ABA Prior Authorization Process: A Working Playbook

Prior authorization is the gate between the family signing intake paperwork and the clinic getting paid for service. Almost every commercial payer and most Medicaid plans require an authorization on file before 97153 hours can be delivered, and the typical denial story is not a clinical disagreement — it's a packaging problem. The assessment was incomplete, the requested hours weren't justified, the clinical rationale didn't reference the payer's medical-necessity language, or the wrong form was used.

This guide walks through the operational mechanics of running ABA prior authorizations consistently — what payers expect, how to assemble the request, how to handle denials, and how to keep authorizations renewing on time so service doesn't lapse.

Step 1 — Verify benefits before you assess

Before the BCBA starts the assessment, the agency should know:

Whether the plan covers ABA at all (most do, but not all)
The diagnostic requirement (almost always autism spectrum disorder with a recent diagnostic eval)
Whether prior authorization is required (almost always yes — but some self-funded plans don't require it)
The plan's medical-necessity criteria document (most payers publish this; pull and read it)
Authorization duration (90 days, 6 months, 1 year — varies by payer)
Hour caps and any service-mix restrictions

This step lives upstream of the assessment, not parallel to it. Running an assessment for a plan that doesn't cover ABA wastes 12 hours of BCBA time and creates a hard family conversation. See insurance verification for the full benefits-check workflow.

Step 2 — Run the assessment with the prior auth in mind

The biggest single failure mode in ABA prior auths is BCBAs running clinically excellent assessments that don't address payer-specific medical-necessity requirements. The two most common gaps:

Standardized assessment scores not included. Most payers require a recent VB-MAPP, ABLLS-R, AFLS, or PEAK score in the prior-auth packet. If the BCBA didn't run one, the request bounces.
Behavior frequency/intensity data missing. Payers want quantified data on the behaviors driving the request. "Aggression" without frequency or severity context reads as vague clinical language.

Build the assessment template to surface what payers ask for, not just what's clinically interesting. The assessment can do both, but it must do both.

Step 3 — Write the medical-necessity letter to the payer's standard

Each payer has a medical-necessity criteria document. Read it. Map the assessment findings explicitly to the payer's language. If the payer says "documented behaviors that significantly interfere with adaptive functioning," the medical-necessity letter should use those exact words and tie them to specific assessment findings.

A defensible medical-necessity letter typically includes:

The diagnosis and date of diagnostic evaluation
Standardized assessment results (with scores)
Specific target behaviors with frequency/intensity data
Goals and proposed interventions
Recommended service hours (direct, supervision, family training) with justification
Expected outcomes and measurement plan
Statement that less-intensive interventions have been considered or attempted

Length matters less than fit-to-criteria. A two-page letter that lines up cleanly with the payer's medical-necessity document gets approved more often than a five-page letter that doesn't.

Step 4 — Submit the request through the right channel

Each payer has a preferred channel:

Provider portal (most common): Direct upload of the request form + supporting documents
Fax (still common for Medicaid): Cover sheet + form + assessment + clinical notes
Specialty utilization review vendor (some payers): Magellan, eviCore, Carelon, Optum behavioral health all run as separate prior-auth processors for some plans

Submitting through the wrong channel creates 1–3 week delays. Maintain a per-payer playbook with the current submission channel, the form template, and the contact for follow-up.

Step 5 — Track the request and follow up actively

Authorizations don't auto-resolve. The clinic needs to know:

When was the request submitted?
What's the payer's stated turnaround time?
When was the last follow-up?
What's the expected approval date?

Most payers have stated turnaround times of 14–30 days for non-urgent requests. After day 7 with no response, follow up. After day 14, escalate. Quiet requests are forgotten requests.

Track this on the client record so the BCBA, scheduler, and admin all have the same view of authorization state.

Step 6 — Handle the common denial reasons

Most ABA prior-auth denials fall into a small set of categories:

Insufficient medical necessity documentation. Fix: add behavior frequency data, standardized scores, or specific intervention rationale. Resubmit with addendum.
Wrong form / wrong codes. Fix: re-package using the payer's required forms. Common with payers who recently changed their authorization process.
Hours requested exceed plan limits. Fix: either negotiate a smaller authorization or request a single-case agreement (SCA) for additional hours with documented clinical justification.
Diagnosis not in plan's covered list. Fix: this is usually a benefit-design problem, not a packaging problem. Confirm with the payer that ABA isn't covered for this plan year and have a hard conversation with the family.
Step-therapy / less-intensive-intervention requirement. Fix: document what less-intensive interventions have been tried (school-based services, parent training, social skills groups) and why they were insufficient.

The pattern: most denials are addressable in 2–5 business days if the agency has a clean appeals workflow. See claim denial appeals for the parallel process on billing-side denials.

Step 7 — Schedule renewals before authorizations expire

Authorizations expire. When they do, billed hours stop counting until a new authorization is in place. The single biggest avoidable cash-flow disruption in small ABA clinics is reactive renewals — the BCBA discovers the auth expired three weeks ago and now has 60 hours of unpaid service.

Renewal cadence:

45 days before expiration: BCBA puts a re-assessment on the calendar
30 days before expiration: Re-assessment completed, medical-necessity update drafted
21 days before expiration: Renewal request submitted to payer
7 days before expiration: Confirmation of approval; if not approved yet, escalate

GoodABA's task automation handles the cadence — renewal tasks fire on the right day relative to authorization expiration, routed to the BCBA and admin together.

Step 8 — Document the denied or modified authorizations

When a payer approves fewer hours than requested or denies entirely, document the reasoning. This matters for two reasons:

Family conversation: "The payer approved 15 hours/week instead of the 25 we requested. Here's what the payer cited..."
Future appeals: When the next renewal request goes in, the medical-necessity letter should address what the payer pushed back on last time. "Following the prior reduction, we observed [outcome] which supports the original request..."

This documentation becomes part of the client record and informs every future authorization decision.

How GoodABA helps

GoodABA's intake forms, task automation, and client portal carry the operational burden of authorizations: assessment-stage tracking, automated renewal task creation, document storage tied to the client record, and family-facing visibility into where their authorization stands. The clinical work — writing the medical-necessity letter, framing the assessment for the payer — is yours. GoodABA makes sure the operational scaffolding doesn't drop the ball.

FAQ

How long does ABA prior authorization typically take?

Standard turnaround is 14–30 days for non-urgent requests. Expedited reviews (when the request meets payer criteria for urgency) can be 72 hours. Most denials are recoverable within an additional 5–10 days if the agency has a clean appeals workflow.

Do I need a new authorization every time the treatment plan changes?

Material changes to the treatment plan (significant hour increases, new service codes, new behaviors) typically require an authorization update. Minor adjustments within the existing authorization usually don't. Read the payer's specific guidance.

What's a single-case agreement (SCA)?

An SCA is a one-off agreement with a payer for service that falls outside the standard plan structure — often used when an out-of-network provider needs to deliver service that isn't otherwise authorized, or when requested hours exceed standard plan caps with strong clinical justification.

Can I bill for the assessment without prior authorization?

Most payers require authorization for 97151 (assessment) too. Some allow a small initial assessment without authorization; check the specific plan. Don't assume — verify for each payer.

What happens if I deliver service after the authorization expires?

The hours typically don't get paid. Some payers allow retroactive authorization with documented clinical justification, but this is the exception. The operational answer is: don't let authorizations lapse.