Learn Your Rights

Your Rights to Mental Health Records Under HIPAA

Quick Answer

You have the right to access your mental health treatment records. However, HIPAA allows therapists to keep psychotherapy notes separate and may deny access if they believe it would cause harm. You can request your treatment records, which include diagnoses, medications, and summaries. Mental health information receives special privacy protections and cannot be shared without your consent in most cases.

Understanding Mental Health Records Under HIPAA

Mental health information receives extra privacy protections under HIPAA. This is one of the most complex areas of HIPAA, and it's important to understand the differences between types of mental health records and your rights to access them.

Types of Mental Health Records

Special Privacy Protections for Mental Health

The Psychotherapy Notes Exception

What Are Psychotherapy Notes?

These are the personal notes a therapist, psychiatrist, or counselor keeps during or after sessions. They include the therapist's observations, interpretations, impressions, and clinical judgments about your condition and treatment. These notes are different from your formal treatment record.

Special Protection Under HIPAA

HIPAA allows therapists to keep these notes separate from your regular medical record and to withhold them from you in certain circumstances. The therapist can deny access if they believe providing the notes would reasonably be likely to cause substantial harm to you or another person.

What You CAN Access

Even if your therapist withholds psychotherapy notes, you can access your treatment record, which includes your diagnosis, the types of treatments you received, medications prescribed, and progress summaries. This is separate from the therapist's personal notes.

If Your Request Is Denied

If your therapist denies access to psychotherapy notes, they must explain why in writing. You have the right to request a review of this decision and can file a complaint with HHS OCR if you believe the denial was improper.

How to Request Mental Health Records

1

Decide What You Need

Clarify whether you want all treatment records or specific records from particular dates. If you want psychotherapy notes, understand that the therapist may refuse and explain why.

2

Contact Your Mental Health Provider

Call your therapist, psychiatrist, or mental health clinic's administrative office. Ask about their process for requesting records. Some providers have specific forms you must complete.

3

Submit Your Request in Writing

Send a formal written request via email or mail. Include your full name, date of birth, the specific records you want (dates and types), and whether you want copies or want to review them at the office.

4

Specify Format and Delivery

Ask for records in electronic or paper format. Note whether you'll pick them up in person or want them mailed. Ask about costs before the provider sends them.

5

Understand the Timeline

Providers have 30 days to respond to access requests. For mental health records specifically, some states have different timeframes. If the provider denies access, they must explain why in writing.

Special Considerations for Mental Health

Substance Abuse Treatment Records

If you received substance abuse treatment, special federal law (42 CFR Part 2) provides extra protections beyond HIPAA. Your provider cannot disclose that you received treatment or treatment details without explicit written consent. Even limited disclosures require specific authorization.

Inpatient Mental Health Treatment

If you were hospitalized for psychiatric care, you have the right to access your hospital records including psychiatric evaluations, medication records, and nursing notes. Some may fall under psychotherapy notes protection.

Court-Ordered Treatment

If your mental health treatment was court-ordered or involved legal proceedings, some records may be restricted from disclosure due to legal privilege or public safety concerns.

Confidentiality Exceptions

Mental health privacy can be breached in limited circumstances: to prevent serious harm, for child abuse reporting, court orders, or law enforcement requests. Your provider must follow strict procedures before disclosing.

If You Want to Share Mental Health Records

Obtain a Release Form

To authorize your mental health provider to share your records with another provider, family member, or anyone else, you must sign a release form. This form must be specific to mental health information.

Be Specific About What's Released

Your authorization form should specify exactly which records (all records, records from specific dates, certain types of information) can be shared with whom and for what purpose.

Set an Expiration Date

Your authorization can be time-limited (e.g., valid for 60 days) or ongoing. You can revoke it in writing at any time.

Share Carefully

Mental health information is sensitive. Only authorize disclosure to trusted recipients. Consider what information is really necessary for them to have.

Sample Request Letter for Mental Health Records

[YOUR NAME] [YOUR ADDRESS] [YOUR PHONE NUMBER] [YOUR EMAIL] [DATE] Records Department / [THERAPIST/PROVIDER NAME] [MENTAL HEALTH PROVIDER ADDRESS] Re: Request for Mental Health Treatment Records Dear Records Manager, I am requesting copies of my mental health treatment records from [PROVIDER NAME]. Patient Information: Full Name: [YOUR FULL NAME] Date of Birth: [YOUR DOB] Patient ID/Account Number: [if known] Records Requested: Please provide my mental health treatment records from [DATE RANGE]. Specifically, I am requesting: - [ ] Complete treatment records - [ ] Records from specific dates: [DATES] - [ ] Treatment summaries and diagnoses - [ ] Medication records - [ ] Psychotherapy notes (if available) Format Requested: I request these records in [ELECTRONIC / PAPER] format. Delivery Method: - [ ] Mail to address above - [ ] Pickup at office (location and time convenient: ____________) - [ ] Electronic delivery to: [EMAIL ADDRESS] Please provide information about any costs associated with this request. I understand I have the right to access my treatment records, and I also understand that some records may be withheld if the provider believes disclosure would cause substantial harm. If you deny any portion of my request, please explain the reason in writing. Thank you, [YOUR SIGNATURE] [YOUR PRINTED NAME]