ABA practice incident reporting requirements in Puerto Rico depend on the person, event, service, workplace and payer. Protect life and health first. Puerto Rico Act 57-2023 requires every person to report immediately when child abuse, institutional abuse, neglect, institutional neglect or risk is known or suspected; an internal review cannot come first. Older-adult protection, workplace injury, Puerto Rico Medicaid or plan integrity, privacy, professional and law-enforcement duties use separate routes, so one internal incident form never completes the whole response.
Care for the person before naming the category
When an injury, disappearance, disclosure or dangerous situation occurs, the first useful question is whether someone needs immediate protection or medical attention. Call 911 or the appropriate emergency resource, provide assistance within training, separate people when needed and arrange qualified evaluation. Do not delay care while a manager decides whether the event fits a form.
Give one person responsibility for the immediate response and another for accurate coordination. Preserve the scene and normal records without interfering with emergency personnel. Note who was present, what was directly observed, when and where it happened, what protection was provided and the person's current condition. A frightened child or adult should not be asked to repeat a disclosure simply to improve the practice's narrative.
Know that Puerto Rico's child duty reaches everyone
Puerto Rico Act 57-2023 states that every person must report immediately when there is knowledge or suspicion of abuse, institutional abuse, neglect, institutional neglect or a risk that a minor will be a victim. The report goes to the Department of the Family through its direct line, the Puerto Rico Police Bureau or a Department office. That is broader than a policy aimed only at a few licensed professions.
Train founders, clinicians, technicians, schedulers, contractors and administrative staff before the difficult day arrives. The person with the information should not be required to win a supervisor's agreement, prove abuse or wait for an internal investigation. The practice may support the report and manage care, employment and records, but it must not become a gate between the reporter and the government route.
Keep the protection contacts usable
The Puerto Rico government safety directory currently lists ADFAN child-abuse numbers at 787-749-1333 and 1-800-981-8333. Save the current official contacts in the response plan, make them available outside the clinical system and confirm them during training. Use 911 when immediate danger or a medical emergency requires it.
Staff should know what information they can provide factually and how to protect confidentiality after the call. Do not alert a suspected perpetrator, promise a family that the agency will reach a particular conclusion or post details in a group chat. Record when the report was made, the route used and any reference or instruction received without turning the internal file into a second investigation.
Treat older-adult protection as its own route
Act 130-2024 amended Puerto Rico's older-adult protections. It identifies professionals, health and education workers, public and private entities and care settings that must report known or suspected abuse, institutional abuse or neglect through the Department of the Family's Special Investigations Unit, the Office of the Advocate for Older Persons and the Police. It also says any person with knowledge or suspicion will report through those routes.
An ABA practice may serve an adult who is not an older adult, so do not stretch this law into a universal adult-protection rule. Ask qualified Puerto Rico counsel and the responsible agency what applies to the person's age, capacity and circumstances. Immediate safety and emergency care remain necessary even while the correct protective pathway is being confirmed.
Avoid forcing every event into one critical-incident list
There is no responsible way to publish one universal Puerto Rico ABA incident code for every private, Medicaid, school, home and community service. A missed visit, medication concern, restraint, elopement, injury, hospitalization, allegation, data exposure and billing irregularity may activate different definitions, recipients and clocks. Some events may activate several at once.
Build a branching map from current statutes, contracts, manuals and written agency or payer answers. For each branch, record the covered people and programs, trigger, deadline, recipient, portal or form, required facts, follow-up and owner. Keep unknowns visible. A locally invented “24-hour rule” is not a substitute for checking a current external requirement.
Ask each payer and program for the exact rule
ASES's Plan Vital page identifies current managed-care organizations, but each contract and provider manual can define reportable events, quality notices, authorization changes and continuity duties differently. Commercial plans and school agreements may use other terms. Obtain current, product-specific instructions rather than assuming that a report to one MCO satisfies another.
Share only what the recipient is authorized and needs to receive. Preserve the submission, time, attachments and response. An emergency department visit may affect an authorization even when it is not a reportable critical incident under a particular contract. Conversely, a required program notice may exist without changing the clinical note or claim.
Route suspected fraud without rewriting history
Puerto Rico Medicaid's program-integrity notice publishes a reporting email and telephone route for suspected Medicaid fraud. The Puerto Rico OIG FAQ separately accepts reports concerning public-fund irregularities and explains the information that helps an investigation. Neither route should be used casually to settle an employment dispute, yet credible billing concerns cannot be hidden inside a generic clinical incident.
Preserve the original note, claim, schedule, authorization, access log and communication. Qualified counsel and compliance leaders should decide investigation, repayment, disclosure, employment and law-enforcement steps. Do not ask someone to replace a contemporaneous note with a cleaner version or silently change a claim without retaining the correction and reason.
Handle workplace injuries on their own clocks
Puerto Rico's Occupational Safety and Health Act requires an employer to notify the Secretary of Labor or designee within eight hours after a serious or fatal accident. Puerto Rico OSHA's forms page also provides injury and illness recordkeeping materials. The applicable definition, reporting method and recordkeeping coverage should be confirmed for the event.
The State Insurance Fund's injury guidance says the employer completes the CFSE-373 accident report, while the current employer portal offers a workplace-accident transaction. An injury during a home visit can touch employee care, client safety, CFSE, PR OSHA, scheduling and insurance without making those routes interchangeable. Protect the employee and do not retaliate against a good-faith report.
Screen early for a privacy event
An incident can expose information even when the original event was clinical. A phone may be lost during an emergency, an internal report may reach the wrong family, a video may be shared too widely or staff may discuss a disclosure through personal messaging. Secure access, preserve logs and bring privacy and security leads into the response without delaying safety or protective reporting.
Puerto Rico's personal-information breach law and HIPAA, when applicable, ask different questions and have different recipients and deadlines. Keep the affected data, people, residency, systems, recipients and safeguards in a separate assessment. Do not send the full incident narrative merely because a payer or manager needs to know that the schedule changed.
Write what happened without deciding what it means
A contemporaneous record should distinguish observation, quotation and inference. Capture the people, time, location, activity, observable event, injury or property impact, immediate protection, notifications and next clinical step. Quote a disclosure accurately and minimally. Do not turn “the child said” into a diagnosis, legal finding or accusation.
Give each witness a private and accessible way to document what they directly perceived. Do not clone one account across staff or coach everyone toward the same sequence. Preserve corrections with author and date instead of overwriting the original. Follow professional and legal guidance about what belongs in the clinical record versus a separate administrative file.
Talk with families like people, not claim files
A family may be scared, angry or simply confused about whether tomorrow's visit is safe. They may also be answering the same question from a school, a relative and three people at the practice. Tell the authorized person what the practice can confirm, what immediate care occurred, who is coordinating the response and when the next update will come. Offer an interpreter or other accommodation and write down questions so the family does not have to restart with every caller.
Avoid speculation and blame. Do not promise what ADFAN, the Police, a payer or an employer investigation will decide. A humane sentence can be specific without being conclusive: “We are still establishing what happened; your child is safe now, the required report has been made, and I will call you by 3 p.m. with the next care update.”
Protect people while preserving evidence
Limit access to those with a real response role and preserve schedules, messages, video, access logs, clinical records, devices and physical evidence. Qualified counsel should guide interviews, privilege and legal holds where appropriate. A temporary reassignment or access restriction can protect people without predetermining responsibility.
Offer reporters and affected staff a route outside the normal supervisor when that person is involved. Make retaliation and informal pressure unacceptable. A reliable investigation is not the smoothest story for the practice; it is the account that keeps original evidence, acknowledges uncertainty and can support fair corrective action.
Close the loop without reducing prevention to training
Closure should show which external and internal duties were completed, the client's current plan, family communication, employee support, corrections, repayment or privacy analysis and remaining monitoring. Then ask what in staffing, supervision, environment, technology, scheduling or authority made the event more likely or the response slower.
Choose a few changes with owners, dates and an observable test. Sometimes retraining is appropriate. Other times the real fix is travel buffer, a second contact method, a clearer escalation route, safer equipment or fewer simultaneous responsibilities. Verify that the change works during an ordinary week rather than collecting signatures and calling the problem solved.
Rehearse a report that activates several lanes
Imagine Isla Clara Behavior, a fictional practice, receives a technician's report of an unexplained injury and a concerning statement from a child during a home visit. The technician protects the child, uses the ADFAN route immediately and calls emergency services as indicated. A manager supports the reporter without conducting a credibility interview.
The practice separately handles current care, family communication, a possible employee injury, the relevant MCO question and its internal record. It limits sensitive details, preserves the original note and asks counsel about additional duties. The example does not predict whether abuse occurred, what an agency will find or whether the payer will act.
Build one response system with several honest exits
The practical answer to ABA practice incident reporting requirements in Puerto Rico is not one form. It is a coordinated system that starts with safety and then sends child protection, older-adult protection, payer, program integrity, workplace injury, privacy, professional, law-enforcement, family and prevention work through the route that actually governs it.
Before publication or reliance, obtain current review from the Department of the Family, relevant protective and law-enforcement agencies, PR OSHA, CFSE, Puerto Rico Medicaid, ASES and the applicable plans, qualified healthcare, employment, privacy and Medicaid counsel, clinical and billing leaders, owner-operators and affected stakeholders. Keep current contacts and offline instructions where staff can reach them during a power or network outage.
Related resources
- How to Start an ABA Practice in Puerto Rico
- ABA Practice Licensing Requirements in Puerto Rico
- How to Handle ABA Practice Growing Pains in Puerto Rico
- ABA Practice Incident Response and Reporting Checklist
Sources
- Puerto Rico Act 57-2023, Child Abuse Prevention and Family Preservation Law
- Puerto Rico Government, Emergency and Protection Directory
- Puerto Rico Act 130-2024, Older Adult Protection Amendments
- Puerto Rico Office of Inspector General, Reports and Complaints FAQ
- Puerto Rico Medicaid Program, Program Integrity Reporting Notice
- Puerto Rico Occupational Safety and Health Act
- Puerto Rico OSHA, Injury and Illness Forms
- Puerto Rico State Insurance Fund, Steps After a Workplace Injury
- Puerto Rico State Insurance Fund, Employer Transactions
- Puerto Rico Act 111-2005, Information Bank Security Law, as amended
- HHS, HIPAA Breach Notification Rule
- Puerto Rico Act 163-2024, Autism Protection and Coverage Law
- ASES, Plan Vital and Current Managed-Care Organizations
- Behavior Analyst Certification Board, Ethics Code for Behavior Analysts
- Finni, Provider Program