Guide

Two kinds of notes: HIPAA's psychotherapy-notes shield explained

Summary

A progress note documents each session's content — the intervention, the client's response, the plan — and is part of the general clinical record. A psychotherapy note is a separate, optional file of your own private process notes and analysis, kept apart from the rest of the chart, and HIPAA shields it from nearly every routine disclosure a progress note is subject to. The shield only applies if the note was actually filed separately from the start.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

The two kinds of notes, in one line

A progress note documents what happened at each session — the intervention, the client's response, and the plan — and lives in the general record that flows to payers, other treaters, and the client on request. A psychotherapy note is your own separate, optional file: process notes and private analysis, kept apart from the rest of the chart, that HIPAA shields from nearly every routine disclosure 1.

The shield only exists if you actually keep the two apart. If your notes for a session live in one undifferentiated file, none of it qualifies for the extra protection — HIPAA's second lock only closes on a note filed separately from the start, not on content you decide after the fact deserves more privacy.

Every other question about therapy documentation — what a payer can request, what a subpoena reaches, what a client can read in their own chart — traces back to which of these two files a given entry sits in.

What a psychotherapy note actually is

HIPAA defines psychotherapy notes narrowly: notes recorded by a mental health professional documenting or analyzing the contents of a counseling session, maintained separately from the rest of the individual's medical record 1. The separateness is doing real legal work in that definition — a note is not a psychotherapy note merely because it discusses sensitive material; it has to live in its own file to qualify at all.

The content that typically populates this file is your clinical reasoning and process observations: hypotheses about dynamics, reactions to material the client raised, or your own reflections on the therapeutic relationship — the parts of your thinking that are genuinely private to your practice of the craft, not facts a treatment team or a payer needs to coordinate care.

Because the file is optional, plenty of solid, defensible clinicians never keep one at all — every entry they write lives in the progress note, is fully part of the general record, and is reachable the same way any other clinical note is.

What's excluded — and belongs in the progress note instead

HIPAA carves a specific list out of the psychotherapy-notes definition, and everything on that list belongs in the progress note whether or not you also keep a separate file: medication prescription and monitoring, session start and stop times, treatment modalities and frequency, results of clinical tests, and summaries of diagnosis, functional status, treatment plan, symptoms, prognosis, and progress to date 1.

The practical effect is that most of what a payer, a supervisor, or a subsequent treater actually needs was never eligible for the shield in the first place. A well-built progress note — the kind that qualifies as the defensible note a reviewer can rely on — already contains everything on that excluded list, which is what makes it useful to hand over without touching your private file at all.

A common error is treating the two files as a spectrum of "more private" to "less private" content, when HIPAA actually draws a hard categorical line: the excluded items are progress-note content by definition, no matter how sensitive they feel to write down.

Why the extra shield exists

Psychotherapy notes exist as a category because candid clinical reflection — the kind a therapist needs to think out loud on paper — chills if a client assumes every word might reach an employer, a court, or an insurer. The heightened protection lets a clinician keep unfiltered process notes without that content routinely leaving the practice 1.

That purpose is also the limit: the shield protects your reflections, not the client's care record. HIPAA's mental-health-specific guidance is explicit that most behavioral health documentation is not psychotherapy notes and moves through the ordinary disclosure rules other health information does, including permitted conversations with family in specific circumstances and safety-based disclosures 2.

Misunderstanding this — treating the whole chart as shielded because the subject matter is sensitive — is a common source of behavioral health HIPAA confusion, and it runs in both directions: some clinicians over-withhold ordinary progress notes, and others under-protect real psychotherapy notes by never separating them out.

Keeping them separate: what "kept separate" requires in practice

"Kept separate" is not decorative language — HIPAA's disclosure protections attach only when psychotherapy notes are physically or logically separated from the rest of the record, not merely labeled or flagged within the same file 1. In an EHR, that typically means a distinct note type or module with its own access permissions, not a checkbox on a standard progress note template.

Record-keeping guidance for the field recommends deciding, as a matter of practice policy, whether you keep a psychotherapy-notes file at all, and if so, being consistent about what goes where rather than deciding case by case which entries feel private enough to wall off 3. Retention timelines for both files still follow the same underlying norm — commonly cited as roughly seven years past the last date of service for adult records, longer for minors, always deferring to your state's specific rule 3.

Couples records add a wrinkle worth planning for at intake: if you see partners together, decide up front whose chart holds the joint session content and how any individual psychotherapy notes for either partner will be separated from the shared record, rather than improvising the structure after the fact.

Who can reach each one: patients, payers, courts

A client's own HIPAA right to access and copy their record explicitly excludes psychotherapy notes — you may decline a request for that file on that basis alone, while the progress notes underlying the same treatment remain fully accessible to them 4. That asymmetry surprises clients more often than clinicians, and it is worth explaining at intake rather than the first time someone asks for their full chart.

Payers sit on the more restricted side of the line too: when the payer wants notes for a claims review or an audit, what a routine request reaches is the progress note, not your separately filed psychotherapy notes, which need their own specific authorization 1. A subpoena changes the calculus again — the subpoena alone, without an accompanying court order, does not automatically compel disclosure of either file, and satisfactory notice to the patient or a protective order is required first 5.

The throughline across all three audiences is the same: the progress note is built to travel, and the psychotherapy note, when you keep one, is built specifically not to.

A minors' wrinkle: whose access controls

For a minor client, the question of who can read either file routes through state law before it routes through HIPAA: HIPAA generally defers to state law on whether a parent, as personal representative, controls access to a minor's record, with narrow exceptions where state law lets the minor consent to their own care or where abuse or endangerment concerns apply 6.

That deference means the progress-note-versus-psychotherapy-note distinction still holds for minors, but a parent's ability to request either file depends first on whether your state treats the parent as the minor's personal representative for that specific service — not automatically, and not uniformly across every type of behavioral health treatment a minor might receive.

Build the answer into your intake process rather than reconstructing it under pressure: know your state's rule on parental access before a parent asks to see either the progress notes or, if you keep one, the psychotherapy-notes file for their teenager, so the answer is ready and consistent when it is asked for.

Common questions

No. Most therapy documentation is an ordinary progress note — the visit content, intervention, and plan — and only qualifies as a psychotherapy note if you keep it in a genuinely separate file containing your private process notes and analysis. Content HIPAA specifically excludes, like session times, diagnosis, and treatment plan, belongs in the progress note regardless of how sensitive it feels.

No. The protection attaches to a note kept in a separate file from the start, not to a flagged section within an otherwise ordinary progress note. If your documentation lives in one undifferentiated file, none of it qualifies for the psychotherapy-notes shield, regardless of how private the content feels to you.

Not through HIPAA's access right. The right to inspect and copy your record explicitly excludes psychotherapy notes, so you may decline that specific request while still producing the progress notes for the same treatment. State law or your own practice policy may still allow more access than HIPAA requires.

No, it is optional. Plenty of clinicians write everything into the progress note and never maintain a separate file — every entry is then part of the general record. Keeping a separate file only makes sense if you actually want the extra HIPAA protection for genuinely private clinical reflections.

State law does, before HIPAA does. HIPAA generally defers to state law on whether a parent is the minor's personal representative for a given service, with narrow exceptions for situations involving abuse or endangerment. Know your state's specific rule before a parent requests either file.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThe core definition of psychotherapy notes, the categorical exclusions, and why the shield only applies to notes kept in a genuinely separate file.
  2. 2.HHS Office for Civil Rights (2026). HIPAA Privacy Rule and Sharing Information Related to Mental Health. U.S. Department of Health and Human Services. linkThat most behavioral health documentation is not psychotherapy notes and moves through ordinary disclosure rules, including family communication and safety-based disclosures.
  3. 3.American Psychological Association (2007). Record Keeping Guidelines. American Psychological Association. link ✓Guidance on deciding practice policy for whether to keep a separate psychotherapy-notes file, and retention norms deferring to state law.
  4. 4.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat a client's HIPAA right to access and copy their record explicitly excludes psychotherapy notes while reaching progress notes.
  5. 5.HHS Office for Civil Rights (2026). Court Orders and Subpoenas. U.S. Department of Health and Human Services. linkThat a subpoena without a court order does not by itself compel disclosure of either progress notes or psychotherapy notes.
  6. 6.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law on whether a parent controls a minor's record access, with narrow exceptions for abuse or endangerment.

https://www.gale.care/for-providers/bhd-progress-note-vs-psychotherapy-note · 6 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)