Can a Psychiatrist See Your Medical History? Rules and Rights

Yes, a psychiatrist can see your medical history, and under HIPAA much of it can move to them without your written authorization. Federal rules let health care providers share records with one another for treatment purposes, so your primary care doctor, a past therapist, or a hospital can send information to a psychiatrist treating you without a separate signature from you. Psychotherapy notes and substance use disorder records are the main exceptions, and some states add protections on top of the federal baseline.

Sharing for Treatment Doesn’t Require Your Signature

The rule that surprises most patients is HIPAA’s treatment, payment, and health care operations exception, sometimes called TPO. A provider can disclose your protected health information to another provider for treatment activities without obtaining a separate authorization from you.¹ Your primary care doctor can send records to a psychiatrist treating you, and your psychiatrist can send information back, without either provider needing a release form.

A related rule widens the pipe further. HIPAA’s “minimum necessary” standard, which normally requires providers to share only the information needed for a specific purpose, does not apply to disclosures between providers for treatment.² A provider sending records to your psychiatrist can send the full record, not a trimmed-down version. In practice, your psychiatrist could see your complete medical chart from another provider, not just the mental health portions.

So why does every office still hand you a release form? Partly because many providers want documentation that a treatment relationship exists before sending records. Partly because state laws sometimes impose stricter requirements than HIPAA’s federal floor. And partly out of caution. No office has been penalized for asking permission it didn’t technically need.

What Your Psychiatrist Will Try to See

A psychiatrist’s intake casts a wide net. Expect questions about past psychiatric diagnoses, prior treatments and how you responded to them, hospitalizations, and every medication you currently take. Substance use history matters because it affects diagnosis and which medications are safe to prescribe.

Physical health conditions that mimic or worsen psychiatric symptoms are also on the list. Thyroid disorders, neurological conditions, autoimmune diseases, and chronic pain all influence mood, cognition, and energy. To fill in what a conversation can’t cover, psychiatrists request records from primary care doctors, previous therapists, and hospitals. When those providers share an electronic health record system or belong to the same regional health information exchange, your psychiatrist may be able to pull records directly. Some states require you to opt in before your records flow through an exchange; others share by default and let you opt out.

Psychotherapy Notes Are Treated Differently

HIPAA carves out one category of mental health records for extra protection: psychotherapy notes. These are the private notes a therapist or counselor writes during or after a session, documenting the content of your conversations. To qualify for the extra protection, they must be kept physically separate from the rest of your medical record.³

The definition is narrower than people assume. Psychotherapy notes include only the therapist’s record of what was said in session and their analysis of it. They do not include medication information, session start and stop times, treatment frequency, clinical test results, diagnoses, treatment plans, symptoms, prognosis, or progress summaries.³ All of that falls into your general medical record and can be shared under the TPO exception without your authorization.

Disclosing actual psychotherapy notes requires your written authorization in almost all cases, even when the disclosure is to another health care provider for treatment.⁴ The exceptions are narrow: mandatory abuse reporting, duty-to-warn situations involving serious and imminent threats, and a handful of oversight functions. A new psychiatrist cannot call your old therapist’s office and obtain the raw session notes without your explicit sign-off.

You also don’t have a guaranteed federal right to see your own psychotherapy notes. HIPAA excludes them from the individual access right, and a provider can deny your request to inspect them without offering a review process.⁵ Some state laws grant broader access. The rest of your clinical record, including diagnoses, treatment plans, and progress notes, remains accessible to you.

Substance Use Disorder Records Have Their Own Rules

If you’ve received treatment for a substance use disorder at a federally assisted program, those records carry protections beyond standard HIPAA. A separate federal regulation, 42 CFR Part 2, historically required specific written consent before those records could be shared with anyone, including other health care providers treating you.⁶

A 2024 final rule brought Part 2 closer to HIPAA’s framework. Starting February 16, 2026, a single patient consent can cover all future disclosures for treatment, payment, and health care operations, and providers who receive those records under consent can redisclose them under standard HIPAA rules.⁷ Before this change, each new recipient typically needed a separate consent.

One protection survived. Substance use disorder records still cannot be used in civil, criminal, administrative, or legislative proceedings against the patient without either consent or a specific court order.⁶ A psychiatrist who receives your substance use treatment records cannot be compelled to hand them over in a lawsuit against you. Counseling notes specific to substance use disorder treatment require a separate consent form and cannot be bundled with other authorizations.⁸

When a Psychiatrist Can Share Without Your Consent

Several situations allow, or require, a psychiatrist to disclose your information regardless of your wishes.

Serious and imminent threat. If a psychiatrist believes in good faith that you pose a serious and imminent danger to yourself or others, they can share information necessary to prevent harm with anyone in a position to help, including family members, caregivers, and law enforcement. Federal regulators have stated they will not second-guess a provider’s good-faith judgment in these situations.⁹
Duty to warn or protect. Most states impose an independent legal obligation on mental health professionals to warn identifiable potential victims or take protective action when a patient makes credible threats. The specific triggers and required actions vary from state to state.
Court orders and legal proceedings. HIPAA permits disclosures in response to court orders, court-ordered warrants, and judicial subpoenas. When a court orders a psychiatric evaluation, the evaluation exists to inform the court, not to create a traditional therapeutic relationship.⁴
Mandatory reporting. Psychiatrists are mandatory reporters in every state for suspected child abuse and neglect, and in many states for elder abuse. These disclosures override patient objections.

Your Rights Over Your Records

Access

You have the right to inspect and obtain copies of nearly all protected health information a provider maintains about you, including psychiatric diagnoses, treatment plans, progress notes, and test results.¹⁰ The main exception is psychotherapy notes. Providers must act on your request within 30 days, with a one-time 30-day extension available. Fees for copies are limited under HIPAA to a reasonable, cost-based amount for patient-initiated requests.

Amendment

If something in your records is inaccurate or incomplete, you can request an amendment. The provider can deny the request if they determine the information is accurate and complete, but you have the right to submit a written statement of disagreement that becomes part of your permanent record.¹¹

Restrictions

You can ask a provider to limit how they use or share your information for treatment, payment, or health care operations. Providers are generally not required to agree. One exception forces the provider to comply: if you pay for a service entirely out of pocket, you can require the provider to withhold information about that service from your health insurer, as long as the disclosure isn’t otherwise required by law.¹² If keeping psychiatric treatment off your insurance records matters to you, paying out of pocket and invoking this right is the most reliable way to do it.

Accounting of Disclosures

You can request a list of who your provider has shared your records with over the past six years, with the date, recipient, and purpose of each disclosure. Routine disclosures for treatment, payment, and health care operations are excluded from this accounting.¹³ So the accounting will show unusual disclosures, such as those to law enforcement, public health authorities, or in response to a subpoena, but not the everyday flow of information between your doctors.

State Laws Can Add Protection

HIPAA sets a federal floor, not a ceiling. When a state law provides stronger privacy protections, the state law controls. Many states impose stricter requirements for consent or limit what can be disclosed without explicit patient authorization for mental health information, even for treatment purposes. Some states specifically define and protect privileged psychiatric communications, requiring patient consent or a court order before disclosure.¹⁴ The TPO sharing rules describe the maximum HIPAA allows. Your state may tighten those rules considerably for mental health information, so checking your state’s mental health privacy laws is worth the effort.

Your Employer Cannot Pull These Records

An employer cannot require a medical examination or ask about the nature of a disability unless the inquiry is job-related and consistent with business necessity.¹⁵ Asking whether you have a mental health condition, what medications you take, or whether you’ve ever seen a psychiatrist all fall under this restriction.

Even when a job-related inquiry is justified, any medical information obtained must be kept in a confidential medical file separate from the employee’s personnel records. Sharing is limited to supervisors who need to know about work restrictions, first aid personnel, and government officials investigating ADA compliance.¹⁵ Your employer has no mechanism under HIPAA to request your psychiatric records from your provider, and your provider could not release them to your employer without your authorization.

Parental Access to a Minor’s Psychiatric Records

Parents generally have the right to access their child’s medical records as the child’s personal representative, but mental health care is one area where exceptions arise. Federal rules identify three situations where a parent is not treated as the child’s representative for privacy purposes:

The child consented independently. When state law allows a minor to consent to mental health treatment without parental permission, the parent loses representative status for records related to that treatment.
Court-directed care. When a child receives treatment at the direction of a court or court-appointed person, the parent is not the representative for those records.
Agreed confidentiality. When a parent agrees that the child and provider may have a confidential relationship, the scope of that agreement determines the parent’s access.¹⁶

A provider can also independently decide not to treat a parent as a representative when the provider reasonably believes the child has been or may be subjected to abuse or neglect, or when granting access could endanger the child.¹⁶ State laws vary widely on the age at which minors can consent to mental health treatment, so the practical picture depends heavily on where you live.

1
eCFR. 45 CFR 164.506 – Uses and Disclosures to Carry Out Treatment, Payment, or Health Care Operations
2
eCFR. 45 CFR 164.502 – Uses and Disclosures of Protected Health Information General Rules
3
eCFR. 45 CFR 164.501 – Definitions
4
U.S. Department of Health & Human Services. HIPAA Privacy Rule and Sharing Information Related to Mental Health
5
U.S. Department of Health & Human Services. Individuals’ Right under HIPAA to Access their Health Information 45 CFR 164.524
6
eCFR. 42 CFR Part 2 – Confidentiality of Substance Use Disorder Patient Records
7
U.S. Department of Health & Human Services. Fact Sheet 42 CFR Part 2 Final Rule
8
eCFR. 42 CFR 2.31 – Consent Requirements
9
U.S. Department of Health & Human Services. What Constitutes a Serious and Imminent Threat That Would Permit a Health Care Provider to Disclose PHI
10
eCFR. 45 CFR 164.524 – Access of Individuals to Protected Health Information
11
eCFR. 45 CFR 164.526 – Amendment of Protected Health Information
12
eCFR. 45 CFR 164.522 – Rights to Request Privacy Protection for Protected Health Information
13
eCFR. 45 CFR 164.528 – Accounting of Disclosures of Protected Health Information
14
eCFR. 45 CFR Part 164 – Security and Privacy
15
U.S. Equal Employment Opportunity Commission. Enforcement Guidance on Disability-Related Inquiries and Medical Examinations of Employees Under the ADA
16
U.S. Department of Health & Human Services. The HIPAA Privacy Rule and Parental Access to Minor Children’s Medical Records