6.3 Confidentiality, Duty to Warn & Ethics
Key Takeaways
- HIPAA gives psychotherapy notes extra protection beyond standard PHI, requiring a separate specific patient authorization for release
- The Tarasoff duty to warn and protect applies when a patient makes a credible, serious threat against an identifiable, foreseeable victim
- Nurses are mandated reporters for suspected child and elder/dependent-adult abuse or neglect regardless of therapeutic confidentiality
- The six core ethical principles — autonomy, beneficence, nonmaleficence, justice, fidelity, and veracity — frequently conflict, most classically autonomy versus beneficence/nonmaleficence
- Confidentiality exceptions are narrowly defined and limited to the minimum necessary disclosure for the specific legal purpose
Confidentiality and its exceptions generate some of the most consequential decisions a psychiatric-mental health nurse makes, and the PMH-BC exam tests them through scenario-based items rather than definitions alone. This section covers HIPAA's special treatment of psychotherapy notes, the duty to warn and protect established by Tarasoff, mandatory reporting, and the ethical principles that frame these decisions.
Confidentiality and HIPAA
The HIPAA Privacy Rule protects all protected health information (PHI), but it creates an extra layer of protection for psychotherapy notes that PMH-BC candidates must not confuse with the general medical record. Psychotherapy notes are the clinician's private process notes documenting or analyzing the content of a counseling session, kept physically or electronically separate from the rest of the medical record. Because of this heightened protection:
- Psychotherapy notes require a specific, separate patient authorization before release — a general "release of records" authorization does not cover them
- They can typically be withheld even from the patient's own request for records in some circumstances, and from insurers processing a claim, unlike standard PHI such as diagnosis, medication list, treatment plan, and session start/stop times, which are part of the designated record set and disclosed under routine authorization
- This distinction exists because the sensitivity of unfiltered therapeutic content is considered qualitatively different from standard clinical documentation
Exceptions to Confidentiality
Confidentiality is not absolute. Recognized exceptions include mandatory reporting of suspected abuse or neglect, imminent danger to self or an identifiable other, valid court order or subpoena, and situations required by law such as certain communicable disease reporting. Each exception is narrowly defined — confidentiality remains the default, and any breach must be limited to the minimum necessary information for the specific legal purpose.
Tarasoff and the Duty to Warn and Protect
Tarasoff v. Regents of the University of California (California Supreme Court, 1976) is the foundational case establishing that a mental health professional's duty of confidentiality can be outweighed by a duty to protect an identifiable, foreseeable victim when a patient makes a serious and credible threat of violence. Two elements must generally be present for this duty to apply:
- A credible, serious threat of violence (not a vague or ambiguous statement)
- An identifiable, foreseeable victim — a specific named person or a person who can be readily identified, not a generalized statement of anger
When these elements are present, the clinician's duty may be satisfied through one or more actions: warning the identifiable victim directly, notifying law enforcement, and/or taking steps toward voluntary or involuntary hospitalization of the patient. This is often summarized as the duty to warn and protect, and it directly overrides ordinary confidentiality protections. A vague statement such as "I'm so angry I could hurt someone" without a named or identifiable target does not, by itself, trigger the Tarasoff duty — the exam frequently tests this distinction with distractor stems.
Mandatory Reporting
Psychiatric-mental health nurses are mandated reporters for suspected child abuse or neglect and elder or dependent-adult abuse or neglect, regardless of whether the disclosure occurred during a confidential therapeutic conversation. The duty to report exists independent of clinical judgment about whether the disclosure is "credible" — reasonable suspicion is the legal threshold, and the report goes to the designated protective services or law enforcement agency per state law and facility policy.
Ethical Principles in Psychiatric-Mental Health Nursing
| Principle | Definition | Example in Practice |
|---|---|---|
| Autonomy | Respecting the patient's right to self-determination | Honoring a competent patient's right to refuse a non-emergent medication |
| Beneficence | Acting in the patient's best interest; doing good | Encouraging a patient toward a treatment likely to improve outcomes |
| Nonmaleficence | "Do no harm" | Avoiding restraint use when a less restrictive intervention would work |
| Justice | Fair and equitable distribution of care and resources | Allocating staff time and treatment access without discrimination |
| Fidelity | Faithfulness to commitments; loyalty to the patient | Following through on promises made during care planning |
| Veracity | Truth-telling | Giving honest, accurate information about diagnosis and prognosis |
Ethical dilemmas arise when these principles conflict — most classically, autonomy (the patient's right to refuse treatment) versus beneficence and nonmaleficence (protecting the patient or others from harm). The ANA Code of Ethics for Nurses and structured ethical decision-making frameworks guide these conflicts; the resolution is rarely simple, but the nurse should be able to name which principles are in tension and articulate the reasoning, not just the outcome.
Documentation Standards
Legal and ethical practice depends on documentation that is objective, timely, accurate, and free of biased or judgmental language. Thorough documentation of assessments, interventions, informed consent discussions, and any Tarasoff or mandatory-reporting actions is both an ethical obligation and the primary legal defense of the nurse's clinical judgment.
State Variation and the "Warn vs. Protect" Distinction
The exact scope of the Tarasoff duty is not identical in every state. Some states codify a mandatory duty to warn a specific victim; others adopt a broader, more flexible duty to protect, which can be satisfied through multiple reasonable actions (warning, notifying police, initiating commitment) rather than requiring a direct warning in every case; and a small number of states impose no affirmative duty at all, though most facilities' policies still direct staff to act protectively regardless. The PMH-BC exam tests the underlying clinical and ethical reasoning — recognize a credible threat against an identifiable victim and know that protective action is required — rather than the citation-level statutory language of any single state.
During a session, a patient tells the nurse the specific name of a coworker he plans to seriously harm and describes a credible plan. What is the most accurate description of the nurse's legal duty in this situation?
An insurance company requests a copy of a patient's full chart, including the psychiatric nurse practitioner's private psychotherapy process notes, using a general medical records release form the patient signed. What does HIPAA require?