Is Therapy Really Private? Understanding HIPAA and Your Privacy in Counseling
Starting therapy can feel vulnerable. You may be wondering: Who can see what I tell my therapist? Will my employer find out? Can my family access my records? What happens if I use insurance?
These are completely reasonable questions.
Privacy and confidentiality are important parts of the therapeutic relationship, and understanding how they work can help you feel more comfortable when beginning counseling.
What Is HIPAA?
HIPAA stands for the Health Insurance Portability and Accountability Act. It is a federal law that includes protections for certain health information and establishes requirements for how covered healthcare providers and organizations handle protected health information.
In counseling, HIPAA helps establish standards for protecting your personal health information, including information contained in your medical or mental health records.
But HIPAA isn't the only protection that may apply to your information. Mental health professionals are also subject to professional ethical requirements, state laws, and other federal privacy protections.
Read Your Paperwork!
When you begin therapy, you'll typically be asked to review and sign paperwork that explains important information about your care, including confidentiality, the limits of privacy, your rights as a client, communication practices, and how your information may be used or disclosed. While it can be tempting to quickly click through or sign everything so you can get started, taking a few minutes to actually read these documents can help you understand what to expect. If something is unclear, don't hesitate to ask questions. Your therapist or counseling practice should be willing to explain their policies and help you understand what you're agreeing to. You don't need to be an expert in HIPAA or healthcare law, you simply deserve to understand your rights and how your information will be handled.
So, Is What I Tell My Therapist Confidential?
Generally, yes. Your therapist does not simply share what you discuss in therapy with other people because someone asks. Your therapist is expected to protect your privacy and only disclose your protected health information when permitted or required by law, or when you have provided appropriate authorization.
That means your conversations in therapy are not something your employer, friends, neighbors, or other people in your life can simply call the office and request. Even your primary care physician or specialist cannot access information without a signed Release of Information(ROI).
What Is a Release of Information (ROI)?
A Release of Information (ROI) is a form that gives your therapist permission to communicate with a specific person, provider, school, organization, or other entity about your care.
For example, you may choose to allow your therapist to coordinate with your primary care physician, psychiatrist, another counselor, or a school professional. An ROI helps define who can receive information, what information may be shared, and the purpose of the disclosure.
Signing an ROI is not something you should feel pressured to do without understanding it. Take the time to review what you're authorizing and ask questions if anything is unclear. In many situations, you can also choose not to authorize a disclosure or discuss with your therapist what information is necessary to share.
Are There Exceptions to Confidentiality?
Yes. Confidentiality is very important, but it is not absolute.
There are certain circumstances in which information may need to be disclosed. Depending on the situation and applicable laws, these can include things such as:
Serious concerns about a client's safety or the safety of another person
Suspected abuse or neglect that must be reported under applicable law
Certain legal or court-related circumstances
Situations involving healthcare operations, treatment, or payment where disclosure is permitted by law
Other circumstances specifically permitted or required by applicable law
Your therapist should explain the limits of confidentiality as part of the informed-consent process.
What If I Use Insurance?
This is one area that surprises some people.
When you use health insurance for therapy, certain information may need to be shared with your insurance company for purposes such as determining eligibility, processing claims, or receiving payment.
This can include information such as your diagnosis, treatment information, or other information required for the insurance claim.
If privacy is a major concern for you, it is reasonable to ask your therapist what information may be submitted to your insurance company and what options may be available to you.
What About My Family?
Being an adult client generally does not mean that your spouse, parent, friend, or another family member automatically has access to your therapy records.
Your therapist also cannot simply discuss your treatment with a family member because that person calls the office. In fact, your therapist cannot even disclose if you are or aren't a client under their care to anyone, unless there is a Release of Information (ROI) in place for that individual or entity.
There are circumstances where another person may appropriately be involved in your care, but those situations have specific requirements and should be handled in accordance with applicable privacy laws and professional standards.
For minors, privacy and parental access can work differently, especially when a custody agreement is in place, or when a client started therapy as a minor and then reached majority of age while in therapy, so parents and guardians should ask their child's provider about how confidentiality is handled.
When A Minor Turns 18
When a client begins therapy as a minor, a parent or guardian may have been involved in scheduling appointments, communicating with the therapist, or managing aspects of their child's care. However, once that client turns 18, they generally become an adult for purposes of their healthcare privacy, and their parent does not automatically continue to have access to their therapy information.
This can understandably feel frustrating or confusing for parents who have been involved in their child's care for years. However, protecting the privacy of the now-adult client is an important part of respecting their rights.
Unless there is another legal basis that permits disclosure, information generally cannot be released to the parent without the client's authorization, such as a signed Release of Information (ROI).
What About Therapy and Child Custody Matters?
When a child is receiving counseling and there are custody or family-law considerations, privacy and access to records can become more complicated. HIPAA does not determine who has legal authority to make decisions for a child or who is entitled to access the child's records. Those questions may depend on parental rights, court orders, Texas law, and the specific circumstances of the case.
A therapist may also receive requests from parents, attorneys, or the court for information or records, but a request does not automatically mean that all therapy information can simply be released. If there is a custody dispute, it is important for parents to provide the counseling practice with any relevant court orders and to communicate openly about existing legal requirements.
Therapists generally strive to protect a child's privacy while also following applicable laws and court orders. Because custody situations can vary significantly, parents should ask their child's therapist how confidentiality, parental access, records, and communication will be handled in their particular circumstances.
What About Text Messages, Emails, and Voicemails?
Privacy isn't just about what happens inside the therapy room.
Communication through email, text messages, phone calls, patient portals, and other electronic methods can involve privacy considerations as well.
For example, you may want to think about whether your phone displays message previews on its lock screen or whether someone else has access to your email account or voicemail.
Your counseling practice should also have policies explaining how it communicates with clients and how electronic information is handled.
Can I Ask My Therapist Questions About Privacy?
Absolutely!
In fact, you should.
Before beginning therapy, or at any point during treatment, you can ask questions such as:
“Who has access to my records?”
“What information is sent to my insurance?”
“When would you be required to break confidentiality?”
“How do you communicate with clients outside of sessions?”
“What happens if someone else calls asking about me?”
Your herapist should be willing to explain their privacy and confidentiality policies in language you can understand.
Therapy Should Feel Like a Safe Place to Be Honest
You don't have to know every HIPAA regulation before starting therapy.
What matters is knowing that your privacy is taken seriously and understanding the general circumstances in which information may or may not be shared.
Therapy works best when you can be honest about what you're experiencing, without feeling like you have to constantly worry about who is going to find out.
If you have questions about confidentiality or privacy, ask your therapist!
Understanding your rights and your provider's policies can help you feel more informed, comfortable, and confident about your care.
*This article is intended for general educational purposes and is not legal advice. Privacy and confidentiality requirements can vary depending on the circumstances, applicable laws, and the type of healthcare provider involved.
Comments