4.4 Mandated Reporting and Duty to Warn

Key Takeaways

  • All 50 states designate addiction counselors as mandated reporters of suspected child abuse and neglect; 42 CFR Part 2 does not preempt these reporting laws.
  • Most states also require reporting of abuse, neglect, self-neglect, or financial exploitation of elders and other vulnerable or dependent adults.
  • The Tarasoff duty originated in the 1976 California Supreme Court decision Tarasoff v. Regents of the University of California and is now framed as a 'duty to protect' identifiable victims of credible, imminent threats.
  • Reasonable steps to discharge a duty to protect can include warning the identifiable victim, notifying law enforcement, hospitalizing the client, and intensifying treatment, depending on state law.
  • 42 CFR Part 2 permits disclosure of patient identifying information in true safety emergencies under the medical-emergency and crime-on-premises exceptions, but routine duty-to-warn disclosures still require careful documentation and minimum-necessary disclosure.
Last updated: June 2026

Mandated Reporting and the Duty to Protect

Confidentiality has limits. Every IC&RC ADC candidate must know when the counselor is required by law to disclose information without the client's consent, and how those duties interact with 42 CFR Part 2. The exam frames these as scenario items: the wrong answers usually either honor confidentiality when the law overrides it, or delay action when the law requires immediacy.

Mandated Child Abuse and Neglect Reporting

All 50 U.S. states, the District of Columbia, and U.S. territories have child abuse reporting statutes. Although the precise list of mandated reporters varies, addiction counselors and other licensed behavioral health professionals are mandated reporters in every jurisdiction. The duty is triggered by a reasonable suspicion standard, not proof, and the counselor reports personally; the duty cannot be delegated to a supervisor or satisfied by assuming someone else will report.

Key features of child abuse reporting:

  • Standard: reasonable suspicion or cause to believe a child has been abused or neglected.
  • Timing: most states require an immediate oral report (often within 24 hours) followed by a written report within 36 to 72 hours.
  • To whom: the state child protective services (CPS) hotline and/or law enforcement, depending on jurisdiction.
  • Immunity: good-faith reports are protected from civil and criminal liability, even if the suspicion is later unfounded.
  • Failure to report: typically a misdemeanor; some states add civil liability and licensure discipline.
  • 42 CFR Part 2: permits compliance with state child-abuse reporting laws; the report itself is allowed without patient consent.

Elder and Vulnerable-Adult Reporting

Most states require reporting of suspected abuse, neglect, self-neglect, financial exploitation, or abandonment of:

  • Adults age 60 or 65 and older (the threshold varies by state).
  • Dependent adults with physical or cognitive impairments that limit self-protection, regardless of age.

Reports usually go to Adult Protective Services (APS) or law enforcement. Self-neglect is included in many states, which matters in SUD work because severe addiction can itself produce self-neglect (failure to obtain food, shelter, or essential medical care) that triggers a report. Financial exploitation of older adults is a fast-growing reporting category and is commonly tested.

The Tarasoff Duty

Tarasoff v. Regents of the University of California, decided by the California Supreme Court in 1976, established that a mental health professional who knows or reasonably should know that a patient presents a serious danger of violence to another person has a duty to take reasonable steps to protect the intended victim. The original 1974 ruling spoke of a duty to warn; the controlling 1976 rehearing broadened it to a duty to protect.

The modern phrasing is the duty to protect, not merely the duty to warn, because warning is only one of several reasonable steps. The duty is now recognized, by statute or case law, in most U.S. states; the exact triggers and required actions vary by jurisdiction.

Typical Triggers

  • A credible threat of serious physical harm.
  • An identifiable victim or readily identifiable class of victims.
  • The counselor has knowledge gained through the therapeutic relationship.

Reasonable Steps to Discharge the Duty

Depending on state law and clinical judgment, reasonable steps can include:

  1. Warning the identifiable victim.
  2. Notifying law enforcement.
  3. Initiating involuntary psychiatric hospitalization where statutory criteria are met.
  4. Intensifying outpatient treatment (more frequent sessions, a medication consult).
  5. Reducing access to means (for example, working with family to secure firearms).
  6. Consulting with a supervisor and documenting every step.

The ADC exam tends to test the principle and the California 1976 anchor; specific state statutes are not memorized. A frequent distractor is treating "warn the victim" as the only acceptable action; in fact the duty is to protect, and several steps satisfy it.

Interaction with 42 CFR Part 2

A common exam confusion is whether Part 2 blocks emergency safety disclosures. It does not, but the path is specific:

SituationPart 2 Pathway
Medical emergency (overdose, imminent self-harm requiring medical care)Medical emergency exception: disclose to treating medical staff; document.
Client commits or threatens a crime on program premises or against program staffCrime exception: report; document.
Tarasoff threat against a third party off premisesUse patient-identifying information sparingly. The counselor may generally call law enforcement or warn the victim WITHOUT confirming the person is in SUD treatment; coordinate with legal counsel where possible; document the safety rationale.
Mandated child or elder abuse reportPart 2 permits compliance with state reporting laws.

When a safety duty conflicts with Part 2, the counselor should:

  1. Address the immediate safety risk first.
  2. Disclose the minimum information necessary to protect the third party.
  3. Document the threat, the assessment, the steps taken, the supervisor consultation, and the rationale.
  4. Inform the patient that the duty was triggered, when clinically safe to do so.

Distinguishing Privilege from Confidentiality

The exam sometimes contrasts these two ideas. Confidentiality is the counselor's ethical and statutory duty to protect client information. Privilege is a legal rule that lets the client prevent the counselor from testifying in court (recognized federally for psychotherapists in Jaffee v. Redmond, 1996). Mandated reporting and the duty to protect are statutory exceptions that override both: the counselor must act even though the information is otherwise confidential and may be privileged.

Documentation Is Not Optional

In every reporting and duty-to-protect scenario, contemporaneous documentation is the counselor's main defense. Note the date, time, content of the threat or observation, the risk assessment, persons consulted, actions taken, who was notified, and the follow-up plan. A defensible record shows that the counselor recognized the duty, consulted, acted reasonably, and disclosed no more than necessary.

Loading diagram...
Duty-to-Protect Decision Flow
Test Your Knowledge

Which case established the legal foundation for a mental health professional's duty to protect identifiable third parties from credible threats made by a client?

A
B
C
D
Test Your Knowledge

An adult client in an outpatient SUD program describes severe physical injury inflicted on her 6-year-old child by the child's stepfather. The client begs the counselor not to tell anyone. What is the counselor's BEST course of action?

A
B
C
D
Test Your Knowledge

Which step is generally NOT part of discharging the duty to protect in a Tarasoff-type situation?

A
B
C
D