Does your ABA clinic need a facility license in South Carolina? And how must records be kept?

When an ABA practice needs a facility license in South Carolina

South Carolina's facility licensure was administered by the Department of Health and Environmental Control until July 1, 2024, when the health care quality and public health functions moved to the new Department of Public Health. The licensure categories under Title 44 are institutional: hospitals, ambulatory surgical facilities, residential treatment facilities, and similar types. An outpatient ABA office delivering services under professional licenses is not among them, and the state regulates the profession instead. Behavior analysts are licensed under Title 40, Chapter 75, and the Department of Health and Human Services requires the providers it approves to hold that license by December 31, 2026, which the South Carolina licensing page covers (S.C. Code Title 44; DPH restructuring eff. July 1, 2024; S.C. Code Title 40, ch. 75).

The practical rule is that no South Carolina facility license reaches an outpatient ABA practice under either archetype, and the entry gates are the Title 40 license, DHHS provider approval, and Medicaid and commercial credentialing. The facility statute's scope was not re-read for this page and should be confirmed for any configuration that adds residential or day-treatment services.

The two archetypes and the December 2026 licensure deadline

South Carolina's archetypes differ on the records axis and on the licensure calendar.

• The practice with in-house diagnostics. A licensed psychologist on staff does not change the facility answer. The psychologist's records are governed by the Board of Examiners in Psychology's rules, which were not verified for this page. The physician records statute at S.C. Code 44-115-120, which requires ten years for adults and thirteen years for minors from the last treatment, binds physicians; a practice that adds a physician for diagnostics carries that rule on the physician's file.
• The ABA-only practice. Its analysts must hold the Title 40 license by December 31, 2026 if the practice is a DHHS-approved provider, and the licensing board's rules will govern its records once adopted. No profession-specific retention rule for behavior analysts was verified for this page, so the practice takes its floor from the Medicaid provider agreement and HIPAA.

The December 2026 deadline is the near-term event for both archetypes: a DHHS-approved provider whose analysts are not licensed by that date loses the basis for its approval. The South Carolina Medicaid page covers the DHHS ABA program and its documentation requirements (S.C. Code Title 40, ch. 75; S.C. Code 44-115-120).

HIPAA, the breach statute, and the Department of Consumer Affairs

HIPAA is the federal floor and applies uniformly. South Carolina layers a breach statute with an unusual enforcement structure on it.

The statute sets no day count. Notice is not required where the person reasonably believes illegal use of the information has not occurred and is not reasonably likely, or where use does not create a material risk of harm. Where notice goes to more than 1,000 persons at one time, the person must also notify the Consumer Protection Division of the Department of Consumer Affairs and the nationwide consumer reporting agencies of the timing, distribution, and content of the notice. The Attorney General has no direct role; the Department of Consumer Affairs administers a $1,000 per-resident fine for knowing and willful violations, and a resident injured by a violation may bring a civil action for damages and injunctive relief. HIPAA's 60-day outer limit is the fixed clock for protected health information (S.C. Code 39-1-90(A), (C), (E), (G); S.C. Code 1-11-490(I)).

Records retention: the physician rule that does not reach the practice

South Carolina's best-known retention rule is the physician statute, and it does not reach an ABA practice unless a physician is on staff. The table states what is verified and flags what is not.

With no profession-specific rule verified for either archetype, the practical standard is the longest rule the practice can be held to: the physician statute's thirteen years for minors if a physician is on staff, the Medicaid term once confirmed, and HIPAA's six years otherwise, with a majority-plus practice standard for children and a litigation-hold overlay. A buyer's counsel will read the physician statute as the benchmark even where it does not bind, and a practice that has held pediatric records to thirteen years from the last treatment will not have to explain a gap (S.C. Code 44-115-120; S.C. Code 39-1-90).

Records ownership and custody on a change

South Carolina puts custody on the licensee and the enrolled provider, and the December 31, 2026 licensure deadline is a custody event as well as a credentialing one: a DHHS-approved provider whose analysts are unlicensed after that date has records with no licensed custodian behind them. The physician statute contains practice-closure provisions for physicians; no equivalent for behavior analysts was verified. In an asset sale, custody must be negotiated so that a Title 40 licensee remains custodian, the Medicaid term survives, DHHS approval and Medicaid enrollment, which do not transfer, are re-established before the buyer bills, and any physician's file is held to the statutory thirteen years (S.C. Code Title 40, ch. 75; S.C. Code 44-115-120).

The MSO question

A management services organization that hosts the record system is a HIPAA business associate under a business-associate agreement in either archetype. South Carolina adds that the corporate-practice doctrine is untested for behavior analysis and that the Board of Medical Examiners' 2022 advisory frames the doctrine in terms of clinical judgment and control, which the South Carolina ownership page treats; on this page the consequence is that the management agreement should keep the record, and the clinical decisions it documents, under the licensee's control, and should allocate responsibility for the Department of Consumer Affairs notice above 1,000 residents.

Reading the South Carolina burden

Putting the pieces together, South Carolina is a light-facility state with a thin records rule and an amber doctrine. On the lighter side, there is no facility license for outpatient ABA, the breach statute has no day count, and the professional entity is elective. On the heavier side, the licensure deadline of December 31, 2026 is fixed and consequential, the breach statute's private right of action and per-resident fine raise the cost of a late notice, and the absence of a verified retention rule for either profession leaves the practice to set its own standard against a physician benchmark of thirteen years. The archetype decision changes the records benchmark more than the facility answer.

How this connects to the rest of your compliance stack

Facility licensure and records sit alongside several other decisions in this guide:

• Medicaid and place of service. DHHS provider approval and Medicaid enrollment are the entry points, the December 31, 2026 licensure deadline applies to DHHS-approved providers, and the provider agreement carries the retention term to confirm. See the South Carolina Medicaid page.
• Licensing and credentialing. The Title 40, Chapter 75 license and its December 31, 2026 deadline for DHHS-approved providers are the credential events that decide who may be custodian. See the South Carolina licensing and credentialing page.
• Entity and ownership. South Carolina's professional entity is elective and the corporate-practice doctrine is untested for ABA, so custody sits with the licensee and the entity of choice. See the South Carolina entity page and the South Carolina ownership page.
• Practice sale and expansion. The licensure deadline, non-transferable DHHS approval and Medicaid enrollment, and the absence of a verified retention rule are diligence items in any South Carolina transaction. See practice expansion and sale.

Getting set up in South Carolina: the sequence

1. Credential the analysts. Obtain Title 40, Chapter 75 licenses before December 31, 2026 for every analyst in a DHHS-approved practice, and complete DHHS approval and Medicaid enrollment.
2. Confirm the facility question. Confirm the outpatient configuration is not a Title 44 licensed facility type under the Department of Public Health.
3. Decide the diagnostics model. If a psychologist or physician will be on staff, read the applicable board rules and, for a physician, hold the file to S.C. Code 44-115-120.
4. Build the privacy program. Implement HIPAA, write incident response to HIPAA's clock with the Department of Consumer Affairs and consumer reporting agency notices above 1,000 residents, and document any no-harm determination under 39-1-90.
5. Set the retention schedule. Confirm the DHHS provider agreement term, configure retention to the longest of that, HIPAA's six years, and any physician rule, with a thirteen-year benchmark for pediatric records and a litigation-hold overlay.
6. Fix custody and MSO terms. Name a Title 40 licensee as custodian, keep clinical decisions and the record under licensee control, and sign the business-associate agreement.

South Carolina facility and records variables at a glance

Frequently asked questions