ABA practice incident reporting requirements in Delaware begin with the state's broad child-reporting duty and a fact-specific choice between immediate oral and other permitted intake routes. Adult Protective Services uses a separate rule for an impaired or incapacitated adult who may need protective services. DDDS, long-term-care, payer, professional, workplace, and privacy notices apply only when their own relationships and definitions fit. An internal incident form never replaces a required public report.

Make the first few minutes about safety

A serious event may unfold during a Wilmington clinic session, in a Dover school, or on the drive to a Sussex County home visit. Begin with the person rather than the paperwork. Call 911 for immediate danger, obtain suitable medical help, follow the client's safety plan, and stop a continuing environmental hazard when staff can do that safely. A good reporting process should make those choices easier, not compete with them.

After the scene is stable, capture a factual chronology. Write down what was directly observed, the words a person used, who was present, when the practice learned of the concern, what care occurred, and which contacts were attempted. Label information that came from someone else. Do not turn an early note into a conclusion about abuse, neglect, exploitation, professional fault, or program coverage.

Delaware's child duty is intentionally broad

Delaware Code section 903, in the state's official child-protection chapter, requires a person, agency, organization, or entity with knowledge or a good-faith suspicion of child abuse or neglect to make a report. The rule is not limited to people with a particular healthcare credential. That breadth means an ABA owner should not train staff to wait automatically for the BCBA, clinical director, or human-resources manager.

The threshold is still a legal one, not a synonym for any difficult session or accidental injury. Teams benefit from examples, accessible supervision, and prompt qualified review, but they do not need to investigate until they can prove a case before reporting. Record the observations that support the concern and let the authorized agency decide how the report will be screened and assessed.

Some child reports require an immediate oral route

Section 904 identifies circumstances that call for an immediate oral report, including specified sexual-abuse or trafficking concerns involving perpetrator access, a child's death, a current injury, a need for immediate medical or mental-health evaluation, the absence of an appropriate caregiver, or another immediate hazard. Other reports may be made orally or through the online reporting system. A clinic should teach that distinction without suggesting the online form is always interchangeable with a call.

Use the current state intake instructions on the day of the event. If a person needs urgent protection, act promptly even while a detail remains unknown. Save the date, time, method, core facts supplied, intake direction, and confirmation. A failed web submission is not a completed report; document it and move to an authorized alternative.

Direct knowledge changes how delegation works

Delaware's statute says a person with direct knowledge of child abuse or neglect may not rely on a less-direct person to report. When several people have joint knowledge, they may agree that one will make the report, but the report identifies all of them. If the selected person does not make it, the others must report immediately. That is a much more precise rule than “tell your supervisor and you are done.”

Build the clinic's procedure around proof of completion. Identify the person with direct or joint knowledge, who accepted the reporting role, the expected completion time, and the fallback. Let staff reach the external route if leadership is unavailable or involved. An internal manager can arrange coverage and evidence preservation without screening a lawful report out of existence.

Adult protection asks a different set of questions

Delaware's adult-protection chapter directs a person who has reasonable cause to believe an impaired or incapacitated adult needs protective services to report in the manner prescribed by DHSS. This is a functional and fact-specific inquiry. An autism diagnosis, communication difference, or guardianship order can be relevant without independently proving that the statutory adult definition or protective-services need is met.

The current Delaware APS page advises calling within 24 hours and calling 911 when danger is immediate. Treat the 24-hour statement as current agency direction rather than rewriting it as a deadline found in section 3910, which does not itself state that clock. A sound policy identifies both the governing code and the live agency route so later reviewers can see where each instruction came from.

Let adult communication remain adult communication

When an adult describes financial pressure, rough treatment, abandonment, or unmet care, speak to the person directly in a usable communication format when possible. Preserve the words and context without interrogating the client or coaching an answer. Immediate safety and the reporting decision can proceed while the clinic remains honest about what it does not know.

Confirm who is authorized to receive updates. A parent, guardian, representative, case manager, or payer does not automatically have identical access to the adult's protected information. Explain what the practice can share, what contact was made, and what happens next without promising an agency outcome. Respect is compatible with decisive action.

DDDS reporting follows the actual program relationship

The Delaware Division of Developmental Disabilities Services oversees services that include residential habilitation, supported living, day habilitation, and supported employment. Its current materials direct covered providers toward a separate incident-management system and contacts for concerns about abuse, neglect, mistreatment, or other reportable events. That lane is meaningful for a DDDS provider and participant, but it is not a universal Delaware ABA incident portal.

Before treating an event as a DDDS incident, verify the person, program eligibility, provider relationship, service, setting, event category, discovery rule, route, deadline, and current form. Use the live DDDS contact page when the written instructions require clarification. A DDDS submission does not erase the child or adult protection analysis, and a public report does not automatically complete a contractual DDDS obligation.

Facility oversight is conditional too

Delaware's Division of Health Care Quality abuse-reporting page receives complaints involving covered long-term-care settings and publishes specific routes for facility matters. Some ABA owners work in or contract with a licensed setting; many do not. The client's location, facility license, service agreement, and alleged conduct determine whether that route belongs in the response.

Avoid sending every event to every agency out of caution. Over-reporting protected information to a body without jurisdiction can create confusion and privacy risk, while under-reporting can leave a duty unmet. Keep a short jurisdiction note: why the practice concluded a route applied, did not apply, or required advice, and which current authority supported that conclusion.

Payer notices are contractual, not folklore

Delaware Medicaid, a managed-care organization, a school, or a commercial plan may require notice of a serious incident, service interruption, quality concern, or suspected fraud. Find the current manual and provider agreement for the precise product. Record the event definition, deadline, permitted information, recipient, owner, and acknowledgment. A requirement from one plan should not be copied into every payer's workflow.

Give the payer facts within the permitted scope and resist adopting an unconfirmed conclusion. A payer may request records or begin a quality review, but its receipt is not a child-protection finding, an APS decision, or a professional disciplinary result. Contract review also cannot delay an immediate public report.

Professional identity deserves careful treatment

A Delaware practitioner may hold BACB certification, another license, an educational credential, or a payer-specific qualification. The BACB Ethics Code can inform risk response, confidentiality, documentation, supervision, and competence for people within its scope. It does not decide whether Delaware psychology or another practice law applies to a particular service, nor does it replace child or adult protection.

Owners should map the actual credential, service, setting, supervision arrangement, and payer terms before deciding which professional body or standard is relevant. Keep the workforce investigation separate from public reporting and clinical review. Interim safety measures may be warranted, but an allegation should not be described as substantiated merely because a report was made.

Privacy and workplace duties may run beside the main event

A staff injury can create workers' compensation, internal safety, and federal reporting work. The OSHA severe-injury guidance describes federal reporting clocks for a work-related fatality, inpatient hospitalization, amputation, or loss of an eye. Verify which workplace framework controls. The personnel file and the client's record should be connected by an incident identifier, not collapsed into one unrestricted narrative.

If protected health information was sent to the wrong person, exposed in a screenshot, or left on a device, contain the disclosure and apply the HHS breach-notification framework with the privacy lead. An impermissible disclosure is not automatically a reportable breach. The privacy assessment and the abuse or neglect assessment answer different questions.

Write records that survive hindsight

Use a timeline that shows occurrence, discovery, safety care, the child or adult route, conditional program or facility work, payer communication, family contact, privacy containment, evidence preservation, and follow-up. Each entry should name the actor, what was known then, the route, and the response. Unknown and disputed facts should remain visible rather than being cleaned up later.

Add corrections as dated supplements. Preserve the original messages, treatment data, schedules, supervision notes, policies, intake receipts, training records, and relevant media under a consistent evidence hold. Control access and record disclosures. A later reader should be able to distinguish the event from the practice's evolving response to it.

Picture one busy afternoon at a fictional clinic

First State Harbor ABA learns that a child described an immediate hazard during a home session. Hours later, a DDDS participant in a covered service experiences a different event, and an employee forwards a photograph to a personal email account. The administrator initially wants one internal incident form to cover everything.

Instead, the practice uses the immediate oral child route, verifies the separate DDDS event scope, contains the disclosure, and begins a privacy assessment. It checks payer, professional, workplace, family, and evidence obligations without allowing them to delay the public report. Each record preserves the facts and uncertainty. No confirmation screen is treated as proof of abuse, a breach, or professional misconduct.

Rehearse the awkward cases, not only the easy one

Ask staff to respond when the clinical director is unreachable, the online form fails, the person with direct knowledge is leaving for the day, or the allegation involves the usual response lead. Then test whether a team member can locate the current child, APS, DDDS, facility, emergency, privacy, and payer routes. The drill should reveal where a real person might hesitate.

HHS OIG calls its General Compliance Program Guidance voluntary and nonbinding. Its ideas about reporting, investigation, corrective action, and oversight can support a clinic's later review, but they do not create a Delaware duty or clock. Have qualified Delaware protection, disability-services, facility, legal, clinical, privacy, workforce, payer, owner, and affected-stakeholder reviewers approve the final policy.

Related resources

Sources