Guide

Subpoena, order, warrant: three papers, three duties

Summary

They differ by who signed them and what they compel. A subpoena is usually an attorney's demand; you must respond, but not always produce records, unless notice or a protective order is satisfied. A court order is signed by a judge; disclose exactly what it authorizes, nothing more. A warrant is a judge-signed law-enforcement search, present and immediate. Match your duty to the paper, involve counsel, and disclose the minimum necessary.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

Subpoena, court order, or warrant: which paper is this?

Start by identifying who signed it, because that decides what you must do. A subpoena is usually issued by an attorney and often carries no judge's signature; you must respond, but you do not always have to produce records. A court order is signed by a judge; you disclose exactly what it authorizes, nothing more. A warrant is a judge-signed law-enforcement search, present and immediate. The same-looking paper can carry three very different duties.

The reflex to either hand everything over or refuse everything is where solo clinicians get hurt. Read the caption, find the signature, note the deadline, and match your response to the specific paper in front of you before you disclose a single page.

The subpoena: an attorney's demand, not a judge's

A subpoena is a demand for records or testimony, most often signed by a lawyer rather than a judge. Under HIPAA you may not simply comply with a bare subpoena for protected health information; you may disclose only when you have satisfactory assurances that the patient was notified and given a chance to object, or that a qualified protective order is in place 1Ref 1HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That HIPAA lets you disclose under a court order only what the order authorizes, and bars disclosure under a bare subpoena absent notice assurances or a qualified protective order.. Responding is mandatory; producing the chart is not, until those conditions are met.

When the subpoena arrives as a records-subpoena, your realistic options are to obtain the patient's written authorization, confirm the notice or protective-order assurances, or file a timely objection through counsel. What you cannot do is ignore it or quietly mail the file. Behavioral health records raise the bar further, which the special-traps section below covers.

The court order: a judge signed it

A court order is signed by a judge and does compel disclosure, but only of what the order actually authorizes. HIPAA permits disclosure in a judicial proceeding in response to a court order, expressly limited to the protected health information the order names 1Ref 1HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That HIPAA lets you disclose under a court order only what the order authorizes, and bars disclosure under a bare subpoena absent notice assurances or a qualified protective order.. The Privacy Rule's minimum-necessary principle still applies: you release the specific records or testimony ordered, not the whole chart, and you document what you sent and why 2Ref 2HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.The Privacy Rule frame for permitted disclosures, minimum necessary, and law-enforcement conditions, used to distinguish a lawful warrant or order disclosure from a violation..

Read the order's scope line carefully. If it names records for a date range, you do not add the intake history; if it orders your testimony, it does not by itself order your file. When the order is broader than you believe is lawful, that is a HIPAA privacy question for counsel to raise with the court, not a decision to make unilaterally at your desk.

The warrant: law enforcement, present and immediate

A warrant is different in tempo. It is a judge-signed authorization for law enforcement to search and seize, and officers are usually standing in your office expecting cooperation now. You do not obstruct a valid warrant, but you may read it, confirm it names your practice and describes what may be searched, and note its scope. The Privacy Rule recognizes disclosures for law-enforcement purposes under defined conditions, so a lawful warrant is a permitted disclosure, not a HIPAA violation 2Ref 2HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.The Privacy Rule frame for permitted disclosures, minimum necessary, and law-enforcement conditions, used to distinguish a lawful warrant or order disclosure from a violation..

Practical moves while officers are present: ask for and photograph the warrant, call your attorney immediately, provide only what the warrant describes, and keep a written log of every item taken and every person present. Do not volunteer records outside the warrant's four corners, and do not consent to a broader search on the spot. The law enforcement requests that arrive without any paper at all are a separate problem, handled by your front-desk protocol, not by opening the chart.

Special traps: privilege, SUD records, and minors

Three categories change the analysis even when the paper looks routine. First, psychotherapy notes are excluded from the ordinary right of access and get heightened protection, so a subpoena for the record does not automatically reach them 3Ref 3HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That psychotherapy notes are excluded from the individual right of access, framing why a general records subpoena does not automatically reach them.. Second, substance use disorder treatment records under 42 CFR Part 2 need their own specific court order, not just a subpoena; SUD records in court are a distinct legal track. Third, for minors and incapacitated adults, HIPAA defers to state law on who controls the records through a personal representative 4Ref 4HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law on who controls a minor's or incapacitated adult's records through a personal representative when legal process arrives..

Privilege is its own layer. Privilege is the court's word for whether the testimony can be compelled at all, and it belongs to the patient, not to you; when in doubt you assert it and let the judge rule. The two witness roles matter here too: being subpoenaed for records is not the same as being called to give expert opinion. Keep bh privacy protections and privilege straight, because releasing something a court would have protected is hard to undo.

The five-minute intake when a legal paper arrives

Handle every legal paper with the same short intake so nothing gets produced by reflex. The single most important distinction is the one you make in the first minute: is this signed by a judge or by an attorney, and does it order disclosure or merely request it? Everything downstream follows from that, so slow down for exactly one minute before you touch the chart.

Ask	Subpoena (attorney)	Court order (judge)	Warrant (law enforcement)
Who signed it	Usually a lawyer	A judge	A judge
Does it compel records	Not without assurances or authorization	Yes, as specified	Yes, seize now
Your first move	Verify notice or protective order; consider objecting	Disclose only what it names	Read it, call counsel, log everything
Timeline	Days to respond	By the stated date	Immediate

Then: calendar the deadline, notify your malpractice carrier or attorney, confirm the patient's authorization status, disclose the minimum necessary, and keep a copy of the paper and a log of exactly what you released. One caution about over-refusal: a patient's own request for their records is not a legal demand at all. It runs under the access right, and stonewalling it can constitute information blocking 5Ref 5Office of the National Coordinator / ASTP (2026).Information Blocking.That withholding electronic health information from a patient entitled to it can constitute information blocking, distinguishing an ordinary access request from legal process., so route ordinary patient requests to your normal release process, not this one.

Common questions

You must respond, but not necessarily by producing records. A bare attorney subpoena for protected health information does not, by itself, authorize disclosure under HIPAA. You may release records only with the patient's authorization, with satisfactory assurances that they were notified and could object, or under a qualified protective order. Otherwise you object or move to quash through counsel. Ignoring it, though, is never an option.

A court order is signed by a judge and compels disclosure of exactly what it names; you comply, limited to that scope. A subpoena is usually an attorney's demand and does not compel disclosure of protected health information until notice or a protective order is satisfied. The practical test is the signature and whether the paper orders the records or merely requests them.

Do not obstruct, but do not overshare. Ask to see and photograph the warrant, confirm it names your practice and describes what may be searched, and call your attorney right away. Provide only what the warrant describes, keep a written log of everything taken and everyone present, and decline to consent to any search broader than the warrant's terms. Cooperate with the document, not beyond it.

Often, yes. Psychotherapy notes receive heightened protection and are excluded from the ordinary access right, so a general records subpoena does not automatically reach them. Substance use disorder records under 42 CFR Part 2 need their own specific court order. When a subpoena sweeps in these categories, assert the protection and let the court decide rather than releasing them and trying to claw them back.

No. A patient asking for their own chart is exercising the HIPAA right of access, not serving legal process, and it runs under your ordinary release timeline and fees. Do not treat it as a subpoena or route it through counsel. Stonewalling a legitimate access request can itself be information blocking, so respond within the access rule's window in the form the patient asked for where you can.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.HHS Office for Civil Rights (2026). Court Orders and Subpoenas. U.S. Department of Health and Human Services. linkThat HIPAA lets you disclose under a court order only what the order authorizes, and bars disclosure under a bare subpoena absent notice assurances or a qualified protective order.
2.HHS Office for Civil Rights (2026). Summary of the HIPAA Privacy Rule. U.S. Department of Health and Human Services. linkThe Privacy Rule frame for permitted disclosures, minimum necessary, and law-enforcement conditions, used to distinguish a lawful warrant or order disclosure from a violation.
3.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat psychotherapy notes are excluded from the individual right of access, framing why a general records subpoena does not automatically reach them.
4.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law on who controls a minor's or incapacitated adult's records through a personal representative when legal process arrives.
5.Office of the National Coordinator / ASTP (2026). Information Blocking. HealthIT.gov. link ✓That withholding electronic health information from a patient entitled to it can constitute information blocking, distinguishing an ordinary access request from legal process.

https://www.gale.care/for-providers/ecl-subpoena-vs-court-order · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers