HSP Documentation & Record Keeping 2 — Questions and Answers
Question 1: Under HIPAA, the minimum necessary standard requires covered entities to:
- Share all PHI with any treating provider without restriction
- Limit PHI disclosures to the minimum needed to accomplish the intended purpose (Correct answer)
- Obtain written consent before releasing records to insurance companies
- Document every verbal communication with collateral contacts
Correct answer: Limit PHI disclosures to the minimum needed to accomplish the intended purpose
The minimum necessary standard requires that covered entities limit the PHI they use, disclose, or request to the minimum amount needed to accomplish the intended purpose.
Question 2: A psychologist's treatment notes are subpoenaed in a custody dispute. The BEST initial course of action is to:
- Immediately provide all records to the court
- Destroy the records to protect the client
- Consult with legal counsel and notify the client before releasing records (Correct answer)
- Release only session dates and attendance without clinical content
Correct answer: Consult with legal counsel and notify the client before releasing records
When records are subpoenaed, the psychologist should consult with legal counsel and notify the client so the client can seek their own legal remedy before disclosure.
Question 3: Which of the following is considered a 'psychotherapy note' under HIPAA and receives additional privacy protections?
- Medication prescription records
- A summary of treatment progress for insurance billing
- The psychologist's private process notes kept separate from the medical record (Correct answer)
- Session start and end times documented in the main chart
Correct answer: The psychologist's private process notes kept separate from the medical record
HIPAA defines psychotherapy notes as notes recorded in any medium by a mental health professional documenting private conversations, kept separate from the rest of the medical record.
Question 4: When documenting a client's suicide risk assessment, a psychologist should MOST importantly record:
- The client's exact words verbatim throughout the entire session
- The clinical reasoning, risk and protective factors assessed, and the safety plan (Correct answer)
- Only the final risk level rating without supporting rationale
- A checklist of DSM-5 symptoms met by the client
Correct answer: The clinical reasoning, risk and protective factors assessed, and the safety plan
Risk assessment documentation must capture the clinical reasoning process, risk and protective factors weighed, and the resulting safety plan to demonstrate defensible clinical decision-making.
Question 5: A former client requests all records dating back 12 years. The psychologist's state law requires retention of adult records for 7 years. The psychologist has already destroyed records older than 7 years. This is:
- An ethical violation because records must be kept indefinitely
- Legally and ethically appropriate if destruction followed proper procedures (Correct answer)
- A HIPAA violation requiring immediate reporting to HHS
- Permissible only if the client signed a records destruction consent form at intake
Correct answer: Legally and ethically appropriate if destruction followed proper procedures
Destroying records in accordance with applicable state retention laws and proper destruction procedures is both legally and ethically appropriate.
Question 6: Which documentation practice BEST protects a psychologist in a malpractice claim involving a missed diagnosis?
- Adding retrospective notes to the chart after the claim is filed
- Contemporaneous documentation of the differential diagnosis process and clinical reasoning (Correct answer)
- Keeping records vague to avoid locking in a specific diagnosis
- Documenting only final conclusions without showing the reasoning process
Correct answer: Contemporaneous documentation of the differential diagnosis process and clinical reasoning
Contemporaneous notes showing the differential diagnosis process and clinical reasoning demonstrate that the psychologist exercised appropriate professional judgment at the time of treatment.
Question 7: A psychologist working in a group practice wants to share a client's record with a colleague for peer consultation. The APPROPRIATE approach under HIPAA is to:
- Share the full record freely since both providers are in the same practice
- Obtain written authorization from the client before any consultation
- Use de-identified information when possible; if not, use the minimum necessary PHI (Correct answer)
- Restrict all peer consultation because it violates confidentiality
Correct answer: Use de-identified information when possible; if not, use the minimum necessary PHI
Peer consultation for treatment purposes is permitted under HIPAA's treatment exception, but the minimum necessary standard still applies, so de-identified information should be used when feasible.
HSP Documentation & Record Keeping 2
Under HIPAA, the minimum necessary standard requires covered entities to: