ABA practice incident reporting requirements in Wyoming are built from parallel duties. Any person who knows or has reasonable cause to believe or suspect child abuse or neglect must immediately report to child protection or local law enforcement. Wyoming also applies a broad vulnerable-adult duty. A Comprehensive, Supports, or Community Choices Waiver relationship can add an immediate HCBS incident submission after safety is addressed, while professional, payer, workplace, and privacy events retain their own tests.

Protect the person before opening the portal

Most owners meet this policy on an ordinary day that changes quickly: an injury in a Cheyenne clinic, a disclosure during a Casper school consultation, or an adult waiver participant who appears unsafe at home. First ask what the person needs now. Call 911 for immediate danger, obtain appropriate medical care, follow the emergency plan, and stop an ongoing hazard when staff can do so safely. A provider portal is an oversight tool, not an ambulance or a substitute for law enforcement.

Once urgent care is underway, start a factual chronology. Write down the time, place, exact words, observed conditions, people present, care given, and calls attempted. Distinguish observation from attribution. “The caregiver told the RBT…” preserves the source; “the caregiver neglected the client” reaches a conclusion that the practice may not be authorized to make.

Wyoming puts the child duty on any person

Wyoming Statute section 14-3-205 says any person who knows or has reasonable cause to believe or suspect that a child has been abused or neglected, or sees a child under conditions that would reasonably result in abuse or neglect, shall immediately report to the child protective agency or local law enforcement. The current statute therefore does not make the duty depend on a BCBA, RBT, teacher, or physician title.

The Department of Family Services child-protection page directs a report to the county field office where the conduct occurred or is occurring and says an emergency goes first to 911 and law enforcement. A policy should link to the live county directory instead of relying on a laminated number that may be outdated. If location is uncertain or the facts cross counties, ask the receiving office to route the concern and document its instruction.

Immediate means act on the threshold, not prove the case

A practice does not need to establish abuse before reporting. It needs a good-faith assessment of the statute's knowledge, reasonable-cause, suspicion, or observed-condition language. Interviewing everyone, demanding records from a family, or waiting for a committee can alter memories and postpone the state contact. Preserve what the reporter actually knows and let the authorized agency decide screening and investigation.

Wyoming's institutional provision says a staff member also notifies the person in charge or designated agent as soon as possible. That leader becomes responsible to make or cause the report, but the statute says individuals are not relieved of their own obligation unless a report already has been made or will be made. A clinic policy should provide support and verify the external contact without turning internal notification into prior permission.

Adult protection is broad but still has a definition

The current Wyoming reporting overview says state law requires any person with reasonable cause to report suspected child or vulnerable-adult abuse, neglect, or exploitation. The Adult Protection Services page describes a vulnerable adult as a person 18 or older who cannot manage and care for self or property without assistance because of advanced age or physical or mental disability. Diagnosis alone is not the complete inquiry.

Adult matters may involve abuse, abandonment, exploitation, neglect, intimidation, self-neglect, or sexual abuse. Record the functional facts, the alleged conduct, the relationship of the alleged actor, the setting, and the source of the information. APS serves people living independently and in facilities. A clinic should not reject a concern because the adult can make some choices, nor declare vulnerability solely because the person receives ABA.

Use the local DFS or law-enforcement route

Wyoming APS accepts reports through the local Department of Family Services office by phone or in person, or through local law enforcement, and says an on-call caseworker is available around the clock. The state's public wording calls reporting a 24-hour obligation. Owners should read that as continuous availability, not a 24-hour waiting allowance, because the governing statutory language requires an immediate report.

Capture the office contacted, date, time, facts supplied, instructions, and whether a separate law-enforcement contact occurred. A reporter may remain anonymous, and good-faith reporting has protections, but a provider's employment, program, or contract record may still need to identify who acted. Treat an APS screening result as an agency routing decision, not a clinic finding about wrongdoing.

HCBS incidents belong to covered waiver relationships

The Wyoming HCBS current-provider page separates Community Choices Waiver incidents from Comprehensive and Supports Waiver incidents and points providers to the Wyoming Health Provider portal. The June 2025 incident-submission manual explains that Medicaid rules and approved waiver agreements impose additional reporting on providers serving covered participants. That lane is real, but it does not apply to every ABA client in the state.

Establish the participant, waiver, authorized service, provider certification, setting, event category, discovery time, current portal role, recipients, and required follow-up before submitting. If the organization serves both commercial and waiver clients, its system should keep coverage visible at the case level. A diagnosis or Medicaid card alone does not prove that the event belongs in the HCBS portal.

Critical waiver events move immediately after safety

The state's 2026 DD-provider training says providers and case managers report critical incidents immediately after assuring the participant's health and safety and should not wait. It also keeps investigative roles distinct: the Division examines rule compliance, while DFS or law enforcement determines whether abuse, neglect, or exploitation occurred. That distinction is central to fair documentation.

For covered events, follow the live manual and portal prompts for the incident category, people notified, attachments, and follow-up. Some serious events may require the Division, DFS, Protection and Advocacy, the case manager, the legally authorized representative, and law enforcement. Do not copy that recipient list onto a commercial case or let a portal entry replace the direct public report required by sections 14-3-205 or 35-20-103.

Behavior-analyst licensure creates another review lane

The Wyoming Board of Psychology forms page says a person may not practice as a behavior analyst or assistant behavior analyst in Wyoming without the required Board license, and the Board's current rules page identifies rules effective October 2, 2025. When an incident raises scope, supervision, competence, documentation, or professional-conduct questions, identify the actual licensee, conduct, standard, and reporting process.

The BACB Ethics Code may create a separate certification analysis. Neither professional route provides emergency response or substitutes for DFS, law enforcement, or HCBS notice. A public report also does not establish a licensing or certification violation. Preserve impartial review and avoid writing the personnel decision into the initial incident narrative.

Payer reporting starts with the actual agreement

Medicaid fee-for-service, a waiver, a commercial plan, a school contract, and an employer arrangement can use different adverse-event and quality terms. Retrieve the provider agreement and manual in effect on the event date. Identify the covered person, product, reporting definition, clock, recipient, permitted information, and confirmation. “The payer requires it” is not enough for a reliable process.

Send what the contract calls for without converting an allegation into fact. A payer may need to know that a covered service stopped or a quality concern occurred, but it does not automatically need a complete personnel file or another client's information. Payer acceptance cannot determine the child, adult, professional, or criminal result.

Talk with families in a way that leaves room for truth

A family may be worried about the client's health and also afraid that a report implies guilt. When communication is permitted and will not increase risk, explain the known facts, care given, contacts made, next clinical step, and remaining uncertainty. Say that a threshold report asks the responsible agency to assess information. It does not mean the practice has reached a final conclusion.

Check who may receive information and how they prefer to communicate. Parents, guardians, adult clients, legally authorized representatives, case managers, and alleged actors have different relationships to the record. Protect unrelated information, arrange language or accessibility support, and document unsuccessful attempts as well as completed conversations.

Workplace and privacy events need their own files

An employee injury may trigger workers' compensation, occupational-safety, and internal hazard review. The federal OSHA severe-injury guidance describes reportable work-related fatalities, inpatient hospitalizations, amputations, and losses of an eye. Confirm the controlling jurisdiction and deadline. An OSHA notice and an HCBS incident submission answer different questions even when they describe the same event.

Protected information may be exposed through a misdirected portal upload, email, shared photograph, lost phone, or broadly accessible video. Contain access and conduct a qualified assessment using the HHS breach framework. Do not announce a reportable breach before completing that analysis. Conversely, do not let a privacy concern prevent a legally required protection report; route the minimum necessary information through the lawful channel with privacy guidance.

Build a chronology that can survive later scrutiny

Keep occurrence, discovery, immediate care, public reporting, HCBS or payer notice, family communication, privacy containment, evidence preservation, and follow-up as identifiable lanes. Each entry should state who acted, what they knew then, the route used, and the response received. Mark approximate times and secondhand information. A clean chronology is usually more useful than a polished narrative.

Preserve original notes, schedules, supervision records, training materials, relevant messages, portal receipts, and available video under a consistent hold. Add corrections or later medical information as dated supplements rather than silently changing the first record. Limit access and document why an amendment occurred. Those habits protect the client and the integrity of every later review.

Imagine two incidents at a fictional Wyoming practice

High Plains Lantern ABA serves one child through a commercial plan and another person through a covered Supports Waiver service. The child makes a concerning disclosure during a school consultation. That evening, the waiver participant experiences a critical event. A new operations lead proposes submitting both through the Wyoming Health Provider portal and waiting for the Division to route them.

The team instead makes the immediate child contact through the proper DFS or law-enforcement route. It verifies the adult-protection threshold and completes the covered HCBS incident process after addressing safety. The practice separately tracks family, representative, payer, professional, employee, privacy, and evidence work. It does not call either allegation substantiated, and it does not describe the portal receipt as a finding.

A tabletop test exposes fragile handoffs

Ask staff to find the live county child contact, adult-protection route, emergency option, HCBS portal, waiver manual, licensing contact, payer rule, privacy lead, and after-hours owner. Repeat the exercise when the internet is unavailable or the ordinary response leader is part of the allegation. If one long-tenured employee is the only person who knows what to do, the system is not ready.

The HHS OIG General Compliance Program Guidance can help a practice structure reporting, investigation, corrective action, and leadership oversight, but it is voluntary and nonbinding. It supplies no Wyoming reporter category, waiver scope, or deadline. Ask the people who own the real routes, including DFS and Health specialists, the Board, payer contacts, counsel, clinicians, privacy and workforce leads, clients or representatives, and practice ownership, to challenge the revised map.

Related resources

Sources