New Mexico Post-Acute Progress Notes Privacy Laws: A Compliance Checklist

New Mexico post-acute record requirements depend on the facility’s license and the care provided. For long-term-care resident records, New Mexico regulations set rules for documentation, access, authentication, retention, and destruction; separate hospital rules govern hospital records. Federal privacy and recordkeeping requirements may also apply.

What privacy safeguards apply to post-acute resident records in New Mexico?

New Mexico long-term-care facilities must safeguard medical records against loss, destruction, and unauthorized use. Current resident records must be kept at the facility and accessible to people the resident has authorized to obtain them. Facilities must also maintain an organized system for collecting and releasing resident information. See 8.370.16.31 NMAC, Medical Records—General.

When a facility is subject to HIPAA, the Privacy Rule governs the permitted uses and disclosures of protected health information in any form. The Security Rule requires reasonable administrative, physical, and technical safeguards for electronic protected health information, including appropriate access controls. A practical compliance approach is to limit staff access according to job responsibilities, secure paper files and devices, and use safeguards against unauthorized viewing or disclosure. See HHS’s Summary of the HIPAA Security Rule and Summary of the HIPAA Privacy Rule.

A family relationship alone does not necessarily authorize access to a resident’s record. Confirm the resident’s permission or the requester’s authority as a personal representative under applicable law, and disclose information only through a legally permitted route.

What information must post-acute medical records contain?

For residents covered by New Mexico’s long-term-care record-content rule, the file must include an identification and summary sheet; the physician’s admission evaluation; physician orders; progress notes after each physician visit; and an annual physical examination. The admission evaluation includes prior treatment, current findings, admission diagnosis, rehabilitation potential, physical-examination results, and level of care.

The record must also document nursing needs, the initial care plan and revisions, and relevant changes or events. Nursing documentation includes the resident’s general physical and mental condition, unusual symptoms or actions, incidents and follow-up, medication administration and responses, and other specified care information. Transfer or discharge documentation should summarize relevant current findings, diagnosis, treatment course, nursing and dietary information, mobility, and continuing-care instructions. See 8.370.16.32 NMAC, Medical Records—Content.

The rule’s detailed list excludes people admitted for short-term care. Do not assume that exclusion removes other applicable recordkeeping duties: federally certified nursing facilities must maintain complete, accurate, accessible, and systematically organized records for each resident under 42 CFR § 483.70(i).

How often must nursing and physician progress notes be recorded?

For residents requiring skilled care, New Mexico requires a narrative nursing note as often as needed to document the resident’s condition, but at least weekly. For residents not requiring skilled care, a narrative nursing note is required as often as needed, but at least monthly. A change in condition or an event requiring follow-up may call for documentation sooner; the minimum interval is not a reason to delay clinically necessary notes.

Physician progress notes must follow each physician visit. New Mexico’s rule generally calls for a physician visit at least every 30 days for skilled-nursing residents and every 60 days for intermediate-care residents, unless the physician specifies and justifies an alternate schedule in writing. The medical-record rule also calls for documentation of an alternate visit schedule and its justification, not to exceed 90 days. See 8.370.16.32 and 8.370.16.49 NMAC.

What authentication and abbreviation rules apply to medical-record entries?

Every New Mexico long-term-care medical-record entry must be legible, permanently recorded, dated, and authenticated with the name and title of the person making it. These requirements apply to the medical-record entry authentication process whether the facility uses paper records or an electronic system.

Symbols and abbreviations may be used only when the facility has a written policy that approves and defines them and controls their use. Maintain that policy and ensure staff can follow it consistently. See 8.370.16.31(G) NMAC.

How long must records be retained and how must they be destroyed?

For New Mexico long-term-care facilities covered by the rule, the medical record must be completed and stored within 60 days after a resident’s discharge or death. The original medical record must be retained for at least 10 years after discharge or death. Legible copies of court orders or other documents authorizing someone to act for the resident are also subject to the 10-year requirement. Other records required by the regulation must be kept for the period the facility is under review.

After the applicable retention period, records may be destroyed only if confidentiality is maintained. The facility must permanently retain at least the resident’s identification, final diagnosis, physician, and admission and discharge dates. Facilities must also arrange for secure storage if they close. These requirements form the core medical-record retention period and confidential record destruction checklist under 8.370.16.31(F) NMAC.

Hospital records follow a separate rule: New Mexico hospitals generally retain medical records for 10 years after the last treatment date, with a distinct rule for minors. See 8.370.12.30(B)(2) NMAC. For federally certified nursing facilities, federal rules direct facilities to retain records for the period required by state law, making the New Mexico period important to the facility’s retention schedule.

When may residents’ records be released to authorized parties or the ombudsman?

HIPAA does not require a resident’s authorization for every disclosure. It generally permits covered providers to share information for treatment, payment, and health care operations, subject to applicable requirements. For uses or disclosures that are not otherwise permitted or required, the facility generally needs a valid authorization. New Mexico’s hospital rule likewise requires written consent from the patient or legally authorized person before releasing medical information to someone not otherwise authorized. See HHS guidance on disclosures for these purposes and 8.370.12.30(B)(1) NMAC.

Ombudsman access to resident records has specific rules. New Mexico law provides the Long-Term Care Ombudsman Office full and immediate access to readily available records relevant to its responsibilities, excluding internal quality-assurance and risk-management reports. Records that are not readily available must be provided within 24 hours. Consent requirements depend on the resident’s ability to consent and whether a legally authorized surrogate decision-maker exists; the law also provides exceptions, including when access is necessary to investigate or evaluate a complaint. See Section 28-17-13 NMSA 1978, as amended.

Facilities should verify the ombudsman’s authority and follow the applicable consent process rather than treating every request as an ordinary third-party disclosure. New Mexico regulations also identify failure to provide immediate access to readily available records or access within 24 hours to records that are not readily available as interference with the ombudsman program. See 9.2.21.8 NMAC.

How do hospital discharge-record deadlines differ from long-term-care requirements?

For a hospital, New Mexico requires current and discharged-patient records to be completed promptly; the hospital’s medical staff bylaws set the reasonable completion period, which cannot exceed 30 days after discharge, except for autopsy reports. The hospital must also retain its medical records under the separate hospital retention rule. See 8.370.12.30(E) NMAC.

For long-term care, the regulation requires the record to be completed and stored within 60 days after discharge or death, then retained for at least 10 years. These are different deadlines for different facility types and recordkeeping steps: do not substitute the hospital’s 30-day completion limit for the long-term-care 60-day completion-and-storage requirement.

In short, a sound New Mexico checklist identifies the facility’s license, protects records from unauthorized access, documents care at the required frequency, authenticates entries, applies the correct retention schedule, and handles resident and ombudsman requests through the appropriate authorization or legal exception.

FAQs

How often must skilled-care nursing notes be documented in New Mexico?

For residents requiring skilled care, a narrative nursing note must be made as often as needed to document the resident’s condition and at least weekly. Document significant changes and care events when they occur rather than waiting for the weekly minimum. See 8.370.16.32(C) NMAC.

What details must be included in a post-acute progress note?

The record should contain the required clinical information for the resident, including relevant current condition and findings, symptoms or unusual actions, incidents and follow-up, medications and responses, and care provided. The broader record must also include applicable assessments, care plans, physician orders, physician progress notes after visits, and transfer or discharge information. See 8.370.16.32 NMAC.

How long must New Mexico facilities retain original resident records?

For long-term-care facilities covered by New Mexico’s rule, the original medical record must be retained for at least 10 years after the resident’s discharge or death. Separate rules apply to hospitals and other facility types, so confirm the retention schedule for the facility’s license. See 8.370.16.31(F) NMAC.

How quickly must a facility provide records to the long-term-care ombudsman?

Readily available records must be accessible immediately. If records are not readily available, they must be provided within 24 hours of the request. The applicable resident or surrogate consent rules and statutory exceptions still govern access. See Section 28-17-13 NMSA 1978, as amended.