This is Part III of a series on what nobody tells you about therapy and privacy. If you haven’t read Part I and Part II yet, start there: this post builds on both.
One of the most common questions we hear, especially from licensed professionals, people in legal proceedings, and anyone who values their privacy, is this: “If I come to therapy, what exactly is written down, and who can see it?”
It’s a fair question, and the answer is more reassuring than most people expect. The key is understanding that not all therapy records are the same. There are three types, and each one has a different level of legal protection.
Category One: The Diagnosis Summary
A diagnosis summary is a formal record of your diagnosis and basic treatment information. Under HIPAA, it’s part of your general medical record.
It typically includes your diagnosis code, treatment plan, session frequency, symptoms, prognosis, and progress.
An example of a diagnosis summary:
“Client presents with symptoms consistent with Generalized Anxiety Disorder (GAD), F41.1. Reports persistent worry, difficulty concentrating, and sleep disturbance lasting more than six months. Treatment plan includes weekly individual therapy using Cognitive Behavioral Therapy (CBT) techniques. Client is engaged and motivated. Prognosis is good.”
This is the document that gets sent to an insurance company when a therapist bills for services. It’s the record most likely to show up in a background check, licensing application, or legal proceeding. It isn’t highly detailed, but it travels the farthest and lives in the most places.
In a private pay arrangement, this record still exists in your clinical file. But it’s never sent to an insurance company, never stored in an insurance database, and never reviewed in an insurance audit.
Category Two: Mental Health Records
Mental health records cover everything in your clinical file that isn’t a psychotherapy note: intake paperwork, treatment plan, diagnosis summary, session dates, medication information, progress notes, and correspondence about your care.
Under HIPAA, these records are Protected Health Information (PHI). They can’t be shared without your consent in most circumstances, but they don’t have the highest level of protection. That’s reserved for the third category.
An example of a progress note:
“Session date: Tuesday, May 6. Duration: 50 minutes. Client attended scheduled individual therapy session. Discussed ongoing workplace stressors and their relationship to reported anxiety symptoms. Client practiced breathing techniques introduced in the previous session and reported moderate success. Plan: continue weekly sessions, introduce cognitive restructuring next session.”
A progress note records the facts of a session without capturing everything that was said.
Category Three: Psychotherapy Notes
This is the category most people have never heard of, and it has the strongest protection under federal law.
Psychotherapy notes are a therapist’s personal notes about the content of a session, kept separate from the rest of your clinical file. They hold the therapist’s observations, impressions, and reflections, the things that guide the work but aren’t needed for billing or day-to-day care.
Because they’re so personal and sensitive, HIPAA requires your written authorization before they can be shared for almost any reason. Your insurance company can’t require access to them as a condition of payment, and they don’t go out with your general medical record.
An example of a psychotherapy note:
“Client disclosed significant shame around their relationship with their father, a topic they have never spoken about with anyone. Connected this to the pattern of self-silencing we have been exploring. Client became tearful and stayed with the emotion longer than in previous sessions. Trust in the therapeutic relationship is deepening. Consider exploring attachment patterns more directly in coming sessions.”
Notice the difference. This note captures what was actually said in the room, along with the therapist’s own impressions. That’s exactly why the law protects it more.
What Can and Cannot Be Subpoenaed
The honest answer is that no therapy record is beyond the reach of the legal system in every circumstance. But there’s an important difference between a subpoena and a court order.
A subpoena is a request. It starts a legal process, but it doesn’t automatically open your file. Your therapist has the right, and the ethical obligation, to consult legal counsel and challenge the subpoena before anything is disclosed.
A court order is a judge’s directive, and it can require disclosure. Even then, HIPAA sets a minimum standard, and state laws can add more protection. When state law is stricter, the stricter rule applies.
Psychotherapy notes remain the hardest category to reach. They require your written authorization in most situations, including many legal ones.
Why This Matters More in a Private Pay Practice
When therapy is billed to insurance, your diagnosis summary travels the moment a claim is submitted. It goes into the insurance company’s system, where billing staff, utilization reviewers, and sometimes future insurers can see it.
When you pay privately, that pathway doesn’t exist. Your records stay in one place, under your therapist’s control. Outside of your own consent, the only way to reach them is a formal legal process that can be challenged.
Private pay doesn’t make your records untouchable. It means your information lives in fewer places and stays out of systems that access it routinely. For a licensed professional, a parent in a custody situation, a pilot, or anyone for whom privacy is a professional or legal necessity, that difference can matter a great deal.
What We Do at KHKN Group
For our private pay clients, we don’t submit diagnoses to insurance companies, take part in utilization reviews, or provide records to third parties as a condition of payment.
Every diagnosis we assign is a clinical decision. We discuss it openly, explain it in plain language, and document it to guide your care, not to satisfy a billing requirement. You’ll always know what’s in your record, why it’s there, and what it could mean.
When Confidentiality Has Limits: What KHKN Group Is Required to Report
You deserve the same transparency about the limits of confidentiality as you do about how we protect it. Confidentiality in therapy is strong, but it isn’t absolute. Here’s when the law requires us to act.
When a Client Poses a Serious and Imminent Threat to Someone
This is known as the duty to warn, or the duty to protect. It traces back to a 1976 California Supreme Court case, Tarasoff v. Regents of the University of California, and Nevada law sets out its own version of this duty for mental health professionals.
The threshold is high. The threat has to be serious, credible, and imminent, and there has to be an identifiable person at risk. When that threshold is met, we’re required to take reasonable steps to protect that person. That can include warning them, notifying law enforcement, or arranging hospitalization.
What this looks like in practice:
“I’m so angry at my brother I could kill him” is an expression of frustration. It doesn’t meet the threshold. “I bought a gun and I’m going to my brother’s house tonight” is a credible, specific, imminent threat, and we would act.
When a Client Has Committed a Crime in the Past
Telling your therapist about a past crime doesn’t, on its own, require a report to law enforcement. The law focuses on preventing future harm, not punishing past actions. Therapy only works if you can speak honestly about your history.
The exception is ongoing harm, such as a child or vulnerable adult who is still at risk. That changes both the clinical and legal picture.
When a Child or Vulnerable Adult Is Being Harmed
Therapists are mandated reporters. Under Nevada law, mental health professionals who know or have reasonable cause to believe that a child has been abused or neglected must report it to child protective services or law enforcement as soon as reasonably practicable, and no later than 24 hours. The same 24-hour requirement applies when we have reasonable cause to believe an older person (age 60 or over) or a vulnerable adult has been abused, neglected, exploited, isolated, or abandoned.
This isn’t discretionary. If we have reasonable cause to believe a child or vulnerable adult is being harmed, we report.
What this looks like in practice:
If a client discloses that they’ve been physically abusing their child, we’re required to report it. If a client shares that an elderly parent is being neglected or mistreated by another caregiver, we’re required to report that too. A report isn’t a punishment. It exists to protect people who can’t protect themselves.
When a Client Appears Unfit for Duty
In most cases, therapists aren’t required to report a client’s fitness for duty to an employer, licensing board, or regulatory agency, even when they have clinical concerns.
The exception is when the situation reaches the duty-to-warn threshold. For example, if a pilot said they intended to fly while knowingly unsafe, and we believed that posed a credible, imminent threat to others, we would have grounds to act.
Short of that, our role is to work with you clinically, encourage voluntary disclosure where appropriate, and document our concerns carefully. If you work in a regulated profession, we encourage you to talk with us openly and to consult an attorney who specializes in your field before making any disclosures.
The Bottom Line
Confidentiality in therapy is real and well protected, but it has limits. Those limits exist for one reason: to prevent serious harm to people who can’t protect themselves.
We’ll always explain these limits before treatment begins. They’re covered in your informed consent paperwork, and we’re happy to answer questions before your first session. You’ll never be surprised by a disclosure you didn’t know was possible.
If you have questions about our confidentiality policies, reporting obligations, or how your situation might intersect with either, I’d be glad to talk it through before you ever book a session. Reach out directly at (702) 575-4723 or click the button below to schedule an introductory call.
This post is for informational purposes only and does not constitute legal advice. Reporting obligations vary by state, by professional license, and by circumstance. If you have specific concerns about how therapy records may affect your legal, professional, or licensing situation, please consult a qualified attorney licensed in your state.
