North Carolina Mental Health Record Privacy Laws Explained: Your Rights and Provider Obligations

Confidentiality of Mental Health Records

North Carolina’s Mental Health, Developmental Disabilities, and Substance Abuse Act of 1985 (Chapter 122C) establishes strong confidentiality protections for client records. Under General Statutes § 122C-52, information acquired in attending or treating a client is confidential and is not a public record under the state’s public records law. These confidentiality protections apply across mental health, developmental disabilities, and substance use services delivered by covered facilities. ([ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/html/bychapter/chapter_122c.html?utm_source=openai))

As a rule, no one with access to confidential information may disclose it unless a specific statute authorizes the disclosure. The law also recognizes that federal requirements can be stricter; if a federal statute or regulation applicable to a client bars disclosure, that federal rule controls. In short: state confidentiality protections are the baseline, and they operate alongside any applicable federal privacy rules. ([library.ncleg.gov](https://library.ncleg.gov/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-52.pdf))

Client Access to Mental Health Information

You have the right to see the confidential information in your record upon request. A provider may withhold only those portions that, in the judgment of the attending physician or facility director, would be injurious to your physical or mental well‑being. If something is withheld, you may direct that information to a physician or psychologist of your choice instead. ([ncleg.net](https://www.ncleg.net/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-53.pdf))

A legally responsible person (such as a guardian) generally has similar access, subject to the same “injurious” limitation. In the client’s best interest, a facility may share basic admission or discharge details with next of kin. An adult client may also request that information be disclosed to an attorney. These client-access and consent rules sit in § 122C‑53. ([ncleg.net](https://www.ncleg.net/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-53.pdf))

Provider Disclosure Requirements

Disclosures with client consent

A facility may disclose confidential information when the client—or the legally responsible person—gives written consent. That authorization must include the core elements recognized by federal privacy regulations and is revocable by the person who consented. This is the primary pathway for routine releases of mental health information. ([ncleg.net](https://www.ncleg.net/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-53.pdf))

Disclosures for care coordination, operations, and payment

Providers can share information without written consent in clearly defined situations that support care delivery. Examples include coordination of treatment and quality improvement with the Department (the “Secretary”), exchanges among qualifying facilities for payment activities, and in‑facility exchanges among staff involved in a client’s care. Facilities may also use support service providers (for example, data processing or labs) if there is a written agreement that requires safeguarding the information and prohibits further disclosure. Each of these disclosures must be limited to what’s necessary for the stated purpose. ([library.ncleg.gov](https://library.ncleg.gov/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-55.pdf))

Disclosures to family and designated supports

With the client’s consent (written—or oral with a witness in specified circumstances), a responsible professional may keep next of kin or a designated person informed about diagnosis, medications and side effects, progress, and key transitions like admission, transfer, leaving against medical advice, discharge, and post‑discharge appointments. Additional information may be shared upon a written request when the professional determines it is therapeutically appropriate and the requester has a legitimate role in services. ([ncleg.gov](https://ncleg.gov/EnactedLegislation/Statutes/HTML/ByArticle/Chapter_122C/Article_3.html))

Disclosure Without Consent

Court and legal processes

Facilities must disclose confidential information when ordered by a court. In court‑ordered mental examinations, results are provided to the court and the parties. In involuntary commitment or certain voluntary admission proceedings, specified examination results and treatment information are shared with counsel and the court, while confidentiality is otherwise preserved. Providers must also comply with mandatory reporting laws for suspected child abuse/neglect and disabled adult abuse. ([ncleg.gov](https://ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_122C/GS_122C-54.html))

Safety, emergencies, and custody settings

When a responsible professional believes there is an imminent danger to the health or safety of the client or another person—or a likelihood of a felony or violent misdemeanor—confidential information may be disclosed to mitigate the risk. Limited information may also be shared with emergency medical providers to meet an emergency. For people in prisons or county jails, facilities may exchange information with corrections or the sheriff’s office to ensure treatment; consent is not required, and redisclosure is restricted. ([ncleg.gov](https://ncleg.gov/EnactedLegislation/Statutes/HTML/ByArticle/Chapter_122C/Article_3.html))

Research and planning

State law permits carefully controlled disclosures for research, evaluation, and planning purposes under the Department’s oversight. These exceptions are narrow and operate with safeguards to protect client identity and privacy. ([ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-56.pdf?utm_source=openai))

Legal Penalties for Unauthorized Disclosure

Unauthorized disclosure has criminal consequences. Disclosing confidential mental health information to someone not authorized to receive it is a Class 3 misdemeanor punishable only by a fine of up to $500. This penalty appears directly in General Statutes § 122C‑52. ([library.ncleg.gov](https://library.ncleg.gov/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-52.pdf))

Balancing Privacy and Public Safety

North Carolina’s framework balances robust confidentiality protections with targeted, safety‑focused exceptions. Professionals may act on credible safety threats, but disclosures must be purpose‑driven and limited to what’s necessary—such as in emergencies or when coordinating care in custody settings. These provisions help you receive needed services while preserving your privacy to the greatest extent the law allows. ([ncleg.gov](https://ncleg.gov/EnactedLegislation/Statutes/HTML/ByArticle/Chapter_122C/Article_3.html))

FAQs

What rights do clients have regarding their mental health records?

You can request access to your confidential record. A provider may withhold only material judged injurious to your well‑being, and you may direct withheld information to a physician or psychologist of your choice. These rights, along with rules for access by a legally responsible person and attorney disclosures at your request, are set out in § 122C‑53. ([ncleg.net](https://www.ncleg.net/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-53.pdf))

How can providers disclose mental health information?

Most releases require your written consent that includes federally recognized authorization elements. Without consent, providers may share limited information for treatment coordination, quality improvement, payment, and in‑facility care team communications, and may use support service providers under confidentiality agreements. Family updates require your consent, subject to specific rules. ([ncleg.net](https://www.ncleg.net/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-53.pdf))

When is disclosure without consent permitted?

Examples include court orders; sharing examination results in commitment proceedings; responding to imminent safety threats or medical emergencies; exchanges with prisons, jails, or sheriffs to ensure treatment; mandatory abuse/neglect reporting; and tightly controlled research and planning uses. ([ncleg.gov](https://ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_122C/GS_122C-54.html))

What are the penalties for unauthorized disclosure?

Disclosing confidential information to someone not authorized to receive it is a Class 3 misdemeanor, punishable only by a fine of up to $500, under General Statutes § 122C‑52. These criminal penalties exist alongside the Act’s broader confidentiality protections. ([library.ncleg.gov](https://library.ncleg.gov/EnactedLegislation/Statutes/PDF/BySection/Chapter_122C/GS_122C-52.pdf))