A hospital faces a recordkeeping review in two ways under the Punjab Healthcare Commission (PHC) MSDS: the hospital’s own regular review of its medical records, which the MSDS requires, and the PHC’s assessment of the hospital during licensing and inspection. Staff meet both in the same way. Every entry is complete, legible, dated and timed, made only by authorized people, and kept private, and mistakes are corrected properly. This guide is about people, not paperwork. It shows who is responsible for what, what every staff member needs to know about access and accurate entries, how a review works, and a four-week plan to prepare. No plan can promise a result in a PHC review. What it can do is make your staff’s daily habits match what the standards ask for. Framework PHC Minimum Service Delivery Standards (MSDS) for hospitals Area Information Management Systems (IMS) Review standard Standard 30 (IMS-3): the organization regularly carries out review of medical records, Indicators 156 to 162 PHC assessment Pre-assessment and formal inspection during licensing, inspection at renewal, and inspection after a complaint For the indicator-by-indicator rules, see our guides to PHC MSDS information management standards and PHC MSDS medical record requirements. Who is responsible for what The MSDS sets what the record must show. It does not assign every task to a job title, so the hospital has to. The table links each responsibility to the indicator behind it. The PHC itself names registration and reception staff, OPD doctors, pharmacists and nurses as staff who date and time entries (Indicator 146). The rest of the role split is good practice, so adapt it to your hospital. Who What they are responsible for Indicators Hospital management and quality team Keep the written list of people authorized to make entries; set the record review policy; name the reviewers; make sure corrective action is documented 145, 156, 158, 162 Medical records department One unique identifier per patient; records stored in good order; hospital deaths documented in the department 144, 148, 153 Doctors and consultants Reason for admission, presumptive diagnosis and plan of care; operative notes; a signed discharge note; sign every entry personally 147, 149, 150, 152 Nurses Date and time every entry; keep the record current through each shift 146, 148 Registration and reception staff Positively identify the patient and the right record; date and time their entries 144, 146 Pharmacists Date and time their entries 146 Record reviewers Check timeliness, legibility and completeness; cover both open and discharged records; keep access and confidentiality SOPs 158, 159, 160 Every staff member Make no entry unless authorized; do not delegate entries; correct errors on a separate dated, timed and signed line 145, 147, 161 The indicators in this table are taken from the PHC’s published hospital standards for Information Management Systems. The PHC marks these indicators as critical: 145, 148, 149 to 154 and 159 to 162, so start your training with those. Access control: what every staff member needs to know Indicator 155 asks for two things together. Care providers must be able to see a patient’s current and past records, and the record must be accessible only to authorized, concerned persons, with confidentiality ensured. Indicator 145 adds that only authorized people may make entries, and Indicator 158 asks the review SOPs to say who has access, what information they can access and what confidentiality means. Staff need those principles turned into plain rules. These are good practice, not PHC wording: Rule for staff Why it matters Open a record only if you are treating that patient or are authorized to review it Keeps access limited to authorized, concerned persons Never share your login or sign in for someone else Every entry and every view must trace to one person Lock your screen and sign out when you leave a workstation Stops casual access by anyone passing Do not leave files on desks, trolleys or counters; return them to the record room Protects paper records Do not photograph records or forward them on personal messaging apps Keeps records under the hospital’s control Release copies only through the person your policy names Prevents ad hoc disclosure Report a lost file or a suspected breach at once Lets the hospital act and document it Sign a confidentiality undertaking, and renew it when your role changes Puts the duty in writing Strict privacy must not get in the way of care. A treating doctor still has to reach a patient’s history quickly, so test both directions. For the full access matrix and checklist, see our guide to PHC MSDS rules for patient record access and confidentiality. Accurate records: six habits for every entry Reviewers read what staff wrote, so the habits behind each entry matter most. These six follow the indicators directly. Write both date and time on every entry (Indicator 146). Sign with your name and title, so the author can be identified (Indicator 147). Never delegate your entry. Authorized persons do not have someone else write for them (Indicator 147). Write legibly and completely. The record must be complete and legible, with the reason for admission, the presumptive diagnosis and the plan and progress of care (Indicator 149), and a chronological, up-to-date account of care (Indicator 148). Correct an error on a separate line that carries the date, time, title and signature of the person correcting it. Cross-outs, erased entries and correction fluid are not allowed (Indicator 161). Record what happens at the key moments: procedures, transfers, discharge and death (Indicators 150 to 154). For the exact contents of each of those records, see our guides to correcting errors in medical records and PHC MSDS medical record requirements.
Under the Punjab Healthcare Commission (PHC) MSDS, a hospital must define sentinel events in writing, monitor adverse events such as medication errors and unplanned returns to theatre, and analyse serious events in depth, with corrective action written down. A named quality improvement coordinator and a multidisciplinary quality committee make sure it happens. These requirements sit in the Continuous Quality Improvement (CQI) area of the MSDS, not in the medical record standards. This guide explains what the MSDS asks for, what to record when an incident happens, who should be responsible, and how to avoid the common gaps. It is based on the PHC MSDS for hospitals (2012 edition). Regulator Punjab Healthcare Commission (PHC) Framework Minimum Service Delivery Standards (MSDS) for hospitals Area Continuous Quality Improvement (CQI) Standards 16 (CQI-1), 17 (CQI-2) and 18 (CQI-3) Indicators covered here 93, 95, 101 to 104, 106 and 107 Applies to Hospitals. Clinics and small facilities have their own PHC standards, so check the one for your category The MSDS has ten functional areas. For the full picture, see our guide to the Punjab Healthcare Commission MSDS. What the PHC MSDS requires The MSDS does not use the phrase “incident reporting”. It asks for three connected things: a structure to own quality and safety, monitoring of adverse events, and a defined process for sentinel events. Indicator What the MSDS asks for What a reviewer can check 93 (Standard 16) A multidisciplinary quality improvement committee with terms of reference, methods, reporting structure, minutes and defined responsibilities The committee plan and minutes 95 (Standard 16) A designated quality improvement coordinator with a job description The appointment and job description 101 (Standard 17) Monitoring of invasive procedures, including adverse occurrences, unplanned return to the operating room within 24 hours and related readmission within 24 hours Committee minutes showing the monitoring 102 (Standard 17) Monitoring of adverse drug events, such as allergic reactions, wrong dose, wrong drug or wrong patient, and how each was managed Committee minutes and the events recorded 103 (Standard 17) Reporting and follow-up of adverse occurrences related to anaesthesia Reports and follow-up 104 (Standard 17) Reporting and follow-up of adverse occurrences related to blood and blood products Reports and follow-up 106 (Standard 18) A written definition of sentinel events, with a minimum list (see below) The written list 107 (Standard 18) Intensive analysis of sentinel events, with corrective action Analyses from the past 12 months; if there were none, how the hospital would report and analyse one Indicator 107 is explicit about quality. An analysis that only blames an individual does not count. It should look at causes and contributing factors, and end in a corrective action such as a policy change or staff training. What counts as a sentinel event Indicator 106 asks each hospital to write its own definition of a sentinel event. The MSDS sets a minimum list that the definition should include: Unexpected deaths, including infants, mothers and suicides Serious adverse events that caused, or could have caused, harm, including unplanned return to the operating room within 24 hours, readmission within 24 hours, wrong patient, wrong site, wrong procedure and medication error Patient violence against staff Violence against patients Infant abduction Baby switching The MSDS describes including near misses as good practice but does not require it. A hospital that also logs near misses gives its quality committee earlier warning, so consider adding them to your policy. The MSDS does not define “incident” or “near miss”, so write your own plain definitions and apply them the same way across departments. What to document when an incident happens The MSDS tells you what to monitor and analyse, not which form to use. The fields below are practical guidance, not PHC requirements. They are built so that the record can answer the questions a reviewer asks under Indicators 101 to 107: what happened, what you did, what you learned, and who owns the follow-up. Field What to write Reference number and date and time of the event A unique incident number, and when it happened Where it happened Ward, theatre, emergency room or other area Patient Medical record number (use the number, not the name, when the record is shared with a committee) Event type Adverse drug event, procedure complication, anaesthesia, blood product, fall, violence, other; and whether it meets your sentinel event list What happened Facts only, in plain words, with no blame Effect on the patient Harm, if any, and the patient’s condition Immediate action What staff did at once, and who was told Reported by Name, role, date and time of the report Analysis Causes and contributing factors. For a sentinel event, a full review of what led to it Corrective and preventive action What will change: policy, training, equipment or process Responsible person and due date One named person per action, with a date Status Open, in progress, closed, with the date of review by the quality committee Many hospitals keep the incident record separate from the patient’s clinical notes, while the medical record itself still shows the facts of the patient’s care. For those rules, see our guide to PHC MSDS medical record requirements. Who is responsible The MSDS names two roles and leaves the rest to the hospital: The quality improvement coordinator (Indicator 95): a designated person with a job description who runs the quality programme day to day. The multidisciplinary quality committee (Indicator 93): reviews what is monitored, keeps minutes and holds departments to their actions. The MSDS does not name a patient safety officer, and Indicator 107 does not say who must carry out an analysis. So write it down yourself. A workable split is practical guidance, not a PHC rule: any staff member can report; the department head checks the facts; the coordinator logs and tracks the case; the committee reviews every sentinel event; and each corrective action has one named owner and a due date. That last point answers the question “who is the responsible staff member?”. An action with no
Punjab Healthcare Commission MSDS Rules for Patient Record Access and Confidentiality Under the Punjab Healthcare Commission (PHC) MSDS, a hospital meets Indicator 155 when care providers can access current and past medical records, the record is accessible only to authorized, concerned persons, and confidentiality is ensured. The MSDS (Minimum Service Delivery Standards) is the PHC’s framework for hospitals, and Indicator 155 sits in its Information Management Systems (IMS) area. This guide explains the balance the indicator strikes between access and privacy, shows where hospitals usually slip, and gives you an access matrix and a confidentiality checklist your quality team can start using this week. Regulator Punjab Healthcare Commission (PHC) Standard 29 (IMS-2): the medical record reflects continuity of care Indicator 155 Priority Non-critical Applies to Every hospital that keeps patient records, paper or electronic Indicator 155 is part of the PHC Information Management Systems standards. For all 19 indicators, see our guide to PHC Information Management Standards (IMS 28-30). What the PHC MSDS requires for record access and confidentiality (Indicator 155) The indicator says care providers have access to current and past medical records. The PHC’s compliance requirements add two conditions: The medical record is accessible only to authorized, concerned persons. Confidentiality is ensured. Read together, the indicator pulls in two directions, and a hospital must satisfy both: Open enough for care. A doctor or nurse treating a patient must be able to see the patient’s current record and earlier ones, such as a previous admission or a past visit. Closed enough for privacy. People with no part in the patient’s care, or in the review of records, must not be able to see it. A non-critical indicator that connects to others Indicator 155 is marked non-critical (yellow). It links closely to two other indicators: the written list of people authorized to make entries (145), and the review SOP that states who has access, what information they can access and confidentiality (158). If you have already built those, this one follows naturally. What good access control looks like The PHC states the principles but not the design. The table below is practical guidance for turning them into a working system. # Principle What it means in practice Example 1 Care providers can see current records The treating team can reach the record whenever the patient is under care Ward notes available at the nursing station when needed 2 Care providers can see past records Earlier admissions, visits and reports can be retrieved quickly by record number Previous discharge summary found using the MRN 3 Only authorized, concerned persons Access is limited to people involved in the patient’s care or in an authorized review A billing clerk sees billing data, not clinical notes 4 Confidentiality ensured Patient information is not disclosed or discussed outside those who need it Locked record room; staff confidentiality undertaking Define “concerned” by role. A simple access matrix lists each role and what it may see. A consultant treating a patient needs the full clinical record. A pharmacist needs prescriptions. A registration clerk needs demographic details. A reviewer needs the sampled records and nothing more (Indicator 158). Protect paper and screens alike. For paper files: locked rooms, a sign-out register and no files left on desks or trolleys. For electronic records: named logins, role-based permissions, automatic screen lock and an access log. Be careful with copies and messaging apps. Photographs of records, or records forwarded over personal messaging apps, leave the hospital’s control. Set a clear rule on whether this is ever allowed, and who decides when a copy of a record is released to someone outside the hospital. Remember the other half. Strict privacy must not stop a treating doctor from seeing a patient’s history. Test both directions. Where hospitals usually fail on access and confidentiality These are the gaps to look for in your own wards and record rooms. Each maps to the indicator’s wording. Files left on desks, trolleys or at the nursing station where anyone can read them. An unlocked or open record room, with no sign-out register. No written list of who may see which records. Shared logins in electronic systems, so no one can tell who opened a record. No access log, so a breach of confidentiality could never be traced. Past records hard to retrieve, so the treating team cannot see an earlier admission when they need it. No confidentiality undertaking signed by staff, reviewers and trainees. Staff opening records out of curiosity, with no rule against it and no check. Records photographed or forwarded through personal messaging apps. No clear rule on releasing copies to patients, families or outside bodies. If your wards show more than a few of these, a simple walk-through with a checklist is the fastest way to see where to start. How to comply with Indicator 155 in six steps Build an access matrix. List each role and what it may see, covering current and past records. Restrict physical and electronic access to match the matrix: locked rooms and a sign-out register for paper, named logins and permissions for screens. Make past records easy to find for treating teams, using the unique record number (Indicator 144) and a clear retrieval process. Get confidentiality in writing. Every staff member, reviewer and trainee with access signs a confidentiality undertaking and receives training. Set a rule for copies and sharing. Say who may release a copy of a record, to whom, and whether photographs or messaging apps are ever allowed. Audit regularly. Walk through wards and the record room with the checklist below, review the access log if you have one, document what you find and fix (Indicators 156 to 162). Access matrix Adapt the roles and entries to your hospital. Role Current records Past records Parts of the record Conditions Treating doctor Nurse on the ward Pharmacist Registration and reception Billing and accounts Record reviewer Medical records department Confidentiality checklist Check Yes / No Notes Access matrix written and approved Record room locked, with a sign-out
PHC MSDS Medical Record Requirements for Clinics and Hospitals Under the Punjab Healthcare Commission (PHC) MSDS, a hospital must give every patient one unique, complete and legible medical record, control who can write in it and who can read it, store it in good order, and review and correct it regularly. These rules sit in the Information Management Systems (IMS) area of the MSDS: 19 indicators, 12 of them critical. This guide explains the requirements in plain language, shows what applies to clinics and what applies to hospitals, and gives six steps to put them in place. PHC MSDS Medical Record Requirements at a Glance Regulator Punjab Healthcare Commission (PHC) Framework Minimum Service Delivery Standards (MSDS) Medical record area Information Management Systems (IMS), Standards 28, 29 and 30 Indicators 144 to 162 (19 in all), of which 12 are critical (red) and 7 non-critical (yellow) Applies to Hospitals: the indicators in this guide. Clinics: see “What applies to clinics” below The MSDS has ten functional areas, and medical records are one of them. For the full picture, see our guide to the Punjab Healthcare Commission MSDS and the detailed guide to PHC MSDS information management standards. What the PHC MSDS Says About Medical Records The MSDS covers medical records in three standards. Together they ask for a record that is complete, that shows continuity of care, and that the organization reviews regularly. Standard What it requires Indicators Critical indicators 28 (IMS-1) The organization has a complete and accurate medical record for every patient 144 to 148 145, 148 29 (IMS-2) The medical record reflects continuity of care 149 to 155 149, 150, 151, 152, 153, 154 30 (IMS-3) The organization regularly carries out review of medical records 156 to 162 159, 160, 161, 162 Critical indicators (red) are the ones the PHC marks as critical, so fix them first. All 19 indicators still apply, so use the critical ones to set your order of work, not to skip the rest. Record Keeping Requirements The PHC asks for a record that identifies the patient, shows who wrote each entry and when, and tells the story of the patient’s care from admission to discharge. The table lists what the PHC asks for, in plain words. What the record needs What it means in practice Indicator Priority A unique identifier on every record One record number per patient, with a clear way to match the right patient to the right file 144 Non-critical A list of people authorized to make entries The hospital writes down who may write in the record and makes sure only they do 145 Critical Date and time on every entry Registration staff, OPD doctors, pharmacists, nurses and other authorized staff all date and time what they write 146 Non-critical An identifiable author Each entry carries the author’s name and title, and authorized persons do not delegate 147 Non-critical An up-to-date, chronological account of care Records are complete, stored in good order and kept for the period the statute of limitations requires 148 Critical Reason for admission, presumptive diagnosis, plan and progress of care Complete and legible for every patient 149 Critical Operative and other procedure notes Provider names, procedure, findings, blood loss, specimens, complications, patient’s condition 150 Critical Transfer details Date, reason and receiving hospital 151 Critical A signed discharge note A copy in the record, with at least seven contents 152 Critical Death certificate and autopsy report Cause, date and time of death, signed and stamped by the Registrar; final autopsy report where an autopsy is done 153, 154 Critical For the detail on each row, see our guides to who can make entries, record retention and storage and the unique patient identifier. Confidentiality and Access to Patient Records Indicator 155 asks for two things at once. Care providers must be able to see a patient’s current and past records, and the record must be accessible only to authorized, concerned persons, with confidentiality ensured. Indicator 158 adds that the review SOPs should state who has access, what information they can access, and confidentiality. The PHC states the principle, not the design. These steps are practical guidance, not PHC requirements, for turning it into a working system: Write an access list by role. A treating doctor needs the full clinical record, a pharmacist needs prescriptions, and a billing clerk needs billing data. Control the physical record. Keep files in a locked room with a sign-out register, and never leave them on desks or trolleys. Control the electronic record. Give each person a named login, set role-based permissions, and keep an access log so you can tell who opened a record. Get confidentiality in writing. Staff, reviewers and trainees with access sign a confidentiality undertaking. Set a rule for copies. Decide who may release a copy of a record, to whom, and whether photographs or messaging apps are ever allowed. For the full access matrix and checklist, see our guide to PHC MSDS rules for patient record access and confidentiality. Reviewing and Correcting Records Standard 30 (IMS-3) asks hospitals to check their own records on a schedule, fix what they find, and write down what they did. Step What the PHC asks for Indicator Priority Set a review policy A written policy for the periodic review of records, including how often 156 Non-critical Review a fair sample A representative sample of records 157 Non-critical Use identified reviewers Reviewers from disciplines authorized to make entries, with SOPs on access and confidentiality 158 Non-critical Check timeliness, legibility and completeness The review focuses on these three things 159 Critical Cover open and closed records Both current and discharged files are reviewed 160 Critical Correct errors properly Errors are fixed on a separate dated, timed and signed line, with no cross-outs, erasures or correction fluid 161 Critical Record the corrective action The review results and the corrective and preventive action are written down 162 Critical The last step is easy to forget: a review that finds problems but leaves no record of
