State board documentation requirements for LPCs and LMHCs

The note you write today has to serve continuity of care, ethical standards, and — when you bill — medical necessity. It also has to survive the board that holds your license. Most boards do not dictate SOAP versus DAP. Many do set what must be in the record, how long it must be kept, and what a telehealth session has to show.

This is the board-layer companion to How to write effective progress notes as an LPC or LMHC. That guide covers structure, examples, and efficiency. This one covers the rules that make those same notes defensible years later.

Why do board rules change tomorrow’s note?

A clinically excellent note that misses an explicit record-keeping rule is still a problem. Board complaints and published disciplinary actions repeatedly cite missing, late, or incomplete records — often years after the session.

The chart outlives the relationship. Retention clocks of 5–7 years (longer for minors) mean a note written this week may be read by a covering clinician, a board investigator, or an attorney long after you remember the hour.

Telehealth added a documentation duty many notes still skip. Client location, consent, and modality are no longer implied by “session via Zoom.” Several boards now say so in the rule.

Minors change both consent and later access. Who signed, who can later request the chart, and what you put in a progress note versus a separate psychotherapy note are state-law questions.

What is nearly universal vs. highly variable?

Most boards stay high-level. A smaller number name “progress notes” and list the rest of the chart. The core elements in the companion guide remain the safest practical baseline across jurisdictions.

No major counseling board we reviewed mandates an acronym. Format is scaffolding. Missing dates, unnamed interventions, and a silent risk line are what create exposure.

What do boards actually require in the note?

A few jurisdictions are explicit enough to write from. Use them as orientation, then open your own rule.

Side-by-side language is what changes practice. Details below are anonymized and altered.

Weekly session. Supportive therapy provided. Discussed feelings about work. Client doing okay. Continue as needed.

Client: M.L. | DOS: 08/16/2026 | Start 09:04 – End 09:53 (49 min) | Telehealth video | CPT 90834 | Dx: F41.1

Data: Client reported three nights of 4–5 hours’ sleep and two unfinished work deliverables this week after a critical email from her supervisor. GAD-7 = 13. Denied SI/HI. Alone at private residence in Austin, TX; consent for telehealth on file and verbally reaffirmed.

Intervention: Cognitive restructuring of “one email means I will be fired,” plus a graded exposure plan for opening the next supervisory message the same day.

Response: Generated two alternative appraisals; rated expected distress of opening the email at 6/10, down from 9/10. Agreed to a same-day open + 10-minute walk.

Assessment: Continues to meet criteria for GAD with occupational impairment. Weekly outpatient remains appropriate.

Plan: Thought record on supervisory cues; next session 08/23. Treatment-plan goal 2 (reduce anticipatory avoidance at work) unchanged.

Signed: [Name], LPC #XXXX 08/16/2026

How long do you have to keep records?

Retention is the item people search for and the one secondary “50-state matrices” get wrong. The clock, the trigger (last contact vs. last entry vs. termination), and the minor rule all differ.

HIPAA’s 6-year number is not your chart clock. 45 CFR 164.530(j) requires covered entities to keep privacy-rule documentation — policies, authorizations, complaint logs — for six years. It does not tell you when you may destroy a progress note. Destroying a chart at year six because “HIPAA says so” is a common, expensive confusion.

Practical implications

• A note written today may be read in a complaint or a lawsuit years later. Clear risk language and professional phrasing compound in value over a long clock.
• Electronic records need backup that survives the longest applicable period, plus a destruction procedure that waits for that date.
• Destroying early is a recurring source of later problems. When two clocks disagree, keep the longer one and document the destruction when it finally happens.

What extra documentation does telehealth need?

Temporary pandemic flexibilities are over. The lines that belong in the note itself are location, consent, modality, and whether the setting was appropriate.

Other states frequently require or strongly expect:

• Client location (and sometimes clinician location)
• Confirmation the setting is private and appropriate
• Modality (video vs. audio-only)
• Reaffirmation of consent or emergency procedures

Client location is also what determines which license and which emergency protocol apply. A video session that drops to telephone has to be documented as such and coded as such.

Telehealth [video/audio] via [HIPAA-compliant platform]. Client confirmed physical location as [city/state, or full address if the board requires it], alone/private, privacy adequate. Consent for telehealth on file and verbally reaffirmed. Appropriateness for telehealth: [yes / concerns]. Connection quality [good/adequate/converted to audio]. Clinician location: [office/home office]. Local emergency resources on file for client’s area.

Add or drop clauses to match the current rule. California needs the full present address every session, not just city and state. The companion guide uses a shorter stem; expand it when your board is the stricter one.

How do minors, consent, and parental access change the chart?

State law — not HIPAA — usually decides who can consent to a minor’s treatment and who later sees the record. HIPAA largely defers.

Common patterns:

• Age of independent consent varies. Many states land between 12 and 16 for certain outpatient mental-health services, with important exceptions.
• Parental access rights are strong, but they can yield when the minor consented independently or when disclosure would be harmful.
• The consent conversation and any limit on parental access belong in the designated record, not in a private process note.

When a parent later requests the chart, you will be glad the basis for consent is dated and specific. When a minor later requests it, you will be glad sensitive third-party information was never mixed into a progress note that has to be released.

Consent basis: [parent/guardian name and relationship / minor’s independent consent under (statute) / court order dated …]. Custody/decision-making: [joint / sole / as stated in order]. Limits on parental access discussed on [date]: [none / as follows]. Who was present this session: [minor only / minor + …].

Keep psychotherapy notes (if you keep them at all) completely separate. They are not a hiding place for material a parent may later be entitled to see, and mixing them into the progress note can waive the extra HIPAA protection that applies only when they stay out of the designated record set.

What about custody, destruction, and closing a practice?

Boards care as much about where the chart goes next as about what is in it.

While the practice is open. Store so access is limited and production is possible. Electronic systems need a backup that will still open in year seven. Paper needs a lock and a plan for fire and flood that is not “hope.”

When you leave an agency. Texas is blunt: records you created in the scope of employment stay your responsibility unless the employer maintains them. Do not assume the agency chart is “their problem” without a written custody arrangement.

When you close, move, or die. Most boards require a plan that keeps confidentiality and leaves clients a way to get their records.

• Pennsylvania (§ 49.78(h)): arrange storage, transfer, or disposal so confidentiality and client welfare are safeguarded.
• Washington (WAC 246-809-035(5)): put the plan in a will, an office policy, or an arrangement with another licensed counselor.
• Florida (64B4-9.001): unusually specific. Publish a newspaper notice in the county of practice, once a week for four consecutive weeks, with the date of termination or relocation and an address where records remain available. Do not read the “two years after relocation” sentence as permission to shred a chart still inside the seven-year last-contact clock.

Destruction. When the longest applicable clock has run, destroy so the record cannot be reconstructed — and keep a destruction log (what, date, method). Early destruction is how a later complaint becomes a second problem.

What if you hold more than one license?

Write to the stricter rule for that session.

• Which practice act applies is usually driven by the client’s physical location, sometimes also by yours. Confirm both.
• Telehealth stems should satisfy the pickiest board you are subject to. A California-style address line is harmless in a state that only wants city and state; the reverse is not.
• Retention should follow the longest clock among every license, payer, and statute that could later ask for the chart.
• Adding a second license is a reason to re-read that board’s record-keeping and telehealth rules before the first note, not after the first audit.

What should you check before you sign?

Keep this next to the companion guide’s clinical checklist. This list is the board overlay.

1. Does my board explicitly list required record elements (Texas’s seven items, Oregon’s three, Washington’s “sufficient to support responsible clinical practice”)? If yes, are they visible in today’s note or elsewhere in the chart?
2. Am I documenting telehealth location, consent, and modality the way this board currently requires — full address if that is the rule?
3. Is the medical-necessity thread (diagnosis + current impairment + named intervention + response + continued need) visible enough for a clinical and an audit reader?
4. Are actual start/stop times and modality accurate, and do they match what will be billed?
5. For a minor: is the consent basis and any access limitation clear?
6. Is the note finalized and signed within the window my board or payer expects (often 24–72 hours; Oregon’s “concurrently” is same-day in spirit)?

If any answer is uncertain, the companion guide’s core elements plus a ten-minute read of your board’s current rule close most gaps.

How do you stay current without becoming a full-time researcher?

• Bookmark the official board site and the administrative-code or statute page that governs record keeping. Secondary matrices go stale.
• Recheck “Laws & Regulations,” practice guidelines, and FAQs at least annually, and after the legislative session.
• Watch association alerts (ACA, your state counseling association, NBCC) for rule changes — then read the primary text, not just the summary.
• When you move, add a second license, add telehealth, or start seeing minors, re-verify before the next note.
• Keep a one-page internal “my board, as of [month year]” note: required elements, retention clocks, telehealth stem, custody plan. Update the verification date when you reread the rule.

Treat this page as orientation. The controlling document is the current rule of the board that licenses you.

Primary-source starting points

Always start at the official text.

• ACA Code of Ethics, A.1.b — Records and Documentation
• Texas 22 TAC § 681.36 — Client Records · bhec.texas.gov
• California BPC § 4999.75 — LPCC retention · 16 CCR § 1815.5 — telehealth · bbs.ca.gov
• Oregon OAR 833-075-0070 — Client Records
• Pennsylvania 49 Pa. Code § 49.78 — Recordkeeping
• New York 8 NYCRR § 29.2 · op.nysed.gov
• Florida Rule 64B4-9.001 — Client Records
• Washington WAC 246-809-035 — Recordkeeping and retention
• 45 CFR 164.530(j) — HIPAA’s 6-year clock for privacy documentation, not the clinical chart

Search your board’s site for “record keeping,” “client records,” “documentation,” “retention,” and “telehealth standards.”

Related reading

• How to write effective progress notes as an LPC or LMHC — structure, SOAP / DAP / BIRP, medical-necessity language, and the same-day clinical checklist
• Insurance enrollments for new therapists — enrollment vs paneling, which NPI to use, statuses that matter
• Documentation in Readya — templates, signing, and addenda once the clinical judgment is yours

This orientation is current as of August 2026. It is not legal, compliance, or ethics advice. Requirements continue to evolve. Verify specifics against the board that licenses you, and consult qualified counsel when the facts are not routine.

Write the next note so it would still hold up in the jurisdiction that can take your license.