Therapist confidentiality and legal requests for therapy records

The document arrives by email, by courier or by hand, and the first instinct is almost always wrong in one of two directions: hand everything over, or decide it does not apply to you. Both are guesses, because the answer is intensely local. In the United States a subpoena and a court order sit at very different points on the scale of compulsion. In Mexico, a written request from a prosecutor’s office is already backed by a power to fine and to detain. Same clinical situation, opposite correct first move. What is portable is the procedure for finding out which situation you are in — and the fact that the quality of your record, written long before any of this, largely determines how the request goes for you. This is documentation and practice guidance, not legal advice: a real legal request warrants a lawyer admitted where you practise.

Establish these five things before you respond

Who is asking, and with what authority? An opposing lawyer, a prosecuting authority, and a judge are three different levels of compulsion in most systems, and the differences do not translate across borders.
What kind of instrument is it? In your jurisdiction, is this a request, an enforceable order, or something in between? Get the category right before you get anything else right.
What exactly is demanded? Testimony and documents are separate obligations, governed by separate rules almost everywhere. Being told to appear is not being told to produce a chart.
What is the deadline, and what happens if you miss it? Some systems allow you to object first; others attach immediate sanctions to non-appearance.
What does the client want, and can they authorise disclosure? In many systems the protection exists for the client’s benefit and can be waived only by them.

Two rules apply while you work through that list. Do not disclose anything on the spot — not on the phone, not to the person delivering the document. And do not touch the record: completing, correcting or tidying notes after a request arrives turns someone else’s legal problem into yours.

A request and an order are not the same thing — and the gap between them is local

For US practitioners, the APA Committee on Legal Issues states the distinction plainly: “while a subpoena requires a response, a subpoena alone will generally not be sufficient to warrant a disclosure of confidential information.” The same document is careful about who owns the protection — “in most jurisdictions, the privilege belongs to the Client/Patient, not to the therapist” — and about where the sequence ends: once a court order is issued and a timely attempt to have it vacated or modified has failed, refusing can mean contempt. That is US doctrine, built on a motion-to-quash mechanism and a recognised psychotherapist–patient privilege.

Now the counter-example, because it shows how badly that framing travels. Mexico’s national code of criminal procedure names psychologists explicitly among the professions bound by secrecy and makes their testimony inadmissible (article 362) — a protection with no US equivalent, though its reach is less settled than it looks: the article sits in the trial-stage evidence chapter, and the code does not say whether inadmissibility already binds the prosecutor’s office or only the court. The same article’s second paragraph requires the psychologist, if summoned, to appear and explain the basis of the duty, and article 104 gives the prosecuting authority itself, not only a judge, the power to fine, to call in the police, or to order detention for up to thirty-six hours. The code provides no motion to quash. A US-trained instinct to treat the summons as a negotiable opening move would, there, produce a sanction.

The portable lesson is not a rule but a question: in my jurisdiction, what is the mechanism for objecting, does it exist at all, and what is the penalty for using it wrongly? Answer that with a local lawyer, once, before you ever need it.

Testimony and records travel on separate tracks

Most legal systems protect what you say and what you keep under different instruments, with different strength — and clinicians reason as though there were one shield.

Mexico is a clean worked example. Testimony is protected by article 362 above. The record is governed by a different instrument entirely: NOM-004, the clinical-record standard that binds independent psychology practices, whose numeral 5.6 says that when a clinical summary or other record documents are required they must be requested in writing, and that “las autoridades judiciales, órganos de procuración de justicia y autoridades administrativas” — judicial authorities, prosecution bodies and administrative authorities — are competent to request clinical records. Judicial authorities and prosecutors. All of them ask by demand, though; whether the State is owed patient data with no demand at all is a separate question. The protection covers the clinician’s mouth far better than the clinician’s filing cabinet, and 5.6 rarely surfaces in the popular guidance.

Data-protection law is not a substitute shield either. Mexico’s data-protection law in force removes the consent requirement where there is a judicial order or a reasoned order from a competent authority (article 9, fraction VII) and permits transfers without consent for the administration of justice (article 36) — which is why the limits belong in the privacy notice rather than in a hope that privacy law will hold the line. Wherever you practise, locate both instruments separately — the testimony rule and the records rule — and never assume one covers the other.

And locate them before you need them. The confidentiality conversation that resolves most of this happens at the start of treatment: APA Ethics Code Standard 4.02 asks psychologists to discuss the limits of confidentiality at the outset of the relationship and again as new circumstances warrant, which is exactly what a well-built informed consent does.

Fact witness or expert witness

When a family lawyer calls, they often do not want a witness. They want an opinion about who the child should live with. Those are different roles, and the line between them is drawn with unusual precision in the APA’s Specialty Guidelines for Forensic Psychology.

Guideline 4.02.02 holds that testifying about “a patient’s reported history or other statements, mental status, diagnosis, progress, prognosis, and treatment would not ordinarily be considered forensic practice even when the testimony is related to a psycholegal issue before the decision maker.” By contrast, rendering opinions on psycholegal issues — the Guideline’s own examples include trial competence, testamentary capacity and “the relative merits of parenting arrangements” — ordinarily is forensic practice.

That is the whole distinction, and it decides what you can safely say under oath. You are a witness to what you did and observed inside the treatment. You are not, by virtue of having treated someone, qualified to answer the court’s question about custody.

The role you should decline

Guideline 4.02.01 goes further: providing forensic and therapeutic services to the same person “involves multiple relationships that may impair objectivity and/or cause exploitation or other harm,” and when asked to do both, concurrently or sequentially, practitioners “are encouraged to disclose the potential risk and make reasonable efforts to refer the request to another qualified provider.” Standard 2.01 of the APA Ethics Code closes the argument from the other side: psychologists work only within the boundaries of their competence.

Read together, they say something a therapist under pressure from a client, a lawyer or a judge needs in writing: the correct answer to “you already know the family, just write the evaluation” is a referral. Taking the evaluation costs you the therapeutic relationship and produces an opinion whose objectivity is compromised by construction.

When law and ethics collide

Standard 1.02 is the standard to know, and it is more modest than clinicians hope. If ethical responsibilities conflict with law or other governing legal authority, psychologists “clarify the nature of the conflict, make known their commitment to the Ethics Code, and take reasonable steps to resolve the conflict” — with an explicit floor that the standard can never justify violating human rights. It is not authorisation to defy a court. The APA Committee on Legal Issues document says the corollary out loud for US readers: psychologists who take reasonable steps to follow Standard 1.02 and inform the court of their obligations “will not be subject to disciplinary procedures for complying with a court order.”

The record decides your position

By the time the request arrives you cannot improve your chart; you can only produce it. Which makes the real preparation documentary rather than legal.

A note that keeps what the client reported, what you observed, and what you concluded in visibly separate places survives a third-party reading on its own. One that blends the three obliges you to explain it, under oath, years later. Speculative diagnoses, intimate detail that adds nothing to continuity, and assertions about people you never assessed — the ex-partner, the other parent — are precisely what opposing counsel highlights, and they sit near the top of the clinical documentation mistakes that cost most. This is not defensive writing; it is the same discipline that makes a session record useful, applied with the knowledge that the chart outlives the treatment. How long it outlives it is set by your own jurisdiction: the APA’s Record Keeping Guidelines — adopted in 2007, expired by their own terms in 2017 and never replaced — suggest that “in the absence of a superseding requirement, psychologists may consider retaining full records until 7 years after the last date of service delivery for adults or until 3 years after a minor reaches the age of majority, whichever is later,” but the binding period comes from your state or national law, and the clock usually starts at the documented termination.

Structure is what makes that survivable, and structure is easier to buy than to remember. gesell.ai keeps each client’s chart organised — intake, clinical history, treatment plan and session notes — and drafts each note from your session record with the reported, the observed and your assessment kept apart; you review, correct and sign, and the final note is yours. None of that replaces the lawyer you should call the day a request arrives, and none of it is legal advice. It just means that what you hand over says what you actually did.