HIPAA Mental Health and Substance Abuse Privacy Rules

Question 1

Under HIPAA, are mental health records treated differently from other medical records regarding privacy protections?

Accepted Answer

Mental health records are protected by HIPAA but may receive additional state-law protections; psychotherapy notes have heightened protection under federal law

Answer

Mental health records have fewer protections than general medical records

Answer

Mental health records are completely exempt from HIPAA

Answer

Mental health records require separate patient authorization for all uses and disclosures

Question 2

What are 'psychotherapy notes' under HIPAA, and how do they differ from other mental health records?

Accepted Answer

Psychotherapy notes are notes from a therapist's private files capturing mental impressions during therapy, separate from formal treatment records, and requiring specific authorization for disclosure

Answer

Any note created by a mental health professional constitutes a psychotherapy note

Answer

Psychotherapy notes are subject to the same rules as billing records

Answer

Psychotherapy notes can be freely shared with other treatment providers without authorization

Question 3

Under HIPAA, for which of the following can psychotherapy notes be disclosed WITHOUT patient authorization?

Accepted Answer

For training mental health students at the covered entity

Answer

To the patient's insurance company for claims payment

Answer

To a specialist consulting on the patient's care

Answer

For routine healthcare operations like quality improvement

Question 4

What federal law provides stricter confidentiality protections for substance use disorder treatment records than HIPAA?

Accepted Answer

42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records)

Answer

The Mental Health Parity and Addiction Equity Act (MHPAEA)

Answer

The Drug Abuse Prevention, Treatment, and Rehabilitation Act

Answer

The Substance Abuse and Mental Health Services Administration (SAMHSA) Privacy Rule

Question 5

Under HIPAA, can a patient's mental health provider share PHI with the patient's employer without authorization?

Accepted Answer

No, mental health PHI may not be disclosed to employers without authorization except in very limited circumstances

Answer

Yes, employers have a right to know about employee mental health conditions

Answer

Only if the employer requests the information through an official HR process

Answer

Yes, if the mental health provider believes the patient is unfit for work

Question 6

What does the 'duty to warn' or 'Tarasoff doctrine' mean in the context of HIPAA and mental health?

Accepted Answer

Mental health providers may (and in some states must) disclose information to prevent serious and imminent threats to the safety of identifiable third parties

Answer

Mental health providers must warn all patients' family members about treatment plans

Answer

HIPAA prohibits disclosure even to prevent violence

Answer

Duty to warn only applies to providers treating violent criminals

Question 7

Under HIPAA, what standard applies when a family member calls a mental health provider seeking information about a patient who is an adult?

Accepted Answer

The adult patient must have previously authorized disclosure to the family member, or the provider must use professional judgment about the patient's known preferences

Answer

Family members automatically have the right to receive information about adult relatives

Answer

Family members may receive general information but not treatment details

Answer

A power of attorney from any family member grants access to mental health records

Question 8

How does HIPAA treat mental health records differently in the context of a parent's access to their minor child's mental health records?

Accepted Answer

State law governs whether parents can access minor mental health records, and in some states minors may consent to mental health treatment independently, limiting parental access

Answer

Parents always have full access to minor children's mental health records

Answer

HIPAA grants parents unrestricted access to all minor children's PHI regardless of age

Answer

Mental health records of minors are completely sealed and inaccessible to parents under HIPAA

Question 9

What is the significance of the Mental Health Parity and Addiction Equity Act (MHPAEA) in relation to HIPAA?

Accepted Answer

MHPAEA requires health plans to provide equal coverage for mental health and substance use disorder benefits, while HIPAA protects the privacy of related PHI

Answer

MHPAEA replaces HIPAA for mental health and substance abuse records

Answer

MHPAEA and HIPAA are competing frameworks that cannot both apply

Answer

MHPAEA only applies to Medicaid and Medicare programs

Question 10

Under HIPAA, what is required before a healthcare provider can share a patient's substance use disorder diagnosis with their primary care physician for integrated care?

Accepted Answer

If the records are from a 42 CFR Part 2-covered program, specific written consent is required even for treatment disclosures to other providers

Answer

No special requirements apply — treatment disclosures to other providers are always permitted

Answer

A BAA between the substance use disorder program and the primary care physician

Answer

Only the patient's health insurance needs to be notified