EFFECTIVE DATE OF THIS NOTICE: May 27, 2026

HIPAA Notice: Client Rights & Therapist Duties

A complete Notice of Privacy Practices is provided to clients as part of the intake and informed consent process and applies once a therapeutic relationship is established.

This notice provides a general overview of your rights and my responsibilities under the Health Insurance Portability and Accountability Act (HIPAA) with respect to the use and disclosure of Protected Health Information (PHI) for purposes of treatment, payment, and health care operations. This notice also describes how health information may be used and disclosed and how you can get access to this information. Please review it carefully.

Where state law in Texas, Oregon, or Washington provides greater privacy protection than HIPAA, the stricter standard applies.

Limits on Confidentiality

Federal and state law protect the privacy of communications between a client and a therapist. In most circumstances, information about your treatment may be released only with your written authorization. However, there are certain situations in which disclosure is permitted or required by law, including the following:

  • Legal proceedings: If a court order or properly issued subpoena requires disclosure, and applicable legal standards are met.

  • Health oversight activities: When disclosure is required by a government agency authorized to oversee health care operations.

  • Professional defense: If a client files a complaint or legal claim against the therapist, relevant information may be disclosed as necessary for defense.

  • Workers' compensation: When treatment relates to a workers' compensation claim and disclosure is legally required.

  • Law enforcement purposes: Limited disclosures may be made, including reporting crimes occurring on the practice premises.

  • Coroners and medical examiners: Disclosure may be made to coroners or medical examiners performing duties authorized by law.

  • Research purposes: PHI may be used or disclosed for research conducted under conditions that protect your privacy, as permitted by law.

  • Specialized government functions: Limited disclosures may be required for purposes such as national security or correctional institutions.

  • Appointment reminders and related communications: Your PHI may be used to remind you of appointments or to inform you of treatment alternatives or other services I offer.

  • Business associates: Limited information may be shared with contracted service providers (such as billing or electronic record systems) who are required to protect the confidentiality of PHI.

Disclosures are limited to the minimum necessary information.

Duty to Protect and Mandatory Reporting

There are circumstances in which I may be legally required to take protective action or disclose information without authorization:

  • Child abuse or neglect: If there is reasonable cause to suspect abuse or neglect of a child, a report must be made to the appropriate state authority.

  • Abuse or exploitation of vulnerable adults: Reporting is required when abuse, neglect, or exploitation is suspected.

  • Risk of serious harm: If there is a clear and immediate risk of harm to the client or others, disclosure may be made to appropriate parties to ensure safety.

  • Public health activities: Disclosures may be required to public health authorities for purposes such as preventing or reducing a serious threat to anyone's health or safety.

These duties apply in accordance with the laws of Texas, Oregon, or Washington, depending on where services are provided.

Use and Disclosure of PHI

  • For treatment: Information is used internally and may be shared with other health care providers only with appropriate authorization.

  • For payment: PHI may be used to obtain payment for services.

  • For operations: Information may be used for administrative, quality assurance, or practice operations.

Psychotherapy notes receive additional protection under HIPAA and are not released without specific authorization except as permitted by law.

Special Protections for Substance Use Disorder Records (42 C.F.R. Part 2)

If your records include information related to a substance use disorder, additional federal protections apply under 42 C.F.R. Part 2. These standards are stricter than HIPAA alone:

  • SUD records and any testimony relaying their contents may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you provide specific written consent or a court order is issued in accordance with 42 C.F.R. Part 2.

  • SUD counseling notes are kept separately and require your specific written authorization for any use or disclosure. This authorization cannot be combined with consent for other types of records, and you may revoke it at any time, except to the extent that I have already acted upon it.

  • You have the right to request an accounting of disclosures specifically related to your SUD records.

  • If I ever intend to use or disclose records protected under 42 C.F.R. Part 2 for fundraising for my benefit, I will provide you with a clear and conspicuous opportunity to opt out before any such use or disclosure occurs.

  • Information disclosed pursuant to 42 C.F.R. Part 2 may be subject to redisclosure by the recipient and may no longer be protected by federal privacy standards.

Marketing and Sale of PHI

I will not use or disclose your PHI for marketing purposes, and I will not sell your PHI under any circumstances.

Disclosures Involving Family, Friends, or Others

I may share limited PHI with a family member, friend, or other person you have identified as involved in your care or payment for your care, unless you object in whole or in part. You will be given the opportunity to agree, restrict, or object to such disclosures. In emergencies, consent may be obtained retroactively.

Authorizations and Your Right to Revoke

Uses and disclosures of your PHI that are not described above will be made only with your written authorization. You have the right to revoke an authorization at any time, in writing, except to the extent that I have already acted in reliance on it.

Breach Notification

You have the right to be notified in the event of a breach of your unsecured PHI, in accordance with federal law.

Client Rights Under HIPAA

You have the right to:

  • Receive confidential and non-discriminatory treatment

  • Access and obtain copies of your health records (excluding psychotherapy notes and SUD counseling notes)

  • Request amendments to your records

  • Request restrictions on certain disclosures (though not all requests must be granted)

  • Request restrictions on disclosures to health plans for services you have paid for in full out of pocket

  • Request confidential communications by alternative means

  • Receive an accounting of certain disclosures, including a separate accounting for SUD records protected under 42 C.F.R. Part 2

  • Designate a personal representative

  • Receive a paper or electronic copy of this Notice

  • File a complaint if you believe your privacy rights have been violated

Full details regarding these rights are provided in the Notice of Privacy Practices shared during intake.

Complaints

If you believe your privacy rights have been violated, you may contact:

You will not be retaliated against for filing a complaint.