ABA practice incident reporting requirements in Pennsylvania must be sorted by person, service, setting, and program. A covered child reporter acts immediately through ChildLine and follows an oral report with the required written or electronic submission within 48 hours. Adult protection differs for adults ages 18–59 with a qualifying disability and adults age 60 or older. ODP's EIM process applies only inside its defined program scope. Payer, workplace, privacy, and internal work remain separate from a direct protection report.

Steady the situation before opening a portal

A serious incident can make a team feel as though every minute must be spent typing. Start with the person. Call 911 when danger is immediate, obtain appropriate medical help, use the client's current safety plan within each person's competence, and protect evidence that an outside authority may need. Reporting deadlines matter, but they do not replace care.

Then create a factual chronology that can support several routes. Capture when each fact became known, the source of that information, exact disclosure language where important, safeguards, medical contacts, and attempted notifications. One coordinator can track the work. That coordinator should never become a gatekeeper who decides whether another person's direct statutory duty is allowed to proceed.

Identify the Pennsylvania child reporter by real role

Pennsylvania's child law covers several professional and organizational relationships. A state-licensed behavior specialist, employee of a child-serving agency, healthcare professional, or other person may be a mandated reporter depending on the actual credential, employment, contact, and disclosure. The Commonwealth's mandated-reporter page explains the reasonable-cause standard and current ChildLine routes.

Do not assume that “BCBA” by itself answers the Pennsylvania question. National certification and the state's behavior specialist license are distinct records. Build the policy around the person's real role and service, then train staff to recognize when the child is known through professional contact, organizational responsibility, or a specific disclosure. When the threshold is met, a reporter is communicating suspicion, not deciding that abuse occurred.

Complete the ChildLine sequence, not only the first step

Under 23 Pa.C.S. 6313, a mandated reporter immediately makes an oral report to ChildLine or a written report through the state's electronic reporting system. A reporter who begins orally follows with a written report, which may be submitted electronically, within 48 hours. The record should show which route was used, when it was completed, and the confirmation or case reference.

The 48-hour follow-up is not a waiting period for the first call. An EHR note, message to a supervisor, or payer incident form does not complete the ChildLine route. A reporter does not need every answer before reporting. Offer the facts available, identify what is uncertain, and make an accessible record of any later information sent to the proper authority.

Let support and investigation remain different

A child may need calm reassurance and a clear explanation of what will happen next. Listen without pressing for a complete story. Ask only what is needed for immediate safety or an understandable report, and preserve the child's words rather than translating them into the practice's conclusion. Do not confront the alleged actor or run a private investigation before ChildLine can act.

Families also deserve humane communication. Explain what the practice knows, what care or safeguards were put in place, and when another update is expected, while protecting other people's information. If law enforcement or child-welfare personnel give instructions about contact, evidence, or interviews, record who gave the instruction and how the team will comply.

Route adult protection by age and coverage

Pennsylvania's abuse-reporting hub separates adults with disabilities ages 18 through 59 from older adults age 60 or above. The Adult Protective Services page describes the younger group through a physical or mental disability that substantially limits one or more major life activities. The statewide hotline receives reports around the clock. Diagnosis or ABA participation alone does not resolve the legal definition or facility relationship.

For older adults, the Department of Aging and Area Agency on Aging framework applies. The current protective-services manual should be checked with the person's age, setting, and facts. A practice should not send every adult concern to whichever program appears first in search results. Record the age, current impairment, residence, service, public funding, and practice role, then use the correct live route.

Recognize the extra duties attached to facilities

Pennsylvania's mandatory adult-reporting obligations can attach to an administrator or employee of a defined facility. Current DHS informational guidance describes an immediate oral report to the statewide protective-services hotline and written follow-up within 48 hours. Certain allegations, including sexual abuse, serious injury, serious bodily injury, or suspicious death, add immediate law-enforcement and department contacts plus written follow-up.

An ABA practice should not self-declare that it is or is not a facility based on ordinary speech. Public funding, license, service arrangement, residential or program setting, and statutory definitions matter. Obtain qualified Pennsylvania review before relying on an exclusion. Direct service providers in particular waiver relationships may also have mandatory status even if the organization does not resemble a nursing facility.

Keep ODP and EIM conditional

The Office of Developmental Programs' Incident Management Bulletin 00-21-02 applies to a defined list of ODP individuals, families, administrative entities, providers, waivers, supports-coordination organizations, and service models. A diagnosis or a Medicaid card does not automatically place a commercial ABA session under the bulletin. Confirm the person's program and the practice's filing responsibility before choosing a category.

The live EIM incident-classification help says most ODP-ID/A and ODP-BSASP categories are initially reported within 24 hours, while medication errors and restraints use a 72-hour period. Those program clocks do not replace ChildLine or adult protective services. Preserve discovery time, scope evidence, category, filing organization, confirmation, and any correction when later facts change the classification.

Avoid the familiar-form trap

Teams naturally gravitate to the system they use most. An IBHS practice may reach for EIM; a billing manager may open the MCO portal; a clinical supervisor may start an internal note. Each can be appropriate, but none should screen out a personal ChildLine report or an adult-protection route. The policy should display parallel lanes instead of one cascading approval tree.

Assign an owner for coordination, not permission. If a reporter completes ChildLine at 4:12 p.m., leadership can still determine ODP scope, notify a payer, preserve evidence, and arrange family communication. The record should make clear that those later actions did not authorize the first one. That distinction is especially helpful on weekends, when a supervisor may be unreachable but the protective-services line is open.

Professional review belongs after immediate protection

Pennsylvania's behavior specialist license sits within the Department of State framework, and the Commonwealth provides a licensed-professional complaint route. A BCBA may also have duties under the BACB Ethics Code. These systems address conduct within their own jurisdiction; they do not provide emergency care or accept a ChildLine, APS, OAPSA, or ODP report on another system's behalf.

The same event can support several reviews. An allegation involving supervision, records, boundaries, or competence may be reported immediately for protection and later evaluated for professional or certification action. Reuse verified facts, not a one-size-fits-all accusation. Each recipient should receive information relevant to its lawful function and no more than is necessary.

Read payer and employment requirements from current records

Pennsylvania Medicaid, Behavioral HealthChoices MCOs, commercial plans, schools, and other partners may define critical incidents, quality concerns, fraud referrals, and notice clocks differently. Keep the current contract or manual by product and county. Record the trigger, destination, discovery rule, after-hours method, required identifiers, and confirmation. PROMISe enrollment alone does not create one statewide payer incident policy.

An employee injury is another lane. Private-sector employers generally look to federal OSHA's severe-injury reporting guidance, including the federal eight-hour fatality and 24-hour hospitalization, amputation, or eye-loss rules where applicable. Confirm jurisdiction and definitions. Workers' compensation reporting, an internal injury record, and OSHA notice are separate tasks.

Give privacy and evidence their own careful review

If an incident or its response exposes PHI, contain the access and begin a distinct assessment. HHS's Breach Notification Rule guidance describes the federal presumption and risk assessment for impermissible uses or disclosures of unsecured PHI. A misdirected report should not be called a breach before that work, but it should not sit in a general incident queue while access remains open.

Preserve the first factual account, schedule and access records, relevant messages, report confirmations, and instructions from authorities. Add dated supplements instead of overwriting early entries. Describe what a person observed and what another person said. Words such as reported, screened, investigated, substantiated, and corrected represent different states and should not be used interchangeably.

Walk through a Pennsylvania event without blending outcomes

Imagine Keystone Harbor ABA, a fictional IBHS practice. During a school-based session, a child discloses possible maltreatment. The same afternoon, leadership learns that an adult client in another program may have had funds taken by a caregiver. The child reporter uses ChildLine immediately and completes the required follow-up. The adult concern is routed by age, disability, setting, and facility status rather than copied into the child record.

The practice separately confirms whether either event falls within ODP and EIM, checks the relevant MCO agreements, and restricts evidence access. The submissions share a chronology method, not a legal conclusion. ChildLine intake does not prove abuse, an EIM record does not establish APS coverage, and an APS report does not decide a payer's contract obligation.

Use the hard day to improve the next one

Once urgent work is stable, review the system rather than only the people involved. Was the ChildLine confirmation easy to store? Could an evening supervisor distinguish a 24-hour EIM category from a 72-hour one? Did the team know whether the adult service was publicly funded? Could family updates be provided accessibly without exposing unrelated information?

The HHS OIG General Compliance Program Guidance can inform a voluntary structure for reporting, investigations, corrective action, and board oversight. It is not Pennsylvania law and creates no ChildLine, APS, ODP, MCO, or professional deadline. Have qualified Pennsylvania protection, program, payer, employment, privacy, clinical, and legal reviewers approve the practice's map and retest it whenever services, counties, contracts, or portals change.

Related resources

Sources