ABA practice incident reporting requirements in Arkansas do not live in one universal form. A covered child reporter must immediately notify the Child Abuse Hotline when the statutory threshold is met, while an adult maltreatment concern has its own impaired-or-endangered-adult analysis and hotline. A licensed facility, waiver relationship, PASSE contract, professional credential, workplace injury, or privacy event may add another report, but none automatically replaces a direct protection report.

Help the person before sorting the forms

A hard afternoon may start with a child becoming injured in a Little Rock clinic, an alarming disclosure during a Fayetteville home visit, or an adult client who seems unsafe with a caregiver. The first useful response is human: call 911 for immediate danger, arrange appropriate medical care, follow the person's emergency plan, and stop an ongoing hazard when staff can do so safely. Reporting deadlines matter, but they do not ask a clinician to delay protection.

Once urgent needs are addressed, record what is actually known. Time, location, exact words, visible conditions, care provided, people present, and contacts attempted form the beginning of a reliable chronology. Attribute secondhand information and leave disputed facts disputed. “The technician saw a red mark” is a fact; “the caregiver caused abuse” is a conclusion that the practice usually is not authorized to make.

Arkansas child reporting turns on the worker's real role

Arkansas's child maltreatment page says anyone may report and identifies certain professionals as mandated reporters. The statutory list includes medical personnel, mental-health professionals or paraprofessionals, school counselors and officials, social workers, child-care workers, and other named roles. A BCBA, BCaBA, RBT, clinical trainee, school contractor, and office employee should not be treated as one legal category merely because they share an employer.

Map the worker's license or credential, actual duties, employer, setting, client population, contract, and the capacity in which the information arrived. The older posted text of Arkansas Code section 12-18-402 is useful for the core immediate-duty framework, but this draft remains noindex because current codified language and 2025-2026 changes require Arkansas counsel and agency review before reliance. An internal policy may let every employee raise a concern; it cannot manufacture or narrow the state's reporter categories.

A covered child reporter acts immediately

When the statutory knowledge, reasonable-cause, or observed-condition threshold applies, the covered person immediately notifies the Child Abuse Hotline. The current DHS page gives the statewide telephone route and a secure online option for identified mandated reporters. It also asks for concrete information about the child, alleged offender, incident, and location when available. Missing details should not become a reason to wait for certainty.

Choose the live route for the actual circumstances. A telephone call is often the clearer choice when danger is unfolding, facts do not fit the portal, or the reporter needs intake guidance. Save the time, route, confirmation, facts supplied, and any instruction received. If an online submission does not produce a receipt or the page fails, contact the hotline rather than assuming a spinning screen completed the duty.

Supervision can support a report without controlling it

A clinical director can help cover sessions, find a quiet place, locate contact information, and preserve records. Those are valuable supports. The report itself still belongs to the person whose statutory duty was triggered, unless current law expressly permits a different method. Requiring a manager to approve the wording first can turn an orderly policy into a dangerous delay.

Train staff to make the public contact and then notify the practice's response lead, not to wait for an internal verdict. If several professionals learned the facts together, document who spoke with the hotline and how each covered person satisfied their own obligation. A hotline acceptance, referral, or screening decision begins an external process; it does not prove maltreatment or authorize the practice to confront an alleged actor.

Adult maltreatment needs a different population analysis

Arkansas Adult Protective Services serves adults age 18 or older who are impaired by mental or physical disease and cannot protect themselves, or who are endangered and do not understand the consequences of remaining in a dangerous condition. An autism diagnosis, guardianship, Medicaid enrollment, or receipt of ABA services may be relevant, but none alone answers that functional and statutory question.

The current Arkansas materials describe immediate reporting when a covered adult reporter observes or has reasonable cause to suspect maltreatment. They also identify broad program-connected roles, including certain employees or volunteers of DHS-funded organizations who enter the home of or have contact with an elderly person. Confirm the current list and the worker's facts instead of copying the child list. The DHS protection contacts publish a distinct Adult Protective Services Hotline alongside the child hotline.

The alleged conduct and setting help choose the adult route

Adult abuse, exploitation, caregiver neglect, and self-neglect have different factual elements. Write down the adult's functional circumstances, the source of the concern, the alleged actor's relationship, the setting, and the concrete act or omission. Avoid describing every poor outcome as maltreatment, and avoid dismissing a concern because the person can make some decisions independently.

Licensed facilities, hospitals, community homes, and ordinary outpatient or home-based ABA services can involve different oversight bodies. The Arkansas report-a-concern directory is a helpful current starting point, but an owner should ask the intake worker whether another agency must be contacted directly and preserve that answer. A transfer between agencies is jurisdictional routing, not evidence that the original concern was true or false.

Facility incident reporting is conditional, not statewide ABA paperwork

Arkansas DHS maintains a Provider Submitted Incident and Accident Reporting page and an Enterprise Licensing System route for providers within the relevant licensing programs. The companion DPSQA provider page identifies facilities such as nursing homes, residential care, assisted living, intermediate-care, adult-day, and other specifically regulated settings. That does not make ELS the incident portal for every Arkansas ABA clinic.

Before submitting, identify the licensed entity, service location, program, participant, event definition, discovery rule, current form, and deadline. If a practice does not operate the covered facility or service, do not use an ELS record as a substitute for the child or adult hotline. If it does, keep the facility report beside the protection confirmation, but clearly distinct from it, and follow the current license-specific manual.

Waiver and PASSE duties follow the actual relationship

An ABA organization may also participate in an Arkansas Medicaid waiver, a Provider-Led Arkansas Shared Savings Entity arrangement, or another covered program. Those contracts and manuals can add incident, quality, case-manager, member, or plan notice. The state maintains a current Medicaid provider-manual library because the applicable instruction depends on provider type and service.

Build the program lane from evidence: member eligibility, authorized service, billing provider, servicing provider, plan or PASSE, setting, contract version, incident definition, and discovery time. Do not infer waiver coverage from a diagnosis or Medicaid card. A program notice serves program oversight; it does not discharge an immediate Child Abuse Hotline or Adult Protective Services duty.

Families need facts without a premature accusation

A family may hear “incident report” and assume the practice has already decided who was at fault. A calm update can explain what staff observed, what care occurred, which contacts were made, what remains unknown, and when another update is expected. Say plainly that a threshold report asks an authorized agency to assess a concern; it is not a finding against a parent, employee, or other person.

Verify who may receive information. A guardian, parent, adult client, case manager, plan, and alleged actor can have different rights and restrictions. Protect details about another client or employee, use the person's preferred language and accessible format, and document successful and unsuccessful contact attempts. Compassion is compatible with precision.

Professional review should not borrow a hotline conclusion

The Arkansas Psychology Board and the BACB Ethics Code may be relevant when an incident raises supervision, competence, documentation, scope, or credential concerns. That review should identify the actual license or certification and the conduct at issue. A hotline report does not itself establish a professional violation, and a credential complaint is not a substitute for urgent protection reporting.

Separate the personnel response from the clinical response as well. Temporary safety measures may be appropriate before all facts are known, but permanent findings need a fair, authorized process. Preserve the original schedule, supervision record, training record, treatment plan, communication, and policy version rather than reshaping them around a later theory.

Payer, workplace, and privacy questions have their own owners

A payer or PASSE agreement may require adverse-event or quality notice. Review the live contract and provider manual for the actual product and date; a generic incident policy cannot supply the answer. If an employee is seriously injured, workers' compensation and the federal OSHA severe-injury rule may add separate clocks. Those records should not be merged into a child or adult allegation file merely for convenience.

An incident can also expose protected information through a misdirected email, screenshot, portal attachment, or shared video. Contain the disclosure and assess it under the HHS breach framework with qualified privacy review. The existence of an incident is not automatically a reportable breach, and a breach analysis does not decide maltreatment.

Write the record so a later reader can follow the day

A useful chronology separates observation, attribution, action, and later information. Include when the event occurred or was discovered, when each person learned it, the care given, public and program contacts, confirmation numbers, instructions, family communications, and evidence preserved. Use direct quotations where they matter and mark unknowns instead of filling them with assumptions.

Add later medical records, witness statements, agency guidance, or corrections as dated supplements. Do not silently replace the first account. Restrict access, preserve relevant messages and available video under a consistent hold, and record why a submission was amended. The goal is not a polished story; it is an honest record that still makes sense after memories fade.

Picture a mixed afternoon at a fictional Arkansas practice

Ozark Lantern ABA serves one child through a commercial plan and supports another person through a separate covered facility relationship. The child makes a concerning disclosure during a home session. Later, the second person is injured during a licensed program activity. A new supervisor proposes placing both events only in the provider incident portal because it feels centralized.

The team instead confirms the first worker's reporter status and makes the immediate child contact through the live DHS route. It checks the second person's adult-protection threshold and completes the facility or program record only after confirming coverage. Family, PASSE or payer, professional, employee-safety, privacy, and evidence work proceed in their own lanes. Neither event is described as substantiated, and no receipt is treated as a promised outcome.

A rehearsal reveals whether the policy works

Choose a recent anonymized scenario and ask staff to find the emergency route, child hotline, adult hotline, conditional provider portal, payer contact, privacy lead, and after-hours owner without relying on one veteran employee. Test what happens when the internet fails, the response lead is the alleged actor, or the intake worker redirects the report. Those are ordinary operating questions, not edge cases.

The HHS OIG General Compliance Program Guidance is voluntary and nonbinding, but its discussions of reporting, investigation, corrective action, and oversight can help structure an after-action review. It creates no Arkansas reporter category or deadline. Any revised policy still needs current agency, program, payer, legal, clinical, privacy, workforce, client, family, and owner review.

Related resources

Sources