Does your ABA clinic need a facility license in Louisiana? And how must records be kept?

When an ABA practice needs a facility license in Louisiana

Louisiana licenses behavioral health providers through the Department of Health's Health Standards Section as Behavioral Health Services Providers under R.S. 40:2151 and following, implemented at LAC 48:I Chapters 56 and 57. The license is defined by the services it covers. The Medicaid behavioral health manual requires a BHSP license for psychosocial rehabilitation, community psychiatric supportive treatment, and crisis intervention, and states that those services may not be performed by an individual who is not under the authority of an agency license. Applied behavior analysis is not on that list (R.S. 40:2151 et seq.; LAC 48:I.5601 et seq.; Medicaid Services Manual ch. 2).

ABA is covered instead under its own chapter of the Medicaid Services Manual, which sets its own provider qualifications and does not require a BHSP license. The definition of a BHSP in R.S. 40:2153 is written around mental health and addiction services, which the Louisiana licensing page treats in its discussion of why ABA sits outside that definition on its terms. The practical rule is that no Louisiana facility license reaches an outpatient ABA practice under either archetype, and the entry gates are the behavior analyst license, Medicaid enrollment, and MCO credentialing.

The two archetypes inside the Medicaid ABA chapter

The Medicaid ABA chapter is built around a licensed professional who supervises and a set of assessments that gate authorization, and the archetypes differ in who that professional is.

• The practice with in-house diagnostics. The chapter names the licensed psychologist and the licensed medical psychologist alongside the licensed behavior analyst as the professionals by whom or under whose supervision services must be provided. A psychologist on staff can therefore supervise the practice's ABA services in the psychologist's own right, and can participate in the comprehensive diagnostic evaluation the chapter describes, which for children with moderate screening scores may include categories of assessment the manual specifies. The psychologist's records are governed by the Board of Examiners of Psychologists' rules, which were not verified for this page.
• The ABA-only practice. Its licensed behavior analyst is the supervising professional, and where technician services are provided the manual requires supervision by a licensed behavior analyst. The diagnosis that supports medical necessity comes from outside the practice, and the manual describes the pediatrician's role in screening and diagnosis, so the ABA-only practice depends on referring physicians for the front of the chain.

Both archetypes work under the same authorization structure: the behavior identification assessment must be prior authorized by the beneficiary's MCO, additional assessments must occur at least every six months once services begin, and the authorization period for assessments may not exceed 180 days. The Louisiana Medicaid page covers the treatment plan template and the supervision ratios (Medicaid Services Manual ch. 4, rev. Feb. 14, 2025).

HIPAA, the 60-day breach clock, and the written reasons rule

HIPAA is the federal floor and applies uniformly. Louisiana layers a breach statute with a fixed clock and an unusual delay mechanism on it.

The same subsection provides that where notification is delayed for law enforcement or because measures are necessary to determine scope and restore integrity, the person must provide the Attorney General the reasons for the delay in writing within the sixty-day period, and the Attorney General shall allow a reasonable extension on receipt. The statute also permits a person to forgo notification where, after a reasonable investigation, it determines there is no reasonable likelihood of harm, provided it retains the written determination and supporting documentation for five years and produces them to the Attorney General within thirty days of a written request. A violation is an unfair trade practice. Because the state clock is sixty days and HIPAA's is sixty, the two run together; the Louisiana-specific step is the written reasons to the Attorney General for any delay, which HIPAA does not require (La. R.S. 51:3074(E), (F), (I), (J)).

The Medicaid ABA manual adds that providers must create, maintain, disseminate, store, retain, and dispose of records and data in accordance with applicable laws, regulations, and policies and in a manner that allows for the appropriate transition of services at any moment, and it incorporates the ethics requirements of the certifying board, the Louisiana Behavior Analyst Board, and the law. The Behavior Analyst Board's own rules at LAC 46:VIII were not verified for this page and should be read for confidentiality and records provisions.

Records retention: the manual's documentation rule and the floors to confirm

Louisiana's retention picture for ABA is a documentation rule with the period left to other law, and the other law was not verified against primary text for this page. The table states what is verified and flags what is not.

The one retention period verified on this page is the breach statute's five years for a no-harm determination, which is a compliance record rather than a clinical one. For the clinical record, build the schedule to the longest of the Medicaid provider agreement term once confirmed, HIPAA's six years, and commercial contracts, hold a child's record to at least the age of majority plus the underlying period as a practice standard, and add a litigation-hold overlay. The manual's session-level documentation rule is enforced through recoupment, and a record without start and stop times or a credentialed signature is a record that does not support the claim (Medicaid Services Manual ch. 4; La. R.S. 51:3074(I)).

Records ownership and custody on a change

Louisiana puts custody on the licensee and the enrolled provider, and the Medicaid ABA manual's instruction that records be kept in a manner that allows the appropriate transition of services at any moment is a custody rule in substance. Because no BHSP license is involved, the Department of Health's facility change-of-ownership process does not apply to an ABA practice; what applies is the Medicaid enrollment, which is personal to the enrolled provider and does not transfer, and the licensed professional's continuing duty for the records of that professional's clients. In an asset sale, custody must be negotiated so that a licensed custodian remains, the Medicaid term survives, the manual's transition-of-services standard is met for every active client, and the buyer's enrollment and MCO credentialing are in place before the buyer bills (Medicaid Services Manual ch. 4).

The MSO question

A management services organization that hosts the record system is a HIPAA business associate under a business-associate agreement in either archetype. Louisiana adds that the Medicaid ABA manual places the records duty on the provider and the licensed professional, so the MSO cannot be the custodian, and that the breach statute's sixty-day clock and written-reasons rule have to be allocated in the management agreement so that someone is responsible for the Attorney General letter inside the window. The Louisiana ownership page covers the fee terms that follow from the state's open ownership position.

Reading the Louisiana burden

Putting the pieces together, Louisiana is a light-facility, moderate-documentation state. On the lighter side, the BHSP license does not reach ABA, ownership is open, and the behavior analyst statute is a title-protection act. On the heavier side, the Medicaid ABA chapter's session-level documentation rules are specific and enforced by recoupment, the authorization cycle runs on 180-day and six-month clocks, and the breach statute's sixty days come with a written-reasons obligation to the Attorney General. The archetype decision changes who supervises and who can participate in the diagnostic evaluation, not whether a license is needed.

How this connects to the rest of your compliance stack

Facility licensure and records sit alongside several other decisions in this guide:

• Medicaid and place of service. The Medicaid ABA chapter's supervising-professional rule, MCO prior authorization, six-month reassessment, 180-day authorization limit, and session-level documentation are the operating structure of Medicaid ABA in Louisiana. See the Louisiana Medicaid page.
• Licensing and credentialing. The R.S. 37:3701 license is a title-protection act subject to sunset review in 2028, and the Medicaid chapter is what makes licensure operative for billing. See the Louisiana licensing and credentialing page.
• Entity and ownership. Louisiana's professional entity laws are profession by profession and none covers ABA, so the entity is ordinary and custody sits with the licensee and the enrolled provider. See the Louisiana entity page and the Louisiana ownership page.
• Practice sale and expansion. Non-transferable Medicaid enrollment, the manual's transition-of-services standard, and the sixty-day breach log with Attorney General correspondence are diligence items in any Louisiana transaction. See practice expansion and sale.

Getting set up in Louisiana: the sequence

1. Credential the professionals. Obtain Louisiana Behavior Analyst Board licenses, enroll with Medicaid, and credential with each MCO; if a psychologist will supervise, confirm the psychologist's enrollment.
2. Confirm the facility question. Confirm the practice delivers ABA under Medicaid Chapter 4 and none of the BHSP-licensed services in Chapter 2, so that no R.S. 40:2151 license is triggered.
3. Build the documentation system. Configure records to the manual's start-and-stop, credentialed-signature, and daily documentation rules, and use the LDH treatment plan template or a form that addresses all of its elements.
4. Build the privacy program. Implement HIPAA, set incident response to sixty days under R.S. 51:3074 with the written reasons to the Attorney General for any delay, and adopt the five-year retention of any no-harm determination.
5. Set the retention schedule. Confirm the Medicaid provider agreement term and the Board's rules, configure retention to the longest of those, HIPAA's six years, and commercial contracts, with a majority-plus practice standard for children and a litigation-hold overlay.
6. Fix custody and MSO terms. Write the manual's transition-of-services standard into policies and any sale agreement, keep MSO access under the licensed professional's control, and sign the business-associate agreement.

Louisiana facility and records variables at a glance

Frequently asked questions