Prehospital Care Report (PCR) Documentation and HIPAA Compliance

Objective. Students will complete accurate, legally defensible PCR documentation for five simulated patient encounters, applying correct medical terminology, abbreviations, and HIPAA privacy standards.

Why the PCR Is Your Most Important Written Product

The Prehospital Care Report (PCR) — sometimes called a run report — is the official written record of everything that happened from the moment your unit was dispatched to the moment you transferred patient care. Courts, medical directors, quality-improvement reviewers, insurance carriers, and receiving hospitals all rely on it. A poorly written PCR can put a patient at risk, expose you to liability, and jeopardize your certification. If it is not documented, legally and professionally it did not happen.

Required Elements of a Complete PCR

Every PCR, whether paper or electronic (ePCR), must contain the following elements:

Patient demographics — full name, date of birth, address, sex, and insurance or billing information
Incident times — dispatch time, response time, arrival on scene, patient contact time, departure time, and arrival at the receiving facility
Chief complaint — the patient's own words, placed in quotation marks, describing why EMS was called
History — pertinent medical history, current medications, and allergies (never leave allergies blank; document "NKDA" if none reported)
Assessment findings — vital signs with exact times, level of consciousness, physical exam findings documented head to toe as appropriate
Interventions — every treatment performed, including the time, dose (for medications), route, and the provider who performed it
Patient response — how the patient responded to each intervention; document objective changes in vitals or mental status
Transport destination — the receiving facility, mode of transport, and the name of the provider who received the hand-off report

A blank required field is never acceptable. If information is truly unavailable, write "unknown" or "unable to obtain" and briefly explain why.

Writing an Objective, Legally Defensible Narrative

The narrative is the free-text section where you tell the story of the call in chronological order. Use objective, descriptive language based on what you saw, heard, felt, and measured. Avoid opinions and conclusions that go beyond your scope.

Use this instead of this:

"Patient's skin was pale, cool, and diaphoretic" — not "patient looked sick"
"Patient stated, 'I can't breathe'" — not "patient seemed anxious"
"BP 88/60, HR 122, SpO₂ 89% on room air" — not "patient had low blood pressure and low oxygen"

Document findings chronologically. Many services use the SOAP format (Subjective, Objective, Assessment, Plan) or a similar structured approach. Follow your agency's format, but always include all required elements.

Corrections to a paper PCR must be made by drawing a single line through the error, initialing and dating it, and writing the correct information nearby. Never use correction fluid (white-out) — doing so can be interpreted as falsification.

Consequences of Falsification and Omission

Falsifying a PCR — entering information you know is untrue — is fraud. Consequences include termination of employment, loss of EMS certification, civil liability, and potential criminal prosecution. Omitting critical information (for example, failing to document that you checked a blood glucose before giving dextrose) leaves the patient's care record incomplete and can lead to harmful treatment decisions at the receiving facility. Both actions violate professional and ethical standards.

HIPAA and EMS Documentation

The Health Insurance Portability and Accountability Act (HIPAA) protects individually identifiable health information, called Protected Health Information (PHI). Every data field on a PCR that could identify a patient — name, date of birth, address, diagnosis, or even a photograph — is PHI.

Your HIPAA obligations in the field:

Minimum necessary rule — share PHI only with those who need it for treatment, payment, or healthcare operations (for example, the receiving hospital staff).
Verbal hand-off reports in public spaces should be given quietly to avoid unnecessary disclosure.
ePCRs must be accessed only on authorized devices; never photograph or share a PCR screen on personal social media.
Paper PCRs must be stored securely and not left in a unit, at a scene, or in a public area.
A patient has the right to request a copy of their PCR; direct such requests to your agency's privacy officer — do not hand over documents on your own authority.

HIPAA violations can result in significant civil and criminal penalties for both the individual provider and the agency. When in doubt, protect the information.

Safety Point: Accurate Documentation Protects the Next Provider

The receiving hospital team makes decisions based on your PCR. If you document an incorrect medication name, wrong time, or fail to note a deteriorating trend in vitals, the emergency physician may miss critical information. Treat documentation as an extension of patient care — it must be as accurate and complete as your physical assessment.

Key terms9

Prehospital Care Report (PCR)The official written or electronic record documenting all aspects of a prehospital patient encounter, including assessment findings, interventions, and transport; serves as the legal record of care.

ePCRElectronic Prehospital Care Report; a digital version of the PCR completed on a tablet or computer, used by many agencies to improve legibility, data sharing, and quality improvement.

Protected Health Information (PHI)Under HIPAA, any individually identifiable health information — including name, date of birth, diagnosis, or address — that must be safeguarded from unauthorized disclosure.

HIPAAHealth Insurance Portability and Accountability Act; federal law that establishes national standards for protecting the privacy and security of patients' health information.

Minimum Necessary RuleA HIPAA principle requiring that only the minimum amount of PHI needed to accomplish a legitimate purpose be disclosed or accessed.

Objective DocumentationDocumentation based on measurable, observable findings (vital signs, direct patient quotes, physical exam results) rather than personal opinion or interpretation.

FalsificationThe act of knowingly entering false, altered, or fabricated information into a PCR; constitutes fraud and can result in criminal charges, civil liability, and loss of certification.

SOAP FormatA structured narrative format — Subjective, Objective, Assessment, Plan — used to organize PCR narratives in a logical, chronological sequence.

PCR Audit RubricA standardized scoring tool used by quality-improvement reviewers or instructors to evaluate whether a PCR contains all required elements and meets documentation standards.

In class: Lecture on PCR legal significance (the record as the legal document of care), required elements (patient demographics, times, chief complaint, assessment findings, interventions, patient response, transport destination), and consequences of falsification or omission. · Documentation workshop: instructor presents three completed sample PCRs with errors (missing allergies, incorrect time stamp, vague narrative); students identify errors and rewrite the narrative section using objective, descriptive language. · PCR completion drill: instructor reads aloud a detailed simulated patient encounter; students complete a paper PCR form in real time, then compare to a model answer and self-score using a PCR audit rubric, discussing HIPAA implications of each data field.
Materials: Blank paper PCR forms (or ePCR training module on tablets), sample PCR packets with intentional errors, PCR audit rubric, HIPAA summary for EMS handout, medical abbreviation reference sheet
Check: Student's completed PCR on the documentation drill contains all required elements, no blank required fields, and a narrative that is objective and accurately reflects the simulated encounter; PCR audit rubric score of 80% or higher required.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.