HIPAA and Minors: Privacy Rights for Adolescent Clients

When can parents access their teen's therapy records? What if the teen doesn't want parents to know what's discussed? What about divorced parents with shared custody?

These questions don't have simple answers. HIPAA defers to state law on minor privacy, and state laws vary significantly. This guide explains the framework, common scenarios, and how to navigate the tension between parental rights and adolescent privacy.

How HIPAA Handles Minors

The Deference Principle

HIPAA doesn't establish uniform rules for minor privacy. Instead, it defers to state law:

• When state law grants a parent access to a minor's records, HIPAA permits it.
• When state law grants the minor privacy from parents, HIPAA requires it.
• When state law is silent, clinical judgment applies.

Translation: You need to know your state's laws on minor consent and parental access.

Who Is a "Minor"?

Under HIPAA, a minor is anyone under 18. However:

• Some states have lower ages of majority for healthcare decisions
• Many states allow minors to consent to mental health treatment at specific ages
• Emancipated minors are generally treated as adults

Who Is the "Personal Representative"?

HIPAA uses the concept of "personal representative"—the person who can exercise the individual's rights regarding PHI.

General Rule

Parents are the personal representative for their minor child and can:

• Access the child's records
• Authorize disclosures
• Request amendments

Exceptions

Parents are not the personal representative when:

1. Minor consented to treatment — If state law allows the minor to consent to treatment without parental involvement, the minor controls access to records for that treatment.
2. Minor can obtain treatment without consent — If state law permits (doesn't require) the minor to obtain treatment without parental consent, and the minor did so, the minor controls access.
3. Parent agreed to confidentiality — If the provider and minor agree to confidentiality and the parent doesn't object, that agreement can be honored.
4. Court authorization — A court authorized treatment without parental consent.
5. Abuse/neglect context — When the parent is suspected of abuse or neglect, or when providing information to the parent could endanger the minor.

State Law Variations

Minor Consent to Mental Health Treatment

States vary significantly on when minors can consent to their own mental health treatment:

You must know your specific state's laws.

Florida Example

In Florida (relevant for many new therapists):

• Minors can consent to outpatient mental health treatment at age 13+
• For treatment a minor consented to, the minor controls confidentiality
• However, parents can still request access—and you must weigh disclosure
• Therapist has discretion to involve parents when clinically appropriate

Common State Patterns

Substance abuse treatment: Most states allow minors to consent; records are highly protected.

Outpatient mental health: Many states allow teens (often 12-16+) to consent; varying confidentiality protections.

Inpatient treatment: Usually requires parental consent; parent access typically follows.

Practical Scenarios

Scenario 1: Teen Consented to Treatment

Situation: 15-year-old sought therapy for anxiety. State law allows minors 14+ to consent to outpatient mental health treatment.

Parent requests records.

Analysis:

• Minor consented to treatment under state law
• Minor is the personal representative for this treatment
• Minor controls access to records

Action: Ask the minor for authorization before releasing records to parent.

Scenario 2: Parent Brought Teen to Treatment

Situation: Parent brought 14-year-old for therapy. Parent signed consent for treatment.

Teen says: "Don't tell my parents what I talk about."

Analysis:

• Parent consented to treatment, not minor
• Parent is likely personal representative
• But: consider clinical judgment exception

Options:

• Discuss with parent upfront about confidentiality boundaries
• Establish agreement about what will/won't be shared
• Share general progress without session details
• Document the arrangement

Scenario 3: Divorced Parents

Situation: Parents are divorced with shared custody. One parent brings child to therapy. Other parent requests records.

Analysis:

• Both parents are typically personal representatives unless court order specifies otherwise
• Custody agreement may address healthcare decisions
• Either parent can usually access records

Action:

• Review custody agreement/court orders
• Both parents generally have equal access rights
• Consider involving both in treatment appropriately
• Document any restrictions from court orders

Scenario 4: Suspected Abuse

Situation: During therapy, teen discloses abuse by parent. Parent later requests records.

Analysis:

• HIPAA exception: parent is not personal representative when suspected of abuse
• Providing records could endanger minor
• Mandatory reporting obligations also apply

Action:

• Do not release records to suspected abuser
• Follow mandatory reporting requirements
• Document your reasoning
• Consult with supervisor or attorney if uncertain

Scenario 5: Teen Reveals Concerning Information

Situation: Teen discloses drug use or self-harm. Teen doesn't want parents to know.

Analysis:

• Safety concerns may override confidentiality
• State law may require or permit disclosure for safety
• Clinical judgment applies

Action:

• Assess safety and severity
• Discuss with teen about involving parents
• Document clinical reasoning
• Disclose if necessary for safety, even without teen consent

Setting Up Confidentiality Agreements

At the Start of Treatment

Clarify confidentiality expectations before treatment begins:

With the parent:

• What will you share routinely? (Attendance, general progress)
• What will you not share? (Session content details)
• What triggers mandatory disclosure? (Safety concerns)
• Get explicit agreement to this framework

With the minor:

• Explain what's confidential and what's not
• Clarify when you must break confidentiality
• Help them understand you're on their side within limits

Sample Language for Informed Consent

Documentation

Document:

• What confidentiality agreement was established
• Who agreed to what
• Any changes to the agreement over time
• Reasoning for any disclosures made

Record-Keeping Considerations

What Goes in the Record

Remember: what you document may eventually be seen by parents (or courts).

Document:

• Clinical observations
• Treatment interventions
• Progress toward goals
• Safety assessments
• Your clinical reasoning

Be thoughtful about:

• Detailed accounts of sensitive disclosures
• Information teen shared expecting confidentiality
• Consider separate psychotherapy notes if appropriate

Psychotherapy Notes

HIPAA gives extra protection to "psychotherapy notes"—personal notes kept separate from the medical record that document your impressions, analysis, and conversation details.

Consider using psychotherapy notes for:

• Highly sensitive disclosures
• Your personal impressions and analysis
• Information that could harm the therapeutic relationship if disclosed

HIPAA Compliant Documentation →

When Confidentiality Must Break

Mandatory Reporting

All states require reporting of:

• Child abuse or neglect
• Imminent danger to self or others

These obligations override confidentiality agreements.

Safety Concerns

Clinical judgment may require involving parents when:

• Suicide risk
• Self-harm requiring intervention
• Substance abuse endangering health
• Dangerous situations

Document your reasoning when breaking confidentiality for safety.

Court Orders

Valid court orders requiring disclosure must be followed, though you may have opportunities to limit scope or advocate for the minor's privacy.

Special Situations

College Students (18+)

Once a client turns 18, they're an adult under HIPAA:

• Parents have no automatic access rights
• Need client's authorization to share with parents
• Even if parents pay for treatment

Emancipated Minors

Emancipated minors are generally treated as adults:

• Control their own records
• Parents are not personal representatives
• Document emancipation status

Group Therapy with Minors

Additional considerations:

• Parental consent for group participation
• Limits of confidentiality in group setting
• What will be shared with parents about group content

Treating minors means navigating competing interests—teen privacy, parental rights, and clinical necessity. Know your state law, establish clear agreements upfront, document your reasoning, and always prioritize safety. When in doubt, consult with colleagues, supervisors, or legal counsel.