From Policy Shifts to Legal Hits: ABA News Roundup – April 7, 2025

It’s been a busy few months in the ABA world. States are tightening and expanding regulations, new licensure pathways are opening up, and one provider found out the hard way that HIPAA compliance can’t be an afterthought. Here’s a quick roundup of the most important ABA business news from across the country.

Indiana Restructures Medicaid Coverage for ABA Therapy

To rein in surging Medicaid costs, Indiana introduced a tiered system for ABA therapy coverage, effective April 1, 2025. Children with autism now qualify for 30, 32, or 38 hours of weekly services depending on their diagnosis level. A lifetime cap of three years for comprehensive ABA was also implemented, though some continued support may be allowed based on medical necessity. The move aims to strike a balance between budget control and essential access—but it's sparked concern among providers and advocates alike.

Massachusetts Expands ABA Coverage for Children with Down Syndrome

In a landmark shift, Massachusetts now mandates that private insurers and MassHealth cover in-home ABA therapy for children diagnosed solely with Down syndrome. Governor Maura Healey signed the bill into law in January 2025, after years of advocacy by the Massachusetts Down Syndrome Congress. The law is set to take effect on January 1, 2026—and it's expected to serve as a model for other states. This is a huge win for families who were previously excluded from receiving support due to outdated insurance limitations.

New York Budget Proposal Sparks Alarm Over Autism Services

Governor Kathy Hochul’s proposed $252 billion budget includes a plan to slash Medicaid funding for ABA therapy—cutting Registered Behavior Technician (RBT) reimbursement rates from $70 to just $38 an hour. The aim is to save $30 million over two years, but critics say the move will gut critical services for low-income families. Providers warn that many clinics may close or lose staff, and lawmakers and advocacy groups are calling on the legislature to reject the cuts.

Maryland Clinic Fined for HIPAA Violations After Ransomware Attack

Green Ridge Behavioral Health agreed to a $40,000 settlement after a ransomware attack exposed the private health data of more than 14,000 patients. The incident revealed several HIPAA compliance failures, including insufficient risk analysis and lack of system monitoring. The Office for Civil Rights is now requiring the clinic to follow a three-year corrective action plan. This case is a strong reminder for all ABA providers: data protection isn’t optional—it’s essential.

Texas Approves QABA® for Behavior Analyst Licensure

In December 2024, Texas officially recognized the Qualified Applied Behavior Analysis Credentialing Board® (QABA®) as a certifying entity for licensure. This means professionals holding QBA® or QASP-S® credentials are now eligible to become licensed in Texas. The move diversifies certification options in the state and could help ease the ongoing workforce shortage in ABA. It’s a big win for expanding access and flexibility in the field.