2.2 Confidentiality, Informed Consent, and Mandatory Disclosure

2.2 Confidentiality, Informed Consent, and Mandatory Disclosure

Most ethics questions on the CPCE are really confidentiality questions in disguise. Treat confidentiality as the default rule and learn the narrow exceptions that override it.

Informed consent (ACA A.2)

Informed consent is an ongoing process, not a one-time signature. At the start of counseling, the counselor explains, in language the client understands: the purpose, goals, techniques, and risks/benefits of services; counselor credentials; fees and billing; the limits of confidentiality; the right to refuse or withdraw; and how records are kept. With minors or clients lacking capacity, the counselor obtains consent from the client to the extent possible and consent/assent from parents or guardians as the law requires.

Confidentiality versus privilege

Distinguish two terms students confuse:

Privilege belongs to the client; the counselor cannot waive it unilaterally. A subpoena alone does not break confidentiality — the counselor asserts privilege on the client's behalf unless the client waives it or a judge issues a court order. Note that privilege is created and limited by state statute, so its scope varies by jurisdiction; the CPCE tests the general rule (client holds it, subpoena does not equal a court order) rather than any single state's wording.

Limits of confidentiality (the tested exceptions)

Confidentiality must yield in specific situations. Memorize this list:

• Danger to self — serious, foreseeable risk of suicide or self-harm.
• Danger to others — the duty to warn/protect identifiable victims.
• Mandated reporting — suspected child abuse and, in most states, elder/dependent-adult abuse must be reported.
• Court order — a judge can compel disclosure even over an asserted privilege.
• Client waiver — written, informed release of information.

Duty to warn and protect — Tarasoff

The duty stems from Tarasoff v. Regents of the University of California. In the 1976 rehearing, the California Supreme Court held that when a therapist determines a client poses a serious danger of violence to an identifiable third party, the therapist has a duty to protect that person — by warning the victim, notifying police, or taking other reasonable steps. The original 1974 ruling spoke of a duty to warn; the 1976 decision broadened it to a duty to protect. ACA Standard B.2.a permits disclosure to protect from serious and foreseeable harm.

Minimum necessary disclosure

When an exception applies, the counselor breaches confidentiality only to the extent required. Disclose the minimum information necessary to the appropriate party — not the entire record. This 'least intrusive' principle is a frequent CPCE distractor filter: an answer that over-discloses is wrong even when some disclosure is justified.

HIPAA and FERPA in counseling

Two federal laws appear in confidentiality items. The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule protects identifiable health information and grants clients rights to access their records, with a narrower standard for the counselor's separately kept psychotherapy notes, which receive extra protection and are not part of the routine record disclosed for treatment, payment, or operations. The Family Educational Rights and Privacy Act (FERPA) governs student education records in schools and gives parents (and students 18 or older) the right to inspect those records.

School counselors must know which records fall under FERPA versus which sole-possession notes do not.

Records of minors

Minor clients add complexity. Ethically, the minor is the client and is owed confidentiality appropriate to age and maturity; legally, parents or guardians often hold the right to information. The defensible practice is to clarify at intake — during informed consent — what will and will not be shared with parents, and to negotiate a workable understanding that protects the therapeutic relationship while honoring legal rights. A frequent trap answer promises a minor 'complete confidentiality from parents,' which the counselor usually cannot guarantee.

A confidentiality decision checklist

• Is this information protected by confidentiality? (Default: yes.)
• Does a recognized exception apply (danger, abuse, court order, waiver)?
• Who is the appropriate party to receive the disclosure?
• What is the minimum information needed to accomplish the purpose?
• Have I documented the reasoning and, where possible, consulted?

Working the checklist prevents the two opposite errors the exam punishes: breaching when no exception applies, and over-disclosing when one does.

Group and family confidentiality

Confidentiality functions differently in group and family work, and the CPCE tests the distinction. In group counseling, the counselor cannot guarantee that members will keep what is shared private; informed consent must state that confidentiality cannot be assured among members, even though the counselor sets the expectation and explains its importance (B.4.a). In couples and family counseling, the counselor clarifies at the outset who is considered the client and how information shared by one party will be handled, so no member is surprised by what the counselor will or will not disclose (B.4.b).

Answers that promise absolute confidentiality in a group are wrong on their face.