Plastic surgery practices run two businesses under one roof. Reconstructive work, such as breast reconstruction after mastectomy, hand surgery or repair after injury, follows insurance rules, prior authorizations and medical necessity documentation. Cosmetic work is self-pay, sold through consultations and quotes, and depends heavily on photographs. A general EHR handles the first reasonably well and the second poorly.
This guide covers what an EHR for plastic surgery needs: clinical photography and the privacy rules that apply to it, authorization for marketing use of photos, separating cosmetic from reconstructive records, breast reconstruction coverage, quotes and good faith estimates, post-operative follow-up and the integrations that tie consultations, surgery centers and payments together.
What should an EHR for plastic surgery include?
Connecting your plastic surgery systems?
Agnotic integrates EHRs with photo systems, surgery centers, CRMs and payment tools for surgical practices.
An EHR for plastic surgery should include secure clinical photography with standardized views and comparisons, photo consent tracking, separate workflows for cosmetic and reconstructive cases, procedure quotes and deposits, good faith estimates for self-pay patients, surgical scheduling with outside surgery centers, post-operative follow-up and integration with consultation and marketing tools.
Most practices start with a specialty-configured EHR and add a photo system, a patient relationship tool and payment software. The challenge is keeping those connected, so photos, consents, quotes and clinical notes all belong to one patient record rather than four.
Practices that also run a med spa or aesthetic injectables service add another layer: memberships, product sales and frequent short visits. Whether those live in the EHR or a separate system, the clinical details should reach the surgical record so a surgeon sees prior treatments before planning a procedure.
How should clinical photography be handled?
Clinical photography should be handled as protected health information from the moment of capture. Under the HIPAA de-identification standard in 45 CFR 164.514(b)(2), full face photographs and any comparable images are listed among the identifiers that must be removed for data to count as de-identified, so most plastic surgery photos are identifiable.
- Capture: Photos taken in a practice app or approved device that uploads directly to the record, never stored in personal camera rolls.
- Standard views: Templates for each procedure with consistent angles, lighting and distance, so before and after images compare fairly.
- Storage: Encrypted storage linked to the patient and encounter, with access controls and audit logs.
- Comparison tools: Side-by-side and overlay views for consultations and follow-up visits.
- Sharing: Secure methods to share images with the patient or another clinician, without email attachments.
Phones are the biggest risk. Staff taking photos on personal devices and texting them to the surgeon creates copies outside the practice's control. A capture app that keeps nothing on the device after upload removes that problem without slowing the clinic.
Retention and deletion need policies too. Photos are part of the medical record and follow the practice's record retention rules, while copies made for marketing or education should be tracked so they can be withdrawn if a patient revokes permission.
When do patient photos need authorization?
Patient photos need a written HIPAA authorization when they will be used for purposes beyond treatment, payment and health care operations, such as marketing on a website or social media. 45 CFR 164.508 sets out what a valid authorization must include, and marketing uses generally require one.
The EHR should store each authorization as a structured record: which images, which purposes, which channels, the expiry date or event, and whether the patient has revoked it. Marketing teams should only be able to access images with a current authorization covering the intended use.
Keep the treatment consent and the marketing authorization separate. Patients must be able to refuse marketing use without that affecting their care, and combining the two in one form creates confusion and compliance risk.
How should cosmetic and reconstructive cases be separated?
Cosmetic and reconstructive cases should be separated at the case level because payers treat them differently. Medicare's exclusions in 42 CFR 411.15(h) exclude cosmetic surgery and related expenses, except when required for prompt repair of accidental injury or to improve the functioning of a malformed body member.
Commercial payers apply similar distinctions. For reconstructive and functional cases, the record needs documentation of the functional problem, such as photos, measurements and history of conservative treatment, and prior authorization tracking. For cosmetic cases, the record should show the patient was told the procedure is self-pay.
Combined procedures are common and need care. When a single operation includes both functional and cosmetic parts, the documentation and billing must show which parts are which, and the patient's financial agreement should state what insurance may cover and what the patient pays.
Practice software helps when it carries the case type through every step. A case marked reconstructive should trigger authorization tasks and documentation prompts, while a cosmetic case should route to quotes and deposits. Mixing the two in one generic workflow is how practices end up billing payers for excluded work or asking patients to pay for covered care.
What does breast reconstruction require of the record?
Breast reconstruction requires records that support coverage under the Women's Health and Cancer Rights Act. The CMS fact sheet on WHCRA explains that group health plans and insurers that cover mastectomies must cover all stages of reconstruction of the affected breast, surgery on the other breast to produce a symmetrical appearance, prostheses and treatment of physical complications, including lymphedema.
The EHR should link reconstruction episodes to the mastectomy and track each stage, including tissue expander exchanges, revisions, symmetry procedures and nipple reconstruction, with authorizations for each. Coordination with the breast surgeon and oncology team is essential, so data exchange with their EHRs matters.
Reconstruction can span months or years and is often paused for chemotherapy or radiation. A timeline view of stages, treatments from the oncology team and pending authorizations helps the practice plan the next step and explain to the patient where she is in the process. When a payer denies a stage, the linked record makes the appeal much easier to assemble.
How should quotes, deposits and estimates work?
Quotes, deposits and estimates should be generated from the same procedure catalog, so a consultation quote, the deposit request and the final bill agree. Quotes for cosmetic surgery often combine surgeon fees, facility fees, anesthesia, garments and follow-up visits.
For uninsured and self-pay patients, the federal good faith estimate rules apply. Under 45 CFR 149.610, a provider must give an estimate within one business day when a service is scheduled at least three business days ahead, within three business days when it is scheduled at least ten business days ahead, and within three business days when a patient asks for one.
- Procedure catalog: Prices by procedure and combination, with facility and anesthesia items.
- Estimate templates: Good faith estimates generated from quotes with required content and timing tracked.
- Deposits and payments: Online payment links, deposit rules and refund policies recorded with the quote.
- Financing: Links to patient financing options where the practice offers them.
Track quote acceptance and timing. Consultations that do not turn into bookings are common in cosmetic practices, and knowing where quotes stall helps the practice improve follow-up without pressuring patients.
How should post-operative follow-up work?
Post-operative follow-up should combine scheduled visits with remote check-ins, since many cosmetic patients travel for surgery. Photo-based check-ins through a patient app let surgeons review healing between visits, and structured symptom questions catch signs of infection or other complications early.
Standard follow-up photo sets at set intervals also build the practice's outcome record. Comparing results across procedures and surgeons supports quality review and gives patients realistic expectations in future consultations.
Remote check-ins need clear escalation. Patients should know which symptoms mean they should call the practice or seek urgent care, and photo submissions flagged by a nurse should reach the surgeon the same day. Record each check-in in the chart so the follow-up history is complete if a complication is later reviewed.
How should surgical scheduling and facility coordination work?
Surgical scheduling should coordinate the surgeon's time, the facility, anesthesia and the patient's preoperative requirements in one booking. Plastic surgeons often operate at several sites, including office-based suites, ambulatory surgery centers and hospitals, each with its own scheduling system and paperwork.
- Case booking: Procedure, duration, equipment and implants sent to the facility from the EHR.
- Preoperative checklist: Labs, clearances, medication instructions and signed consents tracked against the surgery date.
- Document packets: Consents, history and orders delivered to the facility electronically.
- Operative records: Operative notes, implant details and anesthesia records returned to the practice chart.
Implant tracking deserves its own attention. Breast implants and other devices carry manufacturer, model, lot and serial details that patients and surgeons may need years later, so store them as structured data with the operative record rather than in a scanned sticker sheet.
Which integrations matter for a plastic surgery practice?
The integrations that matter most connect the systems patients pass through before, during and after surgery.
- Photo and imaging: Clinical photo platforms and 3D imaging or simulation tools linked to the patient record.
- Patient relationship tools: Inquiries and consultation bookings flowing into the EHR when a patient becomes a patient.
- Surgery centers and hospitals: Booking, preoperative documents and operative notes exchanged with facilities.
- Anesthesia: Preoperative assessments and anesthesia records shared with the anesthesia provider.
- Payments: Card processing, deposits and financing linked to quotes and accounts.
- Labs and pathology: Preoperative lab orders and pathology results for excised tissue.
Be careful with marketing tools. Inquiry forms and booking widgets often collect health details, and sending them to tools without a business associate agreement creates privacy risk. Route health information into the EHR and keep marketing systems limited to what they need.
How Agnotic can help
Agnotic Technologies integrates plastic surgery EHRs with photo capture apps, patient relationship tools, surgery center systems and payment platforms, and builds custom modules for quotes, good faith estimates, photo authorizations and remote post-operative check-ins.
We design these flows so identifiable photos and health details stay in controlled systems, with authorizations and access rules applied automatically. Where a practice outgrows its tools, we can also build the missing pieces as apps that sit beside the EHR.
Connect your surgical practice
See how we connect specialty practices to the systems around them, or browse our EHR integration articles.
Related reading on Agnotic
See dermatology EMR, telehealth for surgery prep, EHR customization and EHR integrations.
