Accreditation organizations use health records as their primary tool for evaluating whether healthcare facilities deliver safe, compliant, and well-documented care. During surveys, reviewers trace individual patient journeys through the medical record, check that documentation meets federal standards, and extract data to calculate quality performance measures. The health record is, in practice, the single most important piece of evidence an accreditor examines.
Tracing Patient Care Through the Record
The Joint Commission, the largest healthcare accreditor in the United States, built its entire survey process around something called tracer methodology. Rather than reviewing policies in a conference room, surveyors pick an actual patient (or a recently discharged patient’s record) and follow that person’s experience through every step of care. They open the health record and walk through it chronologically: Was a history and physical completed on time? Were orders clear and signed? Did nursing assessments match the physician’s plan? Were medications reconciled at discharge?
The Joint Commission uses three types of tracers. Individual patient tracers follow one person’s record from admission to discharge, looking for gaps or inconsistencies at each handoff between departments. Program-specific tracers focus on a particular service line, like infection control or blood transfusion, and pull records from patients who received that service. System tracers examine organization-wide processes such as medication management or data integrity, using a cross-section of records to spot patterns. In all three cases, the health record is the evidence trail that either confirms or contradicts what a facility claims it does.
What Surveyors Look for in the Record
CMS publishes detailed guidance on what reviewers should evaluate when they open a health record. A checklist used for electronic record reviews focuses on seven core qualities:
- Accuracy: The information in clinical notes can be validated and reflects what actually happened.
- Comprehensiveness: All required elements are present, not just the ones that are easy to document.
- Consistency: Information doesn’t contradict itself across different parts of the record.
- Currency: The record contains the most up-to-date clinical information.
- Precision: When auto-populated text is used (common in electronic records), enough original detail is added to describe the specific patient’s situation without over-documenting.
- Relevancy: Notes contain information that’s necessary and clinically meaningful, not boilerplate filler.
- Timeliness: Documentation is entered at or near the time of the encounter and finalized promptly.
These criteria reflect a real concern in the era of electronic health records: copy-paste notes and auto-populated templates can make records look complete while obscuring what actually happened during a visit. Surveyors are trained to spot this.
Federal Documentation Standards
Behind every accreditation survey are the CMS Conditions of Participation, which set the legal floor for what a health record must contain. Hospitals participating in Medicare must meet several specific requirements. Every entry in a medical record must be legible, complete, dated, timed, and authenticated by the person who provided or evaluated the service. A history and physical examination must be completed no more than 30 days before or 24 hours after admission, and it must be in the record before any surgery or procedure requiring anesthesia. After discharge, the final diagnosis must be documented and the record completed within 30 days. Records must be retained for at least five years.
These aren’t suggestions. When accreditation surveyors review health records, they’re checking compliance with these federal rules. A hospital that consistently fails to meet them risks losing its Medicare certification, which for most facilities would be financially devastating.
How Surveyors Access Electronic Records
Because most hospitals now use electronic health records, CMS has established specific rules for how facilities must provide access during a survey. At the entrance conference (the opening meeting of any survey), the survey team establishes how they’ll access the system. The facility must provide a dedicated terminal where surveyors can review records. In hospitals with multiple care locations, a terminal must be available at each one.
Surveyors typically get read-only access to prevent any accidental changes. The facility is required to designate a staff member who can assist with navigating the system and answer technical questions. If the facility can’t give surveyors direct printing capability, it must produce printouts of any requested record or portion of a record without unnecessary delay.
The stakes here are high. CMS explicitly states that impeding the survey process by delaying or restricting access to medical records can lead to termination from Medicare participation. Refusing access to patient records outright is grounds for ending a facility’s Medicare agreement entirely.
Extracting Quality Measures From Health Data
Beyond on-site surveys, accreditation organizations use health records as a data source for ongoing quality measurement. NCQA, which accredits health plans, relies heavily on health record data to calculate HEDIS measures. HEDIS is the most widely used set of healthcare quality metrics in the country, covering everything from cancer screening rates to diabetes management.
For years, NCQA required health plans to report exactly which data system produced each measure result, categorizing sources into four types: electronic health records and personal health records, health information exchanges and clinical registries, case management registries, and administrative claims. Plans pull data from a wide range of systems including EHRs, pharmacy databases, lab reports, immunization registries, and claims files. Starting with measurement year 2026, NCQA is dropping the requirement to report which specific system sourced each data point, simplifying the process as the industry moves toward digital quality measurement and better data interoperability standards.
Validating Self-Reported Data Against Records
Accreditation and oversight organizations don’t just take facilities at their word. One of the most consequential uses of health records is data validation, where auditors compare what an organization reported against what the actual medical records show.
The Medicare Advantage Risk Adjustment Data Validation program is a clear example. Medicare Advantage plans receive higher payments for sicker patients, based on diagnosis codes they submit. During an audit, CMS pulls the underlying medical records for a sample of enrollees and checks whether each submitted diagnosis is actually supported by the clinical documentation. If the records don’t back up the diagnoses, CMS can collect overpayments from the plan. This process gives health plans a strong financial incentive to ensure their documentation is accurate and complete.
How URAC Approaches Record Review
Not all accreditors handle health records the same way. URAC, which accredits health plans, pharmacies, and other healthcare organizations, takes a notably different approach to protected health information. URAC does not request or accept documentation containing PHI as part of its submission process. During a validation review (which can be conducted in person or virtually), a URAC reviewer may observe operations and see PHI in the course of that observation, but they won’t capture or copy any patient data.
URAC’s process centers on a desktop review of organizational documents, followed by up to two rounds of information requests and a validation review. Some of their accreditation programs also require annual reporting of quality measures, which means accredited organizations must continuously demonstrate performance rather than just passing a one-time check. All URAC reviews are conducted by clinical staff, specifically nurses and pharmacists, which shapes how they evaluate the quality systems that feed into health records.
Why This Matters for Healthcare Organizations
For hospitals, clinics, and health plans, the practical takeaway is that the health record is the single most scrutinized artifact in any accreditation process. Surveyors use it to verify that policies translate into actual practice at the bedside. Quality organizations extract data from it to calculate performance scores that affect reimbursement and public reputation. Auditors compare it against reported data to catch inaccuracies or fraud.
This means that documentation quality isn’t just an administrative task. Incomplete records, late entries, copy-paste notes that don’t reflect the actual encounter, or missing signatures can all surface as deficiencies during a survey. Organizations that treat the health record as a living clinical document rather than a billing requirement tend to perform significantly better during accreditation reviews, because the record tells the story surveyors are trained to read.