Guide

Family informants: listening freely, disclosing carefully

Summary

You may always listen to family without breaching confidentiality — receiving information is not a disclosure. What you may tell them is narrow: without the client's authorization, HIPAA lets you share only when the client agrees or does not object, or when they are incapacitated and disclosure serves their best interest, and only information directly relevant to that person's involvement. Psychotherapy notes and substance-use records need explicit consent. Document what the client permitted, and to whom.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

The two directions of information

Two different questions hide inside one worry. Listening to a family member — a spouse who calls with context, a parent describing what they see at home — is never a breach, because taking in information is not a disclosure. You can receive collateral input freely and use it clinically. The regulated act is the other direction: what you say back. There, without the client's authorization, HIPAA holds you to a short list of permitted situations 1Ref 1HHS Office for Civil Rights (2026).HIPAA Privacy Rule and Sharing Information Related to Mental Health.That HIPAA permits disclosure to family involved in care when the client agrees or does not object, or in the client's best interest when incapacitated or in an emergency, limited to relevant information..

Separating the two directions in your own head prevents the most common error, which is refusing to hear a worried family member out of a vague sense that confidentiality forbids it. It does not. The discipline lives entirely in what leaves your mouth, and in writing down what the client has agreed you may share.

When HIPAA lets you talk to family without a signed form

Three permissions cover most of what a solo clinician needs. First, if the client is present and agrees, or is present and does not object when given the chance, you may share what is relevant with the people involved in their care 1Ref 1HHS Office for Civil Rights (2026).HIPAA Privacy Rule and Sharing Information Related to Mental Health.That HIPAA permits disclosure to family involved in care when the client agrees or does not object, or in the client's best interest when incapacitated or in an emergency, limited to relevant information.. Second, if the client is not present or is incapacitated, you may use professional judgment to share information in the client's best interest. Third, in a genuine emergency, safety-based disclosure is permitted.

Every one of these carries the minimum-necessary limit: you disclose only the slice directly relevant to that person's role, not the whole history. "Your husband can pick up your appointment card" is not "your husband gets your trauma history." This is the ordinary HIPAA framework for talking to family — assuming the covered-entity test puts you inside HIPAA at all — and it applies to behavioral health with the extra locks described below.

The cleaner path: a scoped authorization

When you know a family member will be part of care over time — a parent in a young adult's treatment, a partner supporting recovery — the durable answer is a written authorization from the client that names the person and the scope. A signed release removes the guesswork of the present-and-agrees test and lets you speak to that person on the exact terms the client sets 1Ref 1HHS Office for Civil Rights (2026).HIPAA Privacy Rule and Sharing Information Related to Mental Health.That HIPAA permits disclosure to family involved in care when the client agrees or does not object, or in the client's best interest when incapacitated or in an emergency, limited to relevant information..

Ethics codes treat informed consent as the backbone of the relationship, with the client deciding who is inside it 2Ref 2National Association of Social Workers (2021).NASW Code of Ethics.That informed consent governs the relationship, clients decide who is included in it, and disclosures to third parties should be documented.. Write the authorization to be specific, not blanket: name the person, the purpose, the categories of information ("scheduling and general progress," not "anything"), and an expiration or revocation clause. A narrow, revocable release protects the client and protects you, and it is far easier to honor mid-crisis than a memory of a hallway conversation.

Psychotherapy notes and the Part 2 tightening

Two categories sit above the ordinary family rules. Psychotherapy notes — your separate session analysis — are not covered by the present-and-agrees permission at all; sharing them with anyone, family included, generally needs the client's written authorization 3Ref 3HHS Office for Civil Rights (2026).Does HIPAA provide extra protections for mental health information compared with other health information?.That psychotherapy notes require the client's written authorization before disclosure, including to family members.. And if you provide substance-use disorder treatment that meets the federal definition of a Part 2 program, 42 CFR Part 2 governs those records with a stricter consent regime than HIPAA 4Ref 4Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.That 42 CFR Part 2 governs SUD program records with a consent regime stricter than HIPAA for disclosures, including to family..

Part 2 was realigned by a 2024 final rule that lets a single consent cover future treatment, payment, and operations uses, and that aligns penalties and breach rules with HIPAA — but the core remains consent-first for disclosures, including to family 5Ref 5Substance Abuse and Mental Health Services Administration (2024).Confidentiality of Substance Use Disorder (SUD) Patient Records.That the 2024 Part 2 final rule allows a single consent for future TPO uses and aligns penalties and breach rules with HIPAA while keeping consent central to disclosures.. If Part 2 applies to you, a family member does not get information on the strength of the present-and-agrees test; you need the client's Part 2-compliant consent on file.

The informant who wants to stay secret

A family member sometimes shares something and then asks you not to tell the client they called. You can receive the information, but you cannot promise blanket secrecy, because your client generally has a right of access to their own record and privilege belongs to the client, not the caller. The honest move is to set that expectation before they unload: you will listen, you will use it clinically, and you cannot guarantee it stays hidden.

Where you record collateral information matters. Noting "client's sister reports increased drinking" in the clinical record makes it part of what the client can later read. If you keep a private impression in psychotherapy notes instead, it stays behind that separate lock — but it also cannot be shared without authorization. There is no way to both hold information secret from your client indefinitely and keep it in the working chart; be honest with the caller from the start. Privilege is the court's word for a related but separate protection, and group confidentiality raises the same secret-keeping tension when more than one person is in the room.

Write down what you shared, and with whom

Close the loop in the chart. For every disclosure to a family member, a one-line note — the date, who received it, what you shared, and the basis (client agreed / authorization on file / emergency) — turns a judgment call into a defensible record. Ethics codes and privacy rules both expect this contemporaneous trail, and it is your protection if the client later questions what a relative was told 2Ref 2National Association of Social Workers (2021).NASW Code of Ethics.That informed consent governs the relationship, clients decide who is included in it, and disclosures to third parties should be documented..

Build two small habits and most collateral situations resolve themselves: a scoped release form you keep ready at intake for clients who want family involved, and a standing internal rule that the serious-threat pathway is the only route by which information leaves without consent. When you can point to a signed release or a documented safety basis for every outbound disclosure, the awkward calls stop being risky.

Common questions

Yes. Receiving information is not a disclosure, so you can listen to a family member's concerns without any authorization. What changes is your response: you cannot confirm details, share the diagnosis, or discuss the treatment plan back to them unless the client has agreed, is present and does not object, or a safety exception applies. Listen freely; speak carefully.

For an adult client, the parent has no special standing. You may share only what the client authorizes or agrees to in the moment, and only the relevant slice. Without that, confirm nothing — not even attendance. The cleanest fix is to ask the client whether they want a scoped release naming the parent, then work within exactly what it permits.

They can. If you run a program that meets the federal Part 2 definition, those records follow 42 CFR Part 2, which requires the client's consent for disclosures rather than relying on HIPAA's present-and-agrees permission. A 2024 final rule aligned Part 2 more closely with HIPAA but kept consent at the center, so a family member still needs the client's Part 2 consent.

You cannot promise permanent secrecy. Your client generally has a right to read their own record, so anything you place in the clinical chart is potentially visible to them later. Set that expectation before the relative shares, explain that you will use the information clinically, and decide deliberately where it belongs — the working record or your separate psychotherapy notes.

Usually less friction than with family. HIPAA permits disclosures for treatment, payment, and health care operations without separate authorization, so coordinating with the client's physician or prescriber is generally allowed under the treatment permission. Substance-use Part 2 records are the exception and may need consent. When in doubt, a simple release removes the question entirely.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.HHS Office for Civil Rights (2026). HIPAA Privacy Rule and Sharing Information Related to Mental Health. U.S. Department of Health and Human Services. linkThat HIPAA permits disclosure to family involved in care when the client agrees or does not object, or in the client's best interest when incapacitated or in an emergency, limited to relevant information.
2.National Association of Social Workers (2021). NASW Code of Ethics. National Association of Social Workers. link ✓That informed consent governs the relationship, clients decide who is included in it, and disclosures to third parties should be documented.
3.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThat psychotherapy notes require the client's written authorization before disclosure, including to family members.
4.Office of the Federal Register (2026). 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records. eCFR. link ✓That 42 CFR Part 2 governs SUD program records with a consent regime stricter than HIPAA for disclosures, including to family.
5.Substance Abuse and Mental Health Services Administration (2024). Confidentiality of Substance Use Disorder (SUD) Patient Records. Federal Register. link ✓That the 2024 Part 2 final rule allows a single consent for future TPO uses and aligns penalties and breach rules with HIPAA while keeping consent central to disclosures.

https://www.gale.care/for-providers/pr-collateral-informants-privacy · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers