Does your ABA clinic need a facility license in Michigan? And how must records be kept?

When an ABA practice needs a facility license in Michigan

For a standard outpatient ABA practice, Michigan does not require a separate facility license, so the load sits on practitioner licensing rather than on a building survey. Behavior analysts and assistant behavior analysts are licensed through LARA under Public Act 403 of 2016, a state license built on maintaining BACB certification, and registered behavior technicians work under their supervision (Michigan LARA, 2016 PA 403; BACB certification). LARA's Bureau of Community and Health Systems licenses specific facility types, such as substance-use treatment facilities, nursing homes, and adult foster care, but an outpatient ABA clinic is not one of them. The physical-plant licensing question is therefore light. The Michigan complexity lies elsewhere, in how Medicaid services are delivered, which the next section addresses.

The real hurdle: the public PIHP and CMHSP system

Michigan operates one of the most distinctive behavioral-health delivery systems in the country. Medicaid specialty behavioral health, including the autism benefit and ABA, is delivered through Prepaid Inpatient Health Plans (PIHPs) and Community Mental Health Services Programs (CMHSPs), public entities designed into the Michigan Mental Health Code and tied to county government (Mich. Mental Health Code, MCL 330.1001 et seq.). For an ABA practice, this changes the nature of the entry hurdle:

• Public-agency contracting, not a building license. Rather than obtaining a facility license, a Medicaid ABA provider must enroll in CHAMPS, the state Medicaid system, and separately enroll and contract within the PIHP/CMHSP specialty system, meeting that system's provider qualifications (CHAMPS; PIHP/CMHSP provider qualifications).
• Dual-system billing. Michigan splits responsibility between Medicaid Health Plans and the PIHP/CMHSP system, so behavioral-health revenue-cycle and encounter-reporting requirements are unusually complex, with both traditional claims and PIHP encounter reporting in the same population.
• A system in flux. A Mental Health Framework rollout and a PIHP reprocurement are reshaping the system, and regional differences mean the same practice can face different contracting requirements across CMHSP regions.
• Program-type licensure still applies to higher-intensity settings. Residential, day-program, and substance-use configurations map to their own LARA licensure categories, which an outpatient ABA clinic does not trigger.

The practical rule is that Michigan replaces the facility-license question with a public-agency contracting question: Medicaid participation is gated not by a building survey but by CHAMPS enrollment and PIHP/CMHSP qualification, which is where the real administrative weight sits.

HIPAA, the Mental Health Code, and MDHHS contract terms

HIPAA is the federal floor and applies uniformly. Michigan then layers two additional sources of privacy obligation on an ABA practice:

• The Mental Health Code confidentiality rules. The Code protects the confidentiality of information acquired in the course of providing mental health and developmental-disabilities services and limits disclosure, a state-law obligation distinct from HIPAA that applies to recipients in the public system (MCL 330.1748).
• MDHHS contract privacy terms. Providers serving Medicaid or the behavioral-health population operate under MDHHS contracts that bundle privacy clauses extending beyond the federal minimum, including workforce training on PIHP behavioral-health data handling and compliance with state data-exchange specifications. Michigan providers should treat MDHHS privacy audits as a near-certain event and be able to produce a security risk assessment, asset and business-associate inventories, and training logs on demand (MDHHS contract terms).

The operational takeaway is that an ABA practice in Michigan must meet HIPAA, the Mental Health Code confidentiality rules, and its MDHHS contract obligations, applying the stricter standard at each point and maintaining audit-ready documentation. The general medical-records access rules under the Michigan Medical Records Access Act also apply to patient access requests.

Records retention: the minor rule governs

ABA practices generate substantial documentation, and retention obligations come from several sources at once, with the longest applicable one governing.

For pediatric ABA, the minor rule governs and, layered with Medicaid and PIHP audit requirements, means records must be kept securely for many years after a child's last service (Michigan medical-records retention; MDHHS/PIHP requirements). Build your retention schedule to the minor rule and the litigation-hold overlay, confirm the exact periods with counsel and your PIHP contract, and do not let the shorter HIPAA-administrative period drive early destruction.

Records ownership and custody on a change

Michigan treats the licensed clinical entity (or provider) as the custodian of patient records, and in the public system records are held within the CMHSP or its contract agency (Michigan custody rules; MCL 330.1748). Records cannot be transferred to a non-licensed entity, and in a change of ownership, particularly an asset sale where the clinical entity is not itself part of the transaction, custody must be specifically negotiated so a licensed custodian remains responsible and recipients retain access and confidentiality protections. The public-system overlay means a Medicaid provider should also confirm how records and obligations are handled under its PIHP/CMHSP contract on any change. Plan custody arrangements before a sale or restructuring.

The MSO question

Many ABA practices use a management services organization (MSO) for administrative infrastructure, including the systems that hold records. Under HIPAA, an MSO that handles PHI is a business associate governed by a business-associate agreement. Michigan adds that any access to records must also satisfy the Mental Health Code confidentiality rules and the practice's MDHHS contract privacy terms, and that the MSO cannot be the licensed records custodian (MCL 330.1748; MDHHS contract terms). The practical effects are that the MSO needs a HIPAA business-associate agreement, that MSO access must fit the Mental Health Code and contract obligations, and that the clinical entity remains the custodian. Structure the MSO relationship accordingly, and account for Michigan's ownership rules when doing so.

Reading the Michigan burden

Putting the pieces together, Michigan is a moderate-burden state whose weight sits in an unusual place. On the lighter side, there is no facility license for outpatient ABA, and the practitioner credential is a LARA behavior-analyst license built on national certification, so the building-and-credential entry is comparatively light. On the heavier side, Medicaid participation runs through a complex public PIHP/CMHSP system with dual-system billing and region-by-region contracting, the Mental Health Code and MDHHS contracts add privacy obligations and near-certain audits on top of HIPAA, and the minor-records rule extends retention well beyond the HIPAA-administrative period. The practical read is that Michigan's administrative complexity is concentrated in the public delivery system and its privacy-and-audit expectations rather than in facility licensure. None of this is legal advice; it is the structure you would design your compliance program around with counsel.

How this connects to the rest of your compliance stack

Facility licensure and records sit alongside several other decisions in this guide:

• Medicaid and place of service. The PIHP/CMHSP public-delivery system is the defining feature of Michigan Medicaid ABA, and place of service interacts with it. See the Michigan Medicaid page, which treats the public system and place of service in detail.
• Licensing and credentialing. Michigan's LARA behavior-analyst license, built on BACB certification, plus PIHP/CMHSP provider qualification for Medicaid, is the credentialing story. See the Michigan licensing and credentialing page.
• Entity and ownership. Michigan's ownership rules and the records-custodian requirement shape how the entity and any MSO are structured. See the Michigan entity page and the Michigan ownership page.
• Practice sale and expansion. Records custody and PIHP/CMHSP contract handling are diligence items in any Michigan transaction. See practice expansion and sale.

Getting set up in Michigan: the sequence

1. Credential the analysts. Maintain the LARA behavior-analyst license and the underlying BACB certification, and meet PIHP/CMHSP provider qualifications.
2. Form the entity and confirm the facility question. Form the corporate entity and confirm that your outpatient configuration does not require a LARA facility license.
3. Enroll in the public system. Complete CHAMPS Medicaid enrollment and the separate PIHP/CMHSP enrollment and contracting for your region.
4. Build the privacy program. Implement HIPAA plus the Mental Health Code confidentiality rules and MDHHS contract privacy terms, with audit-ready documentation.
5. Set the retention schedule. Configure retention to the minor rule and your Medicaid/PIHP requirements, with a litigation-hold overlay.
6. Fix custody and MSO terms. Ensure the licensed entity is the custodian, the business-associate agreement is in place, and access fits the Mental Health Code and contracts.

Michigan facility and records variables at a glance

Frequently asked questions