ABA practice background check and exclusion screening requirements in Massachusetts cover how employers request, assess, and handle information. Practices need to understand limits on criminal-record questions, the correct CORI request process, applicant access and correction rights, and any role-specific program requirements. Healthcare exclusion screening addresses a different risk and should have its own documented process.

The application is part of the screening process

When an ABA practice starts hiring more often, reusing a familiar application feels practical. The form has worked before, the team knows where to find it, and changing it can seem less urgent than filling an open position. But criminal-record questions deserve a fresh look before that form reaches another applicant.

Massachusetts gives applicants specific protections around criminal-history information. Those protections affect what you ask, when you ask it, and how you respond to a record. A thoughtful process begins before the screening company receives an order. It also helps applicants understand that your practice will treat their information carefully rather than letting an unfamiliar database result speak for them.

Know what belongs off the initial written application

Massachusetts generally bars criminal-record questions on an initial written employment application, with defined exceptions. The relevant provisions appear in chapter 151B, section 4. Exceptions depend on actual legal requirements and the covered position or employer circumstances; working in healthcare does not automatically make every question permissible.

This is a good reason to have a qualified reviewer examine the entire recruiting form, including supplemental questionnaires and prompts copied from a national template. An exception should be tied to its specific authority, not assumed from the practice’s name or the population it serves. Later stages need review too, because some categories of information remain protected even after the initial application.

Some information is protected beyond the first form

The statute restricts inquiries about arrests and other dispositions that did not result in conviction, specified first misdemeanors, and certain older misdemeanor convictions. Its older-misdemeanor provision generally uses three years from conviction or the end of incarceration, whichever is later, with an exception involving another conviction during that period. Sealed and expunged records also receive protection.

These distinctions are easy to lose in a question such as “Have you ever been arrested or convicted?” A reviewer should translate the current law into permitted questions and interviewer guidance rather than expecting hiring managers to interpret a broad answer afterward. Avoid relying on older materials that describe a different time period. Applicants should not have to disclose protected information simply because an outdated form asks for it.

Do not ask the applicant to bring you their own CORI

CORI means Criminal Offender Record Information. The Massachusetts Attorney General’s employment guide explains that an employer cannot require a person to obtain and provide their own CORI or arrest report. The employer should use the authorized request process and obtain the required permission instead.

This is more than a paperwork preference. A personal record request and an employer’s authorized access are designed for different purposes. Asking a candidate to solve an account-access problem by supplying a personal report can expose information the employer should not be collecting. If your coordinator cannot complete a request, the appropriate response is to resolve the employer’s process, not shift the burden to the applicant.

Use the acknowledgment that matches the request

The state’s CORI forms collection includes different forms and model notices for different uses. A practice should select the applicable employment or consumer-reporting-agency acknowledgment, rather than borrowing a housing form or assuming every document labeled CORI serves the same purpose. A model is a useful starting point, but the completed workflow still needs to match your circumstances.

The CORI regulations describe acknowledgment and identity-verification responsibilities. These steps help connect a request to the correct person and document permission through the appropriate route. The employee who performs them needs training and an approved method; collecting extra identity documents “just in case” is not a substitute for following the actual requirements.

A screening company does not replace your employer responsibilities

A commercial screening company may make ordering and tracking reports easier, but employment consumer reports bring Fair Credit Reporting Act duties. The FTC explains the employer’s disclosure and permission requirements, including a clear written disclosure in a stand-alone document and written authorization before obtaining the report.

Massachusetts CORI acknowledgment requirements and federal consumer-report authorization are not interchangeable. The CORI rules also address employers using consumer reporting agencies, including the relevant registration and designation process. Your reviewer should trace which party obtains which record and under what authority. That review can reveal gaps hidden by a vendor dashboard that presents several different searches as one package.

Five investigations a year can trigger a written CORI policy

Under chapter 6, section 171A, a person conducting five or more criminal-background investigations annually must maintain a written CORI policy with specified protections. The threshold concerns investigations, not five employees or five offices. A small practice that hires regularly can therefore need the policy even while its management team remains small.

The policy addresses notice of a potential adverse decision, a copy of the record and policy, and information about correcting a criminal record. The coordinator should be able to find the policy and understand when its steps apply. A policy stored in an owner’s folder will not help much if the coordinator does not know when to involve the reviewer or how to send the required information securely.

Let the applicant see the record before questioning them about it

Section 171A requires an employer with an applicant’s criminal-history information to provide a copy before questioning the person about it. The provision addresses information obtained from the department or another source. It also requires a copy when an adverse decision is based on the history, while avoiding the need for a second copy if one was already provided before questioning.

That changes the tone of a difficult conversation. An applicant should not be asked to explain an unseen entry from memory while an interviewer reads from a report. Giving the person the information through the proper process creates a fairer opportunity to identify an error, supply missing context, or explain that the record concerns someone else. The conversation should be handled by someone trained for it, not improvised during a routine interview.

An adverse decision needs more than a rejection email

For a commercial employment report, the FTC’s consumer-report guidance describes providing the report and a summary of rights before taking adverse action, followed by the appropriate final notice if the decision proceeds. Massachusetts CORI protections add requirements concerning notice, the record, applicable policy, correction information, and the opportunity to respond.

The practical challenge is to make those steps work together without collapsing them into a single automated rejection. Someone should identify the information being relied on, the source of that information, and the process that applies. A candidate’s correction may affect the decision. A vendor recommendation should not move the person to a final status before the employer has completed its own responsibilities.

A record requires context, not a reflexive hiring rule

The EEOC’s criminal-history guidance explains why an arrest alone does not establish criminal conduct and why screening policies must account for job-relatedness and business necessity. Massachusetts protections likewise require care with the information an employer may seek or use. A blanket rule against anyone with any record is not a sound substitute for reviewing those requirements.

A useful assessment considers the actual position and the law governing it. Direct access to clients, access to funds, driving duties, and handling sensitive information raise different questions. Where a specific program imposes a disqualification or required review, that authority needs to be reconciled with the employment process by a qualified adviser. That calls for a reasoned employment decision. A database label cannot predict how a person will perform the job.

Check whether the role has additional program requirements

CORI is not a universal clearance for every ABA job or service arrangement. A practice may have obligations attached to a professional license, payer contract, school relationship, facility approval, or another covered program. The owner needs to identify which requirements actually apply to the proposed work and which entity is responsible for each check.

That question deserves renewed attention when the practice expands. A clinician moving into a different setting or an organization adding a new program may bring requirements that the original hiring workflow did not address. A previous report can inform a discussion, but it does not establish that the new program accepts it or that all relevant checks are complete. Confirm the answer with the responsible authority before making a start-date promise.

Healthcare exclusions need a separate review

The HHS OIG exclusion bulletin describes restrictions on federal healthcare payment for relevant items or services furnished by excluded individuals or entities. These issues can involve more than clinicians who submit claims: certain administrative and contracted work can matter too. Criminal-history screening and license verification do not establish that an OIG exclusion search occurred.

OIG recommends monthly screening. A practice should distinguish that federal recommendation from any separately binding state, payer, or program frequency requirement and identify the additional lists it must check. Outsourcing billing or another service does not make the underlying payment risk disappear. If a vendor performs searches, the agreement and available evidence should make the covered people, sources, frequency, and follow-up responsibilities understandable.

Resolve a possible exclusion match carefully

The OIG LEIE instructions explain how to verify an apparent match using a Social Security number for an individual or an employer identification number for an entity. A shared name is a reason to investigate through the authorized process, not a sufficient basis for telling the entire team that someone is excluded.

The record of the inquiry should show what was searched and how the identity question was resolved, with sensitive identifiers kept within approved access controls. An unresolved or confirmed match calls for prompt review by the appropriate compliance adviser. Staffing communication can convey necessary restrictions without broadcasting private details or turning an uncertain search result into a public accusation.

What an outdated form can teach a practice

Imagine Cedar Lantern ABA, a fictional Massachusetts practice preparing for several hires. Its old application asks about every arrest and tells applicants to bring a copy of their personal CORI. The owner catches those questions while reviewing the process with counsel, before sending the form to the next group of candidates.

The repair is not simply deleting a sentence. The practice also needs a proper employer request route, an applicable acknowledgment, clear interviewer guidance, and a way to handle records and correction rights. This example is hypothetical; it does not describe a real candidate’s record or an enforcement result. It shows why reviewing the applicant experience can uncover problems that a completed-search count would miss.

Keep the process private, organized, and human

A hiring manager often needs to know whether a person is approved for a particular assignment, not the contents of the screening file. CORI materials, consumer reports, identity records, and correspondence about corrections should follow the applicable access and retention requirements and the practice’s approved policy. A general team chat is not the place to work through a sensitive record question.

Applicants also deserve realistic updates. Explain which step is pending, who can answer a question, and whether any action is needed from them. Avoid promising an agency response date or implying that a delay proves a problem. Good organization creates room for a more considerate experience: your team can be responsive while still giving important decisions the attention they need.

Related resources

Sources