New Hampshire Mental Health Record Privacy Laws Explained: What Patients and Providers Need to Know

Confidentiality of Mental Health Records

What counts as a mental health record

Your mental health record includes therapy notes, psychological evaluations, medication histories, diagnostic impressions, treatment plans, billing codes, and communications captured through telehealth or patient portals. It also covers information created by psychiatrists, psychologists, social workers, counselors, marriage and family therapists, and community mental health programs.

Confidentiality versus privileged communications

Confidentiality governs how providers store, use, and share information in clinical and administrative settings. Privileged Communications are a separate courtroom concept that lets you block disclosure of therapeutic conversations in legal proceedings except under narrow, defined circumstances. You can think of confidentiality as day‑to‑day privacy and privilege as your shield in court.

Who may access without your authorization

State law and federal privacy rules permit limited, need‑to‑know access for treatment, payment, and health care operations. That means your care team, billing staff, and certain business partners may use the “minimum necessary” information to do their jobs. Beyond those routine functions, a provider generally needs your permission before sharing identifiable details.

Retention and record destruction schedule

Providers must maintain accurate, secure records and follow a written Record Destruction Schedule that complies with licensure rules, payer contracts, and risk‑management guidance. Common practice is to retain adult records for several years after the last encounter and minors’ records for a period that extends past the age of majority. Destruction should be documented and performed in a manner that renders data unreadable.

Exceptions to Confidentiality

When disclosure is permitted or required

• Imminent risk: If a client makes a credible threat of serious harm to self or others, providers may disclose limited information necessary to protect potential victims or to involve law enforcement or emergency responders.
• Child Abuse Reporting: New Hampshire mandates immediate reporting of suspected child abuse or neglect to the appropriate child protection authority. The report should contain only what is necessary to make the report.
• Abuse of vulnerable adults: Providers must report suspected abuse, neglect, or exploitation of elders or incapacitated adults to protective services.
• Court Ordered Disclosure: A valid court order or narrowly tailored subpoena can compel release of specific records, often after judicial safeguards such as in camera review or protective orders.
• Involuntary emergency evaluation or commitment: Limited disclosures support petitions, transport, and care coordination required by law.
• Health oversight and audits: Licensing boards, Medicaid or Medicare auditors, and quality reviewers may access information for oversight, subject to confidentiality safeguards.
• Public health and law enforcement: Limited information may be shared to comply with legally mandated public health reporting or to locate a suspect, fugitive, material witness, or missing person, when the law allows.

Patient Rights Under Mental Health Bill of Rights

Core dignity and information rights

The New Hampshire Mental Health Bill of Rights affirms your right to respectful care, to understand your diagnosis and treatment options, and to receive services in the least restrictive setting that meets your needs. You have the right to know who is involved in your care and why specific information is being collected.

Confidentiality, access, and amendment

You have the right to confidential records, to review most portions of your record, and to request corrections if something is inaccurate or incomplete. If a provider denies access to protect your safety or another person’s privacy, you may request a review of that decision and have a written statement of disagreement added to the file.

Written consent requirement and transparency

Except for the limited exceptions described above, providers must obtain your permission before sharing identifiable information. A clear Written Consent Requirement means an authorization should specify what will be released, to whom, for what purpose, for how long, and whether it allows re‑disclosure. You may revoke consent in writing at any time, and you are entitled to an accounting of certain non‑routine disclosures.

Supreme Court Ruling on Mental Health Records

Recognition of the psychotherapist‑patient privilege

The Supreme Court has recognized a strong psychotherapist‑patient privilege that protects therapeutic communications from routine disclosure in court. This doctrine reinforces that effective treatment depends on candid dialogue and that privacy is essential to that trust.

Impact on victims’ mental health records

For crime victims, the ruling underscored that therapy records are not open to fishing expeditions. Courts generally require a specific, fact‑based showing that the materials likely contain evidence essential to the case before even reviewing them privately (in camera). If any disclosure is warranted, judges typically limit it to the narrowest set of pages and impose protective orders to prevent wider spread.

How courts balance rights

When defendants seek access, judges weigh confrontation and due‑process rights against the victim’s privacy and privilege. The usual path, if any, is judicial screening rather than direct defense access, with strong safeguards and notice so the privilege holder can be heard.

Reporting Requirements

Child Abuse Reporting

All adults, including mental health professionals, must report suspected child abuse or neglect immediately. You do not need proof—reasonable suspicion triggers the duty. Reports should be made in good faith and include only what is necessary for child protection to act.

Vulnerable adults and elder protection

Providers must promptly report suspected abuse, neglect, or exploitation of elders or incapacitated adults. When you make such a report, disclose only information relevant to the safety concern and document the basis for your suspicion.

Duty to protect and warn

If a client poses a serious and imminent threat, disclose the least information necessary to prevent harm—often to potential targets, law enforcement, or emergency services. Document your risk assessment, consultations, decisions, and the rationale for any disclosure.

Health oversight and compliance

Responding to licensing board inquiries, payer audits, or quality reviews may be required by law or contract. Provide only the requested information, maintain logs of disclosures, and apply safeguards such as redaction when appropriate.

Consent for Disclosure

Elements of a valid authorization

A strong authorization satisfies the Written Consent Requirement by clearly identifying the recipient, the specific records or date range, the purpose, the expiration date or event, and the client’s signature and date. It should explain your right to revoke and warn that information disclosed may be subject to re‑disclosure by the recipient unless another law forbids it.

When consent is not required

Consent is not needed for certain exceptions: emergencies to prevent serious harm, Child Abuse Reporting, health oversight, or Court Ordered Disclosure. Even then, providers must disclose the minimum necessary and consider protective measures like redaction or limiting the scope.

Substance use and special protections

Substance use disorder information may carry additional federal protections that tighten redisclosure and consent rules. Build those requirements into your forms and workflows so you do not accidentally release specially protected data.

Rights of Minors

Mature Minor Consent

New Hampshire recognizes that some adolescents can understand risks and benefits well enough to consent to certain health services, including counseling. When Mature Minor Consent applies, providers document the youth’s decision‑making capacity, the scope of services, and any limits on confidentiality. In those cases, parents may not automatically access the specific therapy details.

Parental involvement and access

Outside of mature‑minor or self‑consent situations, parents or legal guardians usually control consent and access to a minor’s records. Providers may withhold specific details if disclosure would endanger the minor or another person, or if a court order limits parental access. Whenever possible, discuss confidentiality boundaries with the family at the outset.

School‑based services

Mental health information created in schools can fall under student privacy rules rather than health privacy rules. Ask how the program stores records and who can see them, and request that counseling notes be kept separate from general education files whenever the law allows.

Bottom line: New Hampshire mental health record privacy laws strongly protect confidentiality while carving out narrow exceptions for safety, court processes, and mandated reporting. Clear authorizations, careful documentation, and a defensible Record Destruction Schedule help you honor rights and comply with the law.

FAQs

What situations allow exceptions to mental health record confidentiality?

Exceptions arise for imminent risks of serious harm, mandated reports of suspected child or vulnerable‑adult abuse, valid court orders (often after in camera review), involuntary evaluation or commitment processes, health‑oversight activities, and certain public health or law‑enforcement requests. Even then, only the minimum necessary information should be disclosed, with safeguards whenever possible.

How does New Hampshire law protect mature minors' mental health records?

When a provider determines a youth meets mature‑minor criteria or another self‑consent rule applies, the minor may authorize counseling and limit parental access to the specific therapy content. Providers document capacity, explain confidentiality boundaries up front, and may share safety‑critical information without consent if there is a serious and imminent risk.

What are providers' obligations for reporting suspected abuse?

Providers must report suspected child abuse or neglect immediately to child protection authorities and promptly report suspected abuse, neglect, or exploitation of vulnerable adults to protective services. Reports should be made in good faith, include only necessary details, and be followed by thorough documentation in the clinical record.

How did the Supreme Court ruling affect access to victims' mental health records?

It affirmed strong protection for therapeutic communications and limited defense access to rare situations supported by a specific, fact‑based showing. Courts typically conduct private judicial screening first and, if anything is disclosed, restrict it to the narrowest set of pages under protective orders to safeguard the victim’s privacy.