Virginia - Autism Service — Licensing, Medicaid Enrollment and Startup Requirements

Last reviewed: 2026-08-16

In Virginia, Applied Behavior Analysis (ABA) and related autism-specific interventions are covered under the Medicaid program primarily through the Early and Periodic Screening, Diagnostic, and Treatment (EPSDT) benefit for children. Services are administered by the Department of Medical Assistance Services (DMAS) and delivered through the Cardinal Care Managed Care network, requiring providers to navigate both state enrollment and managed care credentialing.

The single biggest structural barrier to entry in Virginia is that the state does not issue a facility-level or agency-level license for standalone ABA providers. Instead, the entire Medicaid enrollment framework hinges on the individual practitioner holding a Licensed Behavior Analyst (LBA) credential from the Virginia Department of Health Professions (DHP) Board of Medicine. Without an active LBA to anchor the group or individual enrollment, no application can proceed through the Medicaid Enterprise System (MES).

1. Service Definition and Scope

Virginia Medicaid defines ABA as a treatment approach focused on improving adaptive functioning and modifying behavior for individuals, primarily those diagnosed with Autism Spectrum Disorder (ASD). Services must be medically necessary and are heavily regulated regarding where and how they are delivered.

DMAS requires that all ABA services be guided by an Individual Service Plan (ISP) that documents baseline behaviors, therapeutic rationale, and progress toward generalization of skills across multiple environments.

• Covered Services: Includes initial assessments, adaptive behavior treatment, and family/group adaptive behavior treatment guidance.
• Location Restrictions: Services provided in a clinic, office, or center-based setting are not covered unless there is documented clinical justification for the location in the ISP.
• Telemedicine: ABA services provided through telemedicine are permitted but require detailed documentation and clinical justification for service authorization.
• Service Caps: DMAS enforces a soft cap of 20 hours per week; service authorization requests exceeding this threshold require significant detailed documentation of medical necessity.
• Generalization Requirement: Continued service authorizations mandate a summary of progress toward the generalization of adaptive functioning in multiple settings.

2. Regulatory and Oversight Agencies

ABA providers in Virginia must interact with multiple state agencies and contractors. Professional licensure is handled by a health regulatory board, while Medicaid enrollment and service authorizations are managed by DMAS and its designated contractors.

Because Virginia utilizes a managed care model for most Medicaid members, providers must also adhere to the oversight and credentialing standards of the Cardinal Care Managed Care Organizations (MCOs).

• Medicaid Agency: Virginia Department of Medical Assistance Services (DMAS) administers the Medicaid program and the MES portal (https://www.dmas.virginia.gov).
• Licensing Board: Virginia Department of Health Professions (DHP) Board of Medicine issues and regulates LBA and LABA licenses (https://www.dhp.virginia.gov/Boards/Medicine/).
• Service Authorization Contractor: Acentra Health (formerly Kepro) processes fee-for-service ABA authorizations for DMAS (https://virginia.acentra.com).
• Managed Care Network: Cardinal Care Managed Care Organizations (MCOs), such as Aetna Better Health of Virginia, administer benefits and provider networks (https://www.dmas.virginia.gov/for-providers/managed-care/cardinal-care-mco/).

3. Gatekeeping Prerequisites: Who Can Even Apply

Virginia has a streamlined structural entry for ABA compared to other behavioral health services. There is no Certificate of Need (CON), no closed network, and no Request for Proposals (RFP) required to become an ABA provider. The state operates an open enrollment model for Medicaid providers.

Crucially, Virginia does not license ABA companies at the facility level through the Department of Behavioral Health and Developmental Services (DBHDS). The absolute structural precondition is that the applicant must hold or employ someone with an active Licensed Behavior Analyst (LBA) credential from the DHP Board of Medicine. Without this individual license, the agency cannot enroll.

• Facility Licensure Exemption: Standalone ABA companies operate under their DHP LBA licenses rather than requiring a DBHDS behavioral health agency license.
• Certificate of Need (CON): No CON exists or is required for ABA services in Virginia.
• Network Status: Open enrollment; no RFP, procurement windows, or closed network moratoria exist for Medicaid PRSS enrollment.
• MCO Contracting: Required post-enrollment; providers must credential with Cardinal Care MCOs to receive reimbursement for managed care members.
• Diagnostic Prerequisite: Budget language restricts ABA services to recipients with an Autism Spectrum Disorder (ASD) diagnosis, though exceptions may be evaluated under EPSDT medical necessity.

4. Licensure and Certification Requirements

Licensure is handled at the individual practitioner level by the DHP Board of Medicine under Virginia Code § 54.1-2957.16. The state recognizes national certification as the primary pathway to state licensure.

Unlicensed staff, often referred to as behavior technicians, do not hold state licenses but must operate under the strict, documented supervision of a licensed professional.

• Licensed Behavior Analyst (LBA): Requires active BCBA certification from the Behavior Analyst Certification Board (BACB) and an approved application to the VA Board of Medicine.
• Licensed Assistant Behavior Analyst (LABA): Requires active BCaBA certification from the BACB and documented supervision by an LBA.
• Unlicensed Technicians: Do not require state licensure but must be supervised by an LBA, LABA, or Licensed Clinical Psychologist.
• License Verification: DHP licenses must be active, and the name on the license must exactly match the name on the Medicaid enrollment application to avoid denial.

5. Medicaid Provider Enrollment

Enrollment is conducted electronically through the Provider Services Solution (PRSS) portal within the Medicaid Enterprise System (MES). Paper applications are not accepted.

Providers must ensure absolute consistency across their tax documents, state licenses, and application fields. Name mismatches are the single most common cause of PRSS application denials in Virginia.

• Enrollment Portal: MES PRSS Provider Portal is the mandatory system for all initial applications (https://vamedicaid.dmas.virginia.gov/provider).
• Enrollment Types: Providers enroll as Individuals, Groups, or Individual Within Group (IG) depending on their practice structure.
• Payment Setup: Electronic Funds Transfer (EFT) is mandatory; providers must submit a voided check or bank letter, as no paper checks are issued.
• Tax Documentation: A certified IRS W-9 form must be submitted, and the name must exactly match the IRS TIN and the DHP license.
• MCO Selection: PRSS allows providers to forward selected enrollment documentation directly to Cardinal Care MCOs to initiate network participation.

6. Staffing, Training and Background Checks

DMAS enforces strict delegation and supervision rules for ABA services. The state explicitly limits which licensed professionals are permitted to oversee unlicensed behavior technicians.

Agencies must maintain rigorous personnel files demonstrating that all supervisory requirements and background checks are continuously met.

• Delegation Authority: Only LBAs, LABAs, and Licensed Clinical Psychologists have the authority to delegate and supervise ABA services to non-licensed staff.
• Prohibited Supervisors: Licensed Mental Health Professionals (LMHPs) such as LCSWs and LPCs do not have ABA delegation authority and cannot supervise technicians.
• Initial Assessments: Must be conducted in-person by an LBA, LABA, or LMHP for the subsequent ABA services to be reimbursable by Medicaid.
• Background Checks: Standard state and federal criminal background checks, as well as Virginia Child Abuse and Neglect Central Registry checks, are required for all staff interacting with minors.

7. Documentation, Policies and Records

DMAS and its service authorization contractor, Acentra Health, require rigorous clinical documentation. Failure to maintain these records can result in authorization denials or post-payment clawbacks.

Special attention must be paid to the justification of service locations and the demonstration of clinical progress over time.

• Individual Service Plan (ISP): Must detail treatment goals, baseline behaviors, therapeutic rationale, and specific interventions.
• Location Justification: ISPs must explicitly document the clinical need if services are provided in a clinic, office, or center-based setting rather than the home or community.
• Generalization Testing: Continued service authorizations require a documented summary of progress toward generalizing skills in multiple environments.
• Telehealth Documentation: Must include detailed justification for why telehealth is clinically appropriate for the specific member and intervention.
• Supervision Logs: Providers must maintain detailed logs proving that unlicensed technicians received the required ratio of supervision from an LBA or LABA.

8. Billing, Rates and Claims

ABA services are billed using standard CPT codes. Claims are processed either through the fee-for-service MMIS or the respective Cardinal Care MCO, depending on the member's enrollment status.

DMAS actively audits claims for compliance with location and supervision rules. Services provided out of compliance are subject to immediate Medicaid retraction.

• Primary Codes: 97155 (adaptive behavior treatment), 97165, and 97157 (family/group adaptive behavior treatment guidance).
• Diagnosis Requirement: A complete and valid Autism Spectrum Disorder (ASD) diagnosis code is required on all claims.
• Provider Identifiers: A valid NPI and the correct ABA taxonomy code are always required on all claims.
• High-Utilization Review: Claims exceeding 20 hours per week are subject to pre- and post-payment reviews by DMAS and MCOs to verify EPSDT medical necessity.
• Recoupment Risk: Billing for services supervised by an unauthorized professional (e.g., an LCSW) or lacking ISP location justification will result in payment retraction.

9. Approval Sequence and Timeline

The critical path to becoming a billing provider involves sequential approvals from national boards, state licensing boards, the state Medicaid agency, and managed care plans.

Providers cannot bill for services retroactively if they were delivered before the final MCO credentialing effective date.

• Step 1: Obtain national certification (BCBA/BCaBA) from the BACB.
• Step 2: Apply for LBA/LABA licensure through the VA Board of Medicine (typically takes 4-8 weeks).
• Step 3: Submit the PRSS Enrollment application via the MES portal (typically takes 30-60 days for DMAS approval).
• Step 4: Request MCO participation through PRSS and complete Cardinal Care MCO credentialing (typically takes 90-120 days).
• Step 5: Submit service authorization requests to Acentra Health or the MCO prior to initiating treatment.

10. Common Denials and Survey Findings

DMAS bulletins frequently highlight compliance issues that lead to application denials, service authorization rejections, or post-payment clawbacks.

Most administrative denials occur during the PRSS enrollment phase due to clerical mismatches, while clinical denials stem from inadequate ISP documentation.

• Name Mismatches: PRSS applications are frequently denied because the W-9 name, application name, and DHP license name do not match exactly.
• Unauthorized Delegation: Retraction of payments occurs when audits reveal that LCSWs or LPCs supervised unlicensed ABA technicians.
• Missing Location Justification: Service authorizations are denied when clinic-based or center-based services lack a documented clinical rationale in the ISP.
• Inadequate High-Hour Justification: Service authorization denials occur for failing to provide significant detailed documentation for requests exceeding 20 hours per week.
• Invalid Initial Assessments: Claims are denied if the initial assessment was conducted via telehealth without justification or by an unlicensed staff member.

11. Key Contacts and Resources

Providers should rely on official state portals and professional associations for the most current regulatory updates and enrollment guidance.

Always verify policy changes through DMAS Medicaid Bulletins, as ABA regulations and service authorization processes are subject to frequent updates.

• DMAS Provider Portal (MES PRSS): Official Medicaid enrollment system (https://vamedicaid.dmas.virginia.gov/provider).
• Virginia Board of Medicine (DHP): Licensing authority for LBAs and LABAs (https://www.dhp.virginia.gov/Boards/Medicine/).
• Acentra Health: DMAS service authorization contractor (https://virginia.acentra.com).
• DMAS Policy Bulletins: Official repository for Medicaid regulatory clarifications (https://vamedicaid.dmas.virginia.gov/bulletins).
• Virginia Association for Behavior Analysis (VABA): Professional advocacy and resource organization (https://virginiaaba.org).

See all Virginia services · Virginia Medicaid consulting · book a consultation.