Guide

Teen records: parental access and its limits

Summary

Usually a custodial parent, as the teen's personal representative, may see the record — but which parent, and how much, is set by state law and any custody order, not by HIPAA alone. Two limits recur: where state law let the teen consent to the care on their own, the teen controls those records, and psychotherapy notes are never part of the access right. When a parent may be a danger to the child, you can withhold access. Read the custody order and your state's statute first.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

Start with the personal representative — a state-law question

Under HIPAA, whoever may act as the teenager's personal representative generally has the same access to the record the teen would have. For a minor, that is ordinarily a parent — but HIPAA explicitly defers to state law to decide who qualifies and how far the authority reaches 1Ref 1HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law and custody orders on who is a minor's personal representative, with an abuse/endangerment exception.. So the real question is not what HIPAA says but what your state's law, and any custody order, say about which parent stands in this teen's shoes.

Absent a court order or statute limiting one parent, both legal parents commonly have access — but do not assume it. A divorce decree or custody arrangement can change that entirely, and acting on an outdated assumption is how a clinician discloses to a parent who no longer holds the right.

When the teen, not the parent, controls the record

State minor-consent laws punch a hole in parental access. Where your state let the teenager consent to the treatment on their own — often true for outpatient mental health, substance use, or crisis care, depending on the state — the teen, not the parent, generally controls the records of that care, and the parent is not the personal representative for it 1Ref 1HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law and custody orders on who is a minor's personal representative, with an abuse/endangerment exception.. OCR's mental-health guidance addresses this directly: when a parent controls a minor's information and when the minor does 2Ref 2HHS Office for Civil Rights (2026).HIPAA Privacy Rule and Sharing Information Related to Mental Health.OCR mental-health guidance on when a parent controls a minor's information and when the minor does..

That means a parent's request does not automatically reach the minor-consented material. Practically, you may need to segregate the teen-controlled portion so a routine parent request releases only what the parent is actually entitled to see.

Custody: which parent, and how much

When parents are separated or divorced, custody and the chart become one question. Legal custody — the authority to make decisions and access records — is what matters here, and it can differ from physical custody or be split between parents. Read the operative court order: it may give both parents equal access, give one parent sole authority, or restrict a parent specifically. HIPAA's personal-representative rule bends to that order and to your state's law 1Ref 1HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law and custody orders on who is a minor's personal representative, with an abuse/endangerment exception..

If one parent is restricted, honor the restriction and route any dispute back to the court, not into your office. You are not the arbiter of a custody fight; you follow the order in front of you, and you document which order you relied on and when you received it.

Psychotherapy notes are outside the access right

Even a parent who is unquestionably the personal representative does not get everything. HIPAA's right of access covers the designated record set and requires you to provide it, generally within thirty days, for a reasonable cost-based fee — but it specifically excludes psychotherapy notes, the private analysis you keep separate from the chart 3Ref 3HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That the right of access covers the designated record set within thirty days for a reasonable fee and excludes psychotherapy notes.. Those notes require authorization to release, and the access right never compels them 4Ref 4HHS Office for Civil Rights (2026).Does HIPAA provide extra protections for mental health information compared with other health information?.That psychotherapy notes are kept separate and require authorization, outside the access right..

Keep psychotherapy notes physically separate so this line stays clean. When a parent asks for 'everything,' 'everything' means the designated record set — the notes, orders, results, and billing that make up the chart — not your private process notes.

Information blocking and the teen portal

Two federal currents pull toward more access, and they can collide with a teen's confidentiality if you are not deliberate. The information-blocking rules under the Cures Act prohibit interfering with access to electronic health information, subject to defined exceptions, and clinicians are actors under the rule 5Ref 5Office of the National Coordinator / ASTP (2026).Information Blocking.That the Cures Act information-blocking rules apply to clinicians, with defined exceptions including preventing harm.. At the same time, the teen portal often defaults to funneling an adolescent's records to a parent's login — so you configure it to match your state's consent lines, not against them.

The information-blocking exceptions — including one for preventing harm — are how you reconcile the two. You are not blocking when you withhold what state law says a parent may not see; you are following the law. Document which exception you relied on so the decision is defensible.

Substance use records carry a separate lock

If any of the teen's care was substance use disorder treatment covered by 42 CFR Part 2, that material sits under a stricter regime than the rest of the mental-health chart. Part 2 defers to state law on whether the minor could consent; where the minor could, the minor's own consent is generally required to disclose those records — including to a parent 6Ref 6Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.That Part 2 defers to state law on minor consent and requires the minor's consent to disclose SUD records where the minor can consent.. Handle Part 2 content separately from the general record.

Mixing Part 2 material into the general chart risks disclosing it under a parent request that Part 2 would have blocked. Segregate it, and apply the stricter standard to the whole of any document that contains it, because a single blended note takes on the protection of its most sensitive part.

When the request is a subpoena, an attorney letter, or a death

Not every demand for a teen's records is a parent exercising access. A subpoena, a law-office letter, or a court order in a dispute each runs on its own track: a court order lets you disclose only what it specifies, while the subpoena that no judge signed requires satisfactory assurances — notice to the client or a protective order — before you produce anything 7Ref 7HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That a court order authorizes only what it specifies while a bare subpoena requires satisfactory assurances before disclosure.. Slow down, identify what you actually received, and respond to that, not to the pressure behind it.

The law-office letter is often just a request you may decline absent authorization or a valid subpoena. And the record does not vanish when a client dies: after a client dies, access passes to the estate's personal representative under state law, and requests still follow the rules. If you ever record sessions, recording therapy simply adds another item to the designated record set that these same rules govern.

Common questions

Often, but not always. Absent a court order or state statute limiting one parent, both legal parents commonly have access as personal representatives. A divorce decree or custody order can grant one parent sole authority, restrict a parent, or split it — and that order controls over any default. Always read the operative custody document and your state's law before releasing anything to either parent.

No. HIPAA's right of access covers the designated record set but specifically excludes psychotherapy notes — the private analysis you keep separate from the chart. Those notes require the client's authorization to release and are never compelled by an access request, whether the requester is the teen, a parent, or a personal representative. Keep them physically separate so the distinction holds.

Then the teen usually controls that portion of the record, not the parent. Where your state let the minor consent to the care on their own, the parent is generally not the personal representative for it, and a parent's request does not reach it. Segregate the teen-consented material so a routine release does not disclose what the law protects.

Determine legal custody first — the authority to access records, which can differ from physical custody. Read the operative order: it may grant access, restrict this parent, or give another parent sole authority. Honor what the order says, route any dispute back to the court rather than adjudicating it yourself, and document which order you relied on when you responded.

Often yes. HIPAA lets you decline to treat a parent as the personal representative when that parent may be the source of abuse or endangerment, and the information-blocking rules include an exception for preventing harm. Neither is a blanket veto — apply it to the specific risk, document your reasoning and the exception you relied on, and report separately if a mandatory-reporting threshold is met.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law and custody orders on who is a minor's personal representative, with an abuse/endangerment exception.
2.HHS Office for Civil Rights (2026). HIPAA Privacy Rule and Sharing Information Related to Mental Health. U.S. Department of Health and Human Services. linkOCR mental-health guidance on when a parent controls a minor's information and when the minor does.
3.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat the right of access covers the designated record set within thirty days for a reasonable fee and excludes psychotherapy notes.
4.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThat psychotherapy notes are kept separate and require authorization, outside the access right.
5.Office of the National Coordinator / ASTP (2026). Information Blocking. HealthIT.gov. link ✓That the Cures Act information-blocking rules apply to clinicians, with defined exceptions including preventing harm.
6.Office of the Federal Register (2026). 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records. eCFR. link ✓That Part 2 defers to state law on minor consent and requires the minor's consent to disclose SUD records where the minor can consent.
7.HHS Office for Civil Rights (2026). Court Orders and Subpoenas. U.S. Department of Health and Human Services. linkThat a court order authorizes only what it specifies while a bare subpoena requires satisfactory assurances before disclosure.

https://www.gale.care/for-providers/pr-parent-access-teen-records · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers