Custody and the chart: decrees, access, and staying neutral
Summary
The custody order controls — not who pays, brings the child, or lives with them. HIPAA defers to state law on which parent is a minor's personal representative, and in most states both legal-custody parents keep records access unless a court order removes it. Read the current decree before releasing anything, honor a minor-consent overlay where your state grants it, and stay clinically neutral in the dispute.
By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.
Which parent controls a child's records?
Start with the law that HIPAA itself points to: state law. HIPAA does not decide which parent controls a minor's records — it treats whoever state law makes the minor's personal representative as standing in the child's shoes, and defers to your state's rules on custody, consent, and parental access 1Ref 1HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law on who is a minor's personal representative and recognizes minor-consent exceptions — used for who controls a child's records in a custody dispute.. Because those rules vary from state to state, there is no single national answer; the current custody order and your state's statute together decide who gets what.
In broad terms, legal custody — the authority to make decisions, including health-care decisions — is usually what carries records access, not physical custody (where the child sleeps). Two parents who share legal custody typically each retain access unless a court has restricted it. But that is a default, not a guarantee, and the document that can override it is the decree itself.
Read the custody order before you release anything
Before you release anything, read the most recent custody order — the whole current one, not a parent's summary of it. Look for how legal custody is allocated and for any provision that specifically limits a parent's access to medical or mental-health records; courts sometimes carve those out even where custody is otherwise shared. The order can override the default access a parent would otherwise have, in either direction.
Keep a copy in the chart and act on what it says, not on what either parent tells you it says. If the order is ambiguous, or predates a change everyone describes verbally, ask for the operative signed version before disclosing. A neutral "send me the current order and I'll follow it" keeps you out of the argument and on defensible ground.
The minor-consent overlay: when the teen holds the key
There is a second lock that can outrank a parent entirely: the minor's own consent. Many states let adolescents consent to some of their own behavioral-health care, and where a minor lawfully consents to treatment, the parent may not be the personal representative for that information — meaning a requesting parent is not automatically entitled to those teen records 1Ref 1HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law on who is a minor's personal representative and recognizes minor-consent exceptions — used for who controls a child's records in a custody dispute.. Which services and what age this covers is set by state law, so your state's minor-consent statute controls.
This is where custody fights and clinical judgment collide. If a teen disclosed something in confidence under a minor-consent framework, handing the file to a parent can rupture the treatment and, in some states, exceed what the law allows. When a minor holds consent, route parental requests through what your state's rule and the custody order jointly permit, and document the basis for what you release and what you withhold.
Records requests: the clock, the fee, and psychotherapy notes
When a parent who is entitled to access makes a records request, standard access rules run. A covered entity generally must respond within thirty days, with one thirty-day extension, and may charge only a reasonable, cost-based fee for copies 2Ref 2HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That the access right runs within thirty days for a cost-based fee and excludes psychotherapy notes — used for how to fulfill an entitled parent's records request.. You must provide the record in the form and format requested where you can produce it that way, which for most practices now means an electronic copy.
One category sits outside that right: psychotherapy notes, the clinician's separately kept process notes, are excluded from the access right and are not part of what a parent can demand 2Ref 2HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That the access right runs within thirty days for a cost-based fee and excludes psychotherapy notes — used for how to fulfill an entitled parent's records request.. Distinguish them from the rest of the designated record set, which is accessible. Do not use the access clock as leverage — a slow response to favor one parent is exactly the problem the next section describes.
Information blocking: you can't slow-walk to take sides
You cannot slow-walk a legitimate records release to help one side of a custody dispute. Under the 21st Century Cures Act, information blocking — interfering with the access, exchange, or use of electronic health information — is prohibited, and individual clinicians are actors subject to the rule 3Ref 3Office of the National Coordinator / ASTP (2026).Information Blocking.That the Cures Act prohibits information blocking by individual clinicians, subject to eight exceptions including preventing harm — used for why a lawful release cannot be slow-walked.. Delaying or refusing a release that a parent is lawfully entitled to, in order to favor the other parent, is the conduct the rule targets.
The rule has eight defined exceptions, including one for preventing harm, so a genuine, documented safety concern is different from foot-dragging 3Ref 3Office of the National Coordinator / ASTP (2026).Information Blocking.That the Cures Act prohibits information blocking by individual clinicians, subject to eight exceptions including preventing harm — used for why a lawful release cannot be slow-walked.. If you withhold, tie the decision to an actual exception and record it. "I don't want to get in the middle" is understandable, but it is not one of the exceptions, and it will not defend a blocked release.
Subpoena vs court order in a custody fight
A custody fight will produce paper that looks official but is not equal. HIPAA treats a court order and a subpoena differently: a court order directs you to disclose only what the order itself authorizes, while a subpoena not accompanied by a court order requires disclosure only when you have satisfactory assurances that the patient was notified or that a protective order was sought 4Ref 4HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That HIPAA distinguishes a court order from a bare subpoena and sets the satisfactory-assurances condition — used for how to respond to litigation paper in a custody fight.. A subpoena from one parent's attorney is not a judge's command.
So when a subpoena lands, do not simply comply. Check whether it carries a court order, whether the required notice was given, and whether a valid authorization exists — and remember that as a HIPAA covered entity, the covered-entity test governs what you may release at all. When in doubt, respond by asking for a court order or a signed authorization rather than volunteering the chart into a dispute.
Staying neutral: the clinical and ethical line
Your job is not to pick the better parent; it is to protect the child who is your patient. Treat a custody dispute as clinical material and a legal minefield at once: document neutrally and factually, avoid opinions about custody you were never retained to give, and know the difference between being the child's therapist and being a forensic evaluator — different roles with different rules. Sliding from one into the other, mid-treatment, is how clinicians end up before a board.
Disclose the minimum necessary in every direction, including to payers and the chart they touch — they are entitled to what a claim requires, not the narrative of a family's breakdown 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.That the Privacy Rule limits disclosures to the minimum necessary — used for the neutral, need-to-know stance toward parents, payers, and the court.. If a parent pressures you to advocate, name your role plainly and redirect them to their attorney or the court. Neutrality is not indifference — it is the stance that keeps you useful to the child and out of the crossfire.
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law on who is a minor's personal representative and recognizes minor-consent exceptions — used for who controls a child's records in a custody dispute.
- 2.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat the access right runs within thirty days for a cost-based fee and excludes psychotherapy notes — used for how to fulfill an entitled parent's records request.
- 3.Office of the National Coordinator / ASTP (2026). Information Blocking. HealthIT.gov. link ✓That the Cures Act prohibits information blocking by individual clinicians, subject to eight exceptions including preventing harm — used for why a lawful release cannot be slow-walked.
- 4.HHS Office for Civil Rights (2026). Court Orders and Subpoenas. U.S. Department of Health and Human Services. linkThat HIPAA distinguishes a court order from a bare subpoena and sets the satisfactory-assurances condition — used for how to respond to litigation paper in a custody fight.
- 5.HHS Office for Civil Rights (2026). Summary of the HIPAA Privacy Rule. U.S. Department of Health and Human Services. linkThat the Privacy Rule limits disclosures to the minimum necessary — used for the neutral, need-to-know stance toward parents, payers, and the court.
https://www.gale.care/for-providers/ecp-custody-dispute-records · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.