Disclosures Training

There is a version of the intake where the clinician says “this is confidential, with a few exceptions,” slides the form across the table, and moves on. It takes ninety seconds and it is a failure, because the client has just been told that the most important structural fact about the relationship is a formality.

What you are actually doing in that conversation is telling someone the shape of the container before you ask them to put anything into it. People decide what to say based on what they think will happen to it. If they are wrong about that, either they withheld something they did not need to, or they said something they would not have said had they understood. Both are harms, and both are yours.

This module covers two disclosures that get flattened into paperwork. The first is the limits of confidentiality — what leaves this room, when, to whom, and at whose decision. The second is who you are: your licensure status, your education, and the fact that you are supervised. Clients have a right to both, and supervisees skip the second one far more often than the first.

Every disclosure decision in this module runs on the same logic, and if you learn the logic you will not need to memorize the list.

1. Tell them before, not after. A limit disclosed at intake is informed consent. The same limit revealed at the moment you act on it is a betrayal, even when the action was correct. You cannot retroactively warn someone.
2. Say it in words a frightened person can hold. “I am a mandated reporter” means nothing to most people. “If I believe a child is being hurt, I have to tell the people whose job it is to check” means something. Legal accuracy that does not transfer is not disclosure.
3. Do not promise more privacy than you control. You do not control what a school does with your letter, what an insurer does with a diagnosis, or what a court orders. Overpromising feels kind in the moment and is corrosive later.
4. Return to it. Intake disclosure is not a one-time event. When something changes — a records request, a safety concern, a new diagnosis — you say so again, in the moment, out loud.
5. When you are unsure, hold and consult. Every tab in this module ends in the same place, because for a supervisee it genuinely is the same place. Acknowledge, release nothing, bring it to supervision.

Professional training for supervisees. Not legal advice, and not a substitute for Orchard’s written consent and confidentiality policy, which is the operative document and which you should read alongside this module.

• State law varies and is often more protective than the federal floor. Georgia rules govern here; Virginia and Florida clients raise separate questions.
• Some of the law in this area is genuinely unsettled — particularly around disclosure to prevent harm in Georgia. Where that is true, this module says so rather than giving you false confidence.
• Substance use disorder records from federally assisted programs carry stricter rules under 42 CFR Part 2. Out of scope; stop and consult.
• This module pairs with the HIPAA & FERPA module. Complete that one first if you have not.

HIPAA & FERPA module Consultative Collaboration module Consent & confidentiality policy

The complete list, in the order it makes sense to a client rather than the order it appears in a statute.

Clients almost always imagine the limits are narrower than they are. They picture a dramatic exception — a threat, a crime — and are surprised to learn that routine things move information too: a supervisor reading the chart, an insurer receiving a diagnosis, a billing system storing a name. Name the ordinary ones as well as the dramatic ones.

Aim for five to eight minutes at intake, spoken, in addition to the written form. Not read aloud from the form — spoken.

• Lead with what is protected, not with the exceptions. The exceptions are real, but a person who hears four minutes of exceptions first will conclude that nothing is private.
• Group them by who decides. Things that happen routinely, things the client chooses, and things that happen whether or not the client wants them to. That structure is easier to hold than a list of eleven items.
• Invite the question. “What are you most worried about getting out?” is a better use of the last minute than a summary. The answer is frequently clinically important on its own.
• Check for understanding without quizzing. “What did you take from that?” rather than “do you have any questions?”, which reliably produces no.
• Document it. Note that the limits were reviewed verbally, what the client asked, and how you answered. A signature on a form does not evidence a conversation.

Clients are routinely diagnosed without being told, in plain terms, what was written, why, where it goes, and how long it lasts.

A diagnosis is not a private clinical impression. It is an entry in a permanent health record, and once insurance is billed it is transmitted to a third party who keeps it. That has consequences the client cannot anticipate and you can, which is precisely why the obligation to explain sits with you.

• That a diagnosis was made, and which one. Clients have a right to know what is in their record. Discovering a diagnosis for the first time on a superbill or an insurance statement is a rupture, and an avoidable one.
• Why it was necessary. Insurance reimbursement generally requires a billable diagnosis. If the client is self-pay, that pressure does not exist, and that is worth saying.
• Where it goes. Into the chart, to the payer with dates and procedure codes, and into whatever record systems the payer maintains.
• That it is durable. Revising a diagnosis later adds a new entry; it does not erase the old one. The record shows the history.
• Where it may surface later. Life and disability insurance underwriting, custody and other family court proceedings, some security clearance and fitness-for-duty processes, and future treatment records. Not to frighten anyone — to let them choose knowingly.
• That they can disagree. Under HIPAA a client may request amendment of information they believe is inaccurate. Tell them the mechanism exists.

A diagnosis assigned quickly, to satisfy a billing requirement, follows the person for years. Provisional specifiers, “rule out” framing, and unspecified categories exist because certainty often is not available at session two. Use them rather than committing prematurely to something specific and wrong.

Where the presenting concern is genuinely a life problem rather than a disorder, the Z-code categories describing psychosocial and environmental circumstances may be the accurate choice. Whether they are reimbursable is a separate question from whether they are true, and the two should not be allowed to collapse into each other.

How a person receives a diagnosis shapes what they do with it. Some hear an explanation and feel relief that the thing has a name. Others hear a verdict about who they are. You will not know which until you ask.

Give the diagnosis, give the reasoning in ordinary language, then stop talking and find out what landed. “What does hearing that bring up?” is the whole intervention. If a client leaves with a label and no relationship to it, the diagnostic conversation has done harm rather than work.

Payers may request records for utilization review, medical necessity determinations, or audits. These requests are usually legitimate and are usually broader than they need to be.

• Send the minimum that answers what was asked. A request for justification of continued treatment is not a request for the entire file.
• Psychotherapy notes carry separate protection and are generally not part of what a payer receives. Know how Orchard structures them before you write any.
• Route every payer request through your supervisor. Supervisees do not respond to these directly.
• Tell the client. A payer reviewing their treatment record is something they should learn from you rather than from an explanation of benefits.

A physician, prescriber, school-based clinician, or new therapist asks for records. Two pathways exist and they are not interchangeable.

• With a current, valid authorization naming that recipient and purpose, you may release what the authorization covers. Check the expiration date; an expired release is not a release.
• Under the treatment exception, disclosure to a provider for treatment purposes may be permissible without separate authorization, and the minimum necessary standard does not restrict it. But Orchard’s own policy may be stricter than the federal floor, and a supervisee should not resolve that on the phone under time pressure.

The default for a supervisee is the same in both cases: confirm the request, release nothing immediately, and bring it to supervision the same day.

A subpoena and a court order are not the same document and do not carry the same authority. Confusing them is the single most consequential records error a clinician can make.

Georgia law recognizes privileged communications between clients and licensed professional counselors, among other mental health professionals. The privilege is the client’s. That means it is generally the clinician’s job to assert it on the client’s behalf and let a court decide, rather than to hand over records because a formal-looking document arrived.

Clients can waive privilege, and sometimes do so without realizing it — for example by putting their mental condition at issue in litigation. That determination is made by a court, not by an attorney’s assertion in a cover letter.

1. Do not respond, and do not ignore it. Note the date received and any deadline on the face of the document.
2. Notify your supervisor the same day. Not at your next scheduled session. Deadlines in legal process are short and are not negotiable after they pass.
3. Preserve everything exactly as it is. Do not correct, clean up, supplement, back-date, or remove anything from the record. Altering records after notice of legal process is its own serious offence, and it converts a manageable problem into a career-ending one.
4. Let the practice involve counsel. Malpractice carriers maintain risk-management lines for exactly this. That call is made by the practice, not by you.
5. Tell the client, when permitted. They usually have a right to know their records have been sought, and they may want their own attorney to object. Confirm with your supervisor before contacting them.

Three related situations: protecting a person from harm, obtaining emergency services, and elevating the level of care.

These are the disclosures clients fear most and the ones we describe worst. Training tends to present them as bright lines — danger appears, confidentiality ends — when in practice they involve graded judgment about how much to tell, to whom, and to what end.

The Privacy Rule permits disclosure, consistent with applicable law and ethical standards, to a person reasonably able to prevent or lessen a serious and imminent threat to the health or safety of an individual or the public. It also permits disclosure to family, friends, or others involved in a person’s care, and for notification purposes, including in emergencies and where the individual is incapacitated.

Two things follow. First, the permission is framed around who can help, not around punishing or reporting. Second, it is permission, not instruction — it tells you that you may, not that you must.

When a client is in acute danger, you may need to bring in people who can physically respond: 988, mobile crisis, emergency services, a family member who can get them to a hospital.

• Disclose what the responder needs to act, and no more. Location, the nature of the risk, whether means are present, whether anyone else is there. Not the treatment history, not the trauma narrative.
• Stay with the person while you arrange it, where that is possible. Do not end a session, make a call, and leave the client alone with what just happened.
• Tell the client what you are doing and why, unless doing so increases the danger. This is the difference between an intervention and an ambush, and clients remember which one it was for a very long time.
• Contact your supervisor immediately. During or right after, not the next morning. Supervisees do not manage acute risk alone, and you are not expected to.
• Document contemporaneously: what you observed, what you asked, what the client said, what you decided and why, who you contacted, and when.

Moving someone to a higher level of care — intensive outpatient, partial hospitalization, inpatient — requires disclosure to the receiving provider, and often to family. It is frequently the right clinical decision and is frequently experienced by the client as a betrayal, which means how you do it matters as much as whether you do it.

• Wherever possible, bring the client into it. A voluntary admission arranged with someone is a different event from a hold arranged around them, both clinically and in terms of what happens to the alliance afterward.
• Coordinate with the prescriber if there is one. Medication questions belong to them.
• Involve family only to the extent permitted and useful, and be clear with the client about what you are sharing.
• Plan the return. Clients who go to a higher level of care and lose their therapist experience the escalation as abandonment. Say what will happen with your work together.

Georgia’s emergency examination certificate, commonly called a 1013, is executed under O.C.G.A. § 37-3-41 following a personal examination within the preceding 48 hours. The statute permits a physician to execute it and extends that authority to psychologists, clinical social workers, licensed professional counselors, marriage and family therapists, and psychiatric or mental health clinical nurse specialists.

An ethical requirement, not a matter of comfort or preference.

The ACA Code of Ethics requires that students and supervisees make clients aware of their status as students or supervisees, and of how that status affects the limits of confidentiality. It is also a straightforward matter of informed consent: a person choosing a therapist is entitled to know what they are choosing.

Supervisees underdisclose this constantly, and rarely from bad motives. It is embarrassment. You feel like less of a clinician saying it out loud, and you worry the client will want someone else. Both feelings are ordinary. Neither is a reason, and the discomfort is worth naming in supervision rather than managing by omission.

Disclosure is not only what you say at intake. It is every surface where a client encounters your name.

• Never imply licensure you do not hold. In Georgia, LPC and APC are distinct credentials with distinct requirements, and neither belongs to a practicum student or intern. Title protection is a matter of statute, not style.
• “Therapist” and “counselor” are not shields. If the surrounding context leads a reasonable person to believe you are independently licensed, the representation is misleading even if no protected title appears.
• Audit your surfaces: email signature, voicemail greeting, business cards, any directory or profile listing, intake paperwork, session notes, correspondence, and superbills. They must all say the same true thing.
• Correspondence to third parties — schools, physicians, attorneys — states your status and is co-signed by your supervisor per Orchard policy.
• Bring anything ambiguous to supervision before it is printed, posted, or sent. Fixing a business card is trivial; unwinding a misrepresentation is not.

Answer directly, once, without a paragraph of reassurance. Over-explaining communicates that you think it is a problem, which invites the client to think so too. State it, state what supervision means for them, and let the question be answered.

That is their right and it is not a failure. Do not negotiate, do not take it personally in the room, and do not let the disappointment show as coldness. Tell them you understand, that you will help them get connected appropriately, and then bring the whole thing to supervision — including how it felt.

You cannot agree, and agreeing even by silence is a real breach. Say so gently and immediately: that everything is discussed in supervision, that this is how the client gets more than one clinician’s thinking, and that you can talk about what makes this particular thing feel exposing. The request is usually about shame, and it is clinically interesting.

Adapt these to your own voice. Do not read them to clients — read them aloud to yourself until the words are available under pressure.

The point of rehearsal is that every one of these conversations happens at a moment when you are either nervous, rushed, or managing something difficult. Language you have never said before does not arrive on its own.

Primary statutory, regulatory, case, and professional sources. Verify any specific provision against current text before relying on it in practice. Several areas covered in this module — particularly disclosure to prevent harm in Georgia — are contested, and this page is not the authority.

• Standards for Privacy of Individually Identifiable Health Information, 45 C.F.R. pt. 164, subpt. E.
• 45 C.F.R. § 164.501 (definitions, including psychotherapy notes and designated record set).
• 45 C.F.R. § 164.508 (uses and disclosures for which an authorization is required).
• 45 C.F.R. § 164.510(b) (uses and disclosures for involvement in care and notification purposes).
• 45 C.F.R. § 164.512(e) (disclosures for judicial and administrative proceedings).
• 45 C.F.R. § 164.512(j) (disclosures to avert a serious threat to health or safety).
• 45 C.F.R. § 164.524 (access of individuals to protected health information).
• 45 C.F.R. § 164.526 (amendment of protected health information).
• Confidentiality of Substance Use Disorder Patient Records, 42 C.F.R. pt. 2.

• O.C.G.A. § 19-7-5 (mandated reporting of suspected child abuse).
• O.C.G.A. § 24-5-501 (privileged communications, including communications with licensed professional counselors).
• O.C.G.A. § 30-5-1 et seq. (Disabled Adults and Elder Persons Protection Act, including reporting obligations).
• O.C.G.A. § 37-3-41 (emergency admission based on physician’s certification or court order; subsection (d) extends the authority to psychologists, clinical social workers, licensed professional counselors, marriage and family therapists, and psychiatric or mental health clinical nurse specialists).
• O.C.G.A. § 43-10A-1 et seq. (Professional Counselors, Social Workers, and Marriage and Family Therapists Licensing Law, including title and licensure provisions).
• Ga. Comp. R. & Regs. ch. 135 (Rules of the Georgia Composite Board of Professional Counselors, Social Workers, and Marriage and Family Therapists), including the confidentiality provisions at ch. 135-7.
• Bradley Center, Inc. v. Wessner, 250 Ga. 199, 296 S.E.2d 693 (1982).
• Garner v. Stone, No. 97A-320250-1 (Ga., DeKalb Cnty. Super. Ct. Dec. 16, 1999) (jury verdict against a psychologist for disclosure; a trial-level outcome rather than binding precedent, cited here to illustrate that Georgia liability has run in both directions).

• Tarasoff v. Regents of the University of California, 17 Cal. 3d 425, 551 P.2d 334 (1976).
• Jaffee v. Redmond, 518 U.S. 1 (1996) (federal psychotherapist–patient privilege).

• U.S. Department of Health and Human Services, Office for Civil Rights. HIPAA privacy rule and sharing information related to mental health. hhs.gov
• U.S. Department of Health and Human Services, Office for Civil Rights. HIPAA training and resources. hhs.gov
• U.S. Department of Health and Human Services, Office for Civil Rights. Telehealth and HIPAA. hhs.gov

• American Counseling Association. ACA code of ethics (see especially A.2, Informed Consent in the Counseling Relationship; B.1–B.2, Confidentiality and its exceptions; and F.5.c, regarding disclosure of student and supervisee status to clients).
• Council for Accreditation of Counseling and Related Educational Programs. CACREP 2024 standards.
• National Board for Certified Counselors. NBCC code of ethics.
• American Psychiatric Association. Diagnostic and statistical manual of mental disorders (5th ed., text rev.). Consult the current text directly for diagnostic criteria, specifiers, and the categories describing psychosocial and environmental circumstances.