Documenting Medical Necessity in Psych Notes

What "medical necessity" actually means, legally Medical necessity is not a vibe, it is a legal standard, and the people who decide whether you met it are…

Sections

1. What “medical necessity” actually means, legally
2. If it’s not in the note, it didn’t happen
3. The structural elements every psych note needs
4. Medical necessity for THIS visit
5. Time-based vs MDM-based billing
6. Magic phrases that audit-proof your notes, and the bad-note vs good-note comparison
7. Telehealth documentation
8. When you actually get audited

What “medical necessity” actually means, legally

Medical necessity is not a vibe, it is a legal standard, and the people who decide whether you met it are not clinicians, they are auditors with a checklist. If you have ever had a claim denied or sat through a payer audit and thought the reviewer obviously did not understand the case, you were probably right about the clinical picture and still wrong about the documentation. Those are two different fights.

For Medicare, the rules live in two places. NCDs (National Coverage Determinations) are nationwide policies issued by CMS (the Centers for Medicare and Medicaid Services). LCDs (Local Coverage Determinations) are policies issued by the regional MACs (Medicare Administrative Contractors) that actually process your claims. NCDs and LCDs spell out, in plain English most of the time, what diagnoses, severity, and clinical justifications are required to bill a given CPT code. If your LCD says E/M (evaluation and management) visits for depression require documented severity, functional impairment, and a treatment response, and your note has none of those three, the claim is going to fail an audit no matter how good your clinical judgment was.

Commercial payers are their own ecosystem. Each one publishes medical policy documents, sometimes called clinical criteria or coverage policies. Optum, Anthem, Aetna, Cigna, BCBS plans all run their own. They are usually more restrictive than CMS, not less. Many of them lean on InterQual or MCG criteria for level-of-care decisions, especially for IOP, PHP, and inpatient. For outpatient psychiatry the criteria are looser, but “looser” still means you need a documented diagnosis with severity, a treatment plan with goals, and evidence the treatment is doing something or being adjusted because it is not.

Medicaid is state by state and frequently the most paperwork-heavy, particularly if you are billing managed Medicaid plans. State Medicaid manuals will sometimes specify required note elements down to the section header. Read yours.

The throughline across all three: medical necessity means the service was needed to evaluate, diagnose, or treat a covered condition, at the right level of intensity, by a qualified provider, and that the documentation in the chart proves all of that. The clinical reality is irrelevant if it is not on paper.

If it’s not in the note, it didn’t happen

This is the part clinicians hate, and it is non-negotiable. The note is the document of record. An auditor is not going to call you and ask you to clarify what you meant. They are going to read the note, score it against a rubric, and decide. If you spent forty minutes on a complex med reconciliation and a safety assessment but your note says “patient stable, continue Lexapro, RTC 1 month,” you billed for forty minutes of work you cannot prove you did.

The mental shift that helps is to stop thinking of the note as a memory aid for yourself and start thinking of it as the legal artifact a stranger will use, two years from now, to decide whether you should give the money back. You are writing for that stranger. They are not hostile, but they are not generous either. They are looking for specific elements, and if those elements are missing, the answer is no.

This also matters when you get subpoenaed, when a patient’s attorney requests records in a custody case, when a board complaint comes in, when a malpractice case is being evaluated. Same principle. The note is the truth. If you did the work and did not document it, you did not do it, in any sense the system will recognize.

The structural elements every psych note needs

There is a fairly stable set of elements that hold up under audit, none of them mysterious, most clinicians already know them, the problem is that under time pressure they get truncated to the point of uselessness.

Specific DSM-5-TR diagnosis with criteria mapping. DSM-5-TR is the Diagnostic and Statistical Manual, fifth edition, text revision, published by the American Psychiatric Association. An ICD-10 code by itself is not a diagnosis, it is a billing label. “F33.1” is not documentation. “Major depressive disorder, recurrent, moderate, current episode meets criteria for depressed mood, anhedonia, insomnia, fatigue, impaired concentration, and feelings of worthlessness for greater than two weeks, with functional impairment in work and relationships” is documentation. You do not have to list every criterion every visit, but the initial eval should map the diagnosis to the criteria explicitly, and follow-ups should reference the active symptoms by name.

Severity indicators with numeric scores. PHQ-9 (Patient Health Questionnaire, 9-item, for depression), GAD-7 (Generalized Anxiety Disorder, 7-item), Hamilton (Hamilton Depression Rating Scale), YMRS (Young Mania Rating Scale), MDQ (Mood Disorder Questionnaire), AUDIT-C, PCL-5 for PTSD. Pick the tool that fits the diagnosis and use it. A score is a number an auditor can latch onto. “Patient endorses moderate depression” is a phrase. “PHQ-9 = 16, consistent with moderately severe depression” is data. The second one survives audit, the first one does not.

Functional impairment language. Auditors are looking for impact across domains: work or school, relationships, self-care, sleep, appetite, safety. You do not need a paragraph on each. You need a sentence that names the domain and the impairment. “Missed three days of work in the past two weeks, isolating from spouse, sleeping four hours a night, denies SI.” That sentence does more work than half a page of clinical prose.

Treatment plan with measurable goals. “Continue current plan” is not a treatment plan, it is a placeholder. A treatment plan names the target, the intervention, and how you will know it is working. “Target: reduce PHQ-9 to less than 10 over the next eight weeks. Intervention: increase sertraline from 50 to 100 mg daily, continue weekly therapy with outside provider, sleep hygiene plan reviewed. Reassess at four weeks.” That paragraph satisfies every audit framework I have seen.

Response or non-response to prior treatment, with specifics. If a patient failed two SSRIs before you started them on an SNRI, the note that justifies the SNRI says which SSRIs, at what doses, for how long, and what happened. “Failed sertraline 200 mg daily for ten weeks, partial response with residual anhedonia and persistent insomnia; failed escitalopram 20 mg daily for eight weeks, no improvement on PHQ-9 (15 to 14).” That is medical necessity for the SNRI. “Tried SSRIs, did not work” is not.

Risk stratification. Every visit. Suicidality, homicidality, substance use, self-harm. Active or passive, plan or no plan, access to means, protective factors. If the patient denies, document the denial. If there is risk, document the assessment and the safety plan. Auditors and attorneys both look at this section first when something has gone wrong.

Medical necessity for THIS visit

Here is the framing that closes more denials than any other single change. Every follow-up note should answer the question: why did this visit need to happen, today, with you, instead of being deferred or handled by a primary care provider? If the answer is not in the note, the visit looks unnecessary on paper, even when it obviously was not.

The clean version of this is documenting the clinical change since last visit. New symptoms. Worsening symptoms. Side effects. A med change that needs titration. A score that moved. A life event that altered the picture. Something. If the note reads exactly like the last note, you have not documented why today was a medical encounter rather than a social visit.

This is also the framing that protects you when you bill higher levels of E/M. A 99214 or 99215 requires moderate-to-high complexity. The complexity has to be visible in the note. “Patient reports increased anxiety following job loss, PHQ-9 unchanged at 14, GAD-7 increased from 11 to 17, considering augmentation with buspirone given partial SSRI response, discussed risks and benefits, patient elected to start buspirone 7.5 mg BID with titration plan, reviewed signs of activation and instructed to call if SI emerges.” That sentence is a 99214 on its face. “Patient anxious, increase med, RTC” bills the same code and loses it on audit.

Time-based vs MDM-based billing

You can bill outpatient E/M visits two ways. Time-based, where you total the time spent on the patient’s care on the day of the visit (face-to-face plus chart review, documentation, coordination of care, all on the date of service), and the time bracket determines the code. Or MDM-based, where the level is determined by medical decision-making complexity across three categories: number and complexity of problems addressed, amount and complexity of data reviewed, and risk of complications or morbidity from management.

They have different documentation requirements, and you have to pick one or document both. For time-based you have to state the total time and roughly what you did with it, and ideally itemize the activities. “Total time on date of service: 38 minutes. Activities included chart review, patient interview, mental status exam, medication reconciliation, prescription writing, and documentation.” That note supports a 99214 on time.

For MDM-based billing the note has to show the complexity. Multiple chronic conditions, a med change with monitoring requirements, an active risk assessment, review of outside records, coordination with a therapist or PCP. The complexity has to be visible. Auditors will not assume it because you billed it.

Pick one. Some clinicians document both, which is fine and arguably safer. What you cannot do is bill on time and have a note that does not mention time, or bill on MDM and have a note that shows nothing complex happened.

Magic phrases that audit-proof your notes, and the bad-note vs good-note comparison

Stop thinking of the note as a memory aid and start thinking of it as the legal artifact a stranger will use two years from now to decide whether you should give the money back.

There is a small set of phrases that, used accurately, do most of the work of justifying medical necessity. Use them when they are true. Do not use them as filler, because that is fraud.

The bad list is not bad because the words are wrong. They are bad because they are conclusions without evidence. “Patient stable” is a conclusion. The auditor wants to see the data that led to the conclusion. Show your work.

Same patient, same visit, same clinical reality. Different documentation.

The carry-forward problem. Every EHR makes it easy to copy last visit’s note forward. Most of us do it. The problem is that copy-forward without editing is one of the fastest ways to get flagged. Auditors run pattern detection across your notes. If four consecutive visits have identical HPI, identical ROS, identical exam, identical assessment, and identical plan, the system flags you. A human reviewer looks. They find that the PHQ-9 score has been “14” for six months even though the patient’s presentation obviously changed. Now you have a credibility problem across your whole panel.

The fix is not to stop using copy-forward. It is to use it as a template and then actually edit it. Every visit needs at least: an updated HPI reflecting today’s reality, a fresh risk assessment with today’s date, a current severity score if the diagnosis warrants one, and a plan section that either documents a change or documents why no change is indicated today. “No change in plan today; patient at therapeutic dose with full symptomatic remission per PHQ-9 = 3, will reassess in three months” is a valid no-change note. The same four words pasted from last month is not.

Telehealth documentation

Telehealth has its own set of audit traps, most of which exist because the rules changed multiple times during and after the public health emergency and are still evolving by payer.

The licensure piece matters and is frequently missed. You have to be licensed in the state where the patient is physically located at the time of the visit, not where they normally live. A patient who normally lives in Oregon but is visiting family in Idaho when they have their telehealth appointment is, for that visit, in Idaho. If you are not licensed in Idaho, that is a problem regardless of how the visit went clinically. Document the patient’s location every visit.

Audio-only is its own category. Some payers reimburse it, some do not, and the ones that do almost always require additional documentation explaining why video was not used. “Patient had technical difficulty with video platform, elected audio-only after three failed connection attempts; clinically appropriate given established therapeutic relationship and stable presentation” works. “Audio-only” by itself does not.

When you actually get audited

If you bill enough claims, you will eventually get audited. It is a statistical sampling process, not a personal accusation, so treat it like one. The first communication is usually a letter requesting records for a specified set of dates of service. Read the letter carefully. Note the response deadline. Note exactly which dates and which patients are in scope.

Do not panic-edit your notes. Late entries are allowed if dated and signed as late entries on the day you actually wrote them, but altering an existing note to make it look better is fraud. Auditors can pull metadata from EHRs and see exactly when a note was created, accessed, and modified. The cover-up is always worse than the original problem.

You have the right to representation. For Medicare audits, you can engage a billing or compliance consultant, an attorney, or both. For commercial audits, the same applies. Read your payer contract. Most of them specify the appeal process, the timelines, and the standard of review. Use those processes. Audit findings are appealable, often successfully, especially when the issue is documentation rather than clinical judgment.

If the audit finding is that documentation did not support the level billed, the typical remedy is recoupment of the difference between what was billed and what the documentation supported. That is unpleasant but survivable. If the finding is more serious (pattern of upcoding, services not rendered, services not medically necessary at all), the consequences scale up fast: extrapolated overpayment demands, payer contract termination, referral to OIG (Office of Inspector General), licensing board notification. This is the tail you are trying to avoid by writing better notes today, not the day the letter arrives.

The last thing worth saying is that good documentation is not adversarial, it is just making your clinical reasoning legible to anyone who has to understand what you did and why. Write the note that survives audit and you have also written the note your future self can read, a covering colleague can act on, and a court can interpret, same note, same work, just legible.