A copy-pasted progress note. A $3.2 million audit finding. Notes that no one caught until the auditor did.

A complete entry includes the date/time, provider identification, reason for the visit, clinical findings, assessment/diagnosis, treatment plan, and any patient instructions. Entries should be contemporaneous (recorded at or near the time of service), legible, and signed or authenticated by the responsible provider. Late entries should be clearly marked as addenda.

Copy-pasting progress notes can carry forward outdated information, create inaccurate records, and trigger billing for services that weren't actually performed. Auditors specifically look for cloned notes as evidence of upcoding or fraud. When every note looks identical, it raises red flags about whether each service was actually provided and documented accurately.

Federal law (Medicare) requires a minimum of 6-10 years depending on document type. Many states require longer retention - some require records be kept for the life of the patient plus additional years. Pediatric records often have the longest retention periods. Always follow the longest applicable requirement. When in doubt, retain longer rather than shorter.

Yes. Under HIPAA, patients have the right to request amendments to their records. Providers may deny the request if the record is accurate and complete, but must document the request and the reason for denial. The patient's request and the provider's response become part of the permanent record regardless of whether the amendment is accepted.