Healthfirst — the large NYC-area provider-sponsored plan — maintains its own Policy for the Authorization of Applied Behavioral Analysis (ABA) Services, with an updated version announced with a reported effective date of October 2026. The honest caveat up front: the policy PDF itself was unavailable at review time, so this guide covers what's verified — the plan runs its own authorization machinery through Availity Essentials on top of state-baseline clinical criteria — and flags exactly what to confirm in the portal before promising a family timelines.
Verified: Healthfirst publishes its own ABA authorization policy (the prior version circulated as doc 0374-22, with an updated version announced carrying a reported October 2026 effective date), routes prior authorization through the Availity Essentials Online Authorization Tool with "Healthfirst (New York)" selected as the payer, and — on its commercial small/large group lines — requires PA on the full ABA code range 97151–97158, a strong signal of an authorization-first posture. Also verified: Healthfirst republished the state's October 1, 2025 technician-supervision requirements verbatim on its provider site, applying them to Healthfirst plans. Not verified: the Medicaid-line specifics — whether 97151 needs PA, authorization periods, documentation requirements, hour-cap logic, and rates — because the policy PDF 404s. Pull the current policy from hfproviders.org or provider services (1-888-801-1660) and confirm the Medicaid ABA workflow in Availity before committing to start dates.[1][2]
Healthfirst's published ABA content mirrors the state program: members under 21 with ASD and/or Rett syndrome, the practitioner referral, and — per its supervision post — the state's LBA/CBAA structure with the 5%-of-tech-hours, two-contacts-per-month supervision rule. So the intake package is the same one the state FFS manual defines; the open question at this plan is purely the authorization mechanics layered on top. Build the referral packet to the state spec, then confirm Healthfirst's submission requirements against the live policy.[1][3]
The questions that decide whether a family can start with Healthfirst (New York), and what they have to bring. Each maps onto something intake should ask on the first call.
Follows the New York Medicaid rule: ABA is covered for members “under 21 years of age with a diagnosis of Autism Spectrum Disorder (ASD) as defined by… (DSM-5) and/or Rett Syndrome.” No minimum age and no adult pathway — the 21st birthday is a hard cliff. Healthfirst’s published ABA content mirrors the state program rather than setting an age rule of its own.[3][1]
Follows the New York Medicaid rule — the referral is valid no more than two years and no maximum age is set on the diagnostic evaluation itself. Healthfirst’s own ABA authorization policy (the prior version circulated as doc 0374-22, with an updated version announced carrying a reported October 2026 effective date) was not retrievable at review time, so any plan-specific recency rule is unconfirmed.[3]
Ask the plan: Pull the current ABA authorization policy from hfproviders.org or Healthfirst provider services (1-888-801-1660) and confirm whether it adds a recency rule.
Follows the New York Medicaid rule: the diagnosis and referral must come from a NYS-licensed, NYS Medicaid-enrolled physician, psychologist, psychiatric nurse practitioner, pediatric nurse practitioner or physician assistant, following DSM-5 criteria and NYSDOH’s Clinical Practice Guideline on ASD. LBAs and CBAAs sit outside that list — they may not diagnose and may not self-refer. Healthfirst republishes the state’s LBA/CBAA structure on its provider site and names no additional diagnosing credential.[3][1]
Follows the New York Medicaid rule: no instrument is mandated. What the state requires with the referral is the “DSM-5 Diagnostic Checklist for ASD diagnoses” plus the severity level when the referral comes from an ASD-diagnosing provider; the treatment plan need only record the assessment methodology used and, “as appropriate, identify standardized assessment used (e.g., adaptive behavior scales, symptom inventories, aggression ratings) and results.” No Healthfirst-specific instrument requirement was located; its policy PDF was unavailable at review time.[3]
Ask the plan: The current Healthfirst ABA authorization policy via hfproviders.org or provider services (1-888-801-1660).
Follows the New York Medicaid rule: the member “must be referred for ABA services by a NYS-licensed and NYS Medicaid-enrolled physician, psychologist, psychiatric nurse practitioner, pediatric nurse practitioner, or physician assistant,” the referral is “valid for no more than two years,” and it must carry age, the ASD/Rett diagnosis, date of initial diagnosis, co-morbid diagnoses, symptom severity level, a statement the patient needs ABA, and the DSM-5 Diagnostic Checklist. Healthfirst then runs its own authorization machinery on top: prior authorization goes through the Availity Essentials Online Authorization Tool with “Healthfirst (New York)” selected as the payer. On its commercial small and large group lines the full range 97151–97158 requires PA, a strong signal of an authorization-first posture; the Medicaid-line specifics are unconfirmed because the policy PDF 404s.[3][2]
Ask the plan: Confirm the Medicaid ABA authorization workflow in Availity and pull the current policy from hfproviders.org before quoting start dates.
Healthfirst decides prior authorization “within three (3) business days of receipt of all necessary information,” and urgent Medicaid requests within 72 hours of receipt; when the plan asks for more information, the provider must send it within 10 calendar days. For continuing ABA, “Providers must furnish clinical information to Utilization Management to support continued authorization of services before the expiration of the authorized treatment period,” with a decision within one day of receiving the necessary information. The manual publishes no Medicaid outer limit, so the state contract governs: no more than 14 days after receipt, extendable up to 14 days, with federal rules capping it at 7 calendar days for plan rating periods starting on or after January 1, 2026. A missed deadline counts as a denial the family can appeal.[4][5][6]
“Healthfirst requires a primary carrier Explanation of Payment (EOP) when Healthfirst is the secondary payer before appropriate claims payment can be issued.” So bill the other plan first and attach its EOP or denial. That sits on the state rule: Medicaid pays last, providers “must bill all applicable insurance sources before submitting claims to Medicaid,” and the plan must ask providers “to bill the TPHI that should be primary to the Plan.” The manual does not say whether Healthfirst’s ABA preauthorization is still required when it is secondary — confirm with Provider Services (1-888-801-1660) before relying on the primary plan’s approval.[4][7][5]
Not published. No Healthfirst ABA telehealth policy was located, and the plan’s ABA content republishes the state’s supervision rules rather than a service-delivery telehealth rule. The state’s own manual answers telehealth only for supervision of unlicensed individuals, where synchronous audio-and-video is permitted.[1][3]
Blocked on: Healthfirst provider services (1-888-801-1660) or the current ABA authorization policy on hfproviders.org — confirm code eligibility and POS before scheduling remote sessions.
Coverage decides whether Healthfirst (New York) pays. These decide whether the claim survives: how sessions must be staffed and supervised, what may be billed concurrently, the per-day ceilings, who signs the note, where the service is payable, and whose NPI the claim goes out under.
Healthfirst republished the state’s October 1, 2025 technician-supervision requirements verbatim on its provider site and applies them to Healthfirst plans: LBA supervision of at least 5% of each unlicensed individual’s monthly service hours, at least two face-to-face real-time contacts per month with the LBA observing service delivery in one of them, and a maximum of six CBAAs/unlicensed individuals per LBA. That is the state rule, adopted by the plan rather than merely inherited.[1][3]
Follows the New York Medicaid rule: the LBA supervisor must “review and sign treatment notes and reports prepared by the CBAA supervisee,” and documentation of supervision itself “should be recorded in the patient file.” Clinical documentation must carry the treatment plan with assessment and goals, the goal data, total hours of service per week by who delivered them, and the location(s) of services. Records are kept “for a minimum of six years and, for minors, until the patient turns 22 years of age.” Healthfirst adds one documented deviation of its own: record retention stretches to 10 years for its managed-care providers, against the state’s six-year/age-22 floor.[3][1]
Follows the New York Medicaid rule: “LBAs and CBAAs may work in any legally authorized setting. Examples of such settings include private practice, settings where patients/clients reside full-time or part-time, clinics, hospitals, residences, and community settings” — but “NYS Medicaid does not reimburse for ABA services in a school setting.” The treatment plan must record the location(s) of services. No Healthfirst-specific setting rule was located.[3]
Ask the plan: Healthfirst provider services (1-888-801-1660) or the current ABA authorization policy for any plan-specific setting restriction.
Not published. Healthfirst’s retrievable ABA content covers supervision and the Availity authorization route; its ABA authorization policy PDF was unavailable at review time, and the state manual is silent on 97153 with 97155.[1][3]
Ask the plan: Healthfirst provider services (1-888-801-1660) and the current ABA authorization policy on hfproviders.org.
Not published for the Medicaid line — authorization periods, unit limits and hour-cap logic all sit in the ABA authorization policy that was unavailable at review time. What is verified is the authorization posture: on Healthfirst’s commercial small and large group plans all of 97151–97158 require prior authorization, so treat authorized units as the ceiling and confirm the Medicaid rule before booking.[2][1]
Blocked on: The current Healthfirst ABA authorization policy via hfproviders.org, or provider services (1-888-801-1660).
Not published. Healthfirst states no rendering-versus-supervising NPI convention in its retrievable ABA content. At the fee-for-service layer New York is explicit: LBAs bill “using the LBA’s National Provider Identification (NPI) number for the ‘Billing’ provider and/or ‘Supervising’ provider,” with “the NPI number of the CBAA that provided the ABA service… reported as the ‘Rendering’ provider on each claim”; for unlicensed aides and LBA limited-permit holders the supervising LBA’s NPI fills all three roles. CBAAs cannot bill directly and enroll as OPRA providers. Because the state directs managed-care providers to their plan for billing guidance, confirm the Healthfirst claim format before billing CBAA- or technician-delivered units.[3][1]
Ask the plan: Healthfirst provider services (1-888-801-1660) and the current ABA authorization policy on hfproviders.org.
Yes — it carries the NY Medicaid ABA carve-in on the state's clinical baseline (under 21, ASD/Rett, practitioner referral) and maintains its own ABA authorization policy, with PA submitted through Availity Essentials.
On its commercial group plans, yes — 97151–97158 all require PA. For the Medicaid line, the policy text was unavailable at review time; confirm the current policy via hfproviders.org or provider services (1-888-801-1660) before booking.
Yes — Healthfirst republished the state's October 2025 requirements (LBA supervision of at least 5% of technician hours, 2 monthly face-to-face contacts, max 6 supervisees) as applying to its plans.
Payer policies change frequently and vary by plan, state, and funding type. This guide was compiled from the sources above and last reviewed September 2026; it is general information, not billing, legal, or clinical advice. Always verify current requirements against the payer's live policy and a benefits check for the specific member.
Carelu collects all of this automatically.
Every ID, document, and detail this payer requires — gathered conversationally the moment a family reaches out, with insurance verified before your team touches the file.
Get a Demo