Record Keeping and Documentation Flashcards

A California therapist in solo private practice closes their practice and cannot locate several former clients to notify them. The therapist should:

Answer: Retain records per statutory requirements and attempt reasonable notification efforts

Records must be retained per California's retention requirements; therapists should make reasonable documented efforts to notify former clients even if not all can be located.

Which of the following is an appropriate method for disposing of client records that have reached the end of their required retention period?

Answer: Shredding paper records and using certified data destruction for electronic records

Proper disposal requires shredding paper records and using HIPAA-compliant certified destruction for electronic media to prevent unauthorized access.

Under California law, a client who disagrees with information in their mental health record may:

Answer: Submit a written addendum or statement of disagreement to be included in the record

California Health and Safety Code §123111 gives patients the right to submit a written addendum stating their disagreement with record content, which must be included in the file.

What is a 'covered entity' under HIPAA as it applies to a California therapist in solo private practice?

Answer: Any health care provider who transmits health information electronically in connection with covered transactions

HIPAA's covered entity definition includes health care providers who transmit health information electronically for standard transactions such as billing — this includes most solo practitioners.

A therapist's clinical notes may be subpoenaed in a custody dispute. The therapist's best practice is to:

Answer: Notify the patient, consult with an attorney, and seek to protect records unless a court orders release

Therapists should notify the client, assert the privilege, and consult legal counsel before releasing records pursuant to a subpoena — a court order may ultimately be required.

Under California law, a business associate agreement (BAA) is required when a therapist shares PHI with:

Answer: Vendors or contractors who access PHI on the therapist's behalf, such as billing services

A BAA is required with business associates — third-party vendors or contractors such as billing companies, IT services, or EHR vendors — who handle PHI on behalf of the covered entity.