Tennessee Wound Dressing Logs: Privacy Laws and Compliance Guide

Patient-specific wound dressing logs help document care and are generally handled as part of the patient’s medical record. In Tennessee, hospitals must protect these records, authenticate entries according to applicable requirements, and respond to record requests within the time required by state law.

Are wound dressing logs considered confidential medical records in Tennessee?

Generally, yes—when a wound dressing log identifies a patient and is maintained as part of the hospital’s record of care. A log that documents wound assessments or treatment is clinical information about the patient, and Tennessee hospital rules require confidentiality procedures for patient records. Those rules limit release to authorized individuals and require safeguards against unauthorized access or alteration. Tennessee hospital rules, Rule 0720-14-.06

For a HIPAA-covered hospital, patient-identifiable wound-care information is generally protected health information (PHI) under the HIPAA Privacy Rule. A separate, aggregate quality-improvement log that does not identify a patient may be treated differently; the key questions are whether the information identifies someone and how the hospital uses or maintains it. Tennessee medical records confidentiality requirements also mean that patient records are not simply public records. HHS guidance on medical records and privacy

What information should a compliant wound dressing log include?

Tennessee hospital rules require medical-record entries to be legible and complete, but they do not prescribe a single wound-dressing-log template or list every field that must appear in each entry. The hospital should follow its documentation policies and applicable clinical requirements. A useful patient-specific entry typically includes:

• The patient identifiers required by hospital policy, along with the date and time of the assessment or dressing change.
• The wound’s location and laterality, and relevant assessment findings such as measurements, tissue appearance, drainage, odor, surrounding skin, and pain.
• The care provided, including cleansing, products or dressings applied, and any change from the plan of care.
• The patient’s response, relevant education, and any escalation or notification to another clinician.
• The name and professional role of the person making the entry, with authentication consistent with hospital policy.

Record clinically relevant observations clearly and use approved terminology. These fields are practical documentation guidance, not a claim that Tennessee law requires this exact checklist for every dressing change. Hospital rules require records to describe the patient’s progress and response to services, and require entries to be legible, complete, dated, and authenticated according to hospital policy. Tennessee Rule 0720-14-.06

How should hospital wound-care entries be dated and authenticated?

For hospitals subject to the federal Medicare conditions of participation, each patient medical-record entry must be legible, complete, dated, timed, and authenticated in written or electronic form by the person responsible for providing or evaluating the service, consistent with hospital policies and procedures. Tennessee hospital rules likewise require entries to be dated and authenticated according to hospital policy. 42 C.F.R. § 482.24 and Tennessee Rule 0720-14-.06

Document the time care occurred, not just the time someone later entered it into the record. If an entry must be made late or corrected, follow the hospital’s policy so the record preserves the original entry and clearly identifies the person, date, and time associated with the addition or correction. Do not silently overwrite or backdate an entry. A hospital’s system should also maintain reliable author identification and record integrity.

Who may access or receive wound dressing records?

Access should be limited to people authorized under law and hospital policy. Clinicians involved in the patient’s care may access information needed for treatment. HIPAA’s minimum-necessary rule generally limits many uses and disclosures to information reasonably necessary for the purpose, but it does not apply to disclosures to, or requests by, a health care provider for treatment. HHS minimum-necessary guidance

Patients may request their own records, and an authorized representative may request access when legally permitted. A family member is not automatically entitled to the wound dressing log simply because they are related to the patient. Verify the person’s authority and follow applicable rules for representatives, patient permissions, minors, and any legally required disclosures. 45 C.F.R. § 164.502

How can hospitals safeguard wound dressing logs from unauthorized access or alteration?

For paper records, use controlled access to charting areas and secure storage, and dispose of records through approved confidential methods. For electronic logs, use unique user accounts, role-based permissions, authentication, and activity monitoring. Avoid shared logins and unapproved photos, messaging, or storage of patient information.

HIPAA’s Security Rule requires covered entities and business associates to implement appropriate safeguards for electronic PHI. Its technical safeguards include access controls, audit controls, protections against improper alteration or destruction, user authentication, and transmission security. The precise safeguards should reflect the organization’s risk analysis and applicable requirements; the rule does not mean that one specific technology or workflow fits every hospital. 45 C.F.R. § 164.312

How can patients request a complete copy of their wound-care records?

Send a written medical-record request to the hospital’s Health Information Management or medical-records department. Identify yourself, provide the requested date range, specify that you want wound-care documentation such as dressing logs, wound flowsheets, and related treatment notes, and state your preferred delivery format. The hospital may verify your identity or an authorized representative’s authority before releasing records.

Tennessee’s Public Chapter 831 amended state law to require a health care provider to provide the patient or authorized representative a copy of the medical records within 10 working days after receiving a written request. A provider may offer a summary, but it does not replace the right to a full medical record. Tennessee Public Chapter 831

HIPAA separately sets a federal deadline of generally 30 calendar days to act on an access request, with one extension of up to 30 additional days if the covered entity provides a timely written explanation. For a Tennessee request covered by the state’s 10-working-day requirement, use the shorter state deadline. HIPAA access generally covers PHI in the designated record set, subject to limited exceptions, and requires the requested form and format when readily producible. 45 C.F.R. § 164.524

In short, patient-specific wound dressing logs should be treated as confidential medical records, documented and authenticated under hospital policy, protected from unauthorized access or alteration, and made available through a timely written request process. Tennessee’s 10-working-day disclosure rule is especially important when patients or authorized representatives seek a full copy.

FAQs

Are wound dressing logs confidential medical records in Tennessee?

Generally, yes, when they identify a patient and are maintained as part of the hospital’s care record. Tennessee hospital rules require hospitals to protect patient-record confidentiality and restrict release to authorized individuals.

How soon must a provider respond to a written request for wound-care records?

Under Tennessee law, a health care provider generally must provide a copy of the patient’s medical records within 10 working days after receiving a written request from the patient or an authorized representative. HIPAA’s general federal deadline is 30 calendar days, but the shorter Tennessee deadline applies where the state requirement governs.

Can a medical-record summary replace a patient's right to the full record?

No. Tennessee law allows a provider to offer a summary, but the summary does not replace the patient’s or authorized representative’s right to a full copy of the medical record.

Who may access a patient's wound dressing log?

The patient, an authorized representative where legally permitted, and workforce members who are authorized for their roles may access the log. Other disclosures must be permitted by law or supported by the required permission or legal authority.