One of the most important — and most commonly misunderstood — distinctions in mental health documentation law is the difference between psychotherapy notes and progress notes. Under HIPAA, these two types of records are treated very differently, with psychotherapy notes receiving substantially stronger legal protection. Confusing them, or failing to keep them properly separated, can expose you and your clients to significant legal risk.
The HIPAA Definition of Psychotherapy Notes
HIPAA defines **psychotherapy notes** specifically as notes recorded by a mental health professional that document or analyze the contents of conversation during a private counseling session — and that are *kept separate from the rest of the client's medical record*. The key elements of this definition are: 1. They document session conversation (the process, not the outcome) 2. They are created by a mental health professional 3. They are stored separately from the medical record
These are sometimes called "process notes" — they capture your clinical thinking, the themes you noticed, countertransference reactions, hypotheses you are forming, the nuance of what the client said and how it felt in the room. They are your professional tool for reflection and ongoing clinical understanding.
The Definition of Progress Notes
**Progress notes** are the opposite in legal terms. They are part of the official medical record and contain: session date and duration, the types of treatment provided, the modalities and frequencies of treatment furnished, results of clinical tests, any summary of diagnosis, functional status, treatment plan, symptoms, prognosis, and progress to date.
Progress notes are what insurance companies review when they audit your claims. They are what other providers see when records are released. They are what a court can subpoena. They do not receive the special HIPAA protection that psychotherapy notes do.
The Critical Legal Difference
Psychotherapy notes require a *specific* HIPAA authorization to release — an authorization that explicitly identifies psychotherapy notes and cannot be combined with other authorizations. Even with a general release-of-records authorization signed by the client, you cannot release psychotherapy notes unless the authorization specifically says so.
Progress notes can be released with a standard authorization for release of records (and in some cases — emergencies, court orders, treatment coordination — can be released without authorization).
This distinction matters enormously in several scenarios. When an insurance company requests records for a utilization review, they are entitled to progress notes; they are *not* entitled to psychotherapy notes. When a client signs a blanket release for records to go to their primary care physician, their progress notes can be released; their psychotherapy notes require a specific separate authorization. When records are subpoenaed, psychotherapy notes may have additional protection depending on state law.
What Goes in Each Type
**Psychotherapy notes should contain:** - Your personal clinical impressions and hunches - Countertransference observations - Process observations about the therapeutic relationship - Hypotheses you are forming about the client - Raw, unfiltered session content that you would not want shared
**Progress notes should contain:** - Session date, start/end time, duration - Modality (individual, group, telehealth) - Client presentation and mental status - Safety assessment - Diagnoses - Interventions used and client response - Progress toward treatment goals - Plan for next session
If you are writing progress notes that contain your personal clinical musings, countertransference reactions, and unfiltered session process, stop. That content belongs in psychotherapy notes — and if it ends up in the medical record, it loses its legal protection.
Storage Separation Requirements
HIPAA requires that psychotherapy notes be stored separately from the rest of the medical record. This is not a suggestion — it is a structural requirement that gives these notes their special protection. In paper-based systems, this means literally separate files (often kept by the clinician personally, not in the shared filing system). In electronic systems, this means using an EHR that has a separate, access-controlled area for psychotherapy notes — or keeping paper process notes separate from your electronic medical record.
Many therapists use a simple two-folder system: one for the official clinical record (progress notes, treatment plans, intake paperwork) and one for personal process notes. The process notes folder is kept in a separate location and never included in records releases.
Client Rights to Each Type
Clients have the right to access their medical record, which includes progress notes. Under HIPAA, they can request access to their own records, and in most cases you must provide it. However, clients do not have the same access right to psychotherapy notes — you can deny an access request for psychotherapy notes under HIPAA (though state law varies, so check your jurisdiction).
This asymmetry is intentional. Psychotherapy notes contain the kind of clinical reflection that may not be appropriate to share directly with clients — not because it is secret, but because it represents your professional process, not the client's record.
Implications for Your EHR Setup
When selecting or configuring an EHR, confirm that it supports separate storage for psychotherapy notes versus progress notes. Many EHR systems designed for mental health include this feature specifically because of HIPAA's requirements. If your current EHR does not support this separation, consider keeping paper process notes separately.
The bottom line: keep these two types of records rigorously separated, understand what belongs in each, and make sure your documentation practices reflect the legal distinction. The protection HIPAA affords to psychotherapy notes is a valuable tool — but only if you use it correctly.