Are client records allowed to be stored electronically if proper security measures are in place?

Are client records allowed to be stored electronically if proper security measures are in place?

• A. No, must be on paper only
• B. Only with client consent
• C. Yes, as long as they are securely stored and access is restricted
• D. Only for up to 6 months

Answer: (C)

Confidentiality of client information applies no matter the format, and the rules allow electronic records as long as they’re protected. The key idea is that records can be stored electronically only if the system is secure and access is limited to authorized individuals. This means using strong user authentication, encryption as appropriate, secure servers, regular backups, and strict access controls so that only those who need to see the records can view them. When those safeguards are in place, electronic storage meets professional requirements; there’s no blanket paper-only rule, no necessity for client consent just to store electronically, and no universal six-month limit.

Confidentiality of client information applies no matter the format, and the rules allow electronic records as long as they’re protected. The key idea is that records can be stored electronically only if the system is secure and access is limited to authorized individuals. This means using strong user authentication, encryption as appropriate, secure servers, regular backups, and strict access controls so that only those who need to see the records can view them. When those safeguards are in place, electronic storage meets professional requirements; there’s no blanket paper-only rule, no necessity for client consent just to store electronically, and no universal six-month limit.