Key Takeaways
- Centers for Medicare & Medicaid Services (CMS) released the State Medicaid & CHIP ABA Toolkit and the ASD-ABA Data Book on August 4, 2026; both are guidance for state agencies, not federal regulation.
- CMS states that 40 hours of ABA per week is not a best practice and asks states to stop authorizing high intensity by default.
- The toolkit offers 10, 20, and 30 hours per week for DSM-5 severity Levels 1, 2, and 3 as an illustrative example of how service intensity might be aligned with clinical severity.
- CMS highlights conflict-of-interest concerns when organizations both diagnose autism and provide ABA, pointing states toward safeguards such as disclosure of financial relationships, avoiding compensation tied to referral volume, and monitoring referral patterns.
In August 2026, the Centers for Medicare & Medicaid Services (CMS) released two companion documents every autism diagnostician and ABA provider should have on their radar: the State Medicaid & Children’s Health Insurance Program (CHIP) Applied Behavior Analysis (ABA) Toolkit and the accompanying ASD-ABA Data Book. Together, they’re the most detailed federal look yet at how autism care is diagnosed, delivered, and paid for in Medicaid and CHIP and they signal where the industry is headed: toward outcomes, and away from unchecked volume.
What the CMS ABA Toolkit Is and Isn’t
The ABA Toolkit is not a regulation and doesn’t mandate ABA or any other treatment modality for ASD. It’s a resource for state Medicaid and CHIP agencies to update their coverage, payment, and oversight policies, informed by a review of 264 literature sources, 240+ state Medicaid policies, and input from state officials, providers, and advocates. States decide how, and whether, to act on it.
Its seven chapters cover cost/utilization trends, treatment planning and outcome measurement, coverage authorities, payment approaches, provider qualifications, utilization management, and fraud/waste/abuse prevention. The throughline: tie coverage and payment more tightly to individualized need and documented outcomes, and apply more rigor to utilization review.
The Data Book explains the urgency. Between 2021 and 2025, ASD diagnoses among Medicaid/CHIP beneficiaries grew 67%, from 1.15 million to 1.92 million, while ABA spending grew 421% from $1.94 billion to $10.1 billion. Spending outpaced diagnosis growth more than six to one. Average weekly hours climbed 22 percent, to 17.33 in 2025. Audits in seven states have identified at least $198.4 million in improper ABA payments, part of what pushed CMS to act.
The toolkit doesn’t attribute this growth to one cause. Earlier diagnosis, expanded access for previously underserved populations, and more intensive treatment for higher-severity presentations are all contributors to increased cost, alongside a fee-for-service payment structure that promotes maximizing hours utilization.
Main Themes: Outcomes Over Volume, Closer Scrutiny of Utilization
The clearest theme is a pivot away from treating hours as a proxy for quality. CMS is explicit that higher intensity doesn’t reliably produce better outcomes, citing research finding no association between service hours and goal attainment past moderate intensity. The toolkit discourages defaulting to high-hour authorizations and flags 40-hour weekly schedules as inconsistent with best practice. CMS asks states to tie hours to an individualized treatment plan built around measurable goals, supported by a standardized outcome instrument like Vineland-3, ABLLS-R, or AFLS vs. provider-created measures.
That’s paired with a more formal utilization management framework: prior authorization, reauthorization review, and closer scrutiny for higher-intensity requests. CMS indicates that red flags reviewers should watch for include: identical treatment plans across clients, reevaluations that don’t reflect real progress, and rising hours without documented improvement. As an illustrative example the toolkit describes how authorized hours might vary by DSM-5 severity level, roughly 10, 20, and 30 hours per week for Levels 1, 2, and 3, rather than defaulting to a single number for every child.
Which States Have Already Tightened ABA Hour Regulations?
States are already moving in this direction. North Carolina recently enacted legislation in April 2026 that requires separate approval and quarterly reauthorization for treatment plans that recommend more than 16 hours/week. Nebraska has a 30-hour weekly cap effective February 2025. California’s Department of Health Care Services has proposed heightened documentation once a request exceeds 25 hours/week, in a draft All Plan Letter circulated in June 2026. These policy proposals converge with the research: intensity above roughly 20-25 hours/week hasn’t been reliably linked to better outcomes. Diagnosticians should be cautious about recommending intensities above 25 hours/week without a clear, individualized rationale in the record. “More hours” is no longer a safe default, and states are increasingly positioned to ask why.
CMS recognizes that documentation and authorization burden are not cost-free. The toolkit acknowledges families already wait up to two years between screening and diagnosis in many areas. CMS presents oversight and timely access as goals states need to balance without one outweighing the other.
What This Means for Autism Diagnosticians
Two things stand out for diagnosticians: documentation and independence from ABA treatment compensation. First, documentation carries more weight in determining whether services continue: CMS wants evaluations and treatment plans that clearly support medical necessity and individualized goals, not templated paperwork. Second, CMS drew a parallel to the Stark Law for organizations delivering both diagnosis and ABA treatment: disclosure of financial relationships, no compensation tied to referral volume, and audit-based monitoring of referral patterns. It stopped short of a structural firewall requirement, but states are likely to ask more pointed questions about how those functions are financially separated. Diagnosticians with a clean, documented evaluation process, and a clear line between diagnosis and any financial stake in treatment, will be best positioned.
What Diagnosticians and Providers Should Do Now
The toolkit affirms that ABA works when matched to need. What’s shifting is what “matched to need” must look like on paper, and how quickly. States without hour caps or documentation standards are asking CMS for clearer guidance, and watching North Carolina, Nebraska, and California test their approaches. We expect several more states to follow with similar policies within the next 1–2 years. The smart move isn’t to wait and see which state is next. Treat intensity above 25 hours/week as the exception, not the default, and start building supporting documentation and systems to track outcomes now to best prepare for tighter policies and greater scrutiny of high-intensity programs.
References
Centers for Medicare & Medicaid Services. (2026, August 4). CMS Launches New State Toolkit to Protect Children with Autism, Strengthen Oversight of Applied Behavior Analysis Services [Press release]. https://www.cms.gov/newsroom/press-releases/cms-launches-new-state-toolkit-protect-children-autism-strengthen-oversight-applied-behavior
Centers for Medicare & Medicaid Services. (2026). State Medicaid & Children’s Health Insurance Program (CHIP) Applied Behavior Analysis (ABA) Toolkit. Published August 4, 2026. https://www.medicaid.gov/medicaid/downloads/autism-services-aba-toolkit.pdf
Centers for Medicare & Medicaid Services. (2026, August). Autism Spectrum Disorder and Applied Behavior Analysis Data Book. Medicaid.gov Autism Services. https://www.medicaid.gov/medicaid/benefits/autism-services
