HIPAA-Compliant APA Guidelines for Recording Keeping

What about the artwork? As art therapists we need to standardized our approach to maintaining digital images and/or photocopies of client artwork.  How can we record what is not being recorded?