These answers draw in part from “Client records and consent” by Carobeth Zorzos (BehaviorLive), and extend it with peer-reviewed research from our library of 27,900+ ABA research articles. Clinical framing, BACB ethics code references, and cross-links below are synthesized by Behaviorist Book Club.
View the original presentation →A comprehensive client record should include intake and demographic information, assessment results and reports, treatment plans with rationale for goal selection and intervention methods, informed consent documents, session notes documenting services provided and clinical observations, behavioral data, progress reports at regular intervals, correspondence with other professionals and stakeholders, documentation of supervisory activities, and discharge or transition summaries. The specific requirements vary by jurisdiction, funding source, and organizational policy, but the general standard is that the record should be sufficiently detailed for another qualified professional to understand the client's history, current treatment, and clinical rationale.
Informed consent should be treated as an ongoing process rather than a one-time event. While initial consent is obtained before services begin, it should be revisited whenever there is a significant change in treatment goals, methods, or intensity, when new assessment procedures are introduced, when there are changes in who will provide services, when the client's capacity or circumstances change significantly, and at least annually even if no significant changes have occurred. Each renewal conversation should be documented in the clinical record, including what was discussed and whether the client or guardian agreed to continue services under the updated terms.
In most jurisdictions, the clinical record is the property of the organization or practitioner who created it, while the client has a right of access to the information contained in the record. This means the client can request copies of their records and the practitioner must provide them within a reasonable timeframe. Access to records should be limited to authorized personnel who need the information for legitimate clinical, supervisory, or administrative purposes. Sharing records with external parties generally requires client authorization, with exceptions for legally mandated disclosures such as mandatory reporting of abuse or responses to court orders.
Clients have the right to request corrections to factual errors in their records, such as incorrect dates, misspelled names, or inaccurate descriptions of events. These corrections should be made promptly. However, clients do not have the right to require changes to clinical judgments, diagnostic impressions, or treatment recommendations with which they disagree. When a client disputes a clinical entry, the appropriate response is to add the client's statement of disagreement as an addendum to the record rather than altering the original entry. Document the request, your response, and any amendments or addenda in the record.
Record retention requirements vary by jurisdiction, regulatory body, and funding source. In the absence of specific guidance, a commonly recommended practice is to retain records for at least seven to ten years after the last date of service. For minor clients, records should typically be retained until the client reaches the age of majority plus the standard retention period. Always follow the longest applicable requirement. When records are eventually destroyed, use methods that ensure confidential information cannot be recovered, such as shredding for paper records or secure data wiping for electronic records. Document the destruction.
When a client lacks the capacity to provide independent informed consent due to age, cognitive disability, or other factors, consent must be obtained from a legally authorized representative such as a parent, guardian, or healthcare proxy. However, the BACB Ethics Code (2022) also requires that the client themselves be involved in service decisions to the greatest extent possible (2.09). This means explaining services in language appropriate to the client's understanding, seeking their assent even if their consent is not legally required, and respecting their expressed preferences to the extent consistent with their welfare and the guardian's authorization.
Adequate session documentation should include the date, time, duration, and location of the session, who was present, the services provided, behavioral data collected, clinical observations, any significant events or changes in the client's presentation, treatment modifications made and the rationale for them, and information communicated to the client, family, or other stakeholders. Session notes should be completed as close to the time of service as possible, as delayed documentation is less accurate. They should be written in clear, professional language that another qualified practitioner could understand. Avoid jargon without explanation, subjective interpretations without supporting observations, and vague descriptions.
Electronic records require multiple layers of security. At minimum, implement password protection with strong passwords changed regularly, encryption for data at rest and in transit, access controls limiting who can view and modify records based on their role, audit trails that track who accessed what information and when, regular data backups stored securely, automatic session timeouts on devices used to access records, and clear policies prohibiting access from unsecured personal devices or public networks. All staff who access electronic records should receive training on security protocols and confidentiality requirements. Regularly assess your security measures against current best practices and applicable privacy regulations.
There are limited circumstances in which records may be shared without explicit client consent. These typically include mandatory reporting of suspected abuse or neglect, situations involving imminent danger to the client or others, court orders or subpoenas that legally compel disclosure, disclosures required by law for public health or safety reasons, and disclosures to other professionals within the same organization who are directly involved in the client's care. Even in these circumstances, share only the minimum information necessary for the specific purpose. Document what was shared, with whom, the reason for disclosure, and the legal or ethical basis for sharing without consent.
When you discover errors in a client record, correct them promptly using proper amendment procedures. Do not erase, white out, or delete the original entry. Instead, draw a single line through the error (for paper records) or use the amendment function (for electronic records) and add the correct information with the date, your signature or identifier, and a notation that the entry is an amendment. If the error is significant and may have affected clinical decisions, consider whether the corrected information changes any current treatment recommendations and document any resulting changes in the treatment plan. Notify the client or their representative of significant corrections.
The ABA Clubhouse has 60+ on-demand CEUs including ethics, supervision, and clinical topics like this one. Plus a new live CEU every Wednesday.
Ready to go deeper? This course covers this topic with structured learning objectives and CEU credit.
Client records and consent — Carobeth Zorzos · 1 BACB Ethics CEUs · $15
Take This Course →We extended these answers with research from our library — dig into the peer-reviewed studies behind the topic, in plain-English summaries written for BCBAs.
233 research articles with practitioner takeaways
1 BACB Ethics CEUs · $15 · BehaviorLive
Research-backed educational guide with practice recommendations
Side-by-side comparison with clinical decision framework
You earn CEUs from a dozen different places. Upload any certificate — from here, your employer, conferences, wherever — and always know exactly where you stand. Learning, Ethics, Supervision, all handled.
No credit card required. Cancel anytime.
All behavior-analytic intervention is individualized. The information on this page is for educational purposes and does not constitute clinical advice. Treatment decisions should be informed by the best available published research, individualized assessment, and obtained with the informed consent of the client or their legal guardian. Behavior analysts are responsible for practicing within the boundaries of their competence and adhering to the BACB Ethics Code for Behavior Analysts.