Documenting Psychotherapy Notes

Documenting Psychotherapy Notes

Structures psychotherapy documentation meeting HIPAA protections, billing compliance, clinical continuity requirements, and payer audit standards while maintaining the distinction between progress notes and psychotherapy notes.

Why This Skill Exists

Psychotherapy documentation must satisfy competing demands: clinical utility (enabling continuity of care), legal compliance (supporting medical necessity for billing), HIPAA protections (psychotherapy notes receive enhanced privacy protections under 45 CFR 164.508(a)(2)), and malpractice protection (demonstrating standard of care). Many clinicians fail to distinguish between psychotherapy notes (also called "process notes") and progress notes — a critical distinction under HIPAA that determines who can access the documentation and whether patient authorization is required for disclosure.

Payer audits are the primary source of financial risk in behavioral health. CMS, state Medicaid programs, and commercial payers require that progress notes document medical necessity for the service billed, the specific interventions used, the patient's response, and a plan aligned with the treatment plan goals. Inadequate progress notes result in payment recoupment, fraud allegations, and exclusion from payer networks. Conversely, excessive detail in the medical record (which is accessible to other providers, payers, and in legal proceedings) may compromise patient privacy.

Checkpoint A: Pre-Draft Intake (Mandatory)

1. What type of note is being documented? (progress note for the medical record, psychotherapy/process note for the therapist's private file, or combined note) — default: progress note
2. What CPT code will be billed? (90834: 38-52 minutes individual, 90837: 53+ minutes individual, 90847: family therapy with patient, 90846: family therapy without patient, 90853: group therapy, +90833/+90836/+90838 add-on for E/M) — default: 90834
3. What is the therapy modality? (CBT, DBT, PE, CPT, psychodynamic, supportive, IPT, EMDR, motivational interviewing, eclectic) — default: specify modality
4. What is the current treatment plan with active goals? — default: reference from treatment plan
5. Is this an individual, couple, family, or group session? — default: individual
6. Are there acute safety concerns to document? (suicidal ideation, homicidal ideation, abuse disclosure, mandated reporting event) — default: assess at each session
7. Is the patient in a higher level of care with specific documentation requirements? (PHP, IOP, residential) — default: outpatient
8. What payer requires documentation? (commercial, Medicare, Medicaid — documentation requirements vary) — default: identify payer

Documents to Request

• Current treatment plan with active goals and objectives
• Prior session notes for continuity
• Standardized outcome measures administered at this session (PHQ-9, GAD-7, PCL-5, ORS/SRS, etc.)
• Safety plan (if patient has active risk)
• Session recording or notes from supervision (for trainees)
• Payer-specific documentation requirements (if prior authorization is in place)

Step 1: Understanding the HIPAA Distinction

Progress Notes (Part of the Medical Record)

• Accessible to other treating providers, payers (for billing review), and subject to subpoena
• MUST be maintained for every clinical encounter
• Required elements: date, start/stop time, service type, diagnoses, interventions used, patient response, plan
• Subject to release under standard HIPAA authorizations

Psychotherapy Notes (Protected Under HIPAA 45 CFR 164.508(a)(2))

• Kept SEPARATE from the medical record
• NOT accessible to other providers, payers, or in most legal proceedings without specific patient authorization
• Content: therapist's impressions, analysis of the conversation, session content details, transference/countertransference notes
• Cannot be required for billing — payers cannot demand psychotherapy notes for payment
• Authorization for release requires a specific, separate authorization from the patient

What Goes Where

• Progress note (medical record): Session date/time, CPT code, modality, diagnoses, interventions used (e.g., "cognitive restructuring targeting catastrophic thinking"), patient's functional status and symptom trajectory, risk assessment, medication issues discussed, plan for next session
• Psychotherapy note (separate, protected): Detailed session content, patient narratives, therapist's formulation, transference/countertransference observations, clinical hypotheses, sensitive disclosures

Step 2: Progress Note Structure — SOAP, DAP, or BIRP Format

SOAP Format (Most Common)

S — Subjective:

• Patient's self-reported symptoms, mood, and functioning since last session
• Direct quotes for significant statements (especially safety-related)
• Relevant life events or stressors reported
• Medication adherence and side effects reported
• Standardized measure scores (PHQ-9 = X, GAD-7 = X)

O — Objective:

• Mental status observations (affect, appearance, behavior, speech)
• Behavioral observations during session (engagement, emotional reactivity, insight)
• Results of structured assessments administered during session
• Collateral information received

A — Assessment:

• Clinical formulation linking session content to treatment plan goals
• Progress toward treatment goals (improving, stable, worsening — with evidence)
• Risk assessment update (suicidal ideation, homicidal ideation, self-harm — document even when negative)
• Diagnostic considerations (new symptoms, diagnostic clarification, rule-outs)
• Treatment response assessment

P — Plan:

• Interventions planned for next session
• Homework or between-session assignments given
• Treatment plan modifications needed
• Medication recommendations (if prescriber; or recommendations to prescriber if therapist)
• Referrals made
• Next session date, time, and frequency
• Safety plan updates (if applicable)
• Coordination of care activities planned

DAP Format (Condensed Alternative)

• D (Data): Combines subjective and objective
• A (Assessment): Same as SOAP
• P (Plan): Same as SOAP

BIRP Format (Common in Community Mental Health)

• B (Behavior): Observable patient behavior and reported symptoms
• I (Intervention): Specific therapeutic interventions used
• R (Response): Patient's response to interventions
• P (Plan): Next steps

Step 3: Documenting Specific Therapeutic Interventions

Document the specific interventions used, not just the modality label. This is the most common audit deficiency.

Cognitive Behavioral Therapy (CBT):

• Document the specific cognitive or behavioral technique: cognitive restructuring, behavioral activation scheduling, exposure (in-vivo or imaginal — specify target), thought records, behavioral experiments, relaxation training, problem-solving
• Document the specific cognitive distortion or maladaptive belief targeted
• Document homework assigned and review of prior homework

Dialectical Behavior Therapy (DBT):

• Document the specific module and skill taught: distress tolerance (TIPP, ACCEPTS, self-soothe), emotion regulation (opposite action, ABC PLEASE), interpersonal effectiveness (DEAR MAN, GIVE, FAST), mindfulness (wise mind)
• Document diary card review findings
• Document chain analysis or solution analysis if completed

Prolonged Exposure (PE):

• Document imaginal exposure: trauma narrative session number, SUD ratings (pre, peak, post), processing discussion
• Document in-vivo exposure: target situation, SUD ratings, habituation achieved
• Document between-session listening assignment compliance

Cognitive Processing Therapy (CPT):

• Document session number in protocol (1-12)
• Document stuck points identified and challenged
• Document worksheet reviewed (ABC, Challenging Questions, Patterns of Problematic Thinking)

Motivational Interviewing (MI):

• Document OARS techniques used (Open questions, Affirmations, Reflections, Summaries)
• Document stage of change and any change talk or sustain talk observed
• Document readiness ruler results if used

Psychodynamic/Insight-Oriented:

• Progress note: Document themes addressed and patient's affective engagement
• Detailed process content goes in the protected psychotherapy note, not the progress note

Step 4: Risk Assessment Documentation

Every progress note MUST include a risk assessment update, even when there are no concerns:

When no acute safety concerns: "Patient denies suicidal ideation, homicidal ideation, and self-harm urges. No evidence of psychotic symptoms. Safety plan remains in place. Risk assessment: low."

When safety concerns are present, document:

• Specific ideation reported (passive vs. active, plan, intent, means, timeline)
• Risk factors identified (current and historical)
• Protective factors identified
• Interventions implemented during the session (safety plan review/update, lethal means counseling, crisis contacts provided, level of care assessment)
• Risk level determination with clinical reasoning
• Plan (increased session frequency, medication consultation, family contact, hospitalization)
• Whether consultation with supervisor or colleague occurred

Mandatory reporting events:

• If child abuse, elder abuse, or dependent adult abuse is disclosed, document: what was reported, to whom (agency, report number), date and time of report, patient's response to the reporting
• If Tarasoff duty is triggered (identifiable victim of threatened violence), document: threat specifics, identified victim, actions taken (warn victim, notify law enforcement, hospitalize patient)

Step 5: Billing Compliance Documentation

Document elements required to support medical necessity for the CPT code billed:

For all therapy sessions:

• Date of service
• Start and stop time (including face-to-face time for time-based codes)
• CPT code with time documentation: 90834 (38-52 min), 90837 (53+ min)
• DSM-5-TR diagnosis with ICD-10-CM code
• Service type and modality
• Link between session content and treatment plan goals (which goal was addressed)
• Patient's response to intervention (not just "tolerated well")
• Medical necessity for continued treatment (why more sessions are needed)

For add-on E/M codes (+90833, +90836, +90838):

• Document medical evaluation component separately (medication review, side effects, vital signs, medical decision-making)
• Document the psychotherapy component separately with distinct time
• These codes require that BOTH psychotherapy AND medical evaluation occurred in the same encounter

Common audit failures to avoid:

• Notes that are carbon copies of prior sessions (indicates cloned notes)
• Failure to document time (required for time-based codes)
• No link between session interventions and treatment plan goals
• No medical necessity statement for continued treatment
• No risk assessment documentation
• Progress notes that are actually psychotherapy notes (contain too much session content detail for the medical record)

Checkpoint B: Post-Draft Alignment (Mandatory)

1. Does the progress note contain all required elements for the CPT code billed?
2. Is sensitive session content kept in the psychotherapy note (separate file) rather than the progress note?
3. Is risk assessment documented, even when negative?
4. Are specific therapeutic interventions documented (not just "supportive therapy provided")?
5. Is there a clear link between the session content and the treatment plan goals?

Quality Audit

• Session date, start time, and stop time documented
• CPT code supported by documented face-to-face time
• DSM-5-TR diagnosis with ICD-10-CM code listed
• Specific therapeutic interventions documented (not just modality label)
• Patient's subjective report and therapist's objective observations both documented
• Progress toward treatment plan goals assessed with evidence
• Risk assessment updated (SI, HI, self-harm — even if negative)
• Safety plan referenced if patient has active risk
• Plan for next session documented with frequency rationale
• Medical necessity for continued treatment documented
• Standardized outcome measure scores documented if administered
• Homework assigned and prior homework reviewed (for structured therapies)
• HIPAA distinction maintained (sensitive content in psychotherapy notes, not progress notes)
• Mandatory reporting documented if triggered (abuse, Tarasoff duty)

Guidelines

1. Never write cloned notes — each progress note must reflect the unique content of that specific session. Identical or near-identical notes across sessions are a red flag in payer audits and may constitute billing fraud.
2. Always document risk assessment at every session, even when negative — "Patient denies SI/HI" is a minimum standard and protects against malpractice claims alleging failure to assess.
3. Keep psychotherapy process notes separate from the medical record — HIPAA provides enhanced protections, and detailed session content in the progress note exposes sensitive patient information to unnecessary access.
4. Document specific interventions, not just modality — "Provided CBT" is insufficient. Document the specific technique (e.g., "cognitive restructuring targeting catastrophic thinking about job performance using a thought record").
5. Link every session to a treatment plan goal — payers deny claims when they cannot identify which treatment plan goal was addressed during the session.
6. Document the patient's response to the intervention, not just that it was delivered — "Patient identified and challenged 3 automatic thoughts with 70% belief rating reduction" is billable documentation; "Patient was engaged" is not.
7. For manualized therapies (PE, CPT, DBT), document the session number and protocol adherence — this demonstrates fidelity to the evidence-based treatment.
8. When documenting couples or family sessions, be mindful that all parties may request access to the record — document carefully to avoid harm to any participant.