2.2 Documentation standards, HIPAA & basic ophthalmic coding

The Medical Record

The medical record is a legal document and the primary means of communication among providers. Whatever you chart may later be read by other clinicians, auditors, insurers, and attorneys, so accuracy and clarity are essential. The guiding principle is simple: if it was not documented, it was not done.

Principles of Good Documentation

Every entry must be legible, timed, dated, and signed (or authenticated electronically) by the person who made it. Chart objectively, record facts rather than opinions, and enter information contemporaneously — while the encounter is fresh. Never leave blank lines that others could complete, and never chart in advance. Each abbreviation and entry should be traceable to its author, which is why every provider uses a unique identifier or login.

When you make an error on paper, use the correct-error technique: draw a single line through the mistake so the original remains readable, write the correction, and add your initials, the date, and (when relevant) the reason. Never erase, use correction fluid, or black out an entry — obscuring information looks like concealment and can destroy the record's credibility in a malpractice claim. In an electronic health record (EHR), corrections are made as tracked addenda; the original entry is retained in the audit trail.

The Medical-Legal Record

Because the chart is discoverable in litigation, complete documentation protects both patient and practice. Record informed refusals, missed appointments, and patient noncompliance factually. Late entries are acceptable only when clearly labeled as such with the current date and time; back-dating is fraud.

Standard Ophthalmic Abbreviations

Standardized abbreviations keep charting fast and unambiguous, but you must use only those approved by your practice, because error-prone abbreviations are discouraged by patient-safety authorities. High-yield abbreviations for the COT exam appear below.

Spell out any abbreviation that could be misread, and never invent your own shorthand in a shared record.

HIPAA and Patient Privacy

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting protected health information (PHI) — any individually identifiable health data, including names, dates, record numbers, and images. Two core rules guide daily practice. The minimum necessary standard means you access and disclose only the PHI required for the task at hand. The privacy and security rules require safeguards such as unique logins, automatic screen locks, and secure disposal of paper records.

Patients hold specific rights under HIPAA: to inspect and obtain a copy of their record, to request amendments, to receive an accounting of disclosures, and to receive a Notice of Privacy Practices. Disclosures for treatment, payment, and health-care operations (TPO) generally do not require separate authorization, but most other disclosures — for example, to an employer or attorney — do. Avoid discussing patients in elevators or hallways, and verify identity before releasing any information by phone. A breach of PHI can trigger civil and criminal penalties, and posting any patient detail or image on social media is prohibited even without a name.

Informed Consent

Informed consent is a process, not merely a signature. Before a procedure the physician must explain the diagnosis, the proposed treatment, its risks and benefits, reasonable alternatives, and the consequences of doing nothing, and must allow the patient to ask questions. The technician often witnesses the signature and confirms the form is complete, but the technician does not obtain consent for the physician's procedure. Consent must be voluntary and given by a competent adult or authorized representative.

Introduction to Ophthalmic Coding

Two coding systems work together on every claim. ICD-10-CM codes describe the diagnosis — why the patient was seen (for example, H25.11, age-related nuclear cataract, right eye). CPT codes describe the services performed. Diagnosis codes must support the medical necessity of the services billed.

For office visits, ophthalmology may use either Eye codes (92002-92014) or Evaluation and Management (E/M) codes (99202-99215). The Eye codes are unique to ophthalmology and optometry and are divided by whether the patient is new (92002 intermediate, 92004 comprehensive) or established (92012 intermediate, 92014 comprehensive). A comprehensive eye exam includes a general evaluation of the complete visual system, whereas an intermediate exam addresses a new or existing problem with a lesser workup. E/M codes instead depend on documented history, examination, and medical decision-making (or total time). The provider chooses whichever set best fits the visit and payer rules. Coders also append modifiers such as -RT, -LT, or -50 to indicate which eye or bilateral service was performed. Technicians support accurate coding by documenting the chief complaint, the elements actually performed, and the diagnosis clearly — the record must justify the level billed, or the claim may be denied on audit.

Medical versus routine (refraction/vision) coverage also matters: a visit prompted by a medical complaint such as flashes is billed to medical insurance with a medical diagnosis, whereas a routine refractive check may fall under a vision plan or be the patient's responsibility. When a service may not be covered, the practice issues an Advance Beneficiary Notice (ABN) so the patient understands potential out-of-pocket cost.