What are Psychotherapy Notes vs Progress Notes, and How Does HIPAA Apply?

Progress notes are the official clinical record documenting sessions, while psychotherapy notes are subjective clinician notes kept separate from the medical record. Under HIPAA, psychotherapy notes receive heightened protection only if maintained separately from the client's official chart.

What are progress notes, and how do they differ from psychotherapy notes under HIPAA?

Defining Progress Notes and Their Purpose

A progress note is the contemporaneous record of a therapy session. It documents what happened, what you observed, how you interpreted it clinically, and what comes next. Progress notes serve four overlapping audiences: your future self, insurance auditors verifying medical necessity, courts or attorneys in legal proceedings, and any clinician who picks up the case after you.

Because progress notes are part of the official medical record, they are protected health information (PHI) under HIPAA. They must be stored in a HIPAA-compliant system with encryption at rest, access controls, and audit logging.

Understanding Psychotherapy Notes and HIPAA Protections

HIPAA defines psychotherapy notes (45 CFR §164.524) as notes a mental health professional records to capture impressions during a session, kept separately from the rest of the medical record. The key phrase is "kept separately." When that condition is met, psychotherapy notes receive heightened protection: a client's general authorization to release records does not automatically include them. A specific, separate authorization is required.

What falls under this definition: raw process notes, personal reflections on transference and countertransference, speculative hypotheses you are not ready to commit to the chart. What does not fall under this definition, regardless of what you call it: medication prescriptions, session start and stop times, frequency and modality of treatment, results of clinical tests, and any summary of diagnosis, functional status, treatment plan, symptoms, prognosis, or progress. Those belong in the progress note and are subject to standard PHI rules.

Why some clinicians Don't Keep Separate Psychotherapy Notes

Maintaining two parallel records is time-consuming and creates documentation risk. If your process notes contradict your progress notes, that discrepancy is discoverable in litigation. Many clinicians find that writing one thorough, well-structured progress note satisfies both purposes. The heightened HIPAA protection for psychotherapy notes is real, but it only applies when the notes are genuinely separate, genuinely subjective, and genuinely not part of the chart. If you do keep them, store them in a physically or digitally distinct location from the client's chart and label them clearly.

Why is a structured format essential, and what are the common types of progress notes?

Meeting Audit, Legal, and Supervision Requirements

Free-form narrative notes can be accurate and complete, but they are harder to defend under audit because the reviewer cannot quickly locate each required element. Standard formats give the reader a predictable map and force you to address each element rather than drift into shorthand. No specific format is required by HIPAA or by most state licensing boards. The right choice depends on your setting, payer, supervision requirements, and clinical preference.

Ensuring complete Documentation of Medical Necessity and Interventions

Every progress note needs to establish that a medically necessary service was rendered. That means documenting the current diagnosis, current symptoms, and current functional impairment. A note that says "client made progress" is not auditable. A note that says "client reduced PHQ-9 from 14 to 11 and identified two days of improved mood tied to behavioral activation" is.

SOAP: Subjective, Objective, Assessment, Plan

SOAP originated in medicine (Lawrence Weed, 1968) and is the most widely taught format in US graduate programs. The Subjective section captures the client's own report: direct quotes, presenting concerns, mood self-ratings. The Objective section captures your observations: mental status, affect, speech, behavioral data, standardized scores. Assessment is your clinical interpretation, including progress toward goals, diagnostic impressions, and risk. Plan covers next steps, homework, referrals, and frequency.

SOAP fits well in insurance-billing settings and with CBT or behavioral approaches where measurable change is part of the model. It can feel forced in long-term relational or psychodynamic work, where the meaningful clinical movement resists tidy objective measurement.

DAP: Data, Assessment, Plan

DAP collapses Subjective and Objective into a single Data section. It is the second most common format and is favored when the S/O distinction adds more structure than clarity. The Data section holds everything observed, reported, or measured. Assessment and Plan function identically to SOAP. DAP is faster to write and read, and it suits most outpatient psychotherapy settings. Some payers and supervisors expect SOAP specifically, so confirm before switching.

BIRP, GIRP, and PIRP: Intervention-Focused Formats

BIRP (Behavior, Intervention, Response, Plan) is common in residential, substance-use, and case-management settings. It puts the intervention front and center, which suits settings where auditors ask "what did you do?" first. GIRP (Goal, Intervention, Response, Plan) swaps Behavior for Goal and anchors each session explicitly to the treatment plan, making audit defense straightforward in community mental health and IOP settings. PIRP (Problem, Intervention, Response, Plan) is structurally similar and fits problem-focused brief therapy and crisis work.

All three formats share the same Plan section logic: document what happens next, what the client will do between sessions, and when the next contact is.

What makes a progress note clinically defensible and compliant?

Documenting Medical Necessity and Specific Interventions

Five elements appear consistently across audit checklists, supervision rubrics, and malpractice case law. First, medical necessity: the current diagnosis, symptoms, and functional impairment must be visible in the note. Second, the intervention must be specific. "Supportive therapy" does not satisfy an auditor. "Used Socratic questioning to challenge core belief 'I'm worthless'" does.

Observing Client Response and Addressing Risk

Third, the client's response should be observed, not assumed. "Client reported feeling relieved" is auditable. "Intervention was effective" is not. Fourth, risk must be addressed in every note, even for long-term clients with no recent suicidal ideation. A single line, "no SI/HI reported or observed; risk low," satisfies the requirement. Skipping it is the most common audit finding across settings.

Tying the Plan to Future Sessions

Fifth, the Plan section should connect directly to the next session. What will you address? What is the client doing between sessions? When is the next contact? A plan that says "continue therapy" does not give a future clinician, auditor, or court anything to work with.

Adhering to Length, Specificity, and Timeliness Norms

Observed averages in outpatient psychotherapy run 150 to 300 words per session. Under 100 words raises audit concern that medical necessity was not documented. Over 500 words is rarely necessary outside intake, crisis, or high-acuity sessions. Most state boards and payers expect notes completed within 24 to 72 hours of the session. Some payers, including Medicare and certain Medicaid programs, have specific deadlines, often 24 hours for higher levels of care.

What common mistakes should therapists avoid when writing notes?

Avoiding Cut-and-Paste and Diagnosis Drift

Cut-and-paste from prior notes is audit-detectable. When wording matches verbatim across multiple sessions, reviewers flag it. Even if the clinical content is accurate, identical language signals that the note was not written from observation of that specific session.

Diagnosis drift is a related risk. The diagnosis at intake should match the diagnosis on the bill. If your clinical impression changes over time, document the change explicitly in the chart. Do not let the billed diagnosis quietly shift without a corresponding note explaining the clinical reasoning.

Correctly Attributing Client Quotes and Addressing Treatment Goals

Direct client speech belongs in the Subjective section of a SOAP note or the Data section of a DAP note, in quotation marks. Mixing client report and clinician observation without attribution creates ambiguity that matters in legal proceedings.

Every session should map to at least one treatment plan goal. If a session goes somewhere the plan does not cover, that is a signal the plan needs updating, not that the note should be written around it. Auditors expect to see a visible thread between the treatment plan and each session note.

For clinicians using AI tools to format notes, the same standards apply. The Reframe progress note generator works from a brief therapist-written summary, so the clinical substance and judgment stay in your hands while the formatting is handled automatically. If you are weighing AI note tools against each other, the AI therapy notes safety guide covers the risk considerations worth thinking through before choosing a tool, and our analysis of whether ChatGPT is HIPAA compliant walks through the BAA gap that determines whether you can put PHI into any given tool.

Progress notes are the record that protects your clients, your license, and your practice. Getting the format right matters less than getting the substance right: medical necessity documented, interventions specific, risk addressed, and the plan tied to what comes next.

When evaluating AI tools that touch progress notes (not psychotherapy notes), HIPAA compliance is non-negotiable. The best AI tools for therapists roundup walks through which tools sign BAAs and which silently train on your data.

References

• APA recordkeeping guidelines — government, professional association, or peer-reviewed source supporting the guidance on this page.
• HHS HIPAA for mental health — government, professional association, or peer-reviewed source supporting the guidance on this page.
• NASW documentation standards — government, professional association, or peer-reviewed source supporting the guidance on this page.