If you have a child in ABA and you saw this week's headlines, you probably read some version of "federal crackdown on autism therapy" and felt your stomach drop. Then you looked for the part that explains what happens to your kid, and it wasn't there. Nearly every article was written for clinic owners, state officials, or people arguing about government spending.
So here is the parent version.
On August 4, 2026, CMS released the State Medicaid and CHIP Applied Behavior Analysis Toolkit, a 173-page document telling states how to tighten oversight of ABA services. Nothing in it cancels your child's therapy. Nothing in it takes effect on a date. It is guidance, not a rule, and each state decides what to do with it.
Get matched with schools and centers
Tell us what your child needs and we'll show you matching schools and therapy centers near you — free.
Free for families. No credit card required.
It is not empty either. Buried in the middle are a handful of positions that will change how some clinics schedule, bill, and justify your child's hours, probably within the next year. Those are worth understanding now, while you still have time to ask questions.
What the toolkit does not do
CMS was unusually direct about this, so we will quote the announcement rather than paraphrase it:
EPSDT is the piece that matters most to your family. It is the federal Medicaid provision that entitles children under 21 to any medically necessary service that treats or improves a condition found during screening. It has no dollar cap and no hour cap, and a state cannot invent one.
The toolkit reinforces this in a passage most coverage skipped. It notes that ABA is not named in the underlying statute, but that the individual services delivered inside an ABA plan are coverable under other categories. The consequence: when those services are medically necessary, a state must cover them for an EPSDT-eligible child "even if the state does not choose to offer ABA as a distinct, named benefit."
There is a second line worth writing down. On the question of who qualifies for a comprehensive plan rather than a narrow one, the toolkit says decisions "should not be restricted by an individual's age, co-occurring conditions, ASD diagnosis, or cognitive level." If a clinic or health plan has ever told you your child is too old, too complex, or too impaired for a full program, that sentence is now in a federal document.
Why this is happening now
Between 2021 and 2025, Medicaid and CHIP spending on ABA rose 421%, from roughly $1.94 billion to $10.1 billion. Over the same period, the number of children with an autism diagnosis receiving services grew 67%.

Some of that gap is ordinary growth: more children diagnosed, more providers enrolled, and ABA coverage now available in all 50 states. Average weekly hours rose more modestly, reaching 17.33 in 2025, a 22% increase since 2021. We covered the money side of this story in more detail in our look at who profits when ABA billing surges.
The rest is what CMS is chasing. Federal auditors have flagged improper ABA-related payments in Maine, where a January 2026 HHS Office of Inspector General audit found $45.6 million in improper payments in a single year, with problems in all 100 sampled cases. Similar audits have landed in Colorado and Wisconsin.
None of that is your family's fault, and none of it means your child's hours were wrong. It explains why the scrutiny is arriving, and why it is arriving through documentation requirements rather than coverage bans.
The 40-hour line
This is the most consequential sentence in the toolkit for families, and almost nobody has quoted it:
The stated reason is not cost. It is that children "must be allowed time for activities of daily living such as toileting, napping, and eating." CMS also warns that 40-hour plans expose states and health plans to audit findings.

The toolkit does not ban 40 hours. It says appropriate intensity runs from about five hours a week to 40, and that the number must follow the individual child. It also asks states to prohibit long stretches of consecutive billing units without a break, and to stop letting clinics bundle all their 15-minute units onto a single claim line, because that makes it impossible to show a child ever stopped for lunch.
If your child is currently authorized for 30 or more hours a week, expect that number to get more scrutiny at your next reauthorization. That is not the same as expecting it to be cut. It means the clinical justification in your file needs to be specific to your child.
Telehealth is the thing most likely to change first
Telehealth ABA grew into a roughly $300 million line item by 2025, and it is where the toolkit draws its firmest line:
What the toolkit still supports over video: caregiver coaching and training, data review, some supervisory contact that includes direct observation, and connecting kids with peers for social skills work.
What it discourages: establishing an autism diagnosis, completing the initial comprehensive assessment or care plan, intensive daily treatment blocks, group services, and routine supervision of technicians. It also says direct therapy delivered over telehealth by a Registered Behavior Technician should be permitted less consistently, citing concerns about treatment fidelity.

If a meaningful part of your child's week is virtual, this is the provision to ask your provider about. Some states will move on it quickly.
Hour limits, and why they are not caps
Two states already do what many others will now copy.
Virginia requires detailed justification for any authorization request above 20 hours a week. A general schedule is explicitly not enough. The clinic has to describe each activity, tie it to a treatment goal, and explain the therapeutic function of the requested time.
Nebraska sets a 6-hour daily and 30-hour weekly limit on direct ABA, then allows providers to request more when it is medically necessary.
That exception path is the whole ballgame. Under EPSDT, a state can use a number as a review trigger. It cannot use the same number as a wall. If your state adopts an hour threshold and your child needs more, the request has to be reviewable on medical necessity, and a denial has to be appealable. Watch for any state policy that sets a limit without publishing how to exceed it. Families who have been through this in states that cut rates first will recognize the pattern, and our guide to protecting your child's therapy hours walks through the appeal steps in detail.
Supervision, and a question worth asking
The toolkit separates two numbers that often get conflated. A Registered Behavior Technician must receive supervision equal to at least 5% of their service hours, which is a certification minimum, not a clinical standard. Clinical practice guidelines recommend 10% to 20%, or roughly one to two hours of BCBA supervision for every ten hours of direct treatment.
Plenty of programs run near the 5% floor. It is a reasonable thing to ask about, and the answer tells you something real about how closely a BCBA is watching your child's program. It is also worth weighing when you are comparing clinics, alongside the cost questions in our 2026 guide to what ABA therapy costs.
One change that could catch families off guard
The toolkit suggests states consider requiring extra documentation when the share of sessions involving a parent or caregiver drops below a set percentage. Texas already expects caregiver participation as a normal part of effective ABA, with case-by-case exceptions.
For working parents, single parents, and families with several kids, this is the provision most likely to create a problem that has nothing to do with your child's clinical need. If your state ties continued authorization to caregiver training hours, find out early what counts and what accommodations exist. The toolkit does tell states to build in flexibility, including short sessions at drop-off or pick-up, and to account for foster and kinship placements where caregiver availability is outside anyone's control.
What to do in the next few weeks
None of this requires panic, and none of it requires a lawyer yet. Five things are worth doing.
If you do receive a reduction or denial, it is appealable. EPSDT does not go away because a state changed its paperwork.
What we do not know yet
Honest gaps, because the confident version of this article would be wrong.
We do not know which states will act, or how fast. Guidance carries no deadline. We do not know whether tighter documentation will slow access in states that already have BCBA shortages and long waitlists, and nobody has modeled it. And we do not know how managed care plans, which cover most children on Medicaid, will translate any of this into their own utilization rules, which is where families usually feel policy first.
We will update this piece as states publish changes.
Finding a provider
If you are looking for a new clinic, or a second opinion on your child's current hours, you can browse ABA and therapy providers by state in our directory.
This article explains federal guidance. It is not legal or medical advice, and it cannot tell you what your specific plan will approve. For questions about your child's authorization or an appeal, talk to your provider, your state Medicaid agency, or a special education attorney or advocate.
Get help finding the right school or center
Tell us what your child needs and we'll show you matching schools and therapy centers near you — free.