Health Records

Key Takeaways

  • Every patient must have a complete, confidential health record that is separate from custody files and available to clinical staff who need it for care.
  • Core record content includes a problem list, SOAP/progress notes, orders with documentation of completion, medication administration records, and results of diagnostic and specialty care.
  • Access is need-to-know for clinical staff; custody access is limited to safety-related information, not unrestricted chart browsing.
  • Records (or essential clinical summaries) travel with the patient on transfer and release of information follows written authorization and applicable law.
  • Retention, EHR access controls, audit trails, and downtime procedures must be defined in site-specific policy under the Responsible Health Authority.
Last updated: July 2026

Why health records matter on CCHP

Health records are a core Governance and Administration topic (Domain I, roughly 20%–25% of the CCHP exam). NCCHC Standards expect a complete, confidential health record for each patient—not a scattered pile of loose notes and not a copy of the custody file. On exam items, records are the evidence of screening, assessment, treatment, continuity, consent/refusal, and handoffs when patients move.

Think of the health record as both a clinical tool and a governance control. Clinically, it supports safe decisions by any qualified health professional who sees the patient. Administratively, it shows whether the program meets standards for documentation, privacy, transfer of care, and legal release of information. Weak records often surface in mortality reviews, grievances, and CQI as missed problems, incomplete orders, or care that cannot be reconstructed.

A health record is distinct from custody records. Disciplinary history, classification notes, and criminal case details belong in custody systems. Clinical diagnoses, medications, mental health notes, and lab results belong in the health record. Crossing those streams without a clear, limited need-to-know path is both a confidentiality failure and a documentation integrity problem.


Complete record for every patient

NCCHC-aligned practice starts with a simple rule: if the person is a patient in the facility, there is a health record—initiated at receiving screening (or first health contact) and maintained throughout incarceration. Completeness is judged by whether a subsequent clinician can understand the patient’s problems, plan, and course of care without relying on memory or hallway reports.

Essential content elements (exam-useful)

ElementWhat “complete” looks like
IdentifiersPatient name/ID, DOB, facility identifiers consistent with intake
Problem listActive medical, mental health, dental, and substance-related problems
Allergies / alertsDocumented allergies and critical clinical alerts
Screening & assessmentsReceiving screen, transfer screen, initial health assessment, MH evaluation as applicable
Progress / encounter notesChronologic notes for sick call, chronic care, infirmary, emergencies
OrdersDiagnostic, treatment, housing-related clinical orders with status
MedicationsOrders plus administration record (MAR) and discontinuations
ResultsLabs, imaging, specialty reports, hospital discharge summaries
Consents / refusalsInformed consent and documented refusals when care is declined
Discharge / transfer summariesContinuity information when the patient leaves or moves

Exam trap: A “chart” that only holds medication lists without problem lists, notes, or results is not a complete health record under standards-minded governance.


Problem list as the clinical spine

A problem list is the living index of active issues that drive care. It should be updated when diagnoses change, chronic conditions are added, or acute problems resolve. Without a problem list, chronic care visits become one-off encounters and handoffs fail when different providers see the same patient across shifts and housing units.

Problem-list habits that hold up on CCHP scenarios

  • List active problems with enough specificity to guide care (for example, “type 2 diabetes—on insulin,” not only “endocrine”).
  • Include behavioral health and dental problems when they affect the plan of care—not only medical diagnoses.
  • Reconcile the problem list at chronic care, after hospitalization, and at transfer.
  • Avoid dumping every transient complaint as a permanent problem; resolve or archive inactive items so the list stays usable.

The problem list does not replace detailed notes. It orients the note and the care plan so continuity is possible when staff turnover is high.


SOAP notes, progress notes, and order documentation

Progress documentation

Most facilities use SOAP (Subjective, Objective, Assessment, Plan) or a close equivalent for clinical encounters. Whatever format policy requires, notes should be:

  • Timely (documented as soon as practical after the encounter).
  • Legible/identifiable (author, credentials, date/time).
  • Linked to the problem being addressed.
  • Actionable (clear plan, follow-up, and red flags).

Subjective captures the patient’s report and relevant history. Objective captures vitals, exam findings, and measurable data. Assessment states the clinical impression. Plan states orders, education, return precautions, and housing or observation recommendations that require custody coordination.

Orders and “closed loop” documentation

Orders are not complete until the record shows they were written (or entered), communicated, and carried out or appropriately discontinued. High-yield examples:

  • Diagnostic tests ordered → results reviewed and noted.
  • Medications ordered → MAR entries match the order; holds and no-shows are explained.
  • Specialty referrals → appointment status and report filing.
  • Clinical housing recommendations (bottom bunk, lower tier, medical observation) → communication to custody and status in the chart.

CCHP pattern: An order exists, but nobody documented review of critical labs or follow-up. Governance answer: the system failed closed-loop communication, not merely “poor handwriting.”


Confidentiality, clinical access, and custody limits

Health records are confidential. Access for clinical staff should be role-based and need-to-know so treating providers, nurses, mental health clinicians, dental staff, and relevant allied professionals can deliver care. Shared charts across disciplines are appropriate when they serve coordinated care; unrestricted browsing by anyone with a facility badge is not.

Custody access limits

Custody staff may need limited health information for safety, housing, transportation, or emergency response (for example, seizure precautions, mobility limits, suicide-watch status, or isolation for infection control). That is need-to-know communication, not open chart access. Custody should not routinely read progress notes, psychotherapy content, full problem lists, or HIV/STI details without a defined operational need and policy path.

ScenarioAppropriate accessInappropriate access
Nurse treating asthma exacerbationFull clinical chart as needed
Officer escorting to dialysisTransport/mobility precautionsReading full dialysis progress notes
Classification officerHousing-relevant clinical limits via authorized channelBrowsing mental health therapy notes
After a use-of-force injuryClinical evaluation documentation by health staffCustody rewriting clinical findings in the health chart

Paper records require locked storage, controlled sign-out, and secure transport. Electronic health records (EHR) require unique logins, role-based permissions, automatic timeouts, audit trails, and a downtime procedure so care does not stop when systems fail. Printing and screenshot habits should be controlled; discarded printouts are a common confidentiality breach.

Related Domain I content on privacy of care (conversations and locations) pairs with records confidentiality, but the chart itself has its own access and storage rules.


EHR vs paper controls

Whether the facility is paper, hybrid, or fully electronic, the standard expectation is the same outcome: complete, secure, usable documentation.

Control checklist

  1. Single primary record (or tightly linked hybrid with clear “source of truth”).
  2. Version integrity—amendments are labeled; prior content remains auditable.
  3. Authentication—authors are identifiable; shared passwords are prohibited.
  4. Backup and recovery for EHR; fire-safe storage for paper archives.
  5. Retention schedule consistent with law, corporate policy, and litigation holds.
  6. Training so staff document in the official system, not personal notebooks that never enter the chart.

Exam trap: “We keep sticky notes on the med cart for real care and chart later if we have time.” That is a dual-record failure and a continuity risk.


Transfer of records with patient movement

Patients move constantly: intake to housing, facility to facility, jail to hospital, prison to community. NCCHC-minded practice expects essential health information to accompany the patient so receiving clinicians are not starting blind.

Movement types and record expectations

  • Intra-facility housing change: Chart remains available; alerts (allergy, watch status, isolation) must still reach receiving unit staff.
  • Inter-facility transfer: Transfer screening plus transfer of record (or secure electronic access) and a clinical summary of active problems, meds, pending labs, and special needs.
  • Outside hospital / specialty: Send relevant history; retrieve and file discharge summaries and results on return.
  • Release to community: Provide continuity information per policy and law (med list, appointments, problem summary) as part of discharge planning—not a separate records silo.

Failure to move information is a common root cause of missed medications, duplicated testing, and preventable emergencies after transfer.


Release of information (ROI)

Release of information is the formal process for disclosing health information outside routine care operations—courts, attorneys, family (when authorized), outside providers, insurers, or public health when required by law.

Key principles for CCHP:

  • Prefer written authorization from the patient (or legal representative) specifying what may be released and to whom, unless a legal exception applies (emergency, mandated report, court order, public-health requirement—per applicable law).
  • Release the minimum necessary for the purpose when that standard applies under governing privacy rules.
  • Document what was released, when, by whom, and under what authority.
  • Do not treat “the attorney called” or “the family is upset” as automatic full-chart disclosure without authorization or legal process.
  • Keep ROI logs and forms in a controlled process; health staff—not informal custody favors—own the clinical release workflow.

Retention

Retention periods are set by law, regulation, and organizational policy (often years beyond release). Active charts must remain usable during incarceration; closed charts must remain retrievable for continuity, legal defense, and quality review. Destroying records early to “save space” after a death or lawsuit risk is an exam red flag.


Governance, CQI, and audit uses of the record

Health records feed CQI (completeness audits, chronic-care documentation, medication administration accuracy), peer review, mortality review, and grievance investigations. Audits should check whether required elements exist—not only whether a form was scanned.

Common exam failure modes

  • No problem list; each visit reinvented from scratch.
  • Orders without results review or MAR correlation.
  • Custody full access to EHR “for security.”
  • Charts do not transfer with the patient.
  • ROI without authorization or logging.
  • Hybrid systems with critical notes never entered into the official record.

Bottom line for CCHP: A standards-aligned health record is complete, confidential, clinically accessible, custody-limited, mobile with the patient, and released only through controlled, lawful channels—with problem lists, SOAP/progress notes, and closed-loop order documentation as the backbone of continuity.

Test Your Knowledge

A custody sergeant asks the records clerk for unrestricted electronic access to all inmate progress notes “so officers can stay informed about who is manipulative.” What is the best NCCHC-aligned response?

A
B
C
D
Test Your Knowledge

Which documentation set best reflects a complete correctional health record for ongoing care?

A
B
C
D
Test Your Knowledge

A patient transfers from the intake unit to another facility in the same system. Which practice best supports continuity of care?

A
B
C
D