A reauthorization packet is denied on documentation long before a reviewer debates whether a child still needs ABA. The payer already approved the case and the clinical rationale behind it. What it reads now is whether the last six months of data justify the next six. Most failures are missing graphs, stale assessment dates and a treatment plan nobody updated.
What this covers
- Florida Medicaid wants data for every behavior targeted for improvement, each with its own data table and graph, plus a written justification for the intensity requested.
- TRICARE takes an ABA reauthorization as early as 60 calendar days before the authorization ends and no later than 30. A request filed inside 30 days is not back dated.
- Assessment data goes stale fast. Maryland Medicaid requires the progress data and observation in a concurrent request to be dated within 30 days.
- Outcome measures run on the payer’s calendar. TRICARE wants the PDDBI with each six-month reassessment and a fresh referral every two years.
- When a request is denied, the clock decides the recovery: a standard decision is due within 7 calendar days, and the family has 60 days from the notice to appeal.
Reauthorization is not a fresh argument about whether a child needs ABA. It is an audit of whether the last authorization produced data that reads as progress.the packet is judged against the treatment plan already on file
Six months is a business cycle as much as a clinical one. An ABA practice running 20 technician hours a week for one client bills about 1,600 units of 97153 inside that window, so a lapsed authorization stops a schedule, a pay run and a family’s routine at the same time.
The sections below cover what reviewers look for in a reauthorization packet, how far ahead of the expiration date each payer wants it, which measures are due at which interval, and what to do after a denial.
Reauthorization is a documentation review
A payer that authorized six months of ABA has already accepted the diagnosis and the need for treatment. The renewal review asks a narrower set of questions: did the authorized hours produce measurable change, and does the record prove it? Peer reviewers work from the treatment plan on file with the payer. Every goal in that plan needs a current number, a trend, and an explanation of what changed in the protocol when the trend stalled.
Reviewers work from a short list of questions. Is the diagnosis still current, and does the record show the level of support it claims? Do the goals in the plan match the data in the graphs? Did the requested hours change, and if they did, what clinical evidence drove the change? A packet that answers those questions with dates and numbers is a shorter read, and a shorter read is a faster decision.
State programs publish what they expect, and the language is specific. Florida Medicaid requires the reassessment packet to carry data for every behavior targeted for improvement, with a separate data table and graph for each one, a narrative discussion of progress, and a statement justifying continued care at the intensity requested. Where significant clinical progress was not made, the provider has to explain why and describe the treatment changes meant to produce it.
Maryland Medicaid requires the progress data and the observation in a concurrent request to be dated within 30 days of submission. A packet built from a two-month-old reassessment gets returned even when the case is strong.
The practical consequence: the reassessment is a scheduling item, not a writing task. Book the observation, the caregiver interview and the standardized measures early enough that the report is fresh on the day it uploads.
The calendar: work backward from the expiration date
The authorization ends on a date set six months ago. Working backward from it is the only way to submit inside the payer’s window and still carry fresh data. TRICARE sets the clearest published rule: file the reauthorization as early as 60 calendar days in advance and no later than 30, supported by the six-month reassessment and treatment plan update. The contractor does not back date late submissions, so services delivered between the old expiration and the new approval are exposed.
| Payer | Timing rule | What the packet carries |
|---|---|---|
| TRICARE Autism Care Demonstration | Earliest 60 calendar days before expiration, latest 30 | Reassessment, plan update with progress data, outcome measures |
| Maryland Medicaid, Carelon BHASO | Valid 180 days, concurrent request inside 30 days | Data and observation within 30 days, plan update, graphics per goal |
| Florida Medicaid | Required before services start and every 180 days | Reassessment, plan update, data table and graph per target, intensity justification |
| Medicare Advantage and Medicaid managed care | Decision clock, not a submission window | Standard decisions within 7 calendar days, expedited within 72 hours |
Pull the current authorization, the plan version it was approved against, and the payer’s checklist.
Export session data by goal through the most recent week. Any goal without a graph gets one first.
Run the standardized measures the payer requires at this interval, not a convenience instrument. TRICARE wants the PDDBI at six months.
Update baselines, mastery criteria, hours, and the fading plan. A change in intensity needs a clinical reason.
Send it through the payer’s portal, save the confirmation, and diary the decision date. A missed decision clock is the first fact an appeal cites.
Decision clocks run in calendar days. Under CMS-0057-F, Medicare Advantage organizations, state Medicaid fee-for-service programs, Medicaid managed care plans and CHIP managed care entities send prior authorization decisions within 7 calendar days for standard requests and 72 hours for expedited ones, with extensions of up to 14 additional calendar days allowed. Medicaid managed care contracts carry the same 7 calendar day ceiling for periods that start on or after January 1, 2026. A packet that goes quiet is a signal to call.
Progress data the reviewer can read
One graph per goal is the floor. Maryland Medicaid began requiring graphics for all goals on April 1, 2026, and the data behind them has to show the collection method and the mastery criteria for that goal. Florida Medicaid asks for the same structure at reauthorization, because reviewers read trends rather than status words.
- Baseline, with the date it was taken and the observation behind it
- Target and mastery criteria a stranger can read
- Phase lines for every protocol change, dated
- Collection method, who took the data, sampling schedule
- A trend ending inside the payer’s freshness window, 30 days in Maryland
Session notes back the graphs. TRICARE’s documentation guide requires a progress note for every session that states the client’s clinical status, the techniques attempted, the response to treatment, and a narrative summary of progress toward plan goals. Lists of targets and percentages do not carry the story; the narrative has to explain the direction of the data. A technician documents progress within the session or against the previous session with the same provider. The supervisor’s protocol modification note covers overall progress to date, barriers, and goals already mastered.
TRICARE requires at least one 97155 session per month by the authorized ABA supervisor. Miss it and the stated penalty is a 10 percent recoupment on all ABA claims for that beneficiary across the six-month authorization. Reviewers look for the same pattern in commercial packets.
Where visual analysis shows inadequate progress across three sessions, the behavior analyst is expected to identify the cause. Document that thinking before a reviewer does it for you.the CASP practice guidelines for ABA treatment of autism
Outcome measures on the payer’s schedule
Standardized measures are the part of the packet that most often arrives late, because the instrument and the interval belong to the payer rather than to the clinician. TRICARE pairs the PDDBI with each six-month reassessment, the Vineland-3 and SRS-2 with the annual review, and a complete referral with an updated DSM-5 checklist including the level of support every two years. Vermont Medicaid wants the comprehensive assessment and treatment plan updated every six months, monthly progress notes, and one of the PEAK, VB-MAPP or ESDM instruments at least every six months.
- PDDBI parent and teacher forms every six months, TRICARE
- Vineland-3 annually, TRICARE, and every 12 months, Florida Medicaid
- SRS-2 annually, TRICARE
- BASC-3 PRQ with the initial assessment and every 12 months, Florida Medicaid
- PEAK, VB-MAPP or ESDM every six months, Vermont Medicaid
- DSM-5 checklist with a referral every two years, TRICARE
Ordering measures is part of the calendar. Instruments have their own intervals, and a payer that wants the PDDBI at six months will not accept a score from five months back. Put the measure dates on the same board as the authorization end dates, so the annual instruments land with the review that needs them.
A flat score is a question, not an automatic denial. Vermont tells providers it expects developmental domain scores to improve over time and that the recommended frequency, duration and location of services should change as a case moves. When a measure holds steady, the plan needs the clinical reason in writing: an emerging behavior, a medication change, a school transition, or a ceiling effect on the instrument.
The treatment plan update, section by section
The plan update is the argument, and TRICARE lists its contents rather than leaving them to chance.
- Identifying information, diagnosis date, and the date of the updated assessment
- Reason for referral with the current severity level
- Background: comorbidities, medications, school hours, other therapies
- Assessment summary naming each instrument and observation
- Measurable goals with a baseline and an ongoing measurement level
- Behavior intervention plan and caregiver goals
- Outcome measures, service recommendations with locations, signatures
Units change at renewal, and the plan has to carry the change. Maryland Medicaid caps 97151 at 32 units for an initial assessment and 12 units for a reauthorization, with more only where the clinical need is documented. A request to hold 20 hours a week needs the same justification as a request to raise them. Fading criteria and an estimated discharge date belong in the plan at every cycle, because a plan that never changes reads as a plan nobody reviewed.
When hours stay flat, the plan still has to move. Restate the baseline for each goal, name what changed in the teaching procedures, and show what has been faded or handed to caregivers. A renewal that reads exactly like the last one invites a reduction request, since nothing in it shows why the same intensity is still needed.
When the packet is denied: what the clock gives you
A denial does not end the authorization, but it consumes the runway before the expiration date. Beginning in 2026, impacted payers must give a specific reason for a prior authorization denial, which tells you which documentation gap to answer. TRICARE’s contractor reviews the plan against the clinical necessity standard and can hold a live consultation with the ABA supervisor before issuing a determination.
Keep the appeal record as tight as the original packet. The reason code points at the section that failed, and the answer is usually one document: a graph that was missing, an observation older than the payer allows, or a plan that never addressed a goal that stalled. Send it with a cover note that quotes the payer’s own criterion and the page it came from.
For Medicaid managed care, the enrollee has 60 calendar days from the date on the adverse benefit determination notice to file an appeal, and the plan has up to 30 calendar days to resolve a standard appeal, or 72 hours for an expedited one, with an extension of up to 14 calendar days where the rules allow. Medicare Advantage and Medicaid plans post annual prior authorization metrics, including approval and denial rates, which is a free read on how a plan treats ABA requests. Denial management starts with that data and a filing calendar nobody has to rebuild from memory.
The packet checklist, in the order a reviewer reads it
- Authorization end date and this cycle’s submission window
- Reassessment inside the payer’s freshness window, 30 days in Maryland
- One graph per goal, with baseline, mastery criteria and phase lines
- Progress narrative explaining the trend, the plateau and the protocol changes
- Outcome measures the payer requires at this interval, scored and dated
- Updated plan with baselines, hours, caregiver goals and fading criteria
- Supervision notes for every month of the authorization
- Signed consent, the prescription or referral, and any school IEP
- Submission confirmation, decision date and portal ticket
Two numbers tell you whether the process works: the share of reauthorization requests approved as submitted, and the average gap in days between the old expiration date and the new approval. Track both, and a denial stops being a surprise. Behavioral health revenue cycle management keeps the authorization dates, the instruments due and the approved plan version in one file per client.
Give the calendar one owner. A billing lead or a clinical director can hold it, as long as the dates and the measure intervals live in one place that does not depend on a single person’s memory.
ABA reauthorization questions
TRICARE accepts a reauthorization as early as 60 calendar days before the six-month authorization expires and no later than 30 days in advance. Requests filed inside 30 days are not back dated, so services delivered before the new approval are at risk of non-payment. Many payers want the concurrent request within 30 days of expiration.
Data for every behavior targeted for improvement, each with its own data table and graph. Florida Medicaid requires that plus a narrative discussion of progress and a justification for continuing at the requested intensity. Maryland Medicaid requires graphics for all goals, the collection method, the mastery criteria, and data dated within 30 days of the request.
Six months is the standard cycle. Maryland Medicaid preauthorizes ABA for a maximum of 180 days and requires a reassessment and a new preauthorization every 180 days, Florida Medicaid requires authorization at least every 180 days, and TRICARE issues six-month authorizations. A change of provider can force an earlier request.
Services delivered without an active authorization are exposed. TRICARE states that a provider who submits inside the 30-day window is at risk for non-reimbursable ABA services until the new authorization issues, and its contractor does not back date late submissions. Build the packet early enough that a payer request for more information cannot push the decision past the expiration date.
It depends on the payer. TRICARE pairs the PDDBI with each six-month reassessment and the Vineland-3 and SRS-2 with the annual review. Florida Medicaid expects the Vineland-3 and the BASC-3 PRQ with the initial assessment and every 12 months. Vermont Medicaid requires PEAK, VB-MAPP or ESDM at least every six months.
Say why, and say what changed. Florida Medicaid requires the provider to explain why clinically significant progress was not made and to describe the treatment changes meant to produce it. The CASP practice guidelines add a floor: where visual analysis shows inadequate progress across three sessions, the behavior analyst is expected to identify the cause.
Yes, and the timelines are short. For Medicaid managed care the enrollee has 60 calendar days from the date on the adverse benefit determination notice to file an appeal, and the plan has up to 30 calendar days to resolve a standard appeal, or 72 hours for an expedited appeal. Payers must now state a specific reason for a denial.
The bottom line
Reauthorization is a scheduled audit of whether the last six months produced measurable change and whether the record proves it. The payers that deny practices are rarely arguing about diagnosis; they are reading a graph, a plan update and a date stamp. Run the packet on a calendar, keep one file per client, and a lapsed authorization stops being a recurring loss. If the process depends on someone remembering a deadline, a billing and authorization review is the place to start.
Do your ABA authorizations renew on time, every time?
We work ABA and behavioral health revenue cycle end to end: authorization calendars, reassessment packets, documentation review, and the denials that follow a coverage gap. Send us a sample packet and one month of claims, and we will show you where the next one is likely to fail.
Request a free ABA billing auditThis article describes general billing and documentation practice rather than legal or clinical advice; requirements vary by payer and state, so confirm them against the current provider manual.
