What ABA Providers Can Learn from Medicaid Cuts and HIPAA Settlements - Join us Live at 8:00 AM

Posted 5 days ago      Author: 3 Pie Squared Marketing Team

Join Us Live Today at 8:00 AM Eastern!

ABA providers are navigating a tough stretch: reimbursement pressures on one side, compliance risk on the other. The recent North Carolina Medicaid changes and a high-profile HIPAA settlement highlight the same core message—practices need stronger systems for both revenue stability and data protection . This summary brings the two stories together, pulls out what actually matters in day-to-day operations, and gives you a focused plan you can act on this week.

Join Us Live on Facebook

Why this matters now

When rates fall and oversight tightens, the practices that hold steady are...

the ones that eliminate leakage in billing, shorten days in A/R, and keep HIPAA processes current and practical. Fragmented systems, undocumented workflows, and “we’ll fix it later” thinking become expensive very quickly. The good news: you don’t need a total rebuild to see meaningful improvement—you need a tight, prioritized plan and a team that will execute it.

North Carolina Medicaid Cuts: Why ABA Providers Must Act Now

North Carolina’s decision to reduce Medicaid spending means a 3% cut across providers and deeper reductions for autism services—up to 10% in some areas. For ABA practices already operating on thin margins, those percentages matter. Salaries, supervision, training, and rent don’t drop just because reimbursements do. Without an immediate operational response, the risk is obvious: cash flow tightens, access shrinks, and families feel the impact.

What the full article covers in depth: where revenue typically leaks in ABA (eligibility, charge entry, submissions, denials, A/R triage), how to read payer behavior from your reports, and quick wins that reduce preventable write-offs. The message isn’t “wait for a fix from the state”—it’s “harden your processes so you can keep delivering care while policy shifts play out.”

Go to the Full Article

HIPAA Lessons for ABA Providers: What We Can Learn from the Deer Oaks Settlement

OCR’s settlement with a behavioral health provider is another reminder that HIPAA isn’t a binder—it’s an ongoing program. Public reports indicated two incidents: a pilot portal that exposed patient information and a later breach tied to a compromised account. OCR said a thorough HIPAA risk analysis was missing. For ABA practices, the takeaways are clear: maintain a living inventory of where ePHI lives and flows, update risk analyses when systems change, and validate defenses with real testing (logging review, vulnerability scans, or pen tests when needed).

The full article lays out practical steps for ABA operations: map systems (EHR, billing, file shares, portals, telehealth), enforce MFA and least-privilege access, enable audit logging with regular review, confirm portals can’t be indexed publicly, train staff on realistic scenarios, and rehearse incident response so you’re not writing a plan in the middle of a crisis.

Go to the Full Article

What to do this week (practical, tight plan)

  1. Eligibility first. Verify benefits, copays, deductibles, and authorizations before sessions. Catching issues upfront is the cheapest “denial management” you’ll ever do.
  2. Clean charge entry. Align CPT coding (97151, 97153, 97155, 97156, etc.) with documentation; standardize workflows so rework drops.
  3. Denial triage, every week. Track top denial reasons by payer, fix the root cause, and resubmit promptly. Don’t let aging get old.
  4. HIPAA gap check. Inventory systems with ePHI, confirm MFA on admin/remote accounts, and ensure logging is enabled and reviewed.
  5. Portal exposure check. Require authentication, disable indexing/caching, and validate headers/robots so pages aren’t publicly discoverable.
  6. Schedule (or refresh) a risk analysis. If systems changed—or it’s been a year—update the analysis and roll findings into a simple, staged remediation plan.

RCM Support at 2.99% (designed for ABA)

Revenue loss from denials, missed eligibility, or slow A/R is avoidable. If you need a partner to tighten that system, our ABA Billing Services are open to early adopters at 2.99% of processed claims . This is not a black-box outsource; it’s a partnership with real people you can reach quickly, reporting you can trust, and a goal to train your team if you eventually want to bring billing in-house.

What’s included at 2.99%: Insurance eligibility & benefits verification; accurate charge entry; electronic/paper submissions (primary & secondary); payment posting; A/R follow-up; denial management; reporting & analytics; direct customer support.

Start Billing Intake

Why this approach works

Practices that weather policy changes do three things well: they capture every dollar they’ve earned, they prevent preventable denials, and they treat HIPAA as a living program that evolves with their systems. That combination keeps services stable for families, even when reimbursement shifts and compliance expectations rise. It’s not complicated—just disciplined, consistent, and transparent.

Join the conversation (and bring your questions)

We’ll walk through both deep-dives, share real examples of “what good looks like,” and leave time for Q&A. If you’re wrestling with eligibility chaos, payer quirks, portal setup, or audit logging, bring it. The goal is practical help you can use immediately.

Join Us Live on Facebook