A copy-pasted progress note. A $3.2 million audit finding. Notes that no one caught until the auditor did.

A complete entry includes the date/time, provider identification, reason for the visit, clinical findings, assessment/diagnosis, treatment plan, and any patient instructions. Entries should be contemporaneous (recorded at or near the time of service), legible, and signed or authenticated by the responsible provider. Late entries should be clearly marked as addenda.

Copy-pasting progress notes can carry forward outdated information, create inaccurate records, and trigger billing for services that weren't actually performed. Auditors specifically look for cloned notes as evidence of upcoding or fraud. When every note looks identical, it raises red flags about whether each service was actually provided and documented accurately.

Federal retention minimums vary by rule. Medicare's hospital Conditions of Participation require at least 5 years (42 CFR 482.24), Medicare billing documentation must be kept 7 years (42 CFR 424.516), and HIPAA requires 6 years for compliance documentation (45 CFR 164.530). Many states require longer, sometimes for the life of the patient plus additional years, and pediatric records often have the longest periods. Always follow the longest applicable requirement. When in doubt, retain longer rather than shorter.

Yes. Under HIPAA, patients have the right to request amendments to their records. Providers may deny the request if the record is accurate and complete, but must document the request and the reason for denial. The patient's request and the provider's response become part of the permanent record regardless of whether the amendment is accepted.