HIPAA Mental Health and Substance Abuse Privacy Rules

Question 1

Under HIPAA, are mental health records treated differently from other medical records regarding privacy protections?

Accepted Answer

Mental health records are protected by HIPAA but may receive additional state-law protections; psychotherapy notes have heightened protection under federal law

Answer

Mental health PHI receives HIPAA's standard protections, and psychotherapy notes specifically receive heightened protection; many states also provide stronger protections for mental health records.

Question 2

What are 'psychotherapy notes' under HIPAA, and how do they differ from other mental health records?

Accepted Answer

Psychotherapy notes are notes from a therapist's private files capturing mental impressions during therapy, separate from formal treatment records, and requiring specific authorization for disclosure

Answer

Psychotherapy notes are mental impressions and analysis captured in a therapist's private files — distinct from treatment records — and require specific authorization for most disclosures.

Question 3

Under HIPAA, for which of the following can psychotherapy notes be disclosed WITHOUT patient authorization?

Accepted Answer

For training mental health students at the covered entity

Answer

HIPAA permits disclosure of psychotherapy notes without authorization for training of mental health students at the covered entity — one of the very limited exceptions.

Question 4

What federal law provides stricter confidentiality protections for substance use disorder treatment records than HIPAA?

Accepted Answer

42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records)

Answer

42 CFR Part 2 governs confidentiality of substance use disorder treatment records at federally-assisted programs and provides significantly stricter protections than HIPAA.

Question 5

Under HIPAA, can a patient's mental health provider share PHI with the patient's employer without authorization?

Accepted Answer

No, mental health PHI may not be disclosed to employers without authorization except in very limited circumstances

Answer

Mental health PHI generally cannot be disclosed to employers without patient authorization — the treatment relationship is confidential and employment status is not a HIPAA exception.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Mental Health and Substance Abuse Privacy Rules