11.6 Grievances, Records, Storage, and Professional Communication

Key Takeaways

  • Clients have the right to a grievance/complaint process and to use it without retaliation.
  • Records must be securely stored, transmitted, retained, corrected, and ultimately destroyed per law and agency policy; SUD records keep Part 2 protection even at disposal.
  • Technology channels — email, texting, telehealth, voicemail, fax, and shared spaces — must be used in privacy-protective ways (encryption, verification, no SUD details on voicemail).
  • When rights, records, or grievances become complex, the counselor consults supervision rather than improvising.
Last updated: June 2026

Grievances and Complaints

A functioning grievance process is a client right and an ethics safeguard. Clients must be told — during informed consent — how to file a complaint about services, staff, or rights violations, to whom, and that they may do so without retaliation (no discharge, reduced services, or hostility for complaining).

The ADC's role is to facilitate, not obstruct: give the client the procedure, do not take the complaint personally, and do not retaliate. If a client complains about the counselor's own conduct, the ethical move is to support the client's access to the process and bring it to supervision — never to discourage or punish the complaint. Agencies typically also post how to contact the state certification board and licensing authority for complaints that rise to a regulatory level.

Records: Storage, Retention, and Destruction

Records must be protected across their entire lifecycle. Apply law (Part 2/HIPAA) and agency policy at each stage:

StageStandard
StorageLocked physical files; access-controlled, encrypted electronic records; restrict to those with a need to know
TransmissionEncrypt email/portals; verify fax numbers; cover-sheet with confidentiality notice
RetentionKeep for the period required by state law/payers/agency policy (often several years; longer for minors)
CorrectionUse single-line strike + initials/date (paper) or amendment function (EHR); never erase
DestructionShred paper; securely wipe electronic media — and SUD records remain Part 2-protected through disposal

A frequent exam point: confidentiality obligations do not end when treatment ends or when records are destroyed — the protection persists. Even after a client's death, Part 2 protections generally continue.

Professional Communication and Technology

Every communication channel is a potential confidentiality breach. Practical rules the ADC should apply:

  • Voicemail/phone — leave only a name and callback number; never state that the call concerns SUD treatment, and confirm who may receive messages during intake.
  • Email/texting — use secure, encrypted channels; avoid clinical detail in unsecured messages; get the client's informed preference and document it.
  • Telehealth — verify identity and location, use a HIPAA-compliant platform, ensure a private setting on both ends, and address emergency procedures.
  • Fax — verify the number, use a confidentiality cover sheet, and confirm receipt for sensitive records.
  • Public/shared spaces — no discussing clients in hallways, elevators, or on social media; greet clients in public only as the client directs (to avoid disclosing they are in treatment).

Guard against accidental disclosure: closing charts, locking screens, and not leaving documents on shared printers.

When to Consult

Rights, records, and communication questions get complicated fast — a subpoena arrives, a client demands their entire record, a family member shows up, a record was sent to the wrong fax number. The professional default is to slow down and consult supervision and agency policy rather than improvise. Improvising under pressure is where counselors create breaches and ethics complaints.

The through-line for all of Chapter 11: protect privacy, obtain valid consent or rely on a defined exception, disclose the minimum necessary, document carefully, and consult when uncertain. That decision pattern is the safest answer to almost any confidentiality, documentation, consent, or client-rights item on the IC&RC ADC exam.

Breaches and How to Handle Them

Mistakes happen — a fax to a wrong number, an email to the wrong client, a chart left open in a waiting area. The professional response is not to hide it. The counselor reports the incident per agency policy, helps contain the harm (retrieve or confirm destruction of the misdirected information, notify affected parties as required), and documents what happened and the corrective steps. Under the 2024 alignment, Part 2 violations now carry HIPAA-style penalties, and HIPAA breach-notification expectations increasingly apply to SUD records, so concealment compounds the exposure.

The exam framing: a counselor who self-reports a breach and follows policy is acting ethically; a counselor who covers it up has committed a second, worse violation. The same logic applies to a colleague's breach — the ADC has a duty to address unethical conduct through appropriate channels rather than ignore it.

Client Access and Amendment Requests

Clients generally have the right to access their own records and to request corrections/amendments. When a client asks for their record, the counselor follows law and agency policy on the format, timeframe, and any narrow limits (for example, information that could endanger someone). The counselor does not refuse access out of personal discomfort with what the notes say — which is another reason to keep notes objective and professional.

If a client disputes content, the proper route is an amendment request, not deleting or rewriting the original. The original entry stays; a documented addendum captures the client's position and any agreed correction. This preserves record integrity (the golden thread again) while honoring the client's rights. When access, amendment, retention, or destruction questions get legally tangled, the counselor consults supervision and, when appropriate, legal counsel rather than guessing — the recurring theme across all of Chapter 11, and the safe default whenever a client-rights or records request falls outside routine practice.

Test Your Knowledge

A client tells the counselor she wants to file a complaint about how she was treated by a staff member. The counselor should:

A
B
C
D
Test Your Knowledge

When leaving a voicemail for a client at a number they approved during intake, the counselor should:

A
B
C
D
Test Your Knowledge

How long do confidentiality protections for a client's SUD records under 42 CFR Part 2 generally last?

A
B
C
D