Mental health patient privacy

Mental health care providers need some information about you to provide care. They may share your information for: 

• Treatment purposes
• Payment purposes
• Moving you from one facility to another

But in most cases, they can only share what’s directly relevant to your care.

Your family or friends may want to know how you’re doing, but most doctors, clinics, hospitals, psychologists and other health care providers won’t be able to tell them.

A federal law called HIPAA protects patient privacy, including your mental health information.

Providers could ask your spouse or immediate family for information, like your medical history or allergies, but they won’t be able to share anything in return. It’s basically a one-way flow of information.

You also have the right to refuse visitors if you’re hospitalized for mental health treatment. Learn more about hospitalization for mental health.

You can give permission 

You can give permission to health care providers to share your information. For example:  

• You sign an authorization form. You can complete a form known as a “HIPAA release” that tells providers it’s ok to share information about you with the person you name in the form. If you have a hospital or facility where you’re regularly treated, you can complete the form in advance and ask them to keep it on file.
• The person is present with you. Providers may share information with someone who’s physically present with you if you don’t object. For example, if a family member is with you at the hospital, doctors may share information with that person unless you say it’s not ok.

Providers must use their professional judgment to decide when sharing information is in your best interest. They should only share what’s directly relevant to your care.

You can take permission away 

You can tell providers not to share information about you.

If you signed an authorization form, you can cancel or revoke the authorization.

You can request your own records 

You have the right to request a copy of your own medical records. You can ask to get the records electronically.

Once you get a copy of your records, protect them. Keep them in a safe, secure place.

Learn more 

The federal law called HIPAA, the Health Insurance Portability & Accountability Act, sets rules for who can look at and get your health information.

You can learn more about HIPAA from the U.S. Department of Health and Human Services, such as when you could get information about an adult patient or when health information can be shared with family members and friends.