Texas Mental Health Privacy Rules: When Can EAP Counseling Notes Be Shared with Employer Benefits Teams?

EAP Confidentiality Policies

Employee Assistance Programs deliver short‑term counseling, referrals, and crisis support. By default, what you discuss in EAP sessions is confidential. Texas Health and Safety Code provisions and other State Mental Health Privacy Laws, along with applicable federal rules, set strict limits on when EAP information can be used or disclosed.

Counseling notes are the clinician’s personal session notes that capture impressions and analysis. Providers typically keep these notes separate from the general clinical record because they receive heightened protection. Counseling Note Disclosure to an employer benefits team is not part of routine plan administration.

Whether an EAP is a HIPAA covered entity can vary, but Texas Health and Safety Code Chapter 611 protects mental health information regardless. Practically, EAPs do not release session content to employers without the employee’s explicit, written permission that meets all Written Consent Requirements.

Key principles that guide EAP privacy

• Only the minimum necessary information is shared for legitimate purposes.
• Counseling notes are treated as specially protected and are rarely disclosed.
• Administrative data (for example, de‑identified utilization counts) may be used for program oversight, but not the substance of sessions.

Exceptions to Confidentiality

Confidentiality is the rule, but limited Confidentiality Exceptions exist under State Mental Health Privacy Laws and the Texas Health and Safety Code:

• With the employee’s signed authorization that meets Written Consent Requirements and specifically allows Counseling Note Disclosure to the named recipient; even then, disclose only what is necessary.
• To prevent or lessen a serious and imminent threat to the health or safety of the employee or others, consistent with professional judgment and applicable law.
• To report suspected abuse, neglect, or exploitation of a child, elderly person, or adult with a disability, as required by Texas law.
• In response to a valid court order or subpoena, subject to privileges and scope limitations; disclosures are typically narrow and may be reviewed by a court before release.
• For quality review, compliance audits, or payment/health care operations where permitted; note that counseling/psychotherapy notes are generally excluded from such uses without a specific authorization.
• Clery Act Reporting in higher‑education settings involves non‑identifying crime statistics and safety alerts; it does not require sharing EAP counseling notes or personally identifying details.

Employer Access Restrictions

Employer benefits teams face firm boundaries. They may not access EAP counseling notes for employment or plan administration purposes. Under HIPAA plan‑sponsor “firewall” concepts and ADA/GINA confidentiality rules, any medical information an employer receives must be kept separate from personnel files and used only for limited, lawful reasons.

What employers may receive

• De‑identified, aggregate utilization reports to evaluate Employee Assistance Programs.
• Administrative confirmations (for example, eligibility, appointments kept) only when the employee has agreed and when necessary to coordinate benefits.
• Return‑to‑work or accommodation documentation that avoids clinical detail and is shared only with the employee’s consent.

What employers may not receive

• Session content, therapist impressions, or diagnoses contained in counseling notes.
• Substance use or mental health details absent a compliant, specific authorization.
• Information for hiring, performance, or disciplinary decisions.

Informed Consent Procedures

Before anything leaves the EAP, you need informed, voluntary, Written Consent that is specific to the records and the recipient. A valid authorization states what will be shared, with whom, for what purpose, for how long, and explains your right to revoke and the risk of re‑disclosure once information leaves the provider’s control.

For counseling/psychotherapy notes, federal privacy rules require a separate, explicit authorization; this cannot be bundled with general releases for treatment, payment, operations, plan enrollment, or employment decisions. Electronic signatures are acceptable when they meet legal standards, and you should receive a copy of anything you sign.

Best‑practice workflow for compliant releases

1. Explain the request’s purpose, alternatives, and the scope of information sought.
2. Specify exactly which records (for example, a brief summary vs. counseling notes) may be released.
3. Name the recipient precisely (for example, the employer benefits team or plan administrator).
4. Set an expiration date or event and describe revocation rights.
5. Document the discussion, file the authorization, and disclose only the minimum necessary.

EAP Record Maintenance

EAP providers should maintain counseling notes separately from the general record, restrict access to need‑to‑know staff, and log all disclosures. Encryption, secure transmission, and monitored access are standard safeguards under State Mental Health Privacy Laws.

Record retention in Texas follows licensure rules for the treating professional and applicable statutes, commonly ranging from five to seven years after the last service, with longer periods for minors. When records are destroyed, use secure methods that prevent reconstruction.

Clients generally have rights to access their health information, but not necessarily a provider’s raw counseling notes. When appropriate, a treatment summary can meet access needs without exposing specially protected notes.

Legal and Ethical Protections

Texas Health and Safety Code Chapter 611 protects the confidentiality of mental health records, while Chapter 181 (the Texas Medical Records Privacy Act) extends privacy requirements broadly within Texas. These State Mental Health Privacy Laws operate alongside HIPAA where applicable.

Texas evidentiary privileges and professional ethics (for counselors, social workers, psychologists, and physicians) reinforce confidentiality and limit compelled disclosure. Business‑associate agreements and the “minimum necessary” standard further restrict how information is used in plan operations.

In higher‑education workplaces, Clery Act Reporting focuses on non‑identifying crime statistics and safety alerts; professional counselors acting in that role are generally not required to disclose personally identifiable counseling information.

Mandatory Reporting Obligations

Texas law requires reporting suspected child abuse or neglect and the abuse, neglect, or exploitation of elderly or disabled adults. EAP providers may also disclose to appropriate persons or authorities when, in professional judgment, it is necessary to prevent or lessen a serious and imminent threat to health or safety.

When a report or protective disclosure is made, document the basis, the minimum information disclosed, and any follow‑up. Sharing with an employer benefits team is rarely the right channel; disclosures typically go to protective services, law enforcement, or medical personnel as the situation warrants.

Bottom line: under Texas Mental Health Privacy Rules, EAP counseling notes are shared with employer benefits teams only with a clear, specific written authorization or when a precise law compels it. Otherwise, limit communications to de‑identified metrics and essential administrative data to preserve trust and comply with the Texas Health and Safety Code.

FAQs

What are the conditions for disclosing EAP counseling notes to employer benefits teams?

Disclosure occurs only when there is a valid, specific, time‑limited authorization from the employee that expressly permits Counseling Note Disclosure to the named benefits administrator, or when a law or court order compels it, or to avert a serious and imminent threat. Outside these narrow pathways, employers receive only de‑identified or administrative information.

How does informed consent affect EAP record sharing?

Informed consent controls what is shared, with whom, and why. A compliant authorization identifies the records, recipient, purpose, duration, revocation rights, and re‑disclosure risks. For counseling notes, you must sign a separate, explicit authorization; without it, the notes remain confidential.

Can an employer access EAP records without employee permission?

Generally no. Employer benefits teams cannot access EAP session content or counseling notes without the employee’s written authorization, and EAPs should not share details for employment decisions. Limited, de‑identified utilization data or necessary administrative facts may be shared as allowed by law, but not the substance of counseling sessions.

What legal protections govern EAP confidentiality in Texas?

Key protections include the Texas Health and Safety Code (notably Chapters 611 and 181), State Mental Health Privacy Laws, federal rules that give psychotherapy/counseling notes special protection, ADA and GINA requirements to keep medical information confidential in the workplace, and professional ethics and evidentiary privileges that limit disclosure.