A former client emails on a Tuesday. Her lawyer wants copies of her treatment records from a car accident claim, and the visits were four years ago. You remember her. You remember the neck work. What you can’t remember is whether those notes live in the old binder in the storage closet, the booking app you cancelled in 2023, or the laptop belonging to the therapist who left last spring.
That email is the real test of a records system. Most clinics only find out how their records are organised when someone outside the clinic asks for them.
Why records get messy in the first place
Nobody sets out to keep bad records. They drift. A solo therapist starts with paper intake forms and handwritten notes, adds a booking app, and starts typing notes into it when the paper runs out. A second therapist joins and brings their own habits. Then the clinic changes software, and the old system’s export goes into a folder nobody opens again.
The other cause is time. Notes written at 7pm after six treatments are thinner than notes written between clients, and a health history updated “next visit” often isn’t. The gaps build up over years, one skipped update at a time.
What a complete client record actually contains
Regulators spell this out, and it’s broader than most therapists assume. BC’s CCHPBC record-keeping standard is a good checklist because it’s specific. It expects a separate record for each patient containing:
- Identifying and contact details, including an emergency contact and the name of any referring practitioner
- Medical history, allergies, medications and current conditions, kept current as of the last appointment
- Dates of every appointment
- Assessments, treatment plans, the treatment provided, the client’s response and any follow-up recommendations
- Informed consent, refusals and signed forms
- Relevant communications with the client, other practitioners and insurers, including emails and texts about their care
The same standard says notes should be completed at the visit or as soon as practical afterward, dated, and attributed to the therapist who wrote them. Corrections get dated and initialled, and the original entry stays intact.
Ontario’s CMTO record-keeping standard adds the business side: a daily appointment record, financial records for each patient, and a service record for equipment used in treatment. If your SOAP notes are solid but your receipts live in a separate payment app, your record is still incomplete. (For the clinical notes themselves, our guide to writing SOAP notes that hold up goes section by section.)
How long you have to keep records
This is where “it depends” is the honest answer, and it depends a lot.
- In Ontario, CMTO requires health records to be kept 10 years after the client’s last visit. For a client who was under 18, the clock runs 10 years from their 18th birthday.
- In British Columbia, the CCHPBC standard requires 16 years from the last entry or from the age of majority, whichever is later. That covers health records, appointment logs, billing records and receipts.
- In Washington State, the state rule sets a minimum of three years from the last treatment, or three years after a minor turns 18.
Other provinces and states set their own periods, and these numbers can change when a regulator updates its standards. Before you destroy anything, check the current standard from your own college or state board. If you practise somewhere with a short minimum, it’s still worth asking your insurer or lawyer whether keeping records longer makes sense for your situation.
The practical takeaway: in Ontario, a record you create today has to survive until at least 2036. In BC, 2042. Plenty of clinics will change software and staff well before then.
Storage and access: the part that breaks
Both regulators expect records to be protected from loss, tampering and unauthorised access. CMTO says records shouldn’t be accessed by anyone unless the client consents or the law allows it, and BC expects you to document where records are stored and what safeguards are in place. If a client asks for their file in BC, you have 30 business days to provide access.
In practice, the risks cluster in three places:
Software changes are the first. When you switch booking or charting systems, the old records still count. Before you cancel anything, export every client’s full history (not just names and contact details) and confirm you can open and read the export. Better still, plan the move so history lands on the new client record.
Therapists leaving is the second. Ontario requires a written agreement covering record handling when the therapist isn’t the health information custodian, including what happens when they leave. In plain terms: decide who keeps the charts before the first treatment, not during an awkward exit conversation.
The third is records scattered across tools: intake on a PDF form, notes in one app, receipts in another, follow-up texts on a personal phone. Each piece might be secure on its own, but pulling a full record together for a lawyer or an insurer becomes a half-day job. Our post on client data privacy for massage clinics covers the privacy-law side of this in more detail.
Hivemanager.io keeps online intake forms, SOAP notes, visit history and payments on the same client record, so a records request is a search rather than a scavenger hunt.
Four moves that keep records in shape
Collect the health history before the visit. Online intake forms that clients complete at home tend to be fuller and more legible than clipboards filled in five minutes before a session. Ask returning clients to review their history on a set schedule, and note the date they confirmed it.
Chart between clients, not after close. Even a short note written right after treatment beats a detailed one reconstructed at night. A consistent template helps, which is the main reason clinics move to structured SOAP notes.
Keep one record per client. Whatever tools you use, every piece of a client’s history (intake, consent, notes, receipts, relevant messages) should be findable from one place. If it takes three logins to answer a records request, consolidate.
Write down your retention and disposal rules. One page: how long you keep records, where they’re stored, who has access, what happens when a therapist leaves and how expired records are destroyed. When the regulator or a lawyer asks, you hand them the page.
The record outlives the session
A treatment lasts an hour. The record of it lasts a decade or more, and it gets read by people who weren’t in the room: a client’s next therapist, an insurer, a lawyer, your college. For most of those years, the record is the only evidence the work happened at all. Set the system up once, and that Tuesday email becomes a five-minute reply.