'Don't Write That Down': What Must Still Go in the Progress Note
Summary
When a client asks you to keep something out of their chart, the answer is almost never removal. HIPAA gives a client the right to request a restriction on disclosure and the right to request an amendment, and neither one is a right to have clinical content deleted. What can move is narrow: the federal definition of psychotherapy notes excludes any summary of diagnosis, the treatment plan, symptoms, prognosis and progress to date, so a summary of what the disclosure means for care stays in the progress note.
By Gale Editorial · Updated 2026-09-01. Every figure cited to a dated source. How we write.
What the request is asking for
Two things, and only one of them is yours to give. Most clients who ask you to leave something out of the chart are asking who will see it, and the federal privacy rules answer that question with a restriction on disclosure rather than an empty note. The record has its own floor underneath the request, and the floor is where the conversation should start.
So ask what the fear is attached to. An insurer reading a claim, a court reading a subpoena, an employer reading a form you are asked to complete (employer attendance confirmations and payment records travel on their own rails): each one has a different answer. A client afraid of one of those is asking about distribution.
But some of what a client wants gone cannot leave the record at all.
45 CFR 164.501 draws that line inside the definition of psychotherapy notes, and it draws it against the request. Medication prescription and monitoring, counseling session start and stop times, the modalities and frequencies of treatment furnished, results of clinical tests, and any summary of diagnosis, functional status, the treatment plan, symptoms, prognosis and progress to date are all excluded from what a psychotherapy note may hold 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.501 - Definitions.The federal definition of psychotherapy notes at 45 CFR 164.501, including the requirement that they be separated from the rest of the medical record, and the closed list of content the definition excludes: medication prescription and monitoring, session start and stop times, modalities and frequencies of treatment furnished, results of clinical tests, and any summary of diagnosis, functional status, treatment plan, symptoms, prognosis and progress to date.. A summary of what a disclosure means for the diagnosis or the plan stays in the progress note, whatever else moves.
In couples and family work the request usually carries a second question underneath it: the chart wall between related clients. That one has its own answer and is not resolved here.
Can it live in the psychotherapy notes instead?
Sometimes, and less often than the reflex suggests. psychotherapy notes are notes recorded in any medium by a mental health professional documenting or analyzing the contents of conversation in a private, group, joint or family counseling session, and the definition holds only while they are separated from the rest of the individual's medical record 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.501 - Definitions.The federal definition of psychotherapy notes at 45 CFR 164.501, including the requirement that they be separated from the rest of the medical record, and the closed list of content the definition excludes: medication prescription and monitoring, session start and stop times, modalities and frequencies of treatment furnished, results of clinical tests, and any summary of diagnosis, functional status, treatment plan, symptoms, prognosis and progress to date.. A note sitting inside the chart is a chart note, whatever the heading on it says.
What the separation buys is real. Under 45 CFR 164.508(a)(2), a covered entity must obtain an authorization for any use or disclosure of psychotherapy notes, subject to a short list of exceptions: the originator's own use for treatment, the entity's own mental-health training programs, defending itself in a legal action the individual brought, and certain disclosures the rules elsewhere require or permit 2Ref 2U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The protection psychotherapy notes gain at 164.508(a)(2): a covered entity must obtain an authorization for any use or disclosure of them, subject to the narrow listed exceptions (the originator's own treatment use, the entity's own mental-health training programs, defense of a legal action brought by the individual, and certain required or permitted disclosures).. A general authorization for the rest of the record does not reach them.
The same wall runs in both directions, which is worth saying out loud before a client relies on it. The individual's right to inspect and obtain a copy of protected health information reaches the designated record set and carves psychotherapy notes out of it 3Ref 3U.S. Department of Health and Human Services (2026).45 CFR 164.524 - Access of individuals to protected health information.The individual's right to inspect and obtain a copy of protected health information in the designated record set, the carve-out of psychotherapy notes from that right at 164.524(a)(1), and the 30-day deadline to act on a request, extendable once by no more than 30 days.. Content moved there is content the client cannot pull back with a records request either.
So the move is narrower than it sounds. Process content, hypotheses, the working through of what was said in the session can live in a separate file. The diagnosis, the plan, the symptoms and the progress cannot follow it there.
The restriction a client can ask for, and the one you must grant
One request, two different obligations. Under 45 CFR 164.522(a)(1) a client may request a restriction on uses and disclosures of protected health information for treatment, payment or health care operations, and a covered entity is not required to agree 4Ref 4U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR § 164.522 — Rights to request privacy protection for protected health information.The client's right to request a restriction on uses and disclosures for treatment, payment or health care operations, the fact that a covered entity is not required to agree, the one mandatory restriction at 164.522(a)(1)(vi) covering disclosure to a health plan where the service was paid for in full out of pocket, and that an agreed restriction must be documented and may be terminated, except that a covered entity may not unilaterally terminate the mandatory paid-in-full restriction.. There is a single exception written into the same paragraph, and it happens to answer the fear that brings most clients to this conversation.
You must agree to restrict a disclosure to a health plan for payment or health care operations, not otherwise required by law, where the item or service has been paid for in full out of pocket by the individual or by someone other than the plan 4Ref 4U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR § 164.522 — Rights to request privacy protection for protected health information.The client's right to request a restriction on uses and disclosures for treatment, payment or health care operations, the fact that a covered entity is not required to agree, the one mandatory restriction at 164.522(a)(1)(vi) covering disclosure to a health plan where the service was paid for in full out of pocket, and that an agreed restriction must be documented and may be terminated, except that a covered entity may not unilaterally terminate the mandatory paid-in-full restriction.. Take the payment before or at the session, flag the encounter so no claim leaves your system, and put the restriction in writing. An agreed restriction has to be documented, and while a restriction can generally be terminated later, a covered entity cannot end this mandatory one by giving notice on its own 4Ref 4U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR § 164.522 — Rights to request privacy protection for protected health information.The client's right to request a restriction on uses and disclosures for treatment, payment or health care operations, the fact that a covered entity is not required to agree, the one mandatory restriction at 164.522(a)(1)(vi) covering disclosure to a health plan where the service was paid for in full out of pocket, and that an agreed restriction must be documented and may be terminated, except that a covered entity may not unilaterally terminate the mandatory paid-in-full restriction..
A client who pays out of pocket for a session usually asks the next question within a minute, which is whether they can have a superbill without a diagnosis code. That is a separate problem and it has a separate answer.
| What the client asks for | What the rules offer | Where it stops |
|---|---|---|
| Nobody outside sees this | A restriction request under 164.522, mandatory only in the paid-in-full case | The content stays in the record; only the disclosure narrows |
| Keep it out of the chart | A psychotherapy note, if it is genuinely separate | Diagnosis, plan, symptoms, prognosis and progress are excluded from that file |
| Take it back out | An amendment request under 164.526 | Amendment adds or corrects; it does not delete |
What the payer and your own code still need to see
Enough documentation to support the code you billed, held where the payer can reach it. First Coast Service Options, the Medicare contractor for Jurisdiction N (Florida, Puerto Rico and the U.S. Virgin Islands), publishes a billing and coding article for psychiatric diagnostic evaluation and psychotherapy services. The revision effective January 1, 2025 states that all documentation must be maintained in the patient's medical record and made available to the contractor on request, and that it support the ICD-10-CM code submitted 5Ref 5First Coast Service Options, Inc. (A and B MAC, Jurisdiction N), for the Centers for Medicare & Medicaid Services (2025).Billing and Coding: Psychiatric Diagnostic Evaluation and Psychotherapy Services (A57520).One Medicare contractor's documentation expectations for psychiatric diagnostic evaluation and psychotherapy services: that all documentation be maintained in the patient's medical record, made available to the contractor on request, and support the ICD-10-CM code submitted. Used as one jurisdiction's example, explicitly not as a national rule..
That is one contractor's article and not a national rule. Another MAC or a commercial payer may state its expectations differently, so the version that binds you is your own jurisdiction's article, found by searching the CMS Medicare Coverage Database for your contractor, plus whatever documentation policy your payer contracts incorporate. Look it up once and keep the link with your note templates.
Your profession's code sits underneath the payer's. For members of the American Counseling Association, the 2014 Code of Ethics at A.1.b requires counselors to create, safeguard and maintain documentation necessary for rendering professional services, and B.6.a asks for documentation sufficient and timely enough to support the delivery and continuity of services 6Ref 6American Counseling Association (2014).2014 ACA Code of Ethics.The counseling profession's documentation duty at A.1.b and B.6.a, used to show the ethical floor a client's omission request runs into, with the limit stated in prose that it binds ACA members and is not law and not the code governing social workers, marriage and family therapists or psychologists.. It is an ethics code rather than law, and it does not speak for clinical social workers, marriage and family therapists or psychologists, each of whom answers to a code of their own.
The privacy rules quoted above govern who may see the record. What a progress note has to contain comes from your payer's documentation policy and your licensing board's rules, and a client's request does not move either one.
It is already written in the note
Then the route is amendment, and amendment adds rather than removes. 45 CFR 164.526 gives an individual the right to request amendment of protected health information in a designated record set for as long as the set maintains it, and it lets a covered entity deny the request on four listed grounds, one of which is that the record is accurate and complete 7Ref 7U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR § 164.526 — Amendment of protected health information.The right to request amendment of protected health information in a designated record set for as long as it is maintained, the four grounds on which a covered entity may deny (including that the record is accurate and complete), and that amendment adds or corrects rather than deletes.. Nothing in the section authorizes striking an entry.
What that looks like in a chart is an addendum: the client's objection in the client's own words, dated, filed with the original entry, with the original left where it was. If you deny it, the section sets out its own written denial procedure, so read that paragraph before you answer.
The harder version of the same conversation is a client's request to destroy records, and the amendment right does not answer that one either.
Expect the client to read whatever you write. The right of access runs to protected health information in the designated record set, and a covered entity has 30 days to act on the request, extendable once by no more than 30 days 3Ref 3U.S. Department of Health and Human Services (2026).45 CFR 164.524 - Access of individuals to protected health information.The individual's right to inspect and obtain a copy of protected health information in the designated record set, the carve-out of psychotherapy notes from that right at 164.524(a)(1), and the 30-day deadline to act on a request, extendable once by no more than 30 days.. A note you would be willing to hand over settles most of these questions in advance.
What to say, and what to write about the request
Answer the fear before you answer the question about the note. Naming what leaves your office, which is a claim, a records request or a form somebody asked you to complete, resolves most of these conversations without touching the documentation at all. Then say plainly what you can do, what you cannot, and why, in that order, while the client is still in the room to hear it.
Then document the request itself. A short entry is the common convention, and the version that reads best when someone opens the chart two years later: the date, what the client asked to have omitted, what you explained about the record, what was agreed (a restriction, a self-pay arrangement, process content kept in a separate file), and your clinical reasoning for the level of detail you settled on. The request is clinical material in its own right.
Notes outlive the arrangement that produced them. A transfer of care, a subpoena answered by somebody else, the platform exit: the next person reading the entry may never have met the client.
If the answer you can give is smaller than the one the client wanted, say that in the session and put the restriction request in writing on the way out.
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.U.S. Department of Health and Human Services (2026). 45 CFR 164.501 - Definitions. Electronic Code of Federal Regulations (eCFR). link ✓The federal definition of psychotherapy notes at 45 CFR 164.501, including the requirement that they be separated from the rest of the medical record, and the closed list of content the definition excludes: medication prescription and monitoring, session start and stop times, modalities and frequencies of treatment furnished, results of clinical tests, and any summary of diagnosis, functional status, treatment plan, symptoms, prognosis and progress to date.
- 2.U.S. Department of Health and Human Services (2026). 45 CFR 164.508 - Uses and disclosures for which an authorization is required. Electronic Code of Federal Regulations (eCFR). link ✓The protection psychotherapy notes gain at 164.508(a)(2): a covered entity must obtain an authorization for any use or disclosure of them, subject to the narrow listed exceptions (the originator's own treatment use, the entity's own mental-health training programs, defense of a legal action brought by the individual, and certain required or permitted disclosures).
- 3.U.S. Department of Health and Human Services (2026). 45 CFR 164.524 - Access of individuals to protected health information. Electronic Code of Federal Regulations (eCFR). link ✓The individual's right to inspect and obtain a copy of protected health information in the designated record set, the carve-out of psychotherapy notes from that right at 164.524(a)(1), and the 30-day deadline to act on a request, extendable once by no more than 30 days.
- 4.U.S. Department of Health and Human Services (Office for Civil Rights) (2026). 45 CFR § 164.522 — Rights to request privacy protection for protected health information. Electronic Code of Federal Regulations (eCFR), National Archives / GPO. link ✓The client's right to request a restriction on uses and disclosures for treatment, payment or health care operations, the fact that a covered entity is not required to agree, the one mandatory restriction at 164.522(a)(1)(vi) covering disclosure to a health plan where the service was paid for in full out of pocket, and that an agreed restriction must be documented and may be terminated, except that a covered entity may not unilaterally terminate the mandatory paid-in-full restriction.
- 5.First Coast Service Options, Inc. (A and B MAC, Jurisdiction N), for the Centers for Medicare & Medicaid Services (2025). Billing and Coding: Psychiatric Diagnostic Evaluation and Psychotherapy Services (A57520). CMS Medicare Coverage Database — Billing and Coding Article. link ✓One Medicare contractor's documentation expectations for psychiatric diagnostic evaluation and psychotherapy services: that all documentation be maintained in the patient's medical record, made available to the contractor on request, and support the ICD-10-CM code submitted. Used as one jurisdiction's example, explicitly not as a national rule.
- 6.American Counseling Association (2014). 2014 ACA Code of Ethics. American Counseling Association. link ✓The counseling profession's documentation duty at A.1.b and B.6.a, used to show the ethical floor a client's omission request runs into, with the limit stated in prose that it binds ACA members and is not law and not the code governing social workers, marriage and family therapists or psychologists.
- 7.U.S. Department of Health and Human Services (Office for Civil Rights) (2026). 45 CFR § 164.526 — Amendment of protected health information. Electronic Code of Federal Regulations (eCFR), National Archives / GPO. link ✓The right to request amendment of protected health information in a designated record set for as long as it is maintained, the four grounds on which a covered entity may deny (including that the record is accurate and complete), and that amendment adds or corrects rather than deletes.
https://www.gale.care/for-providers/pq-client-asks-leave-it-out-of-chart · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.