Arizona Assisted Living Incident Reporting Requirements: A Practical Guide for Operators

Three labels used in this guide

Incident reporting becomes confusing when a facility treats every expectation as if it came from the same source. This guide uses three labels:

The same event can activate more than one category. A serious fall may require immediate family and primary-care-provider notification under the assisted living rule, an AHCCCS Incident, Accident, or Death report for an enrolled member, a medical- record entry, quality-management review, and possibly a service- plan update.

Arizona assisted living incident deadlines at a glance

There is no universal 24-hour ADHS rule for every incident

The most common oversimplification in Arizona assisted living is: "If anything happens, report it to ADHS within 24 hours." That is not what Article 8 says.

R9-10-803(K) creates three specific written-notification pathways:

1. A resident death that is reportable under A.R.S. § 11-593: one working day.
2. Self-injury requiring immediate intervention by an emergency services provider: two working days.
3. An elopement: 24 hours after discovery.

Other incidents follow different rules. A fall that results in the need for medical services, for example, triggers immediate notification to the resident's emergency contact and primary care provider, plus documentation under R9-10-819(D). Article 8 does not say that every fall, every call to 911, every emergency-room visit, or every medication error must be reported to ADHS within 24 hours.

That does not mean those events can be ignored. They still may require:

• An internal incident record and quality-management review
• Immediate family and practitioner notification
• A medical-record entry
• A service-plan review or update
• An immediate APS or law-enforcement report if abuse, neglect, or exploitation is suspected
• An AHCCCS or ALTCS report for an applicable resident
• Notification required by another law, payer contract, insurer, or facility policy

The correct question is not only, "Was there an incident?" It is, "Which reporting pathways did this event activate?"

What every Arizona assisted living facility needs in its incident system

Required: a documented incident process inside quality management

R9-10-803 requires the facility's policies and procedures to address its quality-management program, including incident reports and supporting documentation. Those policies must be established, documented, implemented, available to personnel, and reviewed at least once every three years and updated as needed.

R9-10-804 then requires an ongoing quality-management plan with a method to:

• Identify, document, and evaluate incidents
• Collect data about resident services
• Evaluate concerns affecting resident care
• Make changes or take action as a result of the evaluation
• Determine how often a documented quality-management report is submitted to the governing authority

Arizona does not prescribe one universal incident-report form or one universal internal deadline for every possible event. The facility's own policy should therefore define what personnel must report internally, who receives the report, how quickly it is escalated, and how the event moves into quality management.

Best practice: define a broad internal reporting threshold

A sensible internal policy captures more than the three events listed in R9-10-803(K). It should generally include:

• Falls, including unwitnessed falls and near-falls
• Injuries, burns, skin tears, bruising of unknown origin, or pressure injuries
• Choking, aspiration concerns, or sudden changes in condition
• Medication errors, omissions, refusals with clinical consequences, and unexpected reactions
• Missing residents, elopement attempts, or failures of door and alert systems
• Allegations or signs of abuse, neglect, exploitation, mistreatment, or misappropriation
• Resident-to-resident altercations
• Staff-to-resident or visitor-to-resident altercations
• Emergency calls, emergency-department visits, and hospital transfers
• Equipment failures, utility interruptions, fire, flood, extreme-temperature exposure, or other environmental hazards
• Errors in service delivery or departures from the service plan
• Events that could reasonably have caused harm even when no injury is immediately apparent

This is a best-practice list, not a claim that each item must be reported to ADHS. A broad internal threshold helps the manager identify the narrower events that do require outside notification.

Accidents, emergencies, and injuries requiring medical services

R9-10-819(D) applies when a resident has an accident, emergency, or injury that results in the resident needing medical services.

Required immediate notifications

The manager must ensure that both of the following are notified immediately:

• The resident's emergency contact
• The resident's primary care provider

This is an immediate-notification rule. Waiting until the end of the shift, until the family calls back, or until the resident returns from the hospital can create a gap between the event and the required response. If a contact cannot be reached, document the attempts, continue following the facility's escalation policy, and do not delay emergency care.

Required documentation

The facility must document:

• The date and time of the accident, emergency, or injury
• A description of what happened
• The names of witnesses
• The actions taken by caregivers
• The individuals who were notified
• Any action taken to prevent the event from happening again

This list is one of the clearest minimum-content standards in the Arizona assisted living rules. A form that asks only for "what happened" and "staff signature" is not enough for an event governed by R9-10-819(D).

Does every fall meet this rule?

Not necessarily. R9-10-819(D) is triggered when the event results in the resident needing medical services. A no-injury event may still warrant internal reporting, monitoring, documentation, and quality-management review under the facility's policy. If the resident needs evaluation or treatment from a medical provider, the immediate-notification and documentation requirements apply.

Facilities should avoid making a caregiver decide the entire regulatory classification alone in the moment. The caregiver should respond to the resident, notify the manager or on-call lead, and document objective facts. The manager can then apply the reporting decision tree without delaying necessary care.

The three event-specific written notifications to ADHS

R9-10-803(K) requires the manager to ensure that the ADHS unit responsible for licensing and monitoring the facility receives written notification of three categories of event.

Submission method

The rule requires written notification to the ADHS licensing and monitoring unit, but the codified text does not prescribe a single permanent email address or public incident form. Operational submission channels can change. Facilities should verify the current method with ADHS Assisted Living Facilities Licensing, follow any current portal or unit instructions, and retain proof showing what was submitted, when, and by whom.

The separate ADHS public complaint form is designed for complaints and should not automatically be assumed to be the facility's required regulatory-notification channel.

When a resident's death is reportable

R9-10-803(K)(1) incorporates A.R.S. § 11-593. The statute requires a person who knows of a qualifying death to promptly notify the nearest peace officer and provide the known facts and circumstances.

The statutory categories include deaths that occur:

• When the person was not under the current care of a health care provider as described in the statute
• As a result of violence
• Unexpectedly or without explanation
• When an infant or child dies unexpectedly or without explanation
• In a suspicious, unusual, or nonnatural manner, including an occupational accident
• As a result of an anesthetic or surgical procedure
• From a suspected previously unreported or undiagnosed disease that may threaten public safety
• In circumstances where the body is unidentified

The statute also references a death of a person in the custody of a "custodial agency." That phrase has a specialized criminal- justice definition in A.R.S. § 13-4401. An assisted living facility is not transformed into a custodial agency merely because a resident lives there or receives directed care.

Practical death-reporting process

When a death may fall within A.R.S. § 11-593:

1. Follow emergency and practitioner instructions and preserve the scene when appropriate.
2. Promptly notify the nearest peace officer with the known facts and circumstances.
3. Send written notification to the ADHS licensing unit within one working day after the death.
4. Evaluate whether APS, law enforcement, AHCCCS, the resident's payer, the facility's insurer, or another authority also requires a report.
5. Preserve the facility's timeline, clinical record, medication record, service plan, witness information, transfer documentation, and proof of all notifications.

When the circumstances are unclear, obtain qualified legal or regulatory guidance promptly. Do not assume that an expected death is reportable, and do not assume that a death is exempt merely because the resident was on hospice.

Self-injury and the two-working-day deadline

Arizona's assisted living rules define self-injury as an intentional act that causes harm or injury to oneself. Examples in the definition include cutting, burning, hitting, or scratching oneself. The R9-10-803(K)(2) ADHS notification is narrower than the definition itself: it applies when the self- injury requires immediate intervention by an emergency services provider.

For a qualifying event, the facility must provide written notification to ADHS within two working days after the resident inflicts the self-injury.

The facility should also assess other duties:

• Emergency response and medical services
• Immediate notification to the emergency contact and primary care provider under R9-10-819(D), when that rule is triggered
• Medical-record documentation
• Review of the service plan and behavioral or safety supports
• AHCCCS sentinel or reportable-incident reporting, when applicable
• Abuse or neglect reporting if the facts provide a reasonable basis for suspicion

Suicidal statements without physical injury, an interrupted attempt, and non-suicidal behavioral escalation may not fit the precise R9-10-803(K)(2) trigger. They can still be clinically urgent and reportable under another pathway. The resident's immediate safety should drive the response, not an attempt to fit the event into one regulatory label.

Elopement and the 24-hour deadline

Arizona's Article 8 definition of elopement is specific. In substance, it involves an impaired resident leaving the premises of an assisted living facility authorized to provide directed care without supervision or notice and without personnel knowing that the resident has left.

Required ADHS notice

Written notification must reach the ADHS licensing unit within 24 hours after the elopement is discovered.

Required directed-care response

R9-10-819(A)(7) also requires the facility to:

• Immediately investigate the elopement
• Notify the resident's designated family member, guardian, or other responsible person within 24 hours

Best-practice elopement record

In addition to the required investigation and notices, preserve:

• When and where the resident was last known to be present
• When the absence was discovered
• Search actions and times
• Who contacted law enforcement and when
• When and where the resident was found or returned
• The resident's condition on return and any medical evaluation
• Door, alarm, camera, staffing, and supervision information
• Witness statements
• The current service plan and safety interventions
• Immediate corrective actions and longer-term prevention measures
• Proof of ADHS, family, payer, and other required notifications

An attempted exit or a resident found before leaving the premises may not meet the defined term "elopement," but it can still be a significant safety event that belongs in the internal incident and quality-management process.

Abuse, neglect, and exploitation must be reported immediately

Arizona's vulnerable-adult reporting law is separate from the three-event ADHS notification list.

Under A.R.S. § 46-454, long-term care providers and other persons responsible for the care of a vulnerable adult are mandated reporters. When a mandated reporter has a reasonable basis to believe that abuse, neglect, or exploitation has occurred, the report must be made immediately by telephone or online to either:

• A peace officer, or
• The Adult Protective Services Central Intake Unit

Arizona DES confirms that the APS online form is available 24 hours a day. Telephone intake is available during the hours posted by DES at (877) SOS-ADULT, (877) 767-2385. If a person needs an immediate safety check or faces immediate danger, contact law enforcement or call 911. APS states that it does not perform safety checks.

What the APS report should include

The statute identifies information including:

• The names and addresses of the adult and persons having control or custody of the adult, if known
• The adult's age and the nature and extent of the adult's vulnerability
• The nature and extent of the suspected abuse, neglect, or exploitation
• Other information the reporter believes may help establish the cause

DES advises online reporters to provide detailed information about the event, witnesses, the alleged perpetrator, caregivers, and any safety concerns for the investigator.

Internal escalation does not justify delay

A facility may have an internal process for personnel to notify the manager or another designated person. That process must ensure that the external report required by A.R.S. § 46-454 is actually made. Internal screening, interviews, management approval, or uncertainty about whether the allegation will be substantiated should not delay the immediate report.

The reporting threshold is a reasonable basis to believe the event occurred. The facility is not required to prove the allegation before reporting it.

Preserve proof of the report

DES warns that an online APS report cannot be accessed after submission and advises the reporter to print it immediately before submitting. Facilities should preserve the report copy, submission confirmation, date, time, reporter, and any follow-up reference information in a confidential and access-controlled manner.

Retaliation against a person who makes a good-faith report is prohibited. Failure to comply with A.R.S. § 46-454 can also carry criminal consequences.

The facility's five-working-day investigation

R9-10-803(J) applies when there is a reasonable basis to believe that abuse, neglect, or exploitation occurred on the facility premises or while the resident was receiving services from the assisted living facility.

The manager must ensure that the facility:

1. Takes immediate action to stop the suspected abuse, neglect, or exploitation, when applicable.
2. Reports the suspicion as required by A.R.S. § 46-454.
3. Documents the suspected event, the immediate action taken, and the external report.
4. Initiates an investigation and documents the required investigation information within five working days after the report.

Required investigation content

The investigation documentation must address:

• The dates and times of the suspected event
• A description of the suspected event
• Any injury to the resident
• Any change in the resident's physical, cognitive, functional, or emotional condition
• The names of witnesses
• Actions taken to prevent the suspected abuse, neglect, or exploitation from occurring again

The investigation requirement does not replace an APS or law-enforcement investigation. Facility personnel should protect the resident, preserve evidence, document objective facts, and avoid actions that could compromise an external investigation.

If the suspected event happened elsewhere

R9-10-803(I) addresses suspected abuse, neglect, or exploitation that occurred before the resident was accepted or off the premises while the resident was not receiving facility services. The facility still must report as required by A.R.S. § 46-454. The five-working-day facility-investigation provision in R9-10-803(J) is tied to events on the premises or while the resident was receiving facility services.

Medication errors and unexpected reactions

R9-10-817(G) requires a caregiver to immediately report a medication error or a resident's unexpected reaction to a medication to:

• The ordering medical practitioner, or
• Another medical practitioner if the ordering practitioner is not available

This is an immediate practitioner-notification duty. Article 8 does not separately state that every medication error must be reported to ADHS within 24 hours.

The event may create additional obligations. For example:

• If the resident needs medical services, R9-10-819(D) requires immediate notification to the emergency contact and primary care provider and the six required documentation elements.
• If the event involves suspected neglect or intentional harm, A.R.S. § 46-454 and R9-10-803 may apply.
• If the resident is covered by AHCCCS or ALTCS, a medication error at a licensed assisted living facility is included among AHCCCS reportable incident categories, and a medication error resulting in death or serious injury may be a sentinel event.
• The medication administration, assistance, refusal, and unexpected reaction must be documented in the resident's medical record as applicable under R9-10-811.
• The facility should evaluate the event through its quality-management process.

An effective medication-error record distinguishes the objective event from clinical instructions. It should identify the ordered medication, what was actually given or omitted, dose, route, time, resident assessment, practitioner notification time, instructions received, follow-up monitoring, family notifications, and outcome.

Emergency responder and hospital-transfer documentation

A.R.S. § 36-420.04 adds a separate documentation package when an assisted living facility contacts an emergency responder on behalf of a resident.

The facility must provide written information that includes, as applicable:

• The reason emergency services were requested
• The resident's medication service and a list of medications
• The resident's pharmacy
• Known allergies
• Primary care provider information
• Health care power of attorney or authorized representative information
• Relevant medical conditions and history
• A facility point of contact available at all times
• Any applicable HIPAA release
• Advance directives

If the resident is transported to a hospital, the facility must notify the resident's authorized representative of the transport and the hospital's name and location.

The statute requires a standardized emergency-documentation form for each resident and periodic updates. The facility must retain a copy of the information provided to the emergency responder and documentation of the hospital-transport notification for two years after the emergency.

AHCCCS and ALTCS add a separate reporting layer

This section applies only when the resident, facility, or service is subject to AHCCCS or ALTCS reporting requirements. It should not be used to create an AHCCCS deadline for a private- pay event that is outside the program.

Payer requirement: standard reportable incidents

AHCCCS Medical Policy Manual Policy 961 generally requires reportable Incidents, Accidents, and Deaths to be submitted within two business days of the event or of notification of the event.

Depending on the provider and program, the report may be entered directly into the AHCCCS Quality Management Portal or sent through the contractor's required process. Providers should follow both current AHCCCS policy and their health plan or contractor manual.

AHCCCS reportable categories include events such as:

• Abuse, neglect, or exploitation
• Member death
• Serious injury
• A medication error at a licensed assisted living facility
• A missing person from a licensed assisted living facility
• A suicide attempt
• Suspected criminal activity
• Other events that cause or could reasonably cause harm

Payer requirement: sentinel events

Sentinel events generally must be submitted within one business day of the event or notification. Examples in AHCCCS policy include certain events involving death or serious injury, such as:

• A fall
• A medication error
• A missing person
• A suicide attempt or self-harm in a health care setting
• Physical assault
• Sexual abuse or assault during services
• Restraint
• Certain pressure injuries acquired after admission

Do not confuse the provider's one-business-day sentinel deadline with the separate provision requiring an AHCCCS contractor to notify AHCCCS immediately, but no later than 24 hours, after the contractor learns of a sentinel event. The contractor's 24-hour escalation is not a universal 24-hour provider rule for all Arizona assisted living incidents.

Multiple reports may still be required

An AHCCCS submission does not replace:

• An immediate APS or peace-officer report
• A written ADHS notification under R9-10-803(K)
• Family and primary-care-provider notification under R9-10-819(D)
• Practitioner notification of a medication error under R9-10-817(G)
• The facility's internal investigation or quality-management duties

What an incident report should contain

Arizona does not provide one mandatory form for all incident types. The required content depends on the event.

Required for an accident, emergency, or injury resulting in medical services

Under R9-10-819(D), capture:

• Date and time
• Description
• Witnesses
• Caregiver actions
• Persons notified
• Prevention action

Required for an on-premises or service-related abuse, neglect, or exploitation investigation

Under R9-10-803(J), capture:

• Dates and times
• Description
• Resident injury
• Changes in physical, cognitive, functional, or emotional condition
• Witnesses
• Prevention actions
• The suspected event, immediate protective action, and external report

Best-practice fields for a complete operational record

For consistency and defensibility, a facility may also include:

• Resident name and unique identifier
• Exact location of the event
• Date and time discovered, if different from the event time
• Name and role of the person completing the report
• Objective observations, including vital signs when clinically appropriate
• Immediate first aid, emergency response, practitioner orders, and monitoring
• Transfer destination and departure and return times
• Every attempted and successful notification, with date, time, method, recipient, and response
• Photographs, diagrams, video-preservation information, or other attachments when lawful and appropriate
• Related medication administration record, progress note, service-plan provision, staffing assignment, or equipment record
• Regulatory and payer decision with the reason for the decision
• Confirmation numbers and proof of submission
• Manager review, follow-up owner, due date, and completion date
• Corrective and preventive actions
• Date of quality-management review

Write facts, not conclusions

Good incident documentation describes what personnel saw, heard, did, and were told. Avoid blame, speculation, copied conclusions, or retrospective edits that obscure the original entry.

R9-10-811 requires medical-record entries to be dated, legible, authenticated, and not altered in a way that makes the original entry illegible. Apply the same discipline to incident documentation: preserve the original record, identify late entries and corrections, and maintain a clear audit trail.

Quality management turns the report into prevention

An incident report records the event. Quality management evaluates what the event means.

R9-10-804 requires the facility to use its quality-management process to identify, document, and evaluate incidents and other resident-care concerns. The facility then makes changes or takes action and reports identified concerns and actions to the governing authority at the frequency defined in its plan.

A useful review asks:

1. What happened?
2. Was the resident's immediate need addressed?
3. Were all required people and agencies notified on time?
4. Did personnel follow the service plan, medication orders, and facility policy?
5. Did staffing, communication, equipment, environment, or supervision contribute?
6. Has this happened before to this resident or elsewhere in the facility?
7. What action will reduce recurrence?
8. Who owns each action, and when will it be checked for effectiveness?

The rule does not prescribe one fixed frequency for the governing-authority report. The facility's quality-management plan must define the frequency and then follow it.

How long incident-related records should be retained

There is no single retention period for every document created by an incident.

The important retention distinction

The 12-month rule for a quality-management report or an abuse investigation does not shorten the six-year retention period for information that is part of the adult resident's medical record.

A.R.S. § 12-2291 defines a health care provider for this medical-records chapter to include a health care institution as defined in A.R.S. § 36-401. Arizona assisted living facilities are licensed health care institutions, so the six-year adult-record rule should be built into the facility's retention schedule.

Facilities should classify each record and apply the longest applicable period. If an investigation, claim, subpoena, complaint, survey, or litigation hold is pending or reasonably anticipated, do not destroy related records simply because a routine minimum period has expired.

Keep records retrievable, not merely retained

R9-10-803(E) generally requires documentation or information required by Chapter 10 to be provided to ADHS within two hours after the Department requests it, unless another provision states a different period. Retention therefore is only half of the operational requirement. The facility should be able to locate the incident report, supporting documents, notification proof, investigation, quality-management review, emergency-transfer packet, and related resident-record entries promptly and without reconstructing the file from memory.

Protect confidentiality and access

Medical records are privileged and confidential under Arizona law, subject to authorized disclosures. Incident and investigation files may contain medical information, APS information, personnel information, or quality-management material. Use role-based access, avoid unnecessary duplication, and disclose records only as authorized or required.

Update the medical record and service plan when the event changes care

Closing an incident report does not finish the resident-care work.

R9-10-811 requires the medical record to contain, as applicable:

• Assisted living services provided
• Medication administration or assistance
• Unexpected medication reactions
• Refusals
• Significant changes in the resident's condition
• Actions taken in response

R9-10-808 requires the service plan to be reviewed and updated no later than 14 calendar days after a significant physical, cognitive, or functional change. Respite care follows its separate three-working-day framework.

After an incident, ask:

• Did the resident's transfer, mobility, toileting, nutrition, hydration, skin, medication, supervision, behavior, or cognitive needs change?
• Are new practitioner orders reflected in daily care?
• Does the service plan still describe what caregivers are expected to do?
• Do shift notes and care records show that the new intervention was implemented?
• Does the resident require a reassessment or a different authorized level of care?

The incident report, medical record, practitioner instructions, and service plan should tell one coherent story.

Common incident-reporting mistakes

Treating every event as a 24-hour ADHS report

This creates noise and still may miss the real deadline. Classify the event under the applicable rule.

Treating "not reportable to ADHS" as "nothing to document"

An event may still require medical-record documentation, family and practitioner notification, payer reporting, internal quality review, or a service-plan update.

Waiting for proof before reporting suspected abuse or neglect

The external reporting threshold is a reasonable basis to believe, not a completed internal investigation.

Letting internal escalation delay the APS report

The report is immediate. Internal review should support the response, not postpone it.

Missing one of the two immediate notifications after an injury

R9-10-819(D) names both the emergency contact and the primary care provider when the resident needs medical services.

Incomplete accident documentation

The rule requires date and time, description, witnesses, caregiver actions, persons notified, and preventive action.

Forgetting the separate five-working-day investigation

An APS or police report does not replace the facility's R9-10-803(J) investigation when the suspected event occurred on premises or while the resident was receiving facility services.

Missing the payer layer

An event outside the three ADHS categories may still be an AHCCCS reportable incident or sentinel event.

Discarding an online APS report

Print or securely save the report before submitting it, then retain the confirmation and timeline.

Purging everything after 12 months

Different documents have different retention periods. Adult medical records generally carry a six-year minimum after the last date of service, and emergency-transfer documents have a separate two-year rule.

Correcting records by overwriting them

Preserve the original entry. Date and authenticate corrections and late entries so the history remains readable.

A practical incident-response workflow

1. Protect the resident.

   Provide first aid within staff scope, call 911 when appropriate, separate involved persons, stop suspected mistreatment, and preserve the scene or evidence when needed.

2. Make immediate clinical and safety notifications.

   Depending on the event, contact the emergency responder, emergency contact, primary care provider, ordering practitioner, manager, law enforcement, or APS. Do not wait for the incident form to be complete.

3. Open one master timeline.

   Record the event time, discovery time, resident assessment, actions, attempted and completed notifications, instructions, transport, return, and follow-up. Use actual times rather than phrases such as "later" or "shortly after."

4. Classify every reporting pathway.

   Reportable death? Qualifying self-injury? Elopement as defined? Reasonable basis to suspect abuse, neglect, or exploitation? Accident/emergency/injury requiring medical services? Medication error? AHCCCS or ALTCS reportable or sentinel? Payer, insurer, or other-law report?

5. Meet the shortest deadline first.

   Immediate duties come before one-working-day, 24-hour, two-working-day, and two-business-day duties. Assign a named person to each submission and preserve proof.

6. Complete the required investigation.

   For suspected on-premises or service-related abuse, neglect, or exploitation, document the R9-10-803(J) investigation information within five working days after the report. For elopement, begin the investigation immediately.

7. Update resident care.

   Enter required clinical information in the medical record, implement practitioner instructions, update the service plan when a significant change occurs, and communicate the current intervention to caregivers.

8. Complete quality-management review.

   Identify contributing conditions, corrective actions, owners, due dates, and a method for checking effectiveness. Report the concern and action to the governing authority according to the facility's quality-management plan.

9. Retain the complete evidence set.

   Keep the incident report, supporting records, notifications, confirmations, investigation, quality review, emergency-transfer packet, medical-record entries, service-plan changes, and follow-up evidence for their applicable periods.