Who Can Access a Minor’s Medical Records in Alabama? Laws, Rights, and Exceptions

Parental Rights to Minor’s Medical Records

The general rule after October 1, 2025

Alabama law now presumes that a parent or legal guardian may access a minor child’s health information on request. Effective October 1, 2025, Section 22-8-12 directs that health care providers and governmental entities must not deny a parent access unless a court order prohibits it or the parent is under investigation for a crime against the child. In Alabama, a “minor” is generally anyone under age 19, the state’s age of majority. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

How HIPAA fits

Under HIPAA, parents are typically a minor’s “personal representative” and may access the child’s protected health information unless an exception applies (for example, when state law lets the minor consent on their own to specific services, or when disclosure could endanger the child). Alabama’s updated statutes preserve HIPAA’s framework while establishing a strong default rule favoring parental access. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/516/where-hipaa-applies-does-it-allow-a-health-care-provider-to-disclose-information-to-the-parents-of-a-teen/index.html?utm_source=openai))

Divorced or separated parents

Unless a court order or statute says otherwise, Alabama law makes medical and related records “equally available to both parents,” regardless of custody arrangements. Providers should request and follow any court orders that limit a parent’s access. ([law.justia.com](https://law.justia.com/codes/alabama/title-30/chapter-3/article-7/section-30-3-154/?utm_source=openai))

Exceptions for Reproductive and Mental Health Services

When minors can consent on their own

Alabama law expressly allows “any minor” to consent to services to determine or treat pregnancy, sexually transmitted infections, drug dependency, alcohol toxicity, and any reportable disease; it also allows services to prevent or determine pregnancy (for example, pregnancy testing). ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

What parents can see after consent

Even when minors can consent to those services, Alabama’s 2025 update generally prevents providers from denying a parent’s access to the associated records unless a court order bars access or the parent is the subject of a qualifying criminal investigation. This represents a significant shift toward parental access across most contexts. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

Federal programs and stricter confidentiality

Some federal laws preempt state rules and can limit parental access: Title X family planning projects must keep a minor’s services confidential and may not require parental consent or notify parents; federally assisted substance use disorder programs are governed by 42 CFR Part 2, which—when state law lets the minor consent to treatment—requires the minor’s own written consent before records can be disclosed. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/42/59.10?utm_source=openai))

Retention Period for Minor's Medical Records

Physician practices

Alabama’s Board of Medical Examiners requires physicians to retain a minor’s medical record for at least two years after the patient reaches the age of majority (19) or seven years from the last professional contact—whichever period is longer. Immunization records not transmitted to the state registry follow the same “longer of” rule. ([albme.gov](https://www.albme.gov/resources/licensees/medical-records/))

Hospitals and other facilities

Facility-specific rules may differ. For example, certain licensed facilities require records of minors to be kept for six years after the patient reaches the legal age, with hospitals controlling release under applicable law, court orders, or subpoenas. Providers should confirm the retention rule that applies to their license type. ([law.cornell.edu](https://www.law.cornell.edu/regulations/alabama/Ala-Admin-Code-r-420-5-2-.02?utm_source=openai))

Special items

X-rays and other imaging products must be kept at least five years (mammography images and reports: ten years), provided separate interpretive records exist. ([albme.gov](https://www.albme.gov/resources/licensees/medical-records/))

Confidentiality and Authorized Release

Who can authorize release

For most care involving minors under 19, a parent or legal guardian may authorize disclosure and request copies. Following the 2025 update, providers generally may not refuse a parent’s access unless a court order prohibits release or the parent is under investigation for a crime against the child. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

HIPAA basics you should know

HIPAA allows disclosures without a written authorization for treatment, payment, and health care operations, but requires a HIPAA-compliant authorization for most other purposes. When state law allows a minor to consent to specific services independently, HIPAA may treat the minor as controlling access to that subset of records. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/516/where-hipaa-applies-does-it-allow-a-health-care-provider-to-disclose-information-to-the-parents-of-a-teen/index.html?utm_source=openai))

Psychotherapy notes are different

Neither patients nor personal representatives (including parents) have a HIPAA right of access to “psychotherapy notes”—a narrowly defined category of a mental health professional’s separate counseling notes—although other parts of the mental health record remain accessible under HIPAA and state law. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2094/does-parent-have-right-receive-copy-psychotherapy-notes-about-childs-mental-health-treatment.html?utm_source=openai))

Copying costs and practical steps

Alabama recognizes reasonable copy fees for medical records, and the state board offers guidance on honoring requests, including summary copies when appropriate. Ask the provider about accepted request formats and processing times. ([albme.gov](https://www.albme.gov/resources/licensees/medical-records/))

Reporting Obligations for Certain Diseases

Mandatory reporting to public health

Alabama requires reporting of notifiable diseases (including many STIs) to the Alabama Department of Public Health. ADPH, as a public health authority, may receive protected health information for surveillance and interventions without the patient’s (or parent’s) authorization under HIPAA. ([alabamapublichealth.gov](https://www.alabamapublichealth.gov/std/report-a-case.html?utm_source=openai))

Mental Health Records Access for Minors Aged 14 to 19

Consent thresholds and parental authority

As of October 1, 2025, minors under 16 cannot receive mental health services without written parental consent. At ages 16 through 18, minors may consent to medical, dental, and mental health services, but parents may still authorize treatment—even over the minor’s objection—if a mental health professional agrees intervention is necessary and appropriate. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

Record access for mental health care

Alabama’s mental health statute states that a minor’s mental health record access “will follow HIPAA.” In practice, when a 16–18-year-old legally consents to mental health services, HIPAA may permit restricting parental access to those specific records, subject to professional judgment and safety exceptions. Outside that carve‑out, Alabama’s general rule still favors parental access unless a court order or qualifying investigation limits it. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

Psychotherapy notes

Even when parents may access a minor’s mental health information, psychotherapy notes remain specially protected and are not subject to a right of access under HIPAA. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2094/does-parent-have-right-receive-copy-psychotherapy-notes-about-childs-mental-health-treatment.html?utm_source=openai))

Public Records Law and Medical Records Access

Medical records are not open records

Alabama’s Public Records Law gives broad access to “public writings,” but health regulations clarify that medical or clinic records, notifiable disease records, and epidemiologic investigation files are not public records and are not open to general inspection. ([law.justia.com](https://law.justia.com/codes/alabama/title-36/chapter-12/article-3/section-36-12-40/?utm_source=openai))

Practical implications

Members of the public cannot obtain a child’s medical file through a public records request. Parents, by contrast, pursue access directly with the provider under Alabama’s parental access rule, HIPAA, and any applicable federal confidentiality statutes. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

Conclusion

In Alabama, parents generally have robust rights to access a minor’s medical records, reinforced by a 2025 law change, while HIPAA and federal programs (Title X, 42 CFR Part 2) preserve confidentiality for certain services. Retention periods, reporting rules, and special protections for psychotherapy notes further shape how records are kept and shared. Knowing where Alabama’s minor consent laws, parental access rights, and confidentiality statutes intersect helps you request or protect health information confidently. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

FAQs.

Who has legal access to a minor's medical records in Alabama?

By default, a parent or legal guardian does—providers and agencies generally cannot deny access unless a court order prohibits it or the parent is under investigation for a crime against the child. HIPAA exceptions may apply to specific services a minor consents to independently. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

Are parents allowed to access reproductive health records of their minor children?

In most Alabama settings, yes—parental access is the default unless a court order restricts it or a qualifying investigation is underway. However, Title X family planning projects must keep minor services confidential and may not require or notify parents, and HIPAA/Part 2 can further limit disclosures in some contexts. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))

How long must Alabama healthcare providers retain minor's medical records?

Physician practices must keep a minor’s record for at least two years after the patient turns 19, or seven years from the last visit—whichever is longer. Some facilities have different rules (for example, certain licensed facilities require at least six years after the patient reaches legal age). ([albme.gov](https://www.albme.gov/resources/licensees/medical-records/))

Can minors consent to their own mental health treatment in Alabama?

Under current law, minors under 16 need written parental consent. At ages 16–18, minors can consent themselves, though a parent may still authorize treatment if a mental health professional finds it necessary and appropriate. Access to the resulting records follows HIPAA’s rules for minors. ([alison.legislature.state.al.us](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2025RS/SB101-eng.pdf))