, access actions, corrections, preventable holds, and family-rated clarity.