Psychotherapy Notes vs. Progress Notes: The Legal Difference, Explained
Understand the legal difference between psychotherapy notes and progress notes under US federal privacy rules. This guide for mental health clinicians explains what belongs in each document, who can request access, and practical workflows to cleanly separate process material from the shareable clinical record.
Psychotherapy notes are your own notes analyzing what was said in a session, kept separate from the rest of the client’s record. Progress notes are the record itself: session times, modality, diagnosis, treatment plan, symptoms, and progress, which is the documentation payers review and clients can request.1
HIPAA treats most protected health information about much the same way. Psychotherapy notes are the one narrow exception that gets extra protection: disclosing them usually requires the client’s specific authorization, and the client’s right to a copy of their own record doesn’t reach them.2
Worth saying early, because it gets lost: nothing requires you to keep psychotherapy notes at all. Plenty of clinicians don’t. HIPAA defines the category and protects it if you maintain one, but it never tells you to create one. This is a choice about how you work, not an obligation.
What decides which document you’re holding is whether it’s kept separate. HIPAA defines psychotherapy notes as notes recorded in any medium, so paper or electronic makes no difference, but the definition excludes anything maintained in the client’s medical record. Calling something a process note doesn’t protect it, and filing it in the chart strips the protection no matter what it’s called.3
What belongs in which document
The definition works backward. It describes psychotherapy notes as your analysis of what happened in session, then lists the categories that don’t count. That exclusion list is, more or less, your progress note.4
| Psychotherapy notes (kept separate) | Progress notes (the record) |
|---|---|
| Your analysis of what was said in session | Medication prescription and monitoring |
| Working hypotheses and impressions | Session start and stop times |
| Questions you want to return to | Modality and frequency of treatment |
| Results of clinical tests | |
| Summaries of diagnosis, functional status, treatment plan, symptoms, prognosis, and progress to date |
Two things about that right-hand column.
First, those categories never qualify as psychotherapy note material. Not even if you file them somewhere clever. CMS says plainly that this class of information doesn’t qualify, and that physically combining it with protected notes in one document doesn’t turn the non-protected information into protected notes.5
So mixing only runs one direction. Process material dropped into the chart loses its protection; progress-note material dropped into your process notes doesn’t gain any.
Second, look at what that column adds up to: time, modality, diagnosis, plan, progress. That’s the medical-necessity picture. Everything a payer needs in order to evaluate a session sits, by definition, on the progress-note side of the line.
Who can see each document
Everything below assumes the notes are actually kept separate. Once process material sits in the chart, it is part of the client’s medical record and no longer qualifies as psychotherapy notes.
Start with the easy half. The progress note moves the way the rest of the record moves: clients can request a copy under the right of access,6 other treating providers can receive it for treatment without the client’s authorization, and payers can review it for payment activities.7 That is the whole shape of the distinction. One document circulates. The other doesn’t.
Your client. The right of access doesn’t extend to psychotherapy notes; the rule carves them out.8 That removes the obligation, not the option. HHS is clear that you generally keep the discretion to share the notes with the client anyway, and that because doing so is purely permissive, you should check your state’s law for anything that prohibits or conditions it first.9
Another treating provider. Sharing psychotherapy notes takes the client’s authorization, and that holds even when you’re sending them to another clinician for treatment. The exceptions are narrow: your own use of your notes for treatment, supervised training programs inside your practice, defending yourself in a legal action the client brought, and a short list of disclosures required by law or tied to oversight of whoever wrote the notes.10
Serious and imminent threats. One exception is worth naming on its own, because it’s the one that shows up in practice. HIPAA permits disclosure of psychotherapy notes, without authorization, to someone able to prevent or lessen a serious and imminent threat to health or safety.11 Note the verb. HIPAA permits it; it does not require it. Whether you have a duty to warn, and to whom, is a question of state law and professional ethics, and states differ on whether that duty is mandatory or permissive.12
Payers. A provider or health plan generally can’t make treatment, payment, or benefits eligibility contingent on signing an authorization. Plans get one narrow exception, for an authorization requested before enrollment to sort out eligibility, enrollment, underwriting, or risk rating, and that exception specifically does not extend to psychotherapy notes.13
There’s a form-level rule worth knowing too: an authorization for psychotherapy notes can only be combined with another authorization for psychotherapy notes.14 A blanket release covering the whole record isn’t valid for them.
On the Medicare side, CMS tells its review contractors never to request psychotherapy notes, and says a provider’s refusal can’t automatically deny a claim. The same section puts the work back on you, though: you’re responsible for pulling out the information that shows the service was reasonable and necessary, and if what you send doesn’t demonstrate medical necessity, the claim gets denied.15 That instruction binds Medicare’s contractors, not commercial plans.
State law. Some states are stricter than the federal floor, and federally assisted substance use treatment programs fall under a separate set of rules that are more protective still.16
Can psychotherapy notes be subpoenaed?
Sometimes, but not through the door that reaches the rest of the chart.
An attorney-issued subpoena in a civil case and a court order signed by a judge are different instruments. For ordinary records, HIPAA has a provision that lets you respond to a subpoena once you’ve received certain assurances about notice to the client or a protective order. That provision is not among the exceptions that apply to psychotherapy notes.17 Disclosures required by law are on that list, and a court order can fall there.18
There is also a second layer that isn’t HIPAA at all. In Jaffee v. Redmond, the Supreme Court recognized a psychotherapist-patient privilege in federal court.19 Privilege is an evidence doctrine about what a court can compel; HIPAA is a disclosure rule about what you may release. The two interact, and how they interact depends on your state and on the specific case.
The practical answer is the same either way. Don’t respond to a subpoena on your own, don’t release anything before you’ve talked to your attorney or your malpractice carrier, and don’t destroy anything either.
Keeping the two apart
Knowing where the line falls is the easy part; keeping two documents genuinely separate across a full caseload is what takes a system. Two documents, two places, nothing crossing over.
Does an EHR count? Yes, if it actually separates. HIPAA defines these notes as recorded in any medium, so nothing obliges you to keep paper or run a second system.20 What matters is function, not format. If your system holds these notes apart from the rest of the record, and they don’t travel with the chart when the chart goes out, that’s separation. If your process material lands in the same place as the progress note and leaves with it on a records request, that isn’t separation, whatever the field happens to be labeled.
The test. Strip every hypothesis and open question out of the progress note, then read what’s left. Does it still document the session? Time in and out, modality, what you did, how the client responded, where the plan stands. If the note only makes sense because you remember the thinking behind it, the thinking is load-bearing and it’s sitting in the wrong document.
The line usually shows up in the verbs. A progress note reports: the client states they struggle to maintain friendships and have noticed the difficulty increasing over the last few months. Its assessment sticks to what’s observable: the client appears to meet criteria, given the history and the recent jump in stress. What doesn’t belong there is the sentence that starts “I suspect the friendship pattern traces back to”; that’s process material, and it stays yours.
Reviewers can’t request your process notes, and that cuts both ways, because those notes also can’t rescue a progress note that doesn’t support the service. You’re the one who has to produce documentation showing the session was reasonable and necessary, and the only document in play is the shareable one.
Which is an argument for structure. If the progress note has to carry the session by itself every single time, a consistent shape beats staring at a blank box at the end of a long day. That’s what the Therapy Progress Note Templates (SOAP, DAP, BIRP) pack is for: you type a shortcut like /dap in whatever field you’re already writing in, a short form asks for this session’s details, and the structure comes back in your own words. One click to install, and you can edit all of it.
Worth knowing how it handles your typing. Text Blaze doesn’t log keystrokes, what you enter into a snippet form, or page content, and the short buffer it keeps in order to catch shortcuts stays on your computer.21 Your snippets live in your account, which is what lets you install a pack or sync across machines. So what the tool holds is the wording you saved, not what you wrote about a client.
The structure repeats; the session doesn’t, and shouldn’t, since identical notes across sessions are a known audit flag. The pack holds the scaffolding. You supply what happened.
Join over 800,000+ others who are using Text Blaze templates.
Related questions
What are psychotherapy notes?
Notes a mental health professional records to document or analyze what was said in a counseling session, kept separate from the rest of the client’s record. The definition excludes medication management, session times, modality, test results, and summaries of diagnosis, symptoms, treatment plan, and progress.22 Separation is what earns the protection, not the label.
Are process notes and psychotherapy notes the same thing?
Most clinicians use the terms interchangeably, and that’s fine in conversation. The rule only recognizes one condition: whether the notes are kept separately from the record. Process notes filed in the chart aren’t protected psychotherapy notes, whatever you call them.
Do psychotherapy notes have to be shared with insurance?
Disclosing them requires the client’s authorization, and a plan can’t condition benefits eligibility on getting one.23 Medicare review contractors are instructed not to request them at all.24 What you do still owe a payer is a progress note that supports the service on its own.
Can psychotherapy notes be subpoenaed?
Sometimes. They carry stronger protection than the rest of the record, and the ordinary subpoena route under HIPAA doesn’t reach them, but a court order can, and a separate privilege applies in federal court. Talk to your attorney or your malpractice carrier before you respond to anything.
How long do I have to keep psychotherapy notes?
HIPAA doesn’t say. It never requires you to create them, and it sets no retention period for clinical records. The six-year rule people cite covers HIPAA paperwork like policies and authorizations, not the chart.25 Retention comes from your state law and your licensing board. If litigation or a subpoena is in play, don’t destroy anything; ask your attorney first.
Structure your progress notes (the shareable kind) with the Therapy Progress Note Templates (SOAP, DAP, BIRP) pack.
45 CFR 164.501, definition of “psychotherapy notes.” ecfr.gov/…/section-164.501 ↩︎
U.S. Department of Health and Human Services, “Does HIPAA provide extra protections for mental health information compared with other health information?” hhs.gov/hipaa/for-professionals/faq/2088 ↩︎
45 CFR 164.501. ↩︎
45 CFR 164.501. ↩︎
CMS, Medicare Program Integrity Manual, Pub. 100-08, Ch. 3, §3.3.2.6, “Psychotherapy Notes” (Rev. 13008, effective January 17, 2025). cms.gov/…/pim83c03.pdf ↩︎
45 CFR 164.524. ecfr.gov/…/section-164.524 ↩︎
45 CFR 164.506; see also HHS, “Uses and Disclosures for Treatment, Payment, and Health Care Operations.” ecfr.gov/…/section-164.506 ↩︎
45 CFR 164.524(a)(1)(i). ↩︎
HHS, “HIPAA Privacy Rule and Sharing Information Related to Mental Health.” hhs.gov/hipaa/for-professionals/special-topics/mental-health ↩︎
45 CFR 164.508(a)(2). ecfr.gov/…/section-164.508 ↩︎
45 CFR 164.512(j)(1)(i), incorporated into the psychotherapy-notes exceptions at 164.508(a)(2)(ii). ecfr.gov/…/section-164.512 ↩︎
HHS, “HIPAA Privacy Rule and Sharing Information Related to Mental Health.” ↩︎
45 CFR 164.508(b)(4)(ii)(B). ↩︎
45 CFR 164.508(b)(3)(ii). ↩︎
CMS, Medicare Program Integrity Manual, Ch. 3, §3.3.2.6. ↩︎
HHS, “HIPAA Privacy Rule and Sharing Information Related to Mental Health.” ↩︎
45 CFR 164.512(e); HHS, “Judicial and Administrative Proceedings” FAQs. hhs.gov/hipaa/for-professionals/faq/judicial-and-administrative-proceedings ↩︎
45 CFR 164.508(a)(2). ↩︎
Jaffee v. Redmond, 518 U.S. 1 (1996). The Court recognized the privilege and expressly left its full contours to later cases. ↩︎
45 CFR 164.501. ↩︎
Text Blaze, “Data being collected.” blaze.today/datacollected.html ↩︎
45 CFR 164.501. ↩︎
45 CFR 164.508(a)(2) and (b)(4)(ii)(B). ↩︎
CMS, Medicare Program Integrity Manual, Ch. 3, §3.3.2.6. ↩︎
45 CFR 164.530(j)(2). The six-year period applies to documentation the Privacy Rule itself requires, not to the clinical record. ecfr.gov/…/section-164.530 ↩︎



