Bipolar Disorder Treatment Records and HIPAA: What’s Protected, Who Can See Them, and Your Rights

HIPAA Privacy Rule Overview

The HIPAA Privacy Rule sets national standards for how covered entities and their business associates handle your bipolar disorder treatment information. It protects the confidentiality, integrity, and availability of your Protected Health Information (PHI) while ensuring you can get the records you need for care.

Under the HIPAA Privacy Rule, your information may be used or disclosed without Patient Authorization for treatment, payment, and health care operations. Beyond these core purposes, most other uses or disclosures require your written permission, unless a specific exception applies (for example, certain public health or safety situations).

HIPAA also requires the “minimum necessary” standard for most disclosures, meaning organizations should share only what is reasonably necessary. For treatment between providers, however, the minimum necessary standard does not apply so care teams can coordinate effectively.

Designated Record Sets and Their Scope

Your right of access centers on the Designated Record Set (DRS)—the records a provider or health plan uses to make decisions about you. For bipolar disorder care, that typically includes your medical and billing records, medication lists, lab and imaging results, care plans, and clinical progress notes maintained in the electronic health record.

• Included: records used to make decisions about you (e.g., psychiatric evaluations, progress notes, discharge summaries, billing statements).
• Excluded: documents not used to make decisions about you (e.g., internal quality reviews, business planning files) and certain special categories described below.

Knowing what sits inside the Designated Record Set helps you request precisely what you need and avoid delays. If multiple departments hold decision-making records about you, each set is part of the DRS and is accessible.

Patient Right to Access Bipolar Disorder Records

You have a clear, enforceable right to inspect or get copies of your bipolar disorder treatment records. This Mental Health Record Access right applies whether the data are on paper or electronic and whether you want the full chart or a specific item like a medication list.

• How to request: submit a simple written or electronic request to your provider or health plan. You do not have to state a reason.
• Timing: the organization generally must respond within 30 calendar days; one 30-day extension is allowed with a written explanation.
• Format: you can ask for electronic copies in the format you prefer if readily producible (for example, PDF or portal download) or have them sent to a designated third party at your direction.
• Fees: only reasonable, cost-based fees for copying, supplies, and postage may be charged; access cannot be denied because of unpaid bills for care.

If access is denied to a portion of your record, you should still receive the rest. You also have the right to request an amendment if something is incomplete or inaccurate, with the amendment added to your record for future readers.

Exclusions and Psychotherapy Notes

Some materials are excluded from access. The most important category is Psychotherapy Notes—your therapist’s separate, private notes documenting or analyzing the content of counseling sessions. These are kept apart from the medical record and are not part of the Designated Record Set.

Because of their sensitivity, Psychotherapy Notes generally require a distinct Patient Authorization for most uses and disclosures. By contrast, routine clinical documentation such as diagnoses, medications, session start/stop times, treatment plans, and progress notes are part of your medical record and are accessible.

Other exclusions include information compiled for use in legal proceedings and certain research records when you agreed in advance to a temporary suspension of access. In limited cases, a provider may deny access to protect you or another person from a substantial risk of harm, while still releasing non-risky portions.

Disclosure Rules for Treatment and Care Coordination

HIPAA permits providers to share your bipolar disorder information with other clinicians for treatment and care coordination without your written permission. This enables referrals, medication management, and care transitions between inpatient and outpatient settings.

• Treatment disclosures: may be made to other providers to diagnose, treat, and coordinate your care; the minimum necessary rule does not apply.
• Payment and operations: allowed without authorization, but only the minimum necessary information should be shared.
• Public interest exceptions: disclosures may occur as required by law, to avert a serious and imminent threat, for health oversight, or to report certain abuse or neglect, consistent with applicable rules.

You can request restrictions on specific disclosures. If you pay out of pocket in full for a service, you may require a provider not to disclose that service information to your health plan, unless another law compels disclosure.

Sharing Records with Family and Friends

With your agreement—or if you are present and do not object—a provider may share relevant information with family, friends, or others involved in your care or payment. Only information directly related to their involvement should be disclosed.

If you are not present or cannot agree because of incapacity or emergency, the provider may use professional judgment to share limited, necessary details in your best interest. You can also name a personal representative under state law; that person generally has the same access rights you have, unless an exception applies.

If sharing poses a risk of harm, or if you specifically restrict a disclosure, the provider should tailor or withhold information accordingly. Written Patient Authorization remains the most precise way to define who can receive what and for how long.

Additional Protections for Substance Use Disorder Records

When bipolar disorder care intersects with substance use treatment, records from federally assisted programs are protected by 42 CFR Part 2. These rules are stricter than HIPAA in many respects and are designed to reduce stigma and protect your privacy.

• General rule: disclosures usually require your written Patient Authorization, including for many purposes that HIPAA would otherwise permit without authorization.
• Limited exceptions: emergencies, specific research or audit/evaluation activities, and court orders that meet stringent criteria.
• No redisclosure: recipients are typically barred from redisclosing Part 2 information unless you authorize it or an exception applies.

If your record contains both mental health and Part 2 information, organizations should segment or otherwise manage it so only the permissible data are shared. Together, the HIPAA Privacy Rule and 42 CFR Part 2 give you strong, practical tools to control your information while supporting safe, coordinated care.

FAQs.

What information is protected under HIPAA for bipolar disorder treatment?

All identifiable information about your past, present, or future physical or mental health, care, and payment is Protected Health Information. That includes diagnoses, medications, therapy and progress notes, lab results, billing data, and care plans related to bipolar disorder.

Who can access bipolar disorder treatment records without patient consent?

Providers and health plans may use and disclose records for treatment, payment, and health care operations without Patient Authorization. Certain disclosures are also allowed or required by law, such as to prevent a serious and imminent threat or for health oversight activities.

How does HIPAA handle psychotherapy notes differently?

Psychotherapy Notes are kept separate from the medical record and are excluded from the Designated Record Set. They typically require a distinct, written Patient Authorization for use or disclosure, while routine clinical documentation remains accessible to you.

Are there special protections for substance use disorder records?

Yes. Records from federally assisted programs are protected by 42 CFR Part 2, which generally requires your written consent for disclosures and restricts redisclosure by recipients. Narrow exceptions apply, such as true medical emergencies or qualified court orders.