ABA practice incident reporting requirements in Texas depend on the affected person, the reporter's actual role, the service program and the contracts attached to the encounter. Child and older-adult or disability-related concerns have direct statutory routes. HCS, TxHmL and other programs may add critical-incident reporting, while payer, professional, workplace and privacy obligations remain separate. Protect people first, preserve the facts and never assume that a supervisor or internal form has completed an individual's direct duty.
Respond to the event before naming it
An incident in a Texas ABA practice might begin with a child's disclosure, a caregiver's concern about an adult with a disability, a restraint in a waiver service or a staff injury. Call 911 when danger is immediate, arrange medical care, follow the client's current plan within staff competence and separate people from an ongoing hazard. Do not let the search for a program code delay protection.
When the scene is stable, begin a time-stamped chronology. Record direct observations, attributed statements, immediate safeguards and every attempted notification. Keep unknowns visible rather than filling them with assumptions. A coordinator can organize the response, but the policy should never make supervisor approval a condition of a report that Texas law assigns directly to the person who learned the facts.
Understand the two Texas child-reporting clocks
Texas Family Code chapter 261 requires any person who has reasonable cause to believe that a child's welfare has been adversely affected by abuse or neglect to report immediately. A professional has a more specific outer requirement: the report must be made no later than the 24th hour after the professional first has reasonable cause. Current law defines the professional through state licensing or certification, or employment in a state-licensed, certified or operated facility with direct contact with children.
Owners should apply the current statutory text rather than older summaries that still say 48 hours. Map each role and setting before an incident. The universal “any person” route still matters even when someone does not meet the professional definition. The 24-hour language is not permission for a professional to delay an urgent report.
Do not delegate a professional's report
Texas says a professional may not delegate the reporting duty to another person and may not rely on someone else to make it. An internal form, chain-of-command call or group message can support the response, but it is not a substitute. The state child-reporting resource is a useful operational starting point; the practice should also keep current intake and emergency contacts available to field staff.
Preserve the confirmation, the facts given and any instructions. Staff do not need to prove abuse or identify every household detail before reporting. A reasonable-cause report asks the proper agency to assess the concern. It is not a finding against a caregiver, clinician or other person.
Keep questions narrow and the record factual
When a child says something concerning, a staff member may need a limited clarifying question to address immediate safety. Repeated interviewing, suggesting answers, asking for a reenactment or contacting the alleged actor can affect evidence and intensify distress. Preserve the child's words as accurately as possible and note what was happening when they were said.
Describe observable conditions without offering unsupported medical or legal conclusions. An injury may need clinical evaluation; its appearance alone does not establish cause. Keep source records, messages and relevant access logs under restricted permissions. A report is stronger when another person can tell exactly what was seen, heard and done.
Treat older-adult and disability reporting as its own route
Texas Human Resources Code chapter 48 requires a person with cause to believe that an elderly person, a person with a disability or a person receiving services from a covered provider has been abused, neglected or exploited to report immediately. The current chapter 48 text contains different receiving routes for community situations and services delivered through certain state-licensed, state-certified or state-operated facilities and programs.
Do not copy the child workflow and assume the same destination. Determine who the person is, what service they receive and whether the provider setting belongs to a named HHS jurisdiction. The statute reaches professional communications, including certain mental-health communications, without a blanket professional exception. Emergency care and law enforcement may also be appropriate when danger is immediate.
Describe risk without erasing adult autonomy
An adult's refusal of a recommendation or disagreement with a provider does not by itself prove neglect. Record the actual assistance available, observable condition, statements, known decision-making information and concrete risk. Avoid diagnosing incapacity or declaring financial exploitation based on an unusual choice without the evidence and authority to do so.
At the same time, respect for autonomy does not justify ignoring a statutory threshold. The reporter gives an accurate account; the receiving agency determines jurisdiction, findings and services. That division of responsibility allows the practice to act promptly without turning a protective report into a premature judgment.
Use HCS and TxHmL incident systems only when the service is covered
Texas HHS maintains HCS and TxHmL provider training for those waiver programs. The current CIMS provider letter explains that covered HCS and TxHmL incidents are reported through the Critical Incident Management System according to applicable state timeframes. Incidents can include restraints, serious injuries and other defined events, but the exact category and clock come from the current program rule and guidance.
An autism diagnosis, Medicaid coverage or an ABA authorization does not automatically place a service in HCS or TxHmL. Confirm enrollment, provider status, service, contract and current program material. CIMS does not replace a direct chapter 261 or chapter 48 report. When both apply, give each lane an owner and preserve separate confirmations.
Avoid inventing one universal Texas program deadline
Texas waiver, facility, managed-care and fee-for-service requirements are spread across different rules, manuals and contracts. A team may remember a clock from one program and apply it to another, especially when the portal looks familiar. That is risky. The incident map should link the exact current source for the client and service rather than offering a generic “all serious incidents within 24 hours” instruction.
When facts are incomplete, take any required initial action and mark the category as pending rather than silently choosing the least urgent route. Preserve later corrections and follow-up. Program reporting can coexist with protection, emergency, law-enforcement, professional, workplace, payer and privacy work; it does not determine those outcomes.
Read the payer contract, not just the portal label
The Texas Medicaid Provider Procedures Manual provides current statewide policy for covered areas, while managed-care organizations and commercial insurers add their own agreements and manuals. A quality-of-care concern, adverse event, authorization interruption and grievance can arise from the same facts but have different recipients and definitions.
Keep a payer appendix with the source version, trigger, destination, start of the clock, after-hours method, required identifiers, follow-up and confirmation. Do not make reimbursement status the test for whether someone needs protection, and do not treat a payer ticket as proof that DFPS, HHS or law enforcement received the report.
Keep licensing and certification notices in their proper lane
Texas licenses behavior analysts through the Department of Licensing and Regulation. The agency's complaint page provides a public complaint route, while its behavior-analyst sanctions and penalties material reflects enforceable professional requirements. Some licensee self-reporting events use ten-day or 30-day periods, depending on the event; owners should confirm the current rule rather than treating either as a universal incident deadline.
The BACB Ethics Code creates separate certification obligations within its scope. TDLR and BACB processes do not provide emergency response or replace child, adult or program reports. If conduct is disputed, preserve a fair record and avoid presenting a complaint, employer action or certification notice as a finding before the authorized process reaches one.
Give employee injury and privacy work separate owners
Private-sector Texas employers generally follow federal OSHA severe-injury reporting. The OSHA severe-injury page states the eight-hour period for a work-related fatality and 24-hour period for a work-related inpatient hospitalization, amputation or loss of an eye. Confirm the definition and current reporting method; an emergency-department visit is not automatically an inpatient hospitalization. Workers' compensation and recordkeeping are additional work.
If an incident note, recording or device exposes PHI, contain access and preserve logs. The HHS Breach Notification Rule guidance explains the federal presumption, exceptions and documented risk-assessment framework for unsecured PHI. A privacy conclusion does not decide maltreatment or program jurisdiction, and an outer notification period should never become a reason to delay containment.
Follow a Texas incident without merging the decisions
Imagine Hill Country Lantern ABA, a fictional practice providing a covered waiver service. During a visit, a child says something that creates reasonable concern, an emergency restraint occurs under the program's rules and a technician later receives hospital care for an injury. The person who learned the child facts makes the direct report; the practice does not wait for a supervisor to submit CIMS.
Leadership separately verifies the waiver category and deadline, evaluates the employee event under OSHA and workers' compensation, and checks the payer contract. One chronology preserves the common facts, but each file records its own source, jurisdiction and unresolved questions. The practice does not declare abuse, a program violation or an OSHA-reportable hospitalization until the relevant standard is applied.
Communicate in a way that keeps people with you
Families and clients need a timely explanation from someone who can describe verified facts, current safeguards and the next update. Use accessible language, interpreters or communication supports when needed. Acknowledge distress without predicting what DFPS, HHS, TDLR, a payer or another body will decide. Do not disclose another person's private information to make the conversation feel more complete.
Staff should be able to raise a good-faith concern without retaliation. Explain temporary safety measures without calling them discipline, offer support after a difficult event and limit rumors. When an outside investigator restricts communication, record the instruction and seek qualified guidance. A warm, honest boundary is better than a formulaic assurance that everything has been resolved.
Build a Texas map from actual programs and people
For every site, role, license, client and contract, map emergency, child, adult, waiver or facility, payer, professional, workplace and privacy routes. Include after-hours backups, current portals and proof of submission. Test the map with a scenario that begins three clocks at different moments. If staff cannot find the right contact without asking one executive, the map is not ready.
After an incident, examine system causes such as an inaccessible contract, stale portal access or confused role classification. The voluntary, nonbinding OIG General Compliance Program Guidance offers a useful approach to reporting, investigation, corrective action and monitoring, but it is not Texas law. Have qualified Texas counsel and current agencies, programs, payers, privacy and clinical leaders review the map before relying on it.
Related resources
- How to Start an ABA Practice in Texas
- ABA Practice Licensing Requirements in Texas
- How to Deal with Growing Pains for Your ABA Practice in Texas
- ABA Practice Incident Response and Reporting Checklist
Sources
- Texas Family Code Chapter 261, Child Abuse and Neglect Reporting
- Texas Department of State Health Services, Child Abuse Reporting Requirements
- Texas Human Resources Code Chapter 48, Adult Abuse Reporting
- Texas HHS, HCS and TxHmL Provider Training
- Texas HHS, HCS and TxHmL Critical Incident Management System Provider Letter
- Texas Department of Licensing and Regulation, Complaints
- Texas TDLR, Behavior Analyst Penalties and Sanctions
- Texas Medicaid Provider Procedures Manual
- Occupational Safety and Health Administration, Severe Injury Reports
- HHS Office for Civil Rights, HIPAA Breach Notification Rule
- Behavior Analyst Certification Board, Ethics Code for Behavior Analysts
- HHS Office of Inspector General, General Compliance Program Guidance
- Finni, Provider Program