2.1 Health Record Content and Documentation

Key Takeaways

  • The legal health record (LHR) is the formal business record disclosed in litigation; the designated record set (DRS) is broader and governs a patient's HIPAA right of access
  • Authentication, timeliness, and completeness are core documentation standards enforced by Joint Commission and CMS Conditions of Participation
  • An amendment changes documented content, an addendum adds new information, and a late entry documents care after the fact — never delete or overwrite the original
  • Administrative data (demographics, consents, billing) is distinct from clinical data (history, progress notes, results, orders)
Last updated: June 2026

The Legal Health Record and the Designated Record Set

Quick Answer: The legal health record (LHR) is the documentation an organization formally produces as its business record in response to a subpoena or litigation. The designated record set (DRS) is a broader HIPAA concept covering everything used to make decisions about a patient — including billing records — and it defines the scope of a patient's right to access and amend.

A frequent RHIT trap is treating these as synonyms. The LHR is defined by the organization through policy: it lists exactly which documents (and which EHR screens/reports) constitute the official record. The DRS is defined by HIPAA at 45 CFR 164.501 and is wider — it includes the medical and billing records, enrollment, payment, and claims data, plus any other records used to make decisions about individuals.

Key distinction: the LHR drives what you disclose for legal/business purposes; the DRS drives what a patient may access and request to amend.

Documentation Standards

Documentation quality is governed by Joint Commission standards and the CMS Conditions of Participation (CoP). Core requirements RHIT tests:

  • Authentication — every entry must be signed (handwritten, electronic, or digital signature) by the author. Rubber-stamp signatures are prohibited for physicians under CMS rules.
  • Timeliness — history and physical (H&P) within 24 hours of admission; operative reports written or dictated immediately after surgery; verbal orders authenticated within the timeframe set by state law and CoP.
  • Completeness — a record deficient in signatures or required reports is incomplete; charts not completed within 30 days of discharge are delinquent.
  • Legibility and no blank spaces — paper entries must be legible and lined through, not erased.

The delinquent record rate = (number of delinquent records ÷ average monthly discharges) and is a Joint Commission accreditation focus.

Corrections: Amendments, Addenda, and Late Entries

Never delete or overwrite original documentation — the integrity of the record (and its defensibility in court) depends on a preserved audit trail.

Correction typeWhat it doesHow to document
Error correctionFixes a mistakeSingle line through (paper) or EHR flag; date, time, initials; original stays readable
AmendmentClarifies or changes existing contentNew entry referencing the original; never alters the source entry
AddendumAdds new information omitted earlierSeparate dated/timed/signed entry labeled "addendum"
Late entryDocuments care after the factLabeled "late entry," with current date/time and the date/time care occurred

In an EHR, a version control / audit log preserves prior versions automatically. A patient-requested amendment under HIPAA may be denied (e.g., the record is accurate), but the denial and the patient's statement of disagreement become part of the record.

Record Formats and Data Types

Formats:

  • Paper — source documents in a physical folder.
  • Hybrid — part paper, part electronic; the HIM challenge is defining which media together constitute the LHR. Hybrid records are the highest-risk format for disclosure errors.
  • Electronic health record (EHR) — fully digital, with structured data, audit logs, and clinical decision support.

Record organization (paper-era concepts still tested):

  • Source-oriented — sections grouped by department/source (labs together, nursing together). Easy to file, hard to follow one problem over time.
  • Problem-oriented (POMR) — organized around a problem list with SOAP notes (Subjective, Objective, Assessment, Plan); attributed to Lawrence Weed.
  • Integrated — all entries in strict chronological order regardless of source.

Data types: Administrative data = demographics, consents, advance directives, financial/billing data, and authorizations. Clinical data = H&P, progress notes, physician orders, diagnostic results, operative and pathology reports.

Required Reports and EHR Documentation Integrity

An acute-care inpatient record has a predictable set of required components, and RHIT items test which report belongs where:

  • History and physical (H&P) — present on admission within 24 hours; an H&P done within 30 days before admission may be reused with an interval/update note.
  • Operative report — dictated immediately after surgery; a brief postoperative progress note bridges the gap until the full report is transcribed.
  • Pathology, anesthesia, and recovery records — for any specimen removed or anesthesia given.
  • Discharge summary — required for stays over 48 hours, summarizing course, condition, and follow-up; very short stays may use a final progress note.

In the EHR, the biggest documentation-integrity threats are copy-forward (cloned notes) that propagate stale or wrong information, and unsigned "copy-and-paste" content. The audit trail records every author, view, and edit, and version control preserves superseded entries. HIM staff perform quantitative analysis (checking for missing signatures and reports) and qualitative analysis (reviewing whether documentation actually supports the care and codes billed) — two distinct review types that are frequently confused on the exam.

Consents, Authorization, and Advance Directives

The administrative portion of the record carries the documents that authorize care and disclosure, and the exam expects you to separate them. Consent to treatment is general permission to be treated and is obtained at registration. Informed consent is procedure-specific: the physician must document the risks, benefits, and alternatives discussed before surgery or an invasive procedure — a missing informed consent is a serious deficiency. An authorization (distinct from consent) is the HIPAA document permitting disclosure of protected health information for purposes outside treatment, payment, and operations.

Advance directives — a living will or durable power of attorney for healthcare — record the patient's wishes and surrogate decision-maker, and the Patient Self-Determination Act requires that their presence be documented on admission. Confusing consent to treat with authorization to disclose is a classic distractor.

Test Your Knowledge

A patient invokes the HIPAA right to obtain a copy of records used to make decisions about her care, including billing information. Which concept defines the scope of what must be produced?

A
B
C
D
Test Your Knowledge

A nurse realizes at 6 p.m. that she forgot to chart a medication she administered at 10 a.m. the same day. How should this be documented?

A
B
C
D
Test Your Knowledge

Which record format arranges all entries in strict chronological order regardless of which department created them?

A
B
C
D