CMS’s New Medicaid ABA Toolkit, Explained: What Families and Providers Need to Know in 2026
On August 4, 2026, the Centers for Medicare and Medicaid Services (CMS) released a 173-page toolkit for state Medicaid and CHIP agencies.
Headlines called it a “crackdown” on autism therapy. Here is the calmer version: the toolkit creates no new federal requirements, and does not cut hours, cancel coverage, or change what your child is eligible for today.
What it does is give states a detailed blueprint for how ABA services should be documented, supervised, paid for, and reviewed going forward. That blueprint is worth understanding now, before individual states start adopting pieces of it.
What Is the CMS ABA Toolkit?
The State Medicaid and Children’s Health Insurance Program Applied Behavior Analysis Toolkit is a resource document, not a regulation.
CMS built it to help state Medicaid and CHIP agencies design, manage, and oversee ABA benefits for children with autism spectrum disorder (ASD), organized into seven chapters covering clinical standards, coverage, payment, provider qualifications, and fraud prevention.
States are not required to adopt any part of it. But it signals clearly where federal attention is headed, which makes it worth reading for anyone connected to ABA care.
What the Toolkit Actually Covers
Four themes run through the entire document, and together they explain why states are paying attention.
Matching hours to the child, not a formula. CMS pushes states away from blanket hour prescriptions, toward intensity reflecting each child’s clinical picture.
Raising the bar on who delivers care. States are asked to tighten how ABA providers are credentialed, licensed, and supervised.
Giving states tools to catch improper billing. The toolkit helps state agencies spot billing patterns that suggest waste or fraud early.
Building self-review for states. CMS includes checklists states can use to evaluate their own ABA policies against the toolkit’s recommendations.
Why Now: The Numbers Behind the Toolkit
The numbers explain urgency. Medicaid and CHIP spending on ABA rose from $1.94 billion in 2021 to $10.11 billion in 2025, a 421% increase, while the number of children with an ASD diagnosis who received ABA services grew by 189% over the same period, a much smaller share of the increase.
The number of providers billing for ABA jumped from 29,293 in 2021 to 134,186 in 2025, and average annual spending per recipient climbed from $8,093 to $21,203 in the same window.
Which States Have the Highest ABA Spending?
State level data from 2023 to 2025 shows spending is far from evenly distributed. Florida alone accounted for $6.57 billion, nearly $5 billion more than the next highest state.
Top 5 states by ABA spending, 2023 to 2025: Florida, $6.57 billion. Indiana, $1.65 billion. North Carolina, $1.53 billion. Georgia, $1.36 billion. Pennsylvania, $1.25 billion.
This growth, combined with fraud investigations tied to ABA billing, pushed CMS to build a national framework.
What It Means for Medicaid and Families
If your child currently receives ABA through Medicaid or CHIP, nothing changes automatically. A few provisions are worth understanding before your next reauthorization.
🔶 EPSDT protections are still intact. Medicaid’s EPSDT benefit still applies. Children under 21 remain entitled to medically necessary services, and no state can set up a hard hour or dollar cap overriding that entitlement.
🔶 The 40-hour question. CMS says 40 hours of ABA per week should not be a default. The reasoning is not about cost: children need time for eating, napping, and toileting. This does not ban 40-hour plans, but high hour requests will need clearer documentation tying hours to a child’s goals. The national average in 2025 was 17.33 hours per week.
🔶 Telehealth rules may shift first. Telehealth suits caregiver coaching, data review, and some supervision, but is discouraged for initial diagnostic evaluations and intensive treatment blocks.
What This Means for Providers
For practice owners, BCBAs, and clinical leaders, the toolkit reads less like a warning and more like a preview of where audits and payer expectations are heading. Each area below covers what changes operationally and where there is a potential upside.
Individualized treatment plans under closer review. CMS lists specific elements in a strong Individualized Treatment Plan should include assessment results, measurable and functionally relevant goals, hours tied to those goals, and a plan to monitor and adjust progress over time. Red flags auditors may look for include identical documentation across multiple clients, excessive hours without documented progress, and high staffing ratios without clinical justification.
What changes operationally: interchangeable ITP templates need rebuilding to justify hours individually. Potential upside: individualized plans already get a documented audit defense advantage.
Supervision and credentialing expectations. CMS recommends one to two hours of case supervision for every 10 hours of direct treatment, roughly 10 to 20%. Practices using a three-tier model should maintain BCBA supervision across at least 25% of the caseload, and state licensure is highlighted as a growing expectation, with BACB certification treated as a baseline rather than a full substitute for it.
What changes operationally: bare minimum supervision may mean hiring more BCBAs or trimming caseloads to hit the benchmark. Potential upside: a defined ratio gives providers something concrete to negotiate rates around.
Accreditation is gaining ground. The toolkit names the Autism Commission on Quality (ACQ) as an ABA-specific accreditor, describing it as the currently active body in this space. Massachusetts has already signaled upcoming requirements around accreditation, and other states are likely to follow that pattern over the next year or two.
What changes operationally: accreditation takes months of application, documentation, and staff training. Potential upside: starting early means controlling the timeline instead of scrambling to a state deadline.
What Practice Owners Should Review Now
Practice owners have a broader operational picture to manage. Based on the above, that review can reasonably include:
🔶 Treatment plan templates and how individualized they are across clients
🔶 BCBA caseload size and supervision capacity against the 10 to 20% benchmark
🔶 Authorization and reauthorization workflows and documentation timelines
🔶 Consistency of documentation practices across clinicians and locations
🔶 How non-client-facing BCBA time is currently tracked and accounted for
🔶 Billing and compliance processes, including EVV readiness
🔶 Accreditation readiness, especially in states signaling new requirements
🔶 State-specific Medicaid policy changes that may follow this toolkit
Utilization Management and Fraud Prevention
CMS recommends a standard review structure built around prior authorization before services begin, concurrent review while services are ongoing, and reauthorization near the end of each approved period. What changes operationally: staff time needs to be budgeted for authorization of paperwork across the full treatment cycle, not just at intake.
Patterns that can trigger scrutiny include very high daily hour totals, unusual technician-to-supervisor ratios, and rapid billing growth after enrollment. Electronic Visit Verification (EVV) is a growing tool states may use to confirm billed services were delivered. Importantly, CMS separates documentation gaps from intentional fraud: a missing note is a systems issue to fix, not automatic evidence of wrongdoing.
What To Do Next
For families: ask your provider how your child’s hours connect to measurable goals, how progress is tracked at each reauthorization, and what your state allows for telehealth. Well-structured ABA therapy programs are typically built around exactly these kinds of measurable, specific goals.
For providers: review treatment plans against the elements CMS outlines, check supervision ratios against the benchmark, review accreditation standing, and begin measuring how much BCBA time goes to data review, treatment planning, protocol changes, reauthorizations, and technician training, along with how that time is currently documented.
A Final Note for Families and Providers
This toolkit does not change your child’s coverage today, and it creates no new federal rules providers must follow immediately.
It does show where state Medicaid programs are likely headed over the next one to two years.
Download the official 173-page CMS ABA Toolkit directly from here.
Enjoying Reading?
Join Our Weekly Newsletters!
Subscribe now to stay updated with our latest email updates.
Frequently Asked Questions & Answer
Does the CMS ABA Toolkit cut Medicaid coverage for autism therapy?
No, it is guidance for states, and EPSDT protections for children under 21 remain in place.
Is 40 hours of ABA therapy per week no longer allowed?
40 hour schedules are not banned, but should not be a default, and high hour requests need documentation showing why that level of care is medically necessary.
Will this toolkit affect telehealth ABA sessions?
It may, depending on your state. CMS recommends limiting telehealth for initial diagnosis and comprehensive assessments, while supporting its continued use for caregiver coaching, data review, and some supervision.
Which state has the highest Medicaid ABA spending?
Florida had the highest ABA spending of any state between 2023 and 2025, at $6.57 billion, nearly $5 billion more than Indiana, the second highest state.
Does this toolkit create new national requirements for ABA providers?
No, CMS was explicit that it does not establish new federal requirements or a national standard of care. Changes depend on whether states adopt the recommendations.
Will BCBAs get paid for non-client-facing work like data review and treatment planning?
Not through this toolkit, which does not address CPT coding at all. Separately, CMS has proposed coding changes for 2027 that touch on some non-face-to-face clinical work, but that proposal is not final, is not part of the Medicaid ABA Toolkit, and any impact on Medicaid reimbursement would depend on state and payer adoption. It is a development to monitor, not a confirmed new reimbursement pathway.
What should parents ask their ABA provider after this announcement?
Parents can ask how their child’s treatment plan ties specific hours to measurable goals, how often progress is reassessed, and what documentation the provider keeps to support continued authorization.
Please Note: The content of this blog is for informational purposes only and should not be considered a substitute for professional medical advice, diagnosis, or treatment. Consult a qualified healthcare professional for personalized guidance tailored to your specific situation.
Esha Bhasin
Esha Bhasin is the award-winning CEO & Founder of Autism Center of Excellence (AutismCOE). She was honored with the 2026 Triangle Business Journal Corporate Leadership Award. Before founding AutismCOE, she spent over nine years as a Senior Consultant at KPMG US. She specialized in Medicaid and State Public Health. Inspired by her own family's autism journey, she founded AutismCOE to improve access to quality autism care. Esha writes about autism care, Medicaid policy, and healthcare operations.
