Psychotherapy notes are some of the most private records in mental health care. They often contain a therapist’s personal observations, thoughts, and impressions about therapy sessions. Because these notes are highly sensitive, the Health Insurance Portability and Accountability Act (HIPAA) gives them stronger protection than most other medical records.
Knowing when psychotherapy notes can be disclosed is important for every mental health professional. Sharing them without following HIPAA rules can lead to legal problems, loss of trust, and privacy violations. This guide explains the rules in simple words.
What Are Psychotherapy Notes?
Psychotherapy notes are notes written by a mental health professional during or after a counseling session. They are meant for the therapist’s own use to help guide treatment.
These notes are different from the patient’s regular medical record. A patient’s medical record usually includes:
- Diagnosis
- Treatment plan
- Medications
- Session dates
- Progress notes
- Test results
Psychotherapy notes, on the other hand, may include:
- Personal impressions
- Feelings about the therapy process
- Ideas for future sessions
- Sensitive discussions that are not needed for general treatment
Because these notes are personal and detailed, HIPAA gives them special privacy protections.
Does HIPAA Allow Psychotherapy Notes to Be Shared?
Yes, but only in limited situations.
Under HIPAA, psychotherapy notes usually cannot be disclosed without the patient’s written authorization. This rule is much stricter than the rules for regular medical records.
In most situations, even if a patient signs a general medical records release form, that does not allow psychotherapy notes to be shared. HIPAA requires a separate authorization that clearly gives permission to disclose psychotherapy notes.
When Can Psychotherapy Notes Be Disclosed Without Patient Authorization?
HIPAA allows disclosure without written permission only in a few specific situations.
1. For the Therapist’s Own Treatment Use
A therapist may use their own psychotherapy notes to provide treatment to the patient.
For example, a psychologist may review notes before the next therapy session to remember important topics.
2. For Training Programs
Psychotherapy notes may be used by supervised trainees, interns, or students when they are learning under the therapist’s supervision.
This helps improve professional education while following HIPAA requirements.
3. For Legal Defense
If a patient files a lawsuit or complaint against the therapist, psychotherapy notes may be used by the therapist to defend themselves during legal proceedings.
Only the information necessary for the defense should be disclosed.
4. When Required by Law
Certain laws may require disclosure.
Examples include:
- Court orders
- Mandatory reporting of child abuse
- Reporting elder abuse when required by state law
- Certain public health reporting requirements
Mental health professionals should always check both HIPAA and their state’s privacy laws before sharing information.
5. To Prevent a Serious Threat
HIPAA allows disclosure when it is necessary to prevent or reduce a serious and immediate threat to the health or safety of the patient or another person.
AI-Powered • HIPAA-Ready
Let AI handle your clinical notes.
Skriber listens during the visit and creates complete Progress notes in seconds — so you can stay focused on the patient.
-
Capture Ambient listening during sessions
-
Transcribe Speech → text instantly
-
Generate Notes Accurate structured notes
-
Review & sign Edit and finalize instantly
For example, if a patient makes a credible threat of serious violence, the therapist may share only the information needed to protect the potential victim or notify law enforcement.
When Is Patient Authorization Required?
In almost every other situation, written authorization is required before psychotherapy notes can be disclosed.
Examples include:
- Insurance companies requesting psychotherapy notes
- Attorneys requesting records
- Employers asking for mental health information
- Schools requesting therapy records
- Family members asking to see notes
- Other healthcare providers requesting psychotherapy notes
Without proper written authorization, the therapist should not disclose the notes.
Are Progress Notes the Same as Psychotherapy Notes?
No.
Many professionals confuse these two documents, but they serve different purposes.
Progress notes document the patient’s diagnosis, treatment, symptoms, medications, progress, and future care. These records are often shared with other healthcare providers and insurance companies when appropriate.
Psychotherapy notes contain the therapist’s private thoughts, session impressions, and detailed reflections. They receive stronger HIPAA protection and follow different disclosure rules.
Keeping these two types of documentation separate is considered a best practice.
Best Practices for Mental Health Professionals
To protect patient privacy and stay HIPAA compliant:
- Store psychotherapy notes separately from the medical record.
- Clearly label psychotherapy notes.
- Obtain written authorization before disclosure unless a HIPAA exception applies.
- Share only the minimum necessary information.
- Review state privacy laws because they may provide stronger protections than HIPAA.
- Train staff on the difference between psychotherapy notes and progress notes.
Following these steps reduces legal risk and helps protect patient trust.
Final Thoughts
Psychotherapy notes receive special protection under HIPAA because they contain highly personal observations made by the therapist. In most cases, they cannot be shared without the patient’s specific written authorization.
There are only a few exceptions, such as the therapist’s own treatment use, supervised training, legal defense, certain legal requirements, or preventing a serious threat to safety.
Understanding these rules helps mental health professionals protect patient privacy, remain HIPAA compliant, and maintain strong therapeutic relationships. When there is any doubt about disclosure, it is always best to review HIPAA requirements and applicable state laws before sharing psychotherapy notes.
References
- U.S. Department of Health and Human Services. (2003).Standards for privacy of individually identifiable health information (45 CFR Parts 160 and 164).https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164
- U.S. Department of Health and Human Services, Office for Civil Rights. (n.d.).Summary of the HIPAA Privacy Rule.https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html
- U.S. Department of Health and Human Services, Office for Civil Rights. (n.d.). 45 CFR § 164.508 – Uses and disclosures for which an authorization is required.https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.508
- U.S. Department of Health and Human Services, Office for Civil Rights. (n.d.).45 CFR § 164.501 – Definitions (Psychotherapy notes).https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/section-160.103
- American Psychological Association. (2017).Ethical principles of psychologists and code of conduct.https://www.apa.org/ethics/code
for clinicians · HIPAA-ready
Spend more time with patients, not paperwork.
Skriber transforms ambient speech into accurate Progress notes — finished before your next session.
No credit card required.
Dr. Connor Yost is an Internal Medicine resident at Creighton University School of Medicine in Arizona and an emerging leader in clinical innovation. He currently serves as Chief Medical Officer at Skriber, where he helps shape AI-powered tools that streamline clinical documentation and support physicians in delivering higher-quality care. Dr. Yost also works as a Strategic Advisor at Doc2Doc, lending his expertise to initiatives that improve financial wellness for physicians and trainees.
His professional interests include medical education, workflow redesign, and the responsible use of AI in healthcare. Dr. Yost is committed to building systems that allow clinicians to spend more time with patients and less on administrative tasks. Outside of medicine, he enjoys photography, entrepreneurship, and family life.
