Therapy Confidentiality: What Your Therapist Can and Cannot Share

Why Confidentiality Matters

One of the biggest concerns people have before starting therapy is a simple one: will other people find out what I said? The short answer is no. Confidentiality is the foundation of the therapeutic relationship. Without it, therapy would not work — you need to be able to speak honestly, without fear of judgment or exposure, in order to make progress.

Therapists take this seriously. It is not just an ethical principle; it is the law. And understanding exactly how confidentiality works can make it much easier to open up when you are sitting in that chair for the first time.

HIPAA in Plain English

You have probably seen the name HIPAA on forms at your doctor's office. HIPAA stands for the Health Insurance Portability and Accountability Act, and it is the federal law that protects your health information — including your therapy records.

Here is what HIPAA means for you in practical terms:

• Your therapist cannot share your information with anyone without your written consent.
• Your records are stored securely, whether they are on paper or in a digital system.
• You have the right to access your own records.
• If your therapist's office experiences a data breach, they are required to notify you.

HIPAA applies to all healthcare providers, including therapists, psychiatrists, and counselors. It sets a nationwide floor for privacy protections, and many states — including Maryland — add additional protections on top of it.

What Is Protected

The scope of confidentiality in therapy is broader than many people realize. Here is what your therapist cannot disclose without your explicit, written permission:

Everything you say in session. The content of your conversations — your thoughts, feelings, memories, experiences, and concerns — is protected. Your therapist will not repeat what you share to anyone.

The fact that you are a client. Your therapist cannot even confirm that you are seeing them. If someone calls the office and asks whether you are a patient, your therapist is required to neither confirm nor deny it.

Your diagnosis. If your therapist assigns a diagnosis (such as generalized anxiety disorder or major depression), that information is confidential. It cannot be shared with your employer, your family, or anyone else without your consent.

Your treatment details. The type of therapy you are receiving, the goals you are working on, and any notes your therapist takes during sessions are all protected.

Your contact information. Your phone number, email, address, and other personal details provided to your therapist's practice are protected health information under HIPAA.

When Your Therapist Must Break Confidentiality

There are specific, limited circumstances where a therapist is legally required to break confidentiality. These are not arbitrary decisions — they are mandated by law, and every licensed therapist is trained to handle them carefully.

Imminent Danger to Yourself

If you express a clear and immediate plan to harm yourself, your therapist has a duty to take steps to keep you safe. This may include contacting emergency services or a family member. Talking about suicidal thoughts in general terms is different from expressing an active plan with intent and means — your therapist is trained to assess the difference, and they will talk with you about what they need to do before taking action whenever possible.

Imminent Danger to Others

If you make a specific, credible threat against an identifiable person, your therapist is required to take steps to protect that person. This is known as the "duty to warn" and comes from a landmark legal case called Tarasoff v. Regents of the University of California. Your therapist would attempt to discuss this with you first, but the safety of the other person takes priority.

Suspected Child or Elder Abuse

Therapists are mandated reporters. If they have reasonable suspicion that a child or a vulnerable adult is being abused or neglected, they are legally required to report it to the appropriate authorities. This applies whether the abuse involves you, someone you know, or someone you describe in session.

Court Orders

In rare cases, a judge may issue a court order requiring your therapist to release specific records or testify. Your therapist cannot ignore a valid court order, but they will typically release only the minimum information required and may advocate for your privacy in the process.

How Therapists Handle These Situations

Good therapists do not break confidentiality lightly or without warning. In most cases, they will tell you what they need to do and why before they do it. They will explain the situation, discuss it with you, and involve you in the process as much as possible. The goal is never to betray your trust — it is to keep people safe.

Your therapist will also explain these limits during your first session, usually as part of the informed consent process, so you know the boundaries before you begin sharing.

Confidentiality for Minors

Confidentiality works differently when the client is a minor, and the specifics depend on state law.

In Maryland, individuals aged 16 and older can consent to their own mental health treatment without parental permission. This means that a 16- or 17-year-old's therapy sessions are confidential from their parents, just as an adult's would be.

For clients under 16, parents or guardians generally have some right to information about their child's treatment. However, most therapists work to maintain as much privacy as possible for the young person, because therapy is most effective when the client feels safe to be honest. A good therapist will discuss these boundaries openly with both the minor and the parent at the start of treatment, establishing clear expectations about what will and will not be shared.

In practice, many therapists tell parents about general themes and progress ("Your child is working on managing frustration and making good progress") without revealing specific details of what was discussed in session.

Confidentiality in Couples Therapy

Couples therapy introduces a unique confidentiality consideration: what happens when one partner shares something privately with the therapist?

Most couples therapists use what is called a "no-secrets policy." This means that if one partner contacts the therapist individually — by phone, email, or in a separate conversation — the therapist will not keep secrets from the other partner. The therapist may not reveal the information themselves, but they will typically encourage the person to bring it up in a joint session, or they may explain that they cannot continue therapy while holding a secret that is relevant to the couple's work.

The reason for this policy is practical: a therapist who holds secrets from one partner loses their neutrality and can no longer be effective. Your couples therapist will explain their specific policy at the start of treatment, so you know exactly how individual communications are handled.

What Happens With Your Records

Your therapy records are stored securely and kept confidential. Here is what you should know about how they are managed:

You have the right to see your records. Under HIPAA, you can request a copy of your therapy records at any time. In rare cases, a therapist may withhold certain psychotherapy notes if they believe releasing them could be harmful, but they must explain this to you.

Records are kept for a set period. Most states require therapists to retain records for a minimum number of years after treatment ends — in Maryland, this is typically five years for adults and five years after a minor turns 18. After that period, records are securely destroyed.

If you switch therapists, you can authorize your records to be transferred to your new provider. This can save time and help your new therapist understand your history without you needing to repeat everything from the beginning.

Insurance companies receive limited information. If you use insurance, your therapist typically submits a diagnosis code, dates of service, and the type of treatment provided. They do not send session notes or detailed descriptions of what you discussed.

Can Your Employer Find Out?

This is one of the most common concerns, and the answer is reassuring: no, your employer cannot find out that you are in therapy under normal circumstances.

If you use your employer-provided health insurance, your employer does not have access to the details of your claims. HIPAA specifically prohibits employers from accessing employees' individual health records. The insurance company processes your claims, but your employer's HR department does not see what specific services you used.

If you use an Employee Assistance Program (EAP), there is a limited exception. EAPs typically provide a set number of free sessions and may report aggregate, de-identified usage data to the employer (for example, "15 employees used EAP services this quarter"). However, your individual participation and the content of your sessions remain confidential. The EAP provider cannot tell your employer that you specifically used the service or what you discussed.

If you pay out of pocket, there is no connection to your employer whatsoever. Your therapy is entirely private.

The only scenario where an employer might learn about your therapy is if you voluntarily disclose it — for example, if you request a workplace accommodation for a mental health condition. Even then, the employer is only entitled to limited information, and your therapist would only release what you explicitly authorize.

What You Can Do to Protect Your Privacy

While your therapist is bound by strict confidentiality rules, there are a few practical steps you can take to maintain your privacy:

• Ask about confidentiality during your first session. A good therapist will explain their policies proactively, but it never hurts to ask direct questions.
• Read the informed consent form carefully. This document outlines confidentiality, its limits, and how your records will be handled.
• Understand your insurance plan. If privacy is a top priority, paying out of pocket eliminates any connection between your therapy and your insurance records.
• Discuss your concerns openly. If you are worried about a specific scenario — a custody dispute, a workplace situation, a family member — tell your therapist. They can explain exactly how your information is protected in that context.

The Bottom Line

Therapy is one of the most private relationships you will ever have. The law, professional ethics, and your therapist's training all work together to ensure that what you share stays between you and your therapist. The exceptions are narrow, clearly defined, and exist only to protect people from serious harm.

If confidentiality has been the thing holding you back from starting therapy, know this: therapists build their entire practice on trust. Protecting your privacy is not just their obligation — it is the core of what makes their work possible.