Records Management, Documentation, and Auditing
What the exam expects
Records management covers the life of a patient record from registration to destruction. Know the difference between the legal health record (what the organization would release in response to a valid request) and the designated record set (a broader HIPAA term including medical and billing records and other information used to make decisions). Retention is driven by state law, federal law, payer contracts, and facility policy; a common trap is assuming one nationwide retention period. Adult records are often kept 7–10 years after the last encounter, but minors' records usually must be kept until the age of majority plus the state limitation period.
Documentation standards require timely entries, authentication, and legible identification of author, date, and time. Corrections must preserve the original: draw a single line, add the correction, and initial/date/time it. Never use white-out, never backdate, and never alter another clinician's entry. Late entries are labeled as late and include the actual date of entry plus the date of the event. Addenda are used when information was omitted, not to rewrite the record.
Auditing is both proactive (routine chart audits, documentation compliance, coding audits) and reactive (responding to complaints or payer reviews). Audit trails are system-generated and should not be edited; they show who accessed what and when. Internal audits sample records against standards, track corrective actions, and document education. External audits come from payers, regulators, or accreditors.
Worked example: A medical assistant notices a blood pressure recorded as 120/180. The correct action is to draw one line through the error, write the correct value, and add initials, date, and time. Erasing or overwriting is a documentation integrity violation.
Rule of thumb: If it was not documented, it was not done-and if it was documented incorrectly, correct it transparently.