New Mexico Anxiety Treatment Center Privacy Laws: A Patient’s Guide

What privacy protections apply at New Mexico anxiety treatment centers?

New Mexico’s confidentiality protections depend partly on the center’s services and each provider’s license. For counselors and therapists licensed or registered under the state Counseling and Therapy Practice Board, information obtained in the therapeutic context is confidential. They generally may disclose it only with your informed written consent or under specified exceptions. These New Mexico counseling confidentiality requirements continue after therapy ends. New Mexico’s counselor and therapist code of ethics

HIPAA may also apply if the center is a covered health care provider—generally, one that conducts certain electronic transactions—or works with a covered entity. HIPAA protects identifiable health information and requires covered entities to use safeguards for it. Its rules work alongside state law; they do not mean every disclosure is automatically permitted just because HIPAA allows it. HIPAA rules on disclosures without authorization

Psychotherapy notes receive special treatment under HIPAA when a mental health professional keeps them separately from the rest of your medical record. They are generally excluded from the ordinary right of access and usually require authorization for disclosure, subject to limited exceptions. Routine clinical documentation—such as diagnoses, treatment plans, and progress summaries—is not automatically a separate set of psychotherapy notes. HHS guidance on mental health information and psychotherapy notes

When can a center disclose your mental health information without consent?

For New Mexico counselors and therapists, the usual rule is informed written consent. State professional rules identify exceptions that include disclosures required by law, reports of suspected abuse of children or vulnerable adults, and disclosures necessary to address a clear and substantial risk of imminent serious harm to you or another person. The scope of a disclosure should be limited to the applicable legal or safety purpose. New Mexico’s confidentiality and data privacy rule

HIPAA also permits certain disclosures without an authorization, including disclosures required by law and certain public-health or abuse-reporting disclosures. For someone involved in your care or payment, a provider may sometimes share limited, relevant information under HIPAA when you have an opportunity to agree or object and do not object. State rules or the circumstances may impose additional limits. HIPAA’s permitted disclosure categories

A court order may also affect disclosure, but the rules depend on the type of record and proceeding. If your records are protected by 42 CFR Part 2, a subpoena alone generally does not authorize disclosure in a legal proceeding against you; Part 2 requires a qualifying court order and compulsory process, or your consent. See the additional protections below.

How can you access or correct your treatment records?

If HIPAA applies to the center, you generally may ask to inspect or obtain copies of information about you in its designated record set. That can include clinical and billing records, but generally not separately maintained psychotherapy notes. A covered entity usually must respond within 30 days; it may take one additional 30-day extension if it gives you written notice explaining the delay and the expected response date. HIPAA’s right of access and response deadlines

New Mexico counselors and therapists must provide you with a summary of your clinical record upon written request. Ask the center’s records office how to submit a request and whether you want a summary, inspection, or a copy. HIPAA also gives covered individuals a right to request an amendment to information in a designated record set that is inaccurate or incomplete. A provider may deny an amendment request for specified reasons, such as when it considers the record accurate and complete; if it denies your request, you can submit a statement of disagreement. New Mexico’s written-request rule for clinical-record summaries and HIPAA’s amendment process

When HIPAA applies, a covered entity generally must act on an amendment request within 60 days and may take one additional 30-day extension with written notice. Keep a copy of your request and any response. If you are requesting records for someone else, the center may ask you to show that you are legally authorized to act for that person.

What must a written authorization for disclosure include?

A clear authorization helps you understand what the center may share and with whom. For a HIPAA authorization, the form generally must identify:

• The information to be disclosed, described specifically enough to identify it.
• The person or organization authorized to disclose it and the person or organization receiving it.
• The purpose of the disclosure and an expiration date or event.
• Your signature and the date; if a personal representative signs, the form must describe that person’s authority.

The authorization must also explain your right to revoke it in writing, whether signing can be required as a condition of treatment or payment, and that the recipient may be able to redisclose information so it is no longer protected by HIPAA. It must be written in plain language, and the covered entity must give you a copy of the signed form. These are key elements of informed consent for mental health records disclosure. HIPAA’s authorization requirements

Under New Mexico’s counselor and therapist rules, disclosure must stay within the terms of the written waiver. For couples, family, or group therapy, the rule may require signatures from all legally competent participants before information covered by the waiver is released. For Part 2 records, additional federal consent requirements may apply.

How are records secured and how long are they retained?

New Mexico counselors and therapists must take reasonable measures to protect records and written data from unauthorized access, and must store and dispose of records in a way that protects confidentiality. If HIPAA applies, its Security Rule also requires safeguards for electronic protected health information. Its technical safeguards include access controls, audit controls, and protections against improper alteration or unauthorized access during transmission. Encryption is one listed safeguard, with implementation specifications that may be addressable based on the rule’s requirements. New Mexico’s counselor and therapist security rule and HIPAA technical safeguards

There is not one mental health record retention period that applies to every provider in New Mexico. Counselors and therapists licensed or registered under the Counseling and Therapy Practice Board must ensure that records are maintained and secured for at least six years after the last service. Social workers have a separate rule requiring at least seven years after the last service, or longer if another law requires it. Physicians must retain records they own for at least ten years after the last treatment date, with a separate rule for patients who were minors. Ask which license governs your clinician and whether a facility or other applicable requirement sets a longer period. Counselor and therapist retention rule, social worker record rule, and New Mexico Medical Board record-management rule

Can a center withhold records because of unpaid fees?

Generally, a New Mexico counselor or therapist may not withhold records under their control that are requested for your treatment solely because you have not paid. If HIPAA applies, a covered entity also may not deny your access to your protected health information because you owe for health care services. The center may have rules allowing a reasonable, cost-based fee for producing copies, subject to HIPAA’s limits, but an unpaid treatment bill is not a valid reason to block access. New Mexico’s rule on withholding treatment records and HHS guidance on access and unpaid bills

What additional protections apply to substance use disorder records?

42 CFR Part 2 confidentiality applies to records created by a federally assisted program that provides substance use disorder diagnosis, treatment, or referral for treatment. It does not automatically cover every record that mentions substance use. If a center or program is subject to Part 2, records that identify you as having or having had a substance use disorder generally cannot be used or disclosed except as Part 2 permits, including with your consent or under a specific exception. Current 42 CFR Part 2 regulations

Part 2 generally bars using or disclosing protected records in legal proceedings against you without your consent or a qualifying court order. A subpoena alone is not enough: the regulations generally require an authorizing court order as well as a subpoena or other compulsory legal process to compel disclosure. A court order for substance use disorder records must meet Part 2’s specific criteria and limits. Part 2 rules on court orders and legal proceedings

Part 2’s updated requirements have applied since February 16, 2026. If you are unsure whether your records are covered, ask the program’s privacy contact for its notice and an explanation of how it handles SUD records. HHS overview of Part 2 and its compliance date

In short, New Mexico law and federal rules protect treatment information, but consent exceptions, access rights, and retention periods depend on the provider’s license and the type of record. Ask the center’s privacy contact which rules apply and how to make a written request.

FAQs.

Can an anxiety treatment center disclose my information without written consent?

Sometimes. New Mexico counselors and therapists generally need informed written consent, but state rules recognize exceptions such as disclosures required by law, certain abuse reports, imminent serious-harm situations, and qualifying court orders. HIPAA and Part 2 have additional rules depending on the center and records involved. Ask the center what legal basis applies to a particular disclosure.

Can I request a copy or correction of my treatment records?

Yes. New Mexico counselors and therapists must provide a summary of your clinical record upon written request. If HIPAA applies, you generally may request access to information in the designated record set and ask for an amendment if information is inaccurate or incomplete. Separate psychotherapy notes are generally excluded from HIPAA’s ordinary access right.

How long must a New Mexico therapist retain client records?

For counselors and therapists licensed or registered under the New Mexico Counseling and Therapy Practice Board, the minimum is six years after the last date of service. Other provider licenses have different rules—for example, New Mexico’s social worker rule sets a seven-year minimum. Longer periods may apply, so check your clinician’s license and the center’s retention policy.

Can a treatment center withhold records because I owe money?

Generally, no. New Mexico counselors and therapists may not withhold records requested for your treatment solely because payment has not been received. If HIPAA applies, a covered entity also cannot deny your access to your protected health information because you have an unpaid health care bill.