Updated
Send a complete request to the right desk, with a HIPAA release that states the information, discloser, recipient, purpose, expiration, signature and right to revoke. The recipient can be a clearly identified class, so one release signed at intake can cover the pediatrician, psychologist and school. Chase at day three and day seven, and ask the family to check their patient portal.
A surprising share of ABA starts are not waiting on clinical capacity or on an authorization. They are waiting on a PDF sitting in another organization’s chart — an evaluation report, a diagnostic letter, a school assessment — that nobody has successfully asked for.
Records work looks like administrative trivia and behaves like a growth constraint. A request that is missing one detail gets set aside by a records clerk with a hundred others, and nobody tells you it was set aside. Two weeks later a family who was ready to start is still waiting, and has begun to wonder whether you are competent.
The fix is unglamorous and highly learnable: send complete requests, to the right desk, with a release that plainly authorizes the disclosure — and then chase them on a schedule rather than when someone remembers.
Most payers will not authorize ABA without documentation of the diagnosis, and many have rules about how recent it must be and what tool produced it. The family rarely has that report. They remember an appointment eighteen months ago at a hospital clinic, they may have been handed a summary they have since lost, and the actual document lives with the evaluating provider.
So the sequence is: get a release signed, identify who holds the record, ask correctly, and follow up until it arrives. Each of those steps is where practices lose days.
A HIPAA-compliant authorization has required elements, and missing one is the most common reason a records department refuses to act. Whatever form you use, it must contain each of these in a way a stranger can read without interpretation.
This is a working summary, not legal advice. Confirm your forms with your own compliance reviewer, and note that some states and some record types — psychotherapy notes, substance use, HIV status — carry stricter rules than HIPAA alone.
This is the single most useful and least known point in records work, and it removes a chase that most intake teams run every week.
HIPAA does not require that every individual recipient be named. It requires that the authorization identify the name, or other specific identification, of the person or persons — or the class of persons — who may receive the information. A general release is therefore acceptable as long as the class of recipients is clearly identified.
In practice that means categories such as "Primary Care Physicians," "School Personnel," or "Treating Providers involved in the client’s care" are generally appropriate. Written that way, one release signed at intake can cover the pediatrician, the diagnosing psychologist, the school, and the speech therapist — instead of a new signature, a new email, and a new three-day delay for each one.
Two cautions. Keep the class genuinely identifiable: "anyone" is not a class. And remember that the receiving organization gets to decide whether it is satisfied, so a small number of hospital systems will insist on a named recipient on their own form regardless. Build for the general release and keep the specific one ready.
A records clerk is matching your request against a chart in a system you cannot see. Anything that makes matching ambiguous turns your request into a callback, and a callback becomes a pile.
Send more identifying detail than feels necessary, not less.
Large organizations have a health information management department, and a request faxed to the clinic front desk may never reach it. Small practices are the opposite: the front desk is the records department, and a formal request addressed to HIM will confuse them.
Two minutes on the phone before sending saves a week. Ask where releases should go, whether they have their own form they prefer, what fax or portal they use, and roughly how long fulfilment takes. Record the answer against that organization so nobody has to ask again — a referral-source record that carries the right fax number and the right form is worth more than any template.
Assume nothing arrives on its own. A workable rhythm is a confirmation call two to three days after sending to verify receipt and legibility, a follow-up at day seven, and an escalation in the second week to a supervisor or, where appropriate, a reminder that individuals have a right of access to their own records within defined timeframes.
Keep the family informed while this happens, and give them a parallel path: many parents can pull the report themselves from a patient portal in a few minutes, which is frequently faster than any institutional route. Asking them to look is not an admission of failure; it is often the fastest single move available.
And log everything — when it was sent, to whom, by what channel, what came back. Records chases that live in one coordinator’s memory stop the day that coordinator is out.
The easiest release to obtain is the one signed while the parent is already filling out intake and motivated to move. The hardest is the one you go back for three days later, when you have discovered you need it and their enthusiasm has cooled.
Put a properly drafted general release in the intake packet itself, written to cover the classes of recipients you predictably need, and capture it electronically so it can be attached to an outgoing request the same minute a gap is identified.
No. HIPAA requires the authorization to identify the name or other specific identification of the person or persons, or the class of persons, who may receive the information. A general release is acceptable where the class of recipients is clearly identified — for example "Primary Care Physicians," "School Personnel," or "Treating Providers involved in the client’s care." Some organizations will still insist on their own form with a named recipient.
Most often the child could not be matched to a chart, the signer’s authority was unclear, the release was missing a required element such as an expiration date, the requested document was described too vaguely, or it went to the wrong desk. Every one of those is preventable on the first attempt.
Fulfilment timeframes vary by organization and by state, and access rules give individuals a right to their own records within defined limits. Practically, plan on days rather than hours, chase at day three and day seven, and give the family a parallel route through their patient portal.
Generally a parent or legal guardian acting as the personal representative. Shared custody, foster placement, grandparent caregivers and court orders all change the answer, so collect documentation of authority at intake rather than discovering the problem when a request is refused.
Yes, and it is frequently the fastest route. Many evaluation reports are downloadable from a patient portal in minutes. Ask in parallel with your own request rather than instead of it.
Records work has two sides. One is the family: the release, the authority to sign, and the report they may be able to pull from a portal in minutes. The other is the organization holding the chart. Carelu runs the family side from the first day of intake, so your team never has to go back for a signature.
The request to the other organization, the call to find the right desk, and the escalation in week two stay with your coordinators. They start that work with a signed release on file and a clear list of what is still missing.
The release of information is e-signed inside the hosted intake, while the parent is motivated, and generated as a PDF in the family’s packet the moment it is signed.
Diagnosis requirements and prior-auth rules for each state and payer are built in from Carelu’s payer directory, so your team knows what to ask for before an authorization is refused.
Families can upload the evaluation report by text or on the intake form, often the fastest route when the report is in a patient portal.
Follow-up flows by text and email ask for missing documents until they arrive or the family opts out, and every family’s status sits in one live queue.
Nothing here is difficult. All of it is a rote, time-sensitive task that a busy coordinator does not get to — which is exactly the category of work that should not depend on someone remembering.
The start is waiting on a PDF.
Carelu captures the release during intake, tracks what each payer requires, sends complete requests, and chases them on a schedule — so the report arrives before the family loses patience.
Get a Demo