Oregon Sport Psychology Practice Privacy Laws: A Guide

Privacy in sport psychology depends on the kind of service you provide, who the client is, and whether the work involves mental health treatment or performance consulting. Oregon privilege rules, professional standards, and HIPAA can apply in different ways; a coach or team does not automatically gain access to an athlete’s communications because it pays for services. This guide is general information, not legal advice.

When does psychotherapist-client privilege protect sport psychology communications in Oregon?

Oregon’s psychotherapist-client privilege generally covers confidential communications made for diagnosing or treating a person’s mental or emotional condition. A patient may refuse to disclose those communications and may prevent others from disclosing them in a proceeding. The statute defines a psychotherapist to include a person licensed or otherwise authorized to diagnose or treat a mental or emotional condition. Oregon Revised Statutes, ORS 40.230

That privilege is not a blanket rule for every conversation with a sport psychologist. Whether it applies depends on the provider’s role, the purpose of the communication, and the circumstances. A clinical discussion about anxiety or depression may qualify; a performance-only conversation about tactics may not. The privilege chiefly concerns compelled disclosure in proceedings, so it should not be treated as the only rule governing everyday confidentiality.

Oregon psychologists must also follow professional confidentiality standards. When services are provided within a team or other organization, the psychologist should explain at the outset who the client is, who may receive information, and how the organization may use it. Oregon Board of Psychology statutes, rules, and ethics code

How do Oregon law and HIPAA govern protected health information?

HIPAA applies to covered entities and their business associates—not automatically to every person who provides sport psychology or uses email or video calls. A psychologist is generally a covered health care provider when the psychologist electronically transmits health information in connection with a transaction for which HHS has adopted a standard, such as certain insurance transactions. HHS guidance on covered entities

When HIPAA applies, protected health information (PHI) generally may be used or disclosed only as the Privacy Rule permits or requires, or as the individual authorizes. The rule allows certain disclosures for treatment, payment, and health care operations, as well as disclosures under specified legal exceptions. Oregon privacy requirements and professional standards may impose additional limits. HHS summary of the HIPAA Privacy Rule

Most mental health information in a clinical record receives HIPAA’s general PHI protections. Separately maintained psychotherapy notes—notes documenting or analyzing the contents of counseling sessions—receive special protection and generally require the individual’s authorization for disclosure, subject to limited exceptions. Summaries of diagnosis, symptoms, treatment plans, and progress are not psychotherapy notes simply because they concern mental health. HHS guidance on mental health information and psychotherapy notes

A coach is not automatically entitled to an athlete’s PHI because the team pays for services. Before sharing identifiable information, determine who the client is, what the athlete was told about the arrangement, and whether a valid authorization or a specific legal exception applies. Share only what is appropriate for the purpose, and do not assume permission to share ordinary clinical information also permits sharing separately maintained psychotherapy notes.

What records must Oregon psychologists retain and for how long?

Oregon’s psychology rule requires a psychologist providing professional services to an individual client, or services billed to a third-party payer, to retain professional records for at least seven years from the date of the last service. The required records include identifying information, the presenting problem or purpose or diagnosis, fee arrangements, dates and substance of billed or service-count contacts, test or evaluation results and basic test data, formal consultation notes, reports, client releases, and signed informed consents. OAR 858-010-0060, Psychological Records

The seven-year period is a minimum under this rule, not a universal maximum. Psychologists should also check whether other laws, contracts, payer requirements, or organizational policies call for a longer period. The rule requires arrangements to maintain confidential client records and provide access to them if the psychologist dies or becomes incapacitated.

How should psychologists explain privacy risks and obtain consent for electronic services and recordings?

Oregon requires psychologists to follow the APA Ethical Principles of Psychologists and Code of Conduct. Those standards call for discussing confidentiality limits and foreseeable uses of information at the beginning of the professional relationship, revisiting them when circumstances change, and informing clients about privacy risks and confidentiality limits when services or information are provided electronically. Oregon Board of Psychology ethics-code requirements, Standards 4.02–4.03

Explain practical risks before beginning electronic mental health services: for example, who might overhear a session, whether devices or messages may be accessible to others, and what steps the client can take to use a private location and secure device. Clarify who can access information, what the team or organization may receive, and what confidentiality exceptions apply. Oregon’s Psychology Board says it does not require a special teletherapy certification, while emphasizing that psychologists must have competence in their areas of practice. Oregon Board of Psychology teletherapy guidance

Recording is a separate issue from providing services by video. Before recording a client’s voice or image in a professional service, psychologists must obtain permission from the individuals involved or their legal representatives. Explain the recording’s purpose, who will access it, how it will be stored and used, and whether declining will affect services; document the permission. APA Ethical Standard 4.03, Recording

What privacy rights apply to minors receiving mental health services?

In Oregon, a minor age 14 or older may obtain outpatient diagnosis or treatment for a mental or emotional disorder from a psychologist and certain other providers without parental knowledge or consent. This rule concerns qualifying mental health treatment; it does not automatically cover every performance-coaching service. Oregon Revised Statutes, ORS 109.675

For treatment under that statute, the provider generally must involve the minor’s parents before treatment ends unless the parents refuse or there are clear clinical indications to the contrary, which must be documented. The provision does not apply in specified circumstances, including when a parent sexually abused the minor or the minor is emancipated.

Consent to treatment does not mean a minor’s information is always confidential from every other person, nor does it give parents automatic access to everything. Oregon law permits certain disclosures in defined circumstances. For example, it provides for disclosure and safety planning when a provider assesses a minor to be at serious and imminent risk of a suicide attempt, subject to statutory conditions and exceptions. Oregon Revised Statutes, ORS 109.680

Discuss these boundaries with the minor in age-appropriate language at the outset. If a team, coach, parent, or organization is involved, explain in advance what information may be shared, with whom, and under what circumstances.

When must or may a psychologist disclose confidential information for reporting or safety?

Oregon generally requires a psychologist who has reasonable cause to believe that a child the psychologist encounters has suffered abuse, or that a person encountered has abused a child, to report immediately. The statute includes an exception for information communicated by a person when the communication is privileged under Oregon’s evidence statutes. The reporting duty is personal to the official, so an internal report to a team or employer does not replace a required report. Oregon Revised Statutes, ORS 419B.010

Oregon law also addresses communications revealing a clear and serious intent to commit certain crimes involving physical injury, a threat to someone’s physical safety, sexual abuse, or death. Under specified conditions—including the psychologist’s professional judgment that the person poses a danger and the psychologist making a report—those communications are not privileged. The statute does not itself create a duty to report every such communication. Oregon Revised Statutes, ORS 40.252

Separately, when HIPAA applies, a covered entity may disclose the PHI it believes necessary to prevent or lessen a serious and imminent threat to a person or the public to someone reasonably able to reduce the threat. Any disclosure must also be consistent with applicable law and professional standards. HHS guidance on serious and imminent threats

In short, protect routine athlete communications, explain privacy limits before services begin, and do not treat a team’s payment as permission to share clinical details. Apply Oregon privilege, record-retention, minor-consent, reporting, and safety rules to the specific service and circumstances.

FAQs.

Can a sport psychologist in Oregon share information with a coach without client authorization?

Generally, the psychologist should not assume a coach may receive identifiable clinical information simply because the team pays for the service. Obtain appropriate authorization or consent unless a specific law permits or requires disclosure. Any sharing should also fit the confidentiality terms explained to the athlete and comply with applicable Oregon law and HIPAA, when HIPAA applies.

How long must Oregon psychologists retain professional records?

Oregon’s psychology rule requires at least seven years from the date of the last service for covered professional records. Other applicable requirements may call for a longer period.

Can a minor age 14 or older consent to outpatient mental health services in Oregon?

Yes. A minor age 14 or older may obtain qualifying outpatient diagnosis or treatment for a mental or emotional disorder from a psychologist without parental knowledge or consent. The law generally requires parent involvement before treatment ends unless an exception applies; it does not create an unlimited guarantee of confidentiality.

When may a psychologist disclose confidential information to address a safety risk?

Depending on the circumstances, Oregon law may remove privilege for specified communications involving a clear and serious intent to commit certain crimes. If HIPAA applies, it permits disclosure of necessary PHI to someone reasonably able to lessen a serious and imminent threat. For a minor assessed to be at serious and imminent risk of a suicide attempt, Oregon law also sets out specific disclosure and safety-planning requirements and exceptions.