ABA Business Insurance: A Buyer's Guide

ABA agency business insurance is one of those operational topics owners learn about reactively — usually after a payer requires proof of coverage they do not yet have, or after an incident makes them wish they did. This guide walks through what an ABA agency actually needs, what each policy covers, and where most agencies over- or under-buy.

This guide is not insurance advice. Talk to a licensed broker who specializes in behavioral health for specific recommendations. It is a working map of the categories so you can have an informed conversation with your broker.

The five policies that matter

For a typical ABA agency, five categories of insurance cover most operational risk:

1. Professional liability (malpractice). Covers claims arising from professional services — clinical errors, treatment plan disputes, supervision failures. The single most important policy for any clinical agency.
2. General liability. Covers third-party bodily injury and property damage on your premises or arising from your operations. Standard for any business.
3. Workers' compensation. Required by law in most states once you have employees. Covers employee injury on the job.
4. Cyber liability. Covers data breach response, regulatory fines, and third-party claims arising from a breach of PHI or other sensitive data.
5. Commercial property (if you have a center). Covers your physical office, equipment, and furniture against fire, theft, and other damage.

Beyond these five, additional policies exist (employment practices liability, directors and officers liability, commercial auto) but they are situational rather than universal.

Professional liability (malpractice)

This is the most-important policy and the one most likely to be required by payer contracts. What it covers:

• Clinical decisions and treatment plan disputes
• Supervision failures (e.g., RBT working outside scope of supervision)
• Allegations of misdiagnosis or improper treatment
• Failure to refer when required

Coverage limits to ask about:

• Per-occurrence limit (typically $1M minimum, often $2M required by payers)
• Aggregate limit (typically $3M minimum)
• Whether the policy is claims-made or occurrence-based (occurrence-based is preferable)
• Tail coverage (extended reporting period) for claims-made policies
• Whether the policy covers RBTs and BCaBAs working under BCBA supervision

The single most-asked question payers will hit you with: proof of professional liability coverage at $1M/$3M minimum. Buy it before approaching payers, not after they ask.

General liability

Covers bodily injury and property damage to third parties — a parent slips in your waiting room, a child damages a piece of furniture, a delivery person gets hurt on your premises. Coverage limits:

• Per-occurrence limit (typically $1M)
• Aggregate limit (typically $2M)

For agencies running in-home services, general liability is still relevant — incidents can occur in client homes or in transit between visits. Confirm coverage extends to those settings.

Workers' compensation

Required by law in most states once you have employees. Covers employee injuries on the job — including minor things (RBT trips during a session) and major things. Premium is typically a percentage of payroll.

Two operational notes:

• Misclassifying RBTs as 1099 contractors when they are functionally employees is a common workers' comp violation. State auditors look at this; the IRS looks at this too. Use the right employment classification.
• Even solo BCBAs sometimes need workers' comp for themselves depending on state and corporate structure.

Cyber liability

Cyber coverage matters more for ABA agencies than most operators expect because HIPAA breach response is expensive even for small breaches. Coverage typically includes:

• Breach response costs (forensics, notification, credit monitoring)
• Regulatory fines and penalties (HIPAA, state)
• Third-party claims arising from the breach
• Business interruption from cyber incidents

For an ABA agency, even a single laptop loss with unencrypted PHI can trigger five-figure response costs. Cyber liability is worth carrying. Coverage limits depend on size and PHI volume — typically $1M minimum, scaling up with agency size.

Commercial property (center-based agencies)

If you operate from a physical office or center, commercial property covers:

• Building (if you own)
• Tenant improvements (if you lease)
• Equipment, furniture, technology
• Business interruption from property damage

In-home-only agencies typically do not need this. Hybrid agencies need it for the office portion.

What you usually do not need (or need less of)

Some policies that brokers will sometimes pitch but that often are not worth the premium for small ABA agencies:

• Directors and Officers (D&O) liability. Important for agencies with outside investors or formal boards. Usually overkill for a solo-owner LLC.
• Employment Practices Liability Insurance (EPLI). Becomes important once you have 10+ employees. Below that, the premium often outweighs the risk.
• Commercial umbrella. Worth considering if you carry multiple primary policies and want extended limits, but not the first thing to buy.
• Specialty policies for ABA-specific risks. Most ABA-specific risks are covered by professional and general liability. Be skeptical of bundled "ABA agency special policies" unless your broker specifically explains what they cover beyond the standard set.

Total cost expectations

For a small ABA agency (1–5 providers), realistic annual premium ranges:

• Professional liability: $1,500–$5,000
• General liability: $500–$1,500
• Workers' compensation: percentage of payroll (varies dramatically by state, typically 1–3%)
• Cyber liability: $800–$2,500
• Commercial property: $500–$2,000 if you have a center

Total: $3,000–$10,000+ for a small agency. Larger agencies scale proportionally.

How to buy

Two practical steps:

1. Find a broker who specializes in behavioral health. General small-business brokers often miss ABA-specific risks and policy structures. Ask for references from other ABA owners.
2. Get quotes from at least three carriers per policy. Premiums vary dramatically. Annual re-shopping is worth the time.

How GoodABA fits in

Business insurance is outside GoodABA's scope. What GoodABA does cover is the operational documentation that insurance carriers and their counsel will ask about during any claim — credential tracking, supervision documentation, signed consents, HIPAA-eligible communications. Clean operations make insurance claims easier to defend.

FAQ

Do payers require proof of insurance?

Yes — most commercial payers require professional liability at $1M/$3M minimum during credentialing. Some require additional policies. Confirm during credentialing.

Can I share a policy with another agency?

No — professional liability follows the agency entity. Each entity needs its own policy.

How much should I budget for insurance in year one?

For a 1–3 provider startup ABA agency, plan for $3,000–$8,000 in annual premiums across the core policies. Larger or center-based operations scale proportionally.

What happens if I do not carry workers' comp and an employee is injured?

In most states, you are personally liable for the medical costs and lost wages, and the state can impose additional fines. The premium is essentially always cheaper than the alternative.

Related guides

• ABA Insurance Billing Guide
• ABA Prior Authorization Process: A Working Playbook
• ABA Claim Denial Appeals: Operational Playbook