ABA practice incident reporting requirements in Hawaii combine direct protection reports with narrower program duties. Covered child reporters immediately make an oral report and follow it as soon as possible in writing. Covered vulnerable-adult reporters promptly report orally and then in writing. For an enrolled I/DD waiver participant, a covered provider may also owe next-business-day verbal notice and a written Adverse Event Report through INSPIRE within three days or the next business day, without replacing protection, emergency, professional, payer, workplace, or privacy action.

Care comes before the paperwork

A hard event may unfold in an Oahu clinic, during a Maui school session, or in a home on Hawaii Island where the next appointment is not nearby. Respond first to the person's needs. Call 911 when danger is immediate, arrange suitable medical care, follow the client's emergency plan, and stop a continuing hazard when staff can do so safely. A voicemail, portal entry, or written form cannot stand in for that response.

Begin a neutral chronology when the situation allows. Record exact words, observed conditions, time, location, people present, care given, and contacts attempted. Separate what a staff member saw from what someone else reported. “The parent told the clinician…” preserves attribution. “The parent caused abuse” states a conclusion that belongs to an authorized process, not the opening incident note.

Child duties depend on role and professional capacity

Hawaii Revised Statutes section 350-1.1 lists people who must report when, in their professional or official capacity, they have reason to believe child abuse or neglect occurred or a substantial risk may occur in the reasonably foreseeable future. The list includes licensed or registered healing-arts and health-related professionals and employees of agencies or institutions providing social, medical, hospital, or mental-health services.

A behavior analyst may hold a Hawaii license, a national certification, an agency role, or several of those at once. Map the actual worker, employer, service, setting, and capacity in which the information arrived against the current statute. A practice can encourage any employee to escalate a concern, but should not promise that every role has identical statutory coverage.

The child report has an oral and written sequence

A covered reporter immediately makes the oral report to the Department of Human Services or police. The current Child Welfare Services page publishes 24-hour lines for Oahu and the neighbor islands and links a May 2023 mandated-reporter checklist. The agency page, not an old handbook copied into a policy binder, should supply the current route.

The statute then requires a written report as soon as possible. Preserve the oral contact time, recipient, facts supplied, intake instructions, written method, delivery evidence, and any correction. A written continuation does not authorize the practice to delay the oral call. If a line or transmission fails, use a current alternative and document the attempt rather than assuming a message was received.

Management can help without becoming a gate

A clinical director can cover sessions, arrange care, locate the live number, secure records, and stay with a shaken reporter. Those are meaningful supports. A policy should not require the reporter to wait for a committee, confront the alleged actor, or obtain approval of the wording before making the oral contact.

If several people learned the facts, document who completed the oral and written steps and how each covered person's duty was satisfied. Internal notice, family communication, and a personnel review have separate purposes. A CWS screening or referral begins an agency process; it is not proof that abuse occurred or that a professional rule was violated.

Vulnerable-adult reporting has its own role list

Hawaii's adult-protection statute names health-related professionals, employees of agencies providing social, medical, hospital, or mental-health services, law-enforcement personnel, residential and adult-day staff, medical examiners, and social workers. A listed person who knows or has reason to believe a vulnerable adult incurred abuse, or is in danger if immediate action is not taken, promptly reports orally to the department.

The initial oral report is followed as soon as possible by writing. Anyone outside the mandatory list may also report a concern. Do not copy the child analysis onto an adult case. Identify the worker's professional or official role, the adult's functional circumstances, the conduct at issue, the alleged actor's relationship, and the setting.

Vulnerability is functional, not diagnostic shorthand

Under Hawaii's current definitions, a vulnerable adult is age 18 or older and, because of mental, developmental, or physical impairment, unable to communicate or make responsible decisions about care or resources, carry out or arrange essential daily activities, or protect self from abuse. The DHS Adult Protective Services page summarizes the same functional approach and provides the online DHS 1640 reporting tool and an anonymous telephone route.

Autism, guardianship, waiver enrollment, or receipt of ABA can matter to the facts, yet none should be treated as an automatic legal conclusion. Record the adult's actual abilities and risks without reducing the person to a diagnosis. APS can address abuse by another person and serious endangerment through self-neglect, but the report should still describe concrete conduct and circumstances.

I/DD waiver adverse events are conditional

Hawaii's DDD Waiver Standards Version B governs covered providers and enrolled participants, not every ABA service in the state. Establish I/DD waiver enrollment, the authorized service, billing provider, agency agreement, setting, event category, discovery time, and the current version before using its adverse-event process. The DDD transmittal archive is useful for checking whether later instructions changed the manual.

The standards require verbal notice to the DDD case manager or designee by the next business day for an adverse event during a billable waiver service. A voicemail outside work hours does not complete the verbal report; the provider calls and speaks with the case manager or designee on the next business day. That timing should be visible in weekend and holiday procedures.

The written waiver report uses INSPIRE

A written Adverse Event Report follows within three days, or the next business day when the third day falls on a weekend or holiday. For an event learned about outside a billable waiver service, the written clock runs from notification under the standards. The INSPIRE Provider Portal launch notice says written AERs are submitted through the portal and explains the difference between verbal and written steps.

Save the event category, person notified verbally, time of the conversation, portal submission, confirmation, and requested follow-up. If the portal is unavailable, use the current DDD contingency rather than improvising an unprotected email. A DDD AER does not replace CWS, APS, police, emergency care, or another report required by law.

One event can require several honest records

Suspected maltreatment of a waiver participant may create the direct child or adult report and the DDD adverse-event sequence. A licensed facility, payer, employer, or professional body may add another lane. Use one internal event identifier so reviewers can reconcile timing, while keeping each legal basis, recipient, facts supplied, confirmation, and access restriction distinct.

Do not let one recipient's action decide another system's result. DDD may assess waiver-provider compliance, DHS may screen protection, law enforcement may consider crime, and the practice may review clinical or personnel issues. An acknowledgement from one does not establish abuse, jurisdiction, misconduct, or liability for the others.

Hawaii behavior-analyst licensure deserves separate review

Hawaii has a state Behavior Analyst Program. The DCCA licensing page maintains current application, renewal, law, and license-management information, while HRS chapter 465D establishes the program and licensing framework. When an incident raises scope, supervision, documentation, competence, or conduct concerns, identify the licensed person and the exact authority before selecting a professional route.

The BACB Ethics Code may create an additional certification analysis. Neither professional route provides emergency response or fulfills the child, adult, or waiver report. A protection report also does not automatically prove a state-license or certification violation. Preserve safety and impartial review at the same time.

Payer notices require the live contract

Med-QUEST, an I/DD waiver, a commercial plan, a school arrangement, and an employer plan can use different adverse-event, quality, fraud, and interruption terms. Retrieve the contract and provider manual that governed the actual service date. Record the product, clause, event definition, deadline, recipient, permitted data, and confirmation.

Give the payer the facts it is entitled to receive without importing an unproven allegation or unrelated health and personnel information. A payer acknowledgement does not determine whether CWS or APS will investigate, whether DDD has jurisdiction, or whether a behavior analyst violated a professional standard.

Speak with families and clients without erasing uncertainty

A parent or adult client may hear “report” and conclude that the clinic has taken sides. When disclosure is lawful and safe, explain the observed facts, care given, contacts made, immediate service plan, and remaining unknowns. A threshold report asks an authorized body to assess a concern. It is not the practice's verdict about a family member, employee, or provider.

Confirm who is legally and clinically appropriate to contact. Respect preferred language, island and travel realities, disability access, and the person's communication method without making cultural assumptions. Protect information about another client or employee. Record unsuccessful attempts and the next promised update so the family is not left wondering whether silence means the concern was forgotten.

Employee safety and privacy do not disappear

A staff injury may trigger workers' compensation, internal safety review, and federal reporting. The OSHA severe-injury page describes federal clocks for work-related fatalities, inpatient hospitalizations, amputations, and losses of an eye. Confirm which Hawaii and federal requirements govern the employer. A DDD report does not complete occupational-safety work.

A wrong portal attachment, shared photograph, lost device, email, or video link can expose protected information. Contain access and conduct a qualified review under the HHS breach-notification framework. The existence of an incident is not automatically a reportable breach. Privacy analysis also does not excuse a legally required protection report; use lawful channels and the minimum necessary information with qualified guidance.

Make the chronology readable after the handoffs

Separate occurrence, discovery, care, oral protection report, written continuation, DDD verbal notice, portal AER, payer or professional notice, family communication, privacy containment, evidence preservation, and follow-up. State who acted, what was known then, the route, and the response. Mark estimates and attributed statements rather than smoothing them into certainty.

Preserve the original schedule, treatment plan, data, supervision record, messages, training materials, portal receipts, and available video. Add later medical facts or agency instructions as dated supplements. Do not silently edit an initial account after a new witness emerges. A transparent record protects the client, reporter, family, and integrity of every review.

Imagine a mixed event at a fictional Hawaii practice

Trade Wind Harbor ABA supports one child through a commercial plan and another person through an enrolled I/DD waiver service. A technician hears a concerning statement from the child. On a holiday weekend, the waiver participant experiences an adverse event. The supervisor proposes leaving one DDD voicemail and treating it as every required report.

The practice instead completes the child's immediate oral route and written continuation, evaluates any adult-protection duty from the actual facts, and follows the current DDD next-business-day verbal and three-day written sequence for the covered event. Payer, professional, workforce, privacy, family, and evidence work remain separate. The records preserve uncertainty, and no receipt is described as proof of maltreatment.

Practice the weekend scenario before it happens

Ask staff to find the current CWS line, APS route, police option, DDD case-manager backup, INSPIRE portal, licensing contact, payer notice, privacy lead, and after-hours owner. Then make the third written day a holiday and let the usual case manager be unavailable. A useful exercise reveals the current designee and contingency without asking staff to guess.

The HHS OIG General Compliance Program Guidance offers a useful vocabulary for reporting, investigation, corrective action, and leadership review. It remains voluntary and nonbinding and creates no Hawaii reporter category, waiver coverage, or deadline. Before adopting changes, invite DHS, DDD and DCCA expertise along with payer, legal, clinical, privacy, workforce, client or family, and ownership perspectives.

Related resources

Sources