From Nebraska’s new 20-hour trigger to Indiana’s 4,000-hour lifetime bank, here is how states limit ABA hours and what federal rules let them enforce.
Key Takeaways
- The federal rule: CMS’s May 2026 EPSDT Guide says hourly maximums are not consistent with EPSDT for children under 21. States may use soft limits, but must cover more when an individual review finds it medically necessary.
- The state map: Nebraska requires prior authorization above 20 hours a week, Virginia proposes EPSDT review above 20, North Carolina shortens authorizations above 16, Texas, Nevada and Oklahoma use intensity tiers, and Indiana and Minnesota have set lifetime and billing limits.
- Where the disputes start: Which services count toward a threshold, how fast reviews happen, and whether managed care plans treat a review line as a ceiling.
- What providers can document: A clinical rationale for the hours requested above any threshold, and a working knowledge of each state’s exception process, notice rules and appeal rights.
Several state Medicaid programs now attach a number to how much of it a child can receive before someone takes a second look. The numbers differ. Nebraska’s is 20 hours a week. Virginia has proposed 20. North Carolina draws its line at 16, Oklahoma’s top tier starts above 30, Nevada’s tiers top out at 40, and Indiana counts in lifetime hours. Minnesota has passed a 40-hour weekly billing limit for 2027.
What those numbers are allowed to do is set by federal law. In a guide to the Early and Periodic Screening, Diagnostic, and Treatment (EPSDT) benefit published in May, the Centers for Medicare & Medicaid Services (CMS) restated that hourly maximums cannot cap medically necessary care for Medicaid enrollees under 21. A state can set a line. It cannot make the line final for a child who needs more.
The distinction is now the center of Virginia’s rule-making fight, where most of the 62 public comments on the state’s proposed ABA manual concerned whether its 20-hour language works as a review trigger or a ceiling. This tracker sets out the federal standard, how eight states have written their limits, and where the disagreements tend to start.
What CMS’s EPSDT Guide Says About Medicaid ABA Hour Limits
EPSDT requires states to cover services within section 1905(a) of the Social Security Act when they are needed to “correct or ameliorate” a child’s condition, whether or not the state covers them for adults. The May 2026 guide spells out what that means for limits: “Flat, fixed, hard, or arbitrary limits (e.g., budget or monetary caps, standard deviations from the norm, or hourly maximums) are not consistent with the EPSDT requirements and therefore may not be applied to the coverage of Section 1905(a) services for EPSDT-eligible children.”
Soft limits are allowed. As a utilization control, the guide says, a state may adopt a definition of medical necessity that places soft limits on services pending an individualized determination, but “additional services beyond these limits must be provided if determined to be medically necessary to correct or ameliorate the individual child’s condition.” Its example is physical therapy: a visit limit that would be lawful for adults can apply to children only as a soft limit.
The guide adds three conditions that matter for ABA. Prior authorization must be case by case and may not delay needed treatment. Managed care plans may not use a definition of medical necessity for children that is more restrictive than the state’s. And utilization management for mental health and substance use services must comply with federal parity law, meaning it can be no more restrictive than what applies to physical health. CMS describes the guide as a compilation of existing EPSDT policy rather than new policy.
CMS has made the same point in person. At an August 31 meeting of Florida’s ABA task force, Dr. Caprice Knapp, Principal Deputy Director of the Center for Medicaid and CHIP Services, told members that states may tier ABA hours but must let a child move between tiers as needs change. “We always have soft limits at CMCS,” she said. “We do not have hard limits.” She also said 40-hour weekly schedules draw scrutiny from federal auditors, as Acuity reported from the meeting.
Weekly Medicaid ABA Hour Thresholds: Nebraska and Virginia
Nebraska lowered its line this summer. Its current ABA service definition states that direct ABA service hours may not exceed six hours in a single day or 20 hours a week, and that additional hours may be requested with clinical justification through prior authorization. The Department of Health and Human Services told WOWT in July that the change cut the hours allowed before prior authorization from 30 to 20, and Provider Bulletin 26-06, issued June 1, announced the updated service definitions effective July 1. Acuity examined the new threshold alongside Nebraska’s flat SFY27 rates in August.
Virginia’s line has moved from guidance toward rule. A December 2025 DMAS bulletin required significant documentation for authorization requests above 20 hours a week. The state’s 2026 budget then directed a 20-hour cumulative weekly limit that can be exceeded on documented medical necessity under EPSDT, as Acuity reported in July, and the proposed manual update on which public comment closed October 21 states that services may not exceed 20 hours a week except as authorized under EPSDT review.
Other states sit on either side of 20. Florida limits treatment to 40 hours a week, and California triggers utilization review above 25, according to a state comparison the Agency for Health Care Administration presented to Florida’s task force.
Tiered ABA Intensity Limits: Texas, Nevada and Oklahoma
Texas builds its line into tiers. The February 2026 edition of the Texas Medicaid Provider Procedures Manual describes targeted or focused treatment at five hours a week or less, moderate frequency at 6 to 20 hours, and high-frequency intensive behavioral intervention at more than 20 hours, each with its own documentation criteria. The manual labels the tiers guidelines, allows treatment within them without additional physician review, and sends plans that exceed them to physician review for medical necessity. Its frequency levels exclude caregiver training under code 97156.
Nevada uses the two delivery models in the field’s practice guidelines. Its Provider Type 85 billing guide, updated October 13, sets authorization limits of 15 to 25 hours a week for focused ABA and 25 to 40 hours for comprehensive ABA, counting 97153, 97155 and 0373T together, alongside a combined limit of 40 hours per recipient per week across the treatment codes. The guide states that the delivery-model limits may be exceeded with prior authorization and documentation of medical necessity, reviewed case by case, and that all session limits can be exceeded the same way.
Oklahoma ties its tiers to diagnostic severity. Under Oklahoma Health Care Authority policy, high-frequency intensive behavioral intervention above 30 hours a week may be considered when criteria including an autism severity level of 2 or 3 are met, and a maintenance or consultative level covers 5 to 10 hours a week or less.
ABA Reauthorization Tied to Weekly Hours: North Carolina
North Carolina uses hours to set how often a plan comes back for review rather than how much it can contain. Under Clinical Coverage Policy 8F, effective August 1, treatment plans above 16 hours a week are authorized for up to 90 days instead of 180, and must include a schedule of every service the child receives.
The state’s current bulletin on the policy, an August 31 update, specifies that all research-based behavioral health treatment services count toward the 16 hours. The state legislature set that two-tier schedule in its July budget, as Acuity reported in its coverage of North Carolina’s closed ABA networks.
Lifetime and Billing Caps on ABA Hours: Indiana and Minnesota
Indiana counts hours across a child’s lifetime. IHCP Bulletin BT202627, effective April 1, allows up to 4,000 hours of comprehensive ABA, defined as treatment typically requiring 16 or more hours a week, over a child’s lifetime based on medical necessity, followed by up to 15 hours a week of targeted ABA. The bulletin states that further comprehensive ABA found medically necessary on review will be covered under EPSDT, and that the limits do not apply to services provided by a school corporation. The same bulletin limited ABA coverage to members under 21, with a transition for older members that ended September 30. In an October provider seminar, the state’s fiscal agent described requested hours as individualized to the child’s needs, up to 40 hours a week. Acuity covered the bulletin’s rate phasedown and lifetime cap when it was issued.
Minnesota’s limit is written as a billing cap and has not taken effect. A Department of Human Services update on 2026 legislation lists a billing limit of 40 hours a week per recipient for intensive Early Intensive Developmental and Behavioral Intervention services, effective July 1, 2027, or upon federal approval.
Where Soft Limits on ABA Hours Become Disputes
The first dispute is arithmetic. States count differently. North Carolina counts all services toward 16 hours and, in an October 12 bulletin, told providers that concurrent billing is prohibited outside the exceptions listed in its policy, Nevada counts direct treatment and protocol modification together, Texas leaves caregiver training out, and Nebraska’s definition refers to direct service hours. Virginia’s budget calls its limit cumulative, and in that state’s comment docket, providers and trade groups asked repeatedly whether supervision and family training would push a child over the line.
The second is how plans apply the number. The EPSDT guide bars managed care plans from using a more restrictive definition of medical necessity than the state’s, but providers in Virginia’s docket described plans already treating 20 hours as a default. One provider’s filing said Virginia providers report that at least one managed care organization issues at least partial denials on every request above 20 hours. The Virginia Association for Behavior Analysis argued in its filing that a threshold applied as a fixed ceiling would become a quantitative treatment limit under federal parity rules.
States have their own reasons for drawing lines. CMS reported a 421 percent increase in Medicaid and CHIP ABA spending between 2021 and 2025 when it released its ABA toolkit in August, while stating that the toolkit does not reduce EPSDT obligations or direct states to limit access to medically necessary care. Federal auditors have questioned what fills long schedules. Indiana issued a bulletin on September 29 directing providers to account for sleep and naps in ABA schedules and adjust hours accordingly. The clinical debate continues alongside, from what the evidence supports on dosage to the outcomes data seven providers benchmarked this year and arguments against a 40-hour default.
How ABA Providers Can Document Hours Above a Medicaid Threshold
The EPSDT guide gives families and providers procedural footing when a request is reduced. Written notices of denial or reduction must state the specific reasons for the decision. A family that requests a fair hearing before the effective date of a reduction is entitled to continued coverage while the hearing is pending, and managed care plans must resolve standard appeals within 30 calendar days and expedited appeals within 72 hours.
The clinical side is documentation. In a presentation to Virginia’s ABA Utilization Workgroup in September, the Council of Autism Service Providers described an individualized treatment plan as one that identifies the specific number of hours requested and gives a rationale for why more hours would be too many and fewer would not be enough. The same slides describe focused treatment as typically under 25 hours a week and comprehensive treatment as typically more than 25.
For organizations working in more than one state, the practical task is mapping each program’s line, what it counts, and what it takes to exceed it. Under the EPSDT guide, every one of those lines has an exception. The work is in proving it applies to a particular child.
