Guide

The Subpoena Says 'All Records': Are Psychotherapy Notes In It?

Summary

A subpoena demanding all records does not by itself reach your psychotherapy notes. HIPAA requires a separate authorization from the client for any use or disclosure of psychotherapy notes, and the closed list of exceptions to that requirement does not include the judicial-proceedings paragraph a civil subpoena is answered under. Two conditions decide it in practice: the notes have to meet the federal definition, and they have to be kept separate from the chart the subpoena does reach.

By Gale Editorial · Updated 2026-09-01. Every figure cited to a dated source. How we write.

Does "all records" reach the psychotherapy notes?

No, not by itself. HIPAA puts psychotherapy notes behind a second lock: a covered provider must obtain the client's authorization for any use or disclosure of them, and 164.508(a)(2) says so notwithstanding any other provision of the privacy subpart apart from its transition provisions 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e).. The exceptions are a closed list. A civil subpoena is answered under the judicial-proceedings paragraph, and that paragraph is not on the list 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e)..

The list at 164.508(a)(2)(ii) names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator of the notes, 164.512(g)(1), and 164.512(j)(1)(i) 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e).. Section 164.512(e) is where subpoenas, discovery requests and litigation orders live 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v)., and it appears nowhere in that list 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e).. So the phrase "any and all records," however broadly drafted, carries no authorization with it, and styling a demand as legal process supplies none either.

An authorization is still a route, and it has a shape of its own: the authorization for psychotherapy notes is its own document, and it may only be combined with another authorization for psychotherapy notes 3Ref 3U.S. Department of Health and Human Services (Office for Civil Rights) (2025).45 CFR § 164.508 — Uses and disclosures for which an authorization is required..The separate-authorization rule for psychotherapy notes and the limit on combining that authorization with any other authorization.. A general release the client signed for the litigation is a document to read against that requirement, with counsel, before anyone treats it as covering the notes.

But all of this holds only if what you are holding is a psychotherapy note as the regulation defines one.

Nothing here displaces state law. Psychotherapist-patient privilege, the mechanics of objecting, and the days you have to do it live in your state's own statutes and rules of civil procedure, and no federal citation supplies that deadline. Read the return date on the subpoena against those rules with your own counsel, early enough that the answer lands before the date does.

What the regulation counts as a psychotherapy note

Three conditions at once, and the third is where most files come apart. 45 CFR 164.501 defines psychotherapy notes as notes recorded in any medium by a health care provider who is a mental health professional, documenting or analyzing the contents of conversation during a private, group, joint or family counseling session, and separated from the rest of the individual's medical record 4Ref 4U.S. Department of Health and Human Services (2026).45 CFR 164.501 - Definitions.The federal definition of psychotherapy notes (recorded in any medium by a health care provider who is a mental health professional, documenting or analyzing the contents of conversation during a private, group, joint or family counseling session, and separated from the rest of the individual's medical record) and the categories the definition expressly excludes..

That last clause is the psychotherapy notes separate-file test. It describes your filing system. Reflections typed into the same progress-note field as the treatment plan are part of the medical record, whatever they contain, and no label applied afterward moves them.

The definition also names what is never a psychotherapy note. Each of these travels with the chart 4Ref 4U.S. Department of Health and Human Services (2026).45 CFR 164.501 - Definitions.The federal definition of psychotherapy notes (recorded in any medium by a health care provider who is a mental health professional, documenting or analyzing the contents of conversation during a private, group, joint or family counseling session, and separated from the rest of the individual's medical record) and the categories the definition expressly excludes.:

medication prescription and monitoring
counseling session start and stop times
the modalities and frequencies of treatment furnished
results of clinical tests
any summary of diagnosis, functional status, treatment plan, symptoms, prognosis and progress to date

Read that list in the other direction and it tells you what a records-subpoena legitimately reaches: dates, modality, diagnosis, plan, progress. The protection holds the clinician's own analysis of the session, and it is not a place to relocate material the chart is supposed to hold. Whether to keep psychotherapy notes or not is a decision made in the ordinary course, for clinical reasons, and a file reorganized in the week after service is a fact a court can ask about.

What the subpoena does reach, and on what conditions

The rest of the designated record set, and only once the conditions in 164.512(e) are met. Where a court or administrative tribunal has ordered the disclosure, a covered entity may disclose only the protected health information the order expressly authorizes 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v).. The order's own words draw the boundary; the cover letter from the requesting party's office does not. A subpoena arriving with no order behind it runs on a different track.

For a bare subpoena, discovery request or other lawful process, the rule wants written satisfactory assurance from the party seeking the records, and it accepts one of two showings 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v).. Either reasonable efforts were made to give the individual notice, with the time for objections elapsed and any objections resolved by the tribunal, or reasonable efforts were made to secure a qualified protective order. A covered entity unwilling to wait on the other side can make those efforts itself under 164.512(e)(1)(vi).

A qualified protective order is defined in the same paragraph: it prohibits use or disclosure of the information for any purpose other than the proceeding, and it requires the records to be returned or destroyed, all copies included, at the end of the litigation 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v)..

Subpoena, order, warrant: they arrive looking alike and they are not interchangeable. Under 164.512(e) the order states on its face how much may be released, and the bare subpoena needs assurances before anything moves 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v)..

Minimum necessary still governs how much leaves the office

Permission to disclose is not permission to send the file. 45 CFR 164.502(b) requires reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose. The closed list of uses the minimum necessary standard does not reach includes treatment, disclosures to the individual, disclosures under an authorization, disclosures to the Secretary, and disclosures required by law under 164.512(a) 5Ref 5U.S. Department of Health and Human Services (Office for Civil Rights) (2026).§ 164.502 Uses and disclosures of protected health information: General rules..The minimum-necessary standard at 164.502(b) and the closed list of uses and disclosures it does not reach, which does not include a disclosure made under 164.512(e).. A subpoena answered under 164.512(e) sits on none of them.

In practice, a demand for the treatment record in a custody matter is a demand for a purpose, and the purpose is what the volume gets measured against. Producing the whole longitudinal file because the caption says "any and all records" is a choice the rule leaves with you, and its default runs the other way.

Produce with a cover letter stating what is enclosed, what is withheld, and the paragraph each withheld category sits under. Then keep a copy of the production, in the form it went out.

If any of the file is a substance use disorder record

Then a subpoena alone cannot be answered at all. Where the records are those of a program covered by 42 CFR Part 2, section 2.61 puts it directly: the holder may not use or disclose the records in response to the subpoena unless a court of competent jurisdiction also enters an authorizing order under Part 2, and such an order permits disclosure without compelling it 6Ref 6U.S. Department of Health and Human Services / Substance Abuse and Mental Health Services Administration (2026).42 CFR 2.61 - Legal effect of order.That where the records are those of a 42 CFR Part 2 program, a subpoena alone may not be answered unless a court of competent jurisdiction also enters an authorizing order, and that such an order permits disclosure without compelling it..

For a solo behavioral health practice, the first question is whether Part 2 applies at all. Part 2 attaches to the records of a Part 2 program, so a practice holding none is answering under HIPAA alone. Whether a practice is such a program is settled by Part 2's own applicability rules and not by the subject matter of one session. Where Part 2 does apply, an authorizing order in hand still leaves the disclosure decision with the holder 6Ref 6U.S. Department of Health and Human Services / Substance Abuse and Mental Health Services Administration (2026).42 CFR 2.61 - Legal effect of order.That where the records are those of a 42 CFR Part 2 program, a subpoena alone may not be answered unless a court of competent jurisdiction also enters an authorizing order, and that such an order permits disclosure without compelling it..

A subpoena served on a Part 2 program with no order behind it is therefore answered with a letter, not with a file.

The client cannot demand the notes either

The notes sit outside the client's own right of access as well, which is a useful check on whether the file is built the way you think it is. Under 164.524(a)(1) the individual's right to inspect and obtain a copy of protected health information in a designated record set excepts psychotherapy notes, and separately excepts information compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding 7Ref 7U.S. Department of Health and Human Services (2026).45 CFR 164.524 - Access of individuals to protected health information.The 164.524(a)(1) exceptions to the individual right of access: psychotherapy notes, and information compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding..

So the notes sit outside the designated record set on both sides of the table. The client asking for their record and the lawyer subpoenaing it are after the same object, and it does not include the notes.

Put that in front of the client in advance. A therapist's notice of privacy practices is where the separate handling of these notes gets described, and a client who reads it has been told what a release will and will not move.

A request arriving with no legal process at all is a different question again. CPS requests without a subpoena run on their own permissions, and the litigation rules answer none of it.

The hour the subpoena arrives

Read which document you were served before answering any part of it. A court order and a bare subpoena sit in different subparagraphs of 164.512(e) with different conditions attached 2Ref 2U.S. Department of Health and Human Services (Office for Civil Rights) (2026).45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required.The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v)., and the psychotherapy notes question turns on 164.508 whichever one you are holding 1Ref 1U.S. Department of Health and Human Services (2026).45 CFR 164.508 - Uses and disclosures for which an authorization is required.The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e).. The steps below are convention among solo practices rather than a published procedure, and they carry no deadline, because the deadline lives in state rules.

calendar the return date the day it arrives, and get the objection window from counsel or the state rules of civil procedure that same day
split the material into the chart and the notes first, since the two piles answer to different paragraphs
ask the requesting party in writing for the assurances 164.512(e) requires, and treat their absence as the reason production has not happened
tell the client, in whatever form the practice ordinarily uses, unless a court has directed otherwise
produce the chart under a cover letter itemizing what is enclosed and what is withheld
keep the production and the correspondence together, filed where the billing records are

Where the notes are genuinely responsive and the requesting party will not accept the answer, the next move is a motion, and that is work for counsel. The practice's part is a clean account of what exists, where it is kept, and under which paragraph each pile is withheld.

Common questions

It is a different question, and it is one for counsel. The authorization requirement for psychotherapy notes has a closed exception list, and the judicial-proceedings paragraph a subpoena travels under is absent from it. The required-by-law paragraph is on that list, so whether a specific order comes through that door turns on the order's own terms and on state law, which no general page can settle.

No. The federal definition expressly excludes counseling session start and stop times, along with medication prescription and monitoring, the modalities and frequencies of treatment, results of clinical tests, and any summary of diagnosis, functional status, treatment plan, symptoms, prognosis and progress to date. All of that lives in the chart, and a records subpoena reaches it on the ordinary conditions.

The analysis runs on the authorization rather than on who sent the envelope. The rule requires an authorization for any use or disclosure of psychotherapy notes, and that authorization is its own document, combinable only with another psychotherapy-notes authorization. Whether a release the client already signed does that job depends on what that document says, so read it against the requirement with counsel first.

The definition turns on where material is kept and on what it is. The excluded categories belong to the chart wherever they are typed, so relabeling does not move them, and a file reorganized after service is a fact a court can ask about. The separation is meant to be built in the ordinary course, for clinical reasons, long before any process is served.

The minimum necessary to accomplish the purpose of the disclosure, because a subpoena answered under the judicial-proceedings paragraph is not on the standard's list of exclusions. A demand for a treatment record in one matter is a demand for a purpose, and the volume is measured against it. Sending an entire longitudinal file because the caption is broad is a choice, not a requirement.

Where the records belong to a program covered by 42 CFR Part 2, a subpoena alone cannot be answered. A court of competent jurisdiction has to enter an authorizing order under Part 2 as well, and even then the order permits disclosure without compelling it. Whether a given practice is a Part 2 program is decided by Part 2's own applicability rules.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.U.S. Department of Health and Human Services (2026). 45 CFR 164.508 - Uses and disclosures for which an authorization is required. Electronic Code of Federal Regulations (eCFR). link ✓The 164.508(a)(2) requirement that a covered entity obtain an authorization for any use or disclosure of psychotherapy notes notwithstanding any other provision of the subpart, and the closed exception list at (a)(2)(ii), which names 164.502(a)(2)(ii), 164.512(a), 164.512(d) as to oversight of the originator, 164.512(g)(1) and 164.512(j)(1)(i) and does not name 164.512(e).
2.U.S. Department of Health and Human Services (Office for Civil Rights) (2026). 45 CFR 164.512 — Uses and disclosures for which an authorization or opportunity to agree or object is not required. Electronic Code of Federal Regulations (eCFR), Title 45, Subtitle A, Subchapter C, Part 164, Subpart E. link ✓The judicial-proceedings mechanics at 164.512(e): an order of a court or administrative tribunal permits disclosure of only the information the order expressly authorizes; a subpoena or discovery request without such an order may be answered only on written satisfactory assurance of individual notice with the objection window elapsed or of reasonable efforts to secure a qualified protective order, including the covered entity making those efforts itself under (e)(1)(vi); and the definition of a qualified protective order at (e)(1)(v).
3.U.S. Department of Health and Human Services (Office for Civil Rights) (2025). 45 CFR § 164.508 — Uses and disclosures for which an authorization is required.. Code of Federal Regulations (2025 annual edition), U.S. Government Publishing Office (govinfo). link ✓The separate-authorization rule for psychotherapy notes and the limit on combining that authorization with any other authorization.
4.U.S. Department of Health and Human Services (2026). 45 CFR 164.501 - Definitions. Electronic Code of Federal Regulations (eCFR). link ✓The federal definition of psychotherapy notes (recorded in any medium by a health care provider who is a mental health professional, documenting or analyzing the contents of conversation during a private, group, joint or family counseling session, and separated from the rest of the individual's medical record) and the categories the definition expressly excludes.
5.U.S. Department of Health and Human Services (Office for Civil Rights) (2026). § 164.502 Uses and disclosures of protected health information: General rules.. Electronic Code of Federal Regulations (eCFR), Title 45, Subtitle A, Subchapter C, Part 164, Subpart E. link ✓The minimum-necessary standard at 164.502(b) and the closed list of uses and disclosures it does not reach, which does not include a disclosure made under 164.512(e).
6.U.S. Department of Health and Human Services / Substance Abuse and Mental Health Services Administration (2026). 42 CFR 2.61 - Legal effect of order. Electronic Code of Federal Regulations (eCFR). link ✓That where the records are those of a 42 CFR Part 2 program, a subpoena alone may not be answered unless a court of competent jurisdiction also enters an authorizing order, and that such an order permits disclosure without compelling it.
7.U.S. Department of Health and Human Services (2026). 45 CFR 164.524 - Access of individuals to protected health information. Electronic Code of Federal Regulations (eCFR). link ✓The 164.524(a)(1) exceptions to the individual right of access: psychotherapy notes, and information compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding.

https://www.gale.care/for-providers/pq-subpoena-all-records-psychotherapy-notes · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers