10.5 Ethical Documentation, Consent, and Confidentiality

Consent and confidentiality as living practices

Ethical practice is an official Part 2-Skills cluster weighted at 17% — the largest of the professionalism-related clusters. It tests applying the APA Ethics Code and law to real decisions, not merely naming a standard. Consent, confidentiality, and documentation are central because they determine whether a client can understand services, choose participation, trust the psychologist, and know how information will be used.

Informed consent (Standards 3.10, 9.03, 10.01) begins before service and continues whenever a material change occurs. Explain the nature and purpose of services, roles, fees when relevant, confidentiality and its limits, foreseeable risks and benefits, alternatives, records practices, communication channels, and who will receive information. In assessment, include how results may be used and who receives the report. In supervision, consultation, mandated treatment, couples, family, and organizational work, consent must clarify who the client is and what limits apply.

Consent requires capacity; with minors or clients with limited capacity, obtain assent plus the legally authorized party's permission.

Confidentiality (Standard 4.01) is broad but not absolute. Disclose only with authorization or another valid legal or ethical basis, and limit disclosure to the minimum necessary (Standard 4.04). The exam rewards checking the rule, narrowing the disclosure, and explaining the limit to the client when appropriate.

Exceptions, releases, and defensible documentation

Known confidentiality exceptions are high-yield. They include imminent danger to self or others, mandated abuse/neglect reporting, a valid court order, and limited disclosures for consultation, supervision, or payment. Tarasoff established a duty to protect identifiable third parties from a serious threat; the specific duty (warn, notify police, hospitalize) is set by state statute, so the defensible answer assesses risk and takes a protective step rather than assuming one universal rule.

Distinguish a subpoena (often signed by an attorney, frequently requiring you to assert privilege and seek legal consultation before releasing anything) from a court order signed by a judge (which generally compels disclosure). When unsure, consult an attorney before releasing records.

Releases should be specific, not blanket. A vague request to "send everything" rarely serves the client. Evaluate what information is relevant, who receives it, the purpose, the expiration date, the client's understanding, and the consequences. When communicating with schools, employers, insurers, attorneys, physicians, or family, disclose only what is authorized and clinically relevant.

A consent-and-confidentiality sequence

1. Identify the client, service role, and intended recipients of information.
2. Explain services, risks, benefits, alternatives, fees, records, and limits in understandable language.
3. Revisit consent when roles, methods, technology, recipients, or risks change.
4. Use specific releases and disclose only what is authorized or otherwise permitted.
5. Document consent, confidentiality limits, releases, consultations, and disclosures.
6. Consult when law, ethics, safety, and client preference appear to conflict.

Ethical documentation supports transparency. Notes are factual and respectful, separating observation from inference, and include consent discussions, limits explained, releases, consultations, risk assessments, client decisions, and major treatment changes. Records are never altered deceptively; errors are corrected per policy and law in a way that preserves the original entry (for example, a dated, signed amendment rather than overwriting).

Ethics is applied under time pressure: a client in danger may need action before a full routine consent discussion; a subpoena may require legal consultation rather than immediate release; a minor may hold privacy interests while caregivers hold legal rights. The defensible sequence is to protect safety, clarify authority, consult when needed, communicate respectfully, and document the rationale. When a requester "sounds official," the exam still expects you to verify authorization and apply minimum-necessary disclosure rather than over- or under-disclosing.

Worked example

A divorcing parent in couples therapy demands the full record to use against the other spouse in a custody dispute. The clinician must first ask who is the client — in couples work it is often the relationship or both partners jointly, so one partner usually cannot unilaterally authorize release of joint records. The defensible response clarifies the secrets-and-records policy established at consent, declines unilateral disclosure, considers whether a court order applies, and seeks legal consultation before releasing anything.

This shows why the consent stage (defining the client and the records policy up front) prevents a confidentiality crisis later.

High-yield distinctions

• Privilege versus confidentiality — confidentiality is the ethical duty; privilege is the client's legal right to bar testimony, held by the client and asserted on their behalf. A subpoena does not automatically defeat privilege.
• Minimum necessary — even with valid authorization, send only what serves the stated purpose; a release to coordinate medication does not justify forwarding detailed trauma narratives.
• Minors — adolescents may hold privacy interests in sensitive areas while a legal guardian holds consent rights; clarify the limits at the start so the minor is not misled about what stays private.