Mexico's clinical-record standard: what it asks of psychologists

Most countries regulate clinical records somewhere, and the instrument is rarely written with psychotherapy in mind. Mexico’s is a good case study, because it does something unusual: it says out loud that psychological records are different, and then tells you how. This is a walkthrough of NOM-004-SSA3-2012, Del expediente clínico — the Mexican federal clinical-record standard — written for the clinician who has never read a norm. If you practise in Mexico, it binds you. If you do not, read it for the pattern, then go find your own jurisdiction’s equivalent: the shape of the obligation travels even when the article numbers do not. This is documentation guidance, not legal advice.

The pattern, stated up front: regulators of clinical records care about content, authorship, signature and timing, not about your note format. No numeral in NOM-004 requires SOAP, DAP or any other template. What it requires is that certain information exists, that each entry is dated and signed by a named person, that an entry is made every time you see the patient, and that the file survives a minimum period. Almost every clinical-record rule worth reading is built the same way.

Does it reach an independent private practice? Yes, explicitly

Numeral 2, the campo de aplicación, is unusually blunt. It binds health-area personnel and establishments providing medical care in the public, social and private sectors, “incluidos los consultorios” — including individual consulting rooms. Numeral 4.3 repeats the phrase when defining what an establishment is. There is no size threshold and no exemption for solo practice.

That matters because most commentary on this norm assumes a hospital reader. It was not drafted only for hospitals, and the hospital parts are clearly marked — which is what makes the “what you can ignore” list below possible.

Numeral 5.16: the psychology adaptation clause

This is the hinge of the whole standard for a therapist, and it is worth reading in the original rather than in anyone’s paraphrase:

“Para el caso de los expedientes de atención psicológica, de nutriología o similares, que se integren en un establecimiento para la atención médica ambulatoria independiente o no ligado a un establecimiento hospitalario, tanto la historia clínica como las notas de evolución, se ajustarán a la naturaleza de los servicios prestados, atendiendo a los principios científicos y éticos que orientan la práctica médica.”

[For records of psychological or nutritional care integrated in an independent outpatient establishment, or one not attached to a hospital, both the clinical history and the progress notes shall be adjusted to the nature of the services provided, in accordance with the scientific and ethical principles that guide medical practice.]

Three conditions must all hold: a psychological-care record, in an outpatient establishment, independent or not attached to a hospital. A psychology service inside a hospital is not covered.

And the relief is narrow by design. It adapts exactly two documents — the clinical history and the progress notes — and nothing else. It does not touch retention, the formal requirements of each entry, or confidentiality. A clinician who reads 5.16 as “the norm does not apply to me” has misread it. It is an adaptation clause, and the only one of its kind: its neighbour 5.15 does not adapt the dental record, it delegates it to a separate norm.

The two documents you actually have to produce

6.1, the clinical history. Drawn up by “el personal médico y otros profesionales del área de la salud” — medical personnel and other health professionals, according to each one’s specific information needs. Six sections in order: history-taking (6.1.1), physical examination (6.1.2), results of prior and current studies (6.1.3), diagnoses or clinical problems (6.1.4), prognosis (6.1.5), and therapeutic indication (6.1.6). The second explicit mention of psychology in the whole norm is buried inside 6.1.2: after listing vital signs, weight, height and a head-to-toe examination, it adds “o específicamente la información que corresponda a la materia del odontólogo, psicólogo, nutriólogo y otros profesionales de la salud” — or specifically the information pertaining to the dentist’s, psychologist’s or nutritionist’s field. The conjunction is disjunctive: your mental-status examination replaces the physical one. What belongs in the rest of it is the subject of the intake interview.

6.2, the progress note. One note “cada vez que proporciona atención al paciente ambulatorio” — every time outpatient care is provided. Contents: evolution and update of the clinical picture, vital signs as considered necessary, relevant results of previously requested studies, diagnoses or clinical problems, prognosis, and treatment and indications. Only one of those cancels itself outright in psychotherapy: vital signs, already conditioned in its own text. Of the last item, treatment and indications, only the medication-dosage half falls away — a boundary that matters when a substance changes control category. The rest is what any structured note format already produces, which is why the mapping from SOAP is nearly mechanical and a good session record makes the note trivial to write.

One wrinkle worth knowing: 6.1 says “medical personnel and other health professionals”, but 6.2 says only “el médico”. It is 5.16 that pulls a psychologist’s progress note into the regime and adapts it in the same breath.

Numeral 5.10: dated, timed, named, signed

This is among the easiest numerals in the standard to satisfy. Every entry in the record must carry “fecha, hora y nombre completo de quien la elabora, así como la firma autógrafa, electrónica o digital” — date, time, full name of the person who wrote it, and a handwritten, electronic or digital signature. Note the wording: the person who wrote it, not the physician. It reaches a psychologist directly. Numeral 5.11 adds legibility, no abbreviations and no crossings-out.

This is the part that generalises best. Whatever instrument governs where you practise, undated or unsigned entries are the failure mode auditors find first — the theme of clinical documentation mistakes.

Numeral 5.4: five years, and who owns what

One paragraph does three things. The record is the property of the institution or of the provider who generated it. The patient nonetheless holds “derechos de titularidad sobre la información” — rights over the information itself, including its confidentiality. And records must be kept “por un periodo mínimo de 5 años, contados a partir de la fecha del último acto médico”: a minimum of five years from the date of the last act of care. Note the clock: from the last act of care, not from the last note, and not from when the file was opened.

Two cautions. First, five years is a floor, and a lower one than the leading professional guidance suggests. The APA’s Record Keeping Guidelines — adopted in 2007, expired by their own terms in 2017 and never replaced, but still APA’s most recent guidance on record keeping — say that “in the absence of a superseding requirement, psychologists may consider retaining full records until 7 years after the last date of service delivery for adults or until 3 years after a minor reaches the age of majority, whichever is later.” That is doubly hedged guidance, not law. Your binding retention period comes from your own state or national rules; treat whichever applies to you as a minimum.

Second, a rule that is widely repeated about NOM-004 and simply is not in it: there is no extension for minors. The “age of majority plus five years” formula circulating on Spanish-language sites appears nowhere in the text. Where it comes from we could not establish; the nearest professional analogue, the APA’s three-years-past-majority figure above, is US guidance rather than Mexican law — and a different number.

The chapters that never apply to an outpatient practice

This list rarely gets published, and it is easy to verify by reading the chapter headings: chapters 7, 8 and 9 in full, and most of chapter 10, are written for hospitals.

Numeral	Heading	Why it does not reach you
7 (whole)	Emergency-department notes	4.11 defines an emergency as an acute medical-surgical problem
8 (whole)	Inpatient notes	Presupposes admission, operating theatre, anaesthesia, discharge
9 (whole)	Nursing and technical-service reports	No nursing staff, no lab or imaging services
10.1.2	Events requiring a signed consent form	All nine are hospital, surgical or invasive
10.2 to 10.5	Voluntary discharge, prosecutor notification, death notes	Hospital-shaped formats, mostly reserved to physicians
6.3, 6.4	Consultation and referral notes	Conditional, and drafted for the physician
Appendix A	Record-evaluation model	Marked “(Informativo)”: its checklist items are not obligations

Numeral 8.9, the nota de egreso, is a hospital discharge note, often cited as though it obliged an outpatient practice to write a closing note. It does not, and no numeral in NOM-004 requires one. It remains a useful structural analogy for documenting a therapy termination — an analogy, not a rule.

The nine events that numeral 10.1.2 lists as minimum triggers for a signed consent form are all hospital or surgical: admission, major surgery, anaesthesia, sterilisation, transplants, human research, autopsy, high-risk procedures, and anything mutilating. Outpatient psychotherapy is on none of those lines, and the two-witness requirement so often copied into therapy consent templates belongs to the format prescribed for those events. Numeral 10.1.3 says additional consents may be taken whenever the clinician sees fit, “sin que… sea obligatorio el empleo de formatos impresos” — without any obligation to use printed forms.

None of which means you can work without written consent. In Mexico the duty sits elsewhere: in the General Health Law’s article 51 Bis 2, which defines informed consent as agreement expressed in writing, and in the data-protection law in force since 2025, which requires express written consent to process health data. Wherever you are, find the two instruments — the record rule and the data rule — before you assume one covers the other. The document itself is the subject of informed consent in psychotherapy.

And a point for US readers: none of this is HIPAA, and nothing here maps onto it. Mexican federal health law and HIPAA are separate regimes with different definitions, different enforcers and different remedies. Treating compliance with one as evidence of the other is a mistake in both directions.

What actually happens if the record is thin

Worth being deflationary. NOM-004’s own numeral 13 assigns oversight to the federal health ministry and the state governments. We could not find public evidence of routine inspections of independent psychology practices in Mexico, or of a published sanction against a psychologist for a record defect — and saying otherwise would be inventing a risk. The realistic exposure is not an inspector: it is a complaint, a civil or criminal proceeding, or a data-protection claim, in each of which the record is the evidence. That is true nearly everywhere, which is the last portable lesson: you keep the chart for the day someone asks you to prove what you did.

Structure is what makes that survivable, and a good system should give it to you rather than ask it of you. gesell.ai keeps a chart organised the way a record rule expects it — intake, clinical history, treatment plan and session notes — and drafts each note in SOAP, DAP, BIRP or GIRP from your session record for you to review and approve. The clinical judgement and the final note stay yours; the scaffolding stops depending on your memory. Before you trust any tool with client data, ask whether it is safe to use AI with patient information and verify the rules where you practise.