Restricted Notes and Sensitive Risk Information in Mental Health

A restricted note is a record entry that only named people or roles can open. Others may see that it exists, but not its content.

Clinics use restrictions for information that is especially sensitive. Examples include safeguarding concerns, third-party information and detailed risk discussions.

Restriction is about need to know, not secrecy. The right clinicians can still see what they need to provide safe care.

In practice, restricted content often sits alongside routine notes in the same record. The restriction applies to the individual entry, not to the whole client file.

Clinics need restricted notes because a single client record is seen by many roles. Reception, billing and clinical staff all touch it for different reasons.

Kenya's Data Protection Act 2019 treats health data as sensitive personal data and expects data minimisation. Staff should access only what their task requires.

Restriction also protects trust. Clients tend to speak more openly when they know sensitive details will not be widely visible.

Group practices and NGO programmes feel this most. They often have many staff, volunteers or partner organisations touching the same records.

Restricted notes also support staff. Clinicians can record sensitive context accurately, knowing it will not appear on every screen.

A restricted-notes set-up should include fine-grained controls, an emergency route and a full audit trail. These are the core elements.

• Note-level restriction, not just whole-record access.
• A visible marker telling authorised staff that restricted content exists.
• A break-glass option for urgent access, with a required reason.
• Automatic supervisor notification whenever break-glass access is used.
• A full audit trail of who viewed, edited or exported each note.
• Clear rules on what may be shared outside the clinic.

Keep the rules simple enough for staff to follow without checking a manual.

Restriction should never block urgent care. That is why the break-glass route matters as much as the restriction itself.

Implement restricted notes by agreeing categories and permissions before configuring anything. Then test with real roles.

1. List the categories of information your clinical and compliance leads want restricted.
2. Decide which roles can create, view and lift each restriction.
3. Configure a break-glass process with a written reason and supervisor notification.
4. Train staff on when to restrict a note and when not to.
5. Test the set-up with a covering clinician and an administrative user.
6. Review break-glass use and audit logs every month.

Avoid over-restricting. If too much is hidden, covering clinicians may miss information they need for safe care.

Document the rules in a short policy that staff sign. The same policy helps when you explain your controls to the ODPC, an insurer or a funder.

Restricted notes, risk flags and role-based access work as layers. Role-based access sets the baseline, flags signal that context exists and restrictions protect the most sensitive detail.

For example, a receptionist may see a flag asking them to contact the clinician before rebooking. They would not see the restricted note explaining why.

Read more about designing role-based access and how risk flags help teams respond faster.

Together, these layers let a clinic share enough to keep care safe. Details that do not need to travel stay where they belong.

Tymira360 supports note-level restrictions, break-glass access with a recorded reason and a full audit trail. Supervisors are notified when emergency access is used.

Audit reports are available for compliance reviews and ODPC queries. Pair them with our data protection compliance checklist for Kenyan clinics.

For the wider picture, see what features a mental health EHR should include.

Clinicians can apply a restriction while writing the note, so there is no extra step afterwards. Restrictions can be lifted later by authorised roles, with the change logged.

Can a client ask to see a restricted note?

Clients have rights to access their personal data under the Data Protection Act 2019, with some limits. Agree a process with your compliance lead for handling requests.

What is break-glass access?

It is an emergency override that lets an authorised clinician open restricted content when urgent care requires it. The user gives a reason, and the access is logged and reviewed.

Who decides what gets restricted?

Clinical and compliance leads should set the categories. Individual clinicians then apply restrictions within those rules.

Do restricted notes make audits harder?

No. A good system logs every view and change, which makes audits easier. Reviewers can see exactly who accessed what, and when.

Should billing staff see clinical notes?

Usually not. Billing staff need appointment, session and payment details, not therapy content. Configure their access accordingly.

Want to see restricted notes and break-glass access in Tymira360? Book a demo with Tymira Health.