8.3 Informed Consent, Confidentiality, Privacy, and Records

Key Takeaways

  • Informed consent is an ongoing communication process, not merely a signed form.
  • Confidentiality has limits, including client authorization, legal requirements, safety duties, and setting-specific rules.
  • Records should be accurate, timely, clinically relevant, and protected according to applicable law and professional standards.
  • Third-party requests require role clarity, valid authorization or legal authority, and disclosure limited to what is permitted or required.
Last updated: May 2026

Protect Choice and Information

Informed consent is the foundation for psychological services. It tells the client what service is being offered, who is providing it, what the likely risks and benefits are, what alternatives exist, what fees or payment arrangements apply, what records are kept, and what limits apply to confidentiality. On the EPPP, consent is rarely only an intake form. It is an ongoing process that should be revisited when the service, role, modality, risk level, third-party involvement, or financial arrangement changes.

Confidentiality protects the information learned in the professional relationship. Privacy is broader and concerns a person's control over access to personal information. Privilege is a legal concept that may protect communications in legal proceedings, depending on jurisdiction. The exam may use these terms carefully. A strong answer does not promise absolute secrecy, and it does not disclose casually because a requester sounds authoritative.

Scenario cueEthical issueStrong response
New client begins servicesConsent and expectationsExplain services, roles, fees, records, confidentiality limits, and client rights.
Family member asks for detailsConfidentiality and authorizationDo not disclose without valid permission or another applicable basis.
Court, attorney, employer, or payer requests recordsLegal authority and minimum necessary disclosureVerify authority, consult if needed, and release only what is permitted or required.
Client changes to group or telepsychology serviceRenewed consentExplain new risks, benefits, alternatives, technology or group privacy limits.
Record correction or access requestLegal and professional record dutiesFollow applicable law, board rule, and policy while documenting the response.

Records must be useful and protected. Good records include relevant assessment data, informed consent, diagnosis or case formulation when applicable, treatment plan, progress, risk assessment, consultation, releases, missed appointments, fees, and termination or referral information. Records should avoid unnecessary speculation, stigmatizing language, and unsupported conclusions. They should be understandable to another qualified professional while respecting client dignity.

Third-party involvement increases complexity. In a custody matter, forensic evaluation, school consultation, employment-related service, or insurance request, the psychologist must clarify who the client is, what role the psychologist serves, what information may be shared, and who will receive reports. Failure to clarify roles can create consent, confidentiality, and conflict problems.

When legal or safety limits apply, communication still matters. If a psychologist must make a report or take protective action, the client should be told when it is safe and appropriate. The explanation should be accurate and calm. It should not overstate what will be shared. It should not invite the client to veto a legally required action.

For EPPP questions, look for answer choices that balance protection and lawful disclosure. An option that releases the entire file automatically is often too broad. An option that refuses every request forever may ignore legal authority. The best option usually verifies the request, checks consent or law, consults when unclear, discloses narrowly, and documents the rationale.

Test Your Knowledge

Which statement best describes informed consent in psychological practice?

A
B
C
D
Test Your Knowledge

A client's employer requests a treatment summary, but the client has not authorized disclosure. What should the psychologist do first?

A
B
C
D
Test Your Knowledge

What is the best general standard for clinical records?

A
B
C
D