What is a key requirement for secure destruction of records?

• A. Destroy records immediately without notifying anyone.
• B. Destroy records only when required by policy, but without documentation.
• C. Destroy records securely when appropriate, with documented procedures.
• D. Destroy records whenever the therapist feels like it.

Answer: (C)

Secure destruction requires a documented, formal process that specifies when and how records are destroyed. When records are no longer needed, they should be destroyed using approved, secure methods and, critically, this action must follow written procedures. Those procedures create an audit trail: who authorized the destruction, what records were destroyed, when, how they were destroyed, and who verified completion. This ensures confidentiality, accountability, and regulatory compliance.

Destroying records immediately without notifying anyone bypasses oversight and makes it impossible to prove that the destruction was authorized or proper. Destruction only when required but without documentation lacks the evidence needed for audits or reviews. Destruction whenever the therapist feels like it is unprofessional and ignores established policies, increasing the risk of accidental disclosure or noncompliance. By contrast, destroying records securely in accordance with documented procedures balances timely records management with the protection of sensitive information.