Texas Mental Health Record Privacy Laws Explained: Your Rights, Releases, and Exceptions

Texas mental health record privacy laws set strict rules for how your diagnosis, treatment notes, and communications are kept, used, and shared. This guide explains the baseline of confidentiality, when releases are permitted, the limited confidentiality exceptions, how court-ordered disclosure works, your access rights, access denial procedures, and record retention periods.

Confidentiality of Mental Health Records

In Texas, mental health records are confidential by default. Providers, facilities, and health plans must protect your information and may disclose only when a law permits or you authorize it. The “minimum necessary” standard applies to routine uses, meaning only the information needed for a specific purpose is shared.

Psychotherapy notes receive heightened protection under federal law and are typically maintained separately from the rest of your record. They generally require a separate, specific authorization before release. Administrative and clinical documents such as treatment plans, medications, and progress notes are protected but may be shared under defined rules explained below.

Confidentiality exceptions exist, but they are narrow. Most disclosures happen either with your written permission or to meet clearly defined treatment, safety, reporting mandates, or legal requirements.

Disclosure with Patient Consent

Your written authorization allows a provider to release specified mental health information to named recipients for a defined purpose. A valid authorization should be voluntary, understandable, and time‑limited.

Patient Consent Requirements

• What will be disclosed: a clear description of the information (for example, dates of service, diagnoses, or test results).
• Who may disclose and who may receive it: the specific provider or facility and the recipient(s).
• Purpose: why the disclosure is needed (care coordination, legal matter, personal use).
• Expiration: a date or event when the authorization ends.
• Signature and date: signed by you or a legally authorized representative (such as a parent, guardian, or health care proxy).
• Revocation: a statement that you may revoke in writing at any time, except to the extent already relied upon.
• Special rule for psychotherapy notes: typically requires a separate, dedicated authorization.

You can request electronic copies when feasible and may direct a copy to a third party you designate. Providers should keep documentation of your authorization and any revocation.

Disclosure Without Patient Consent

Texas mental health record privacy laws and HIPAA permit certain disclosures without written permission. These confidentiality exceptions are limited to situations where sharing is necessary for care, safety, or compliance with law.

• Treatment, payment, and health care operations: coordination among treating professionals; billing; quality improvement; credentialing; and other operational needs.
• Reporting mandates: required reports of suspected child abuse, neglect, or exploitation; abuse, neglect, or exploitation of an elderly or disabled adult; certain threats to facility safety; and other mandated public‑health or safety reports.
• Serious and imminent threats: disclosures to prevent or lessen a serious and imminent threat to health or safety, consistent with professional judgment (for example, contacting law enforcement or potential targets).
• Legal and regulatory compliance: disclosures to health oversight agencies, licensing boards, auditors, or as otherwise required by law.
• Law enforcement and administrative processes: limited disclosures to locate a missing person, respond to a valid request tied to a specific event, or comply with lawful processes that meet privacy standards.
• Individuals involved in your care: limited information to family or others involved in your care or payment if you agree verbally or do not object, or if you are incapacitated and disclosure is in your best interests.
• Deceased individuals: to a personal representative, coroner, or medical examiner, or for organ and tissue donation as permitted by law.

Disclosure Pursuant to Court Order

Court‑ordered disclosure is permitted when a judge authorizes release after balancing privacy against the needs of the proceeding. A subpoena alone usually is not enough for mental health records unless accompanied by your authorization or a qualifying court order.

For court‑ordered disclosure, providers should verify the order’s scope, seek protective orders when appropriate, and produce only the minimum necessary information. Courts often limit access (for example, in‑camera review, sealed records, or redaction) to preserve confidentiality while meeting the requirements of a court‑ordered disclosure.

Patient's Right to Access Records

You have the right to inspect and obtain a copy of your mental health records kept by a covered entity. Texas timelines are strict: providers generally must respond not later than 15 business days after receiving your written request, either by providing access, sending copies, or issuing a written explanation of any denial or delay.

You may request a paper or electronic copy if readily producible and may direct a copy to a third party. Reasonable, cost‑based copy fees may apply. While psychotherapy notes are typically excluded from direct access, you may request a clinical summary addressing your treatment in a way that protects sensitive materials.

You also may request amendments to correct inaccuracies. If a provider denies an amendment, you can submit a written statement of disagreement that becomes part of your record.

Denial of Access to Records

Access can be denied in limited circumstances and must follow clear access denial procedures. Common grounds include a determination by a licensed professional that access is reasonably likely to endanger life or physical safety; the presence of confidential third‑party information; material obtained under a promise of confidentiality; information compiled for legal proceedings; and psychotherapy notes.

Access Denial Procedures

• Written notice: the provider must give a timely, written denial stating the specific reason and your rights.
• Partial access: releasable portions should be provided, with redactions where appropriate.
• Review option: when denial is based on endangerment, you may request an independent review by another licensed professional not involved in the original decision.
• Alternatives: you may authorize release to another treating professional or request a summary or explanation if direct access is clinically inappropriate.
• Further recourse: you can file complaints with the provider, relevant Texas licensing boards, or federal authorities if you believe your rights were improperly restricted.

Retention of Records

Texas record retention periods can vary by license type, practice setting, and payer rules, but common baselines apply. Providers should maintain mental health records so they are complete, retrievable, and secure throughout the retention period and during any transition (such as relocation or closure).

Record Retention Periods

• Adults: many Texas professional boards require at least seven years from the last date of service.
• Minors: keep records until the patient turns 21, and often no less than seven years from the last date of service—whichever is longer.
• Programs and contracts: Medicare, Medicaid, and certain contracts may impose longer retention; follow the strictest rule that applies.
• Secure disposal: when the period ends, records must be destroyed securely (for example, shredding or certified digital destruction) to prevent unauthorized disclosure.

FAQs

What are the circumstances for disclosure without patient consent?

Permitted circumstances include treatment, payment, and health care operations; reporting mandates (such as suspected abuse or required public‑health reports); preventing or lessening a serious and imminent threat; compliance with health oversight and licensing investigations; limited law‑enforcement requests that meet legal standards; disclosures to individuals involved in your care when appropriate; and certain disclosures after death to a personal representative, coroner, or for donation and identification purposes.

How long must mental health records be retained in Texas?

Retention periods depend on provider type and setting, but a common Texas baseline is at least seven years for adults from the last date of service, and for minors, until age 21 and often no less than seven years from the last date of service—whichever is longer. If other laws or contracts require longer retention, follow the strictest timeframe.

Can a patient access their mental health records?

Yes. You may inspect or receive copies, usually in your preferred paper or electronic format if readily producible. Texas providers generally must respond within 15 business days. Some items—such as psychotherapy notes or material that would likely endanger safety—may be withheld, but you can often receive a summary or have another professional review the record at your request.

What happens if there is an unauthorized disclosure of mental health information?

Providers must mitigate harm, investigate, and follow breach‑notification rules, which may include notifying you, regulators, and in some cases the media. Unauthorized disclosure penalties can include civil fines, corrective‑action plans, reporting to licensing boards, and potential criminal liability for egregious or intentional violations.