I85PREP
⌘ K
CO SW Jurisprudence study materials
CO SW Jurisprudence study resources

CO SW Jurisprudence: Confidentiality, Privileged Communication, and the HIPAA Privacy Rule

CO SW Jurisprudence · Work through your exam, one topic at a time.

All guide sections

Confidentiality, Privileged Communication, and the HIPAA Privacy Rule

Confidentiality is the ethical and statutory duty not to disclose client information; privilege is the client's evidentiary right to keep protected communications out of legal proceedings. Colorado's psychotherapist-client privilege (C.R.S. 13-90-107) covers licensed social workers, and HIPAA adds a federal floor for covered entities.

Privilege mechanics

  • The privilege belongs to the client, not the clinician; only the client or a legal representative may waive it.
  • Disclosure to unrelated third parties can waive it.
  • Recognized exceptions include client waiver, court-ordered evaluations, abuse and exploitation reporting, involuntary hold proceedings, and disclosures to warn a threatened person or law enforcement.
  • A subpoena is not an authorization. It compels a response, not automatic disclosure of clinical content.

HIPAA essentials

  • Applies to covered entities transmitting health information electronically for covered transactions.
  • Permitted without authorization for treatment, payment, and health care operations, subject to the minimum-necessary standard.
  • Psychotherapy notes require a separate, specific authorization; general record authorizations do not cover them.
  • Clients have rights to access records (response generally within 30 days), to amend, and to an accounting of disclosures.
  • Business associate agreements are required with vendors such as EHR platforms, billing services, and answering services.
  • Breach notification generally within 60 days of discovery; privacy documentation retained at least six years.

Common requests

For legal demands, verify authority, notify the client where lawful, seek authorization or a court order, and assert privilege with a request for a protective order if neither exists. Disclose only the minimum necessary.

Worked example

An attorney subpoenas the entire therapy record of a client involved in a custody dispute. Reasoning: the subpoena is not an authorization. Privilege belongs to the client, who must be given the chance to object. The clinician contacts the client or the client's attorney, seeks written authorization or a court order, and if neither is produced, asserts privilege and asks the court for protection. Even with a valid order, disclose only what the order compels, and withhold psychotherapy notes absent specific authorization.

Traps

Releasing records on a subpoena; assuming HIPAA preempts stricter state privilege rules; skipping the minimum-necessary analysis; treating confidentiality and privilege as synonyms; forgetting that a court order and a subpoena are different instruments.