12.4 Confidentiality with Minors, Groups, Families, and Collaterals

Key Takeaways

  • Under 42 CFR Section 2.14, when state law lets a minor obtain substance use disorder treatment on their own consent, only the minor may consent to disclosure — including disclosure to a parent for insurance billing.
  • Where state law requires parental consent for a minor's treatment, both the minor and the parent or guardian must sign any consent for disclosure.
  • Section 2.14(c) permits the Part 2 program director to disclose relevant facts to a parent or guardian when a minor applicant lacks capacity for a rational decision because of extreme youth or mental or physical condition AND the situation poses a substantial threat to the life or physical wellbeing of the minor or any other person that the disclosure could reduce.
  • 42 CFR Part 2 binds the program, not the other members of a therapy group, so group members can be required to sign confidentiality agreements but cannot be held to a federal standard — this limit must be disclosed at orientation.
  • Information received from a collateral source may be used clinically without a release, but nothing may be disclosed back to that collateral without the client's valid written consent.
Last updated: August 2026

12.4 Confidentiality with Minors, Groups, Families, and Collaterals

Section 12.1 covers the architecture of 42 CFR Part 2 and its interaction with HIPAA for a single adult client. Real caseloads are messier: adolescents whose parents are paying, groups of eight people who now know each other's histories, couples where one partner is the identified client, and a steady stream of collateral contacts who want to tell you something and want to know what you know.

These are the situations that generate ethics complaints, and they are heavily represented in Domain V scenario items.


1. Minors: 42 CFR Section 2.14

The controlling question is what your state's law says about whether a minor can consent to substance use disorder treatment on their own. Part 2 then follows that answer.

ScenarioWho Must Sign a Consent for DisclosurePractical Consequence
State law permits the minor to obtain SUD treatment without parental consent (Section 2.14(a))The minor alone. The parent cannot consent on the minor's behalf and cannot authorize disclosure.The restriction expressly includes disclosing patient-identifying information to a parent to obtain financial reimbursement. The regulation does permit a program to refuse to provide treatment until the minor consents to a disclosure needed for reimbursement — but state or local law requiring service irrespective of ability to pay may prohibit that refusal.
State law requires parental consent for the minor's treatment (Section 2.14(b)(1))Both the minor and the parent, guardian, or other person authorized under state law.Either party's refusal blocks the disclosure.
State law requires parental consent, and the question is whether the parent may even be told the minor applied (Section 2.14(b)(2))The fact of the minor's application for treatment may be communicated only if the minor gives written consent, or the program director determines under Section 2.14(c) that the minor lacks capacity to make a rational choice.The program director makes that determination, not the individual counselor.

Section 2.14(c) — the capacity and danger exception. Where a minor applicant for services lacks capacity for rational choice, the program director may disclose facts relevant to reducing the threat to the parent, guardian, or other person authorized under state law to act on the minor's behalf, if the director determines that both conditions are met:

  1. The minor applicant, because of extreme youth or mental or physical condition, lacks capacity to make a rational decision about whether to consent to the disclosure; and
  2. The minor applicant's situation poses a substantial threat to the life or physical wellbeing of the minor or any other person which may be reduced by communicating relevant facts to the parent or guardian.

Both prongs are required. A minor who is simply refusing to involve their parents, and who has capacity, does not meet this exception no matter how much the counselor believes parental involvement would help.

[!IMPORTANT] Two traps. First, state minor-consent laws vary enormously — by age, by type of service, and sometimes by whether medication is involved. Know your state's rule before you take an adolescent case. Second, this analysis is separate from mandated child abuse reporting, which is a Part 2 exception for the initial report under Section 2.12(c)(6) and is not affected by who consented to treatment (see Section 12.2).

Section 2.15 (Patients who lack capacity and deceased patients) covers the adjacent situations: where an adult patient has been adjudicated as lacking capacity and a guardian or other person has been authorized under state law to act on their behalf, that person exercises the consent right; for deceased patients, disclosure follows the rules governing the personal representative and applicable law on cause-of-death reporting.


2. Group Confidentiality: What You Can and Cannot Promise

This is the single most misstated rule in addiction treatment. 42 CFR Part 2 binds the program and its staff. It does not make group members legally bound by federal confidentiality law.

What that means in practice:

  • You can and should require a written group confidentiality agreement. It sets a norm, it makes the expectation explicit, and it gives you a basis for addressing breaches within the group.
  • You cannot promise that it will be honored, and you cannot promise a federal remedy if it is not. A member who tells their spouse what another member disclosed has broken a group agreement, not federal law.
  • You must say this out loud at orientation. "Everything I know stays with me under federal law. Everything the group knows depends on the group's agreement with each other. I will hold everyone to it, and I need you to make your disclosures knowing that."
  • NAADAC Standard I-14 (Group) requires providers to clarify who "the client" is when working with more than one person, to clarify the relationship the provider will have with each person and with the group as a whole, and to take reasonable precautions to protect group members from harm.

Documentation follows the same logic. A note in one client's chart must never identify or describe another group member (see Section 8.4).

Handling a breach: address it directly and promptly in group, reassert the agreement, assess the harm to the affected member individually, document the incident and your response, and consult with your supervisor. Do not ignore it — an unaddressed breach ends candid disclosure in that group.


3. Couples and Family Work: Who Is the Client?

Standard I-14 requires this to be settled before the work begins, not after a crisis. Three workable models, each with different consequences:

ModelWho Is the ClientConsequence for Records and Disclosure
Identified client with family involvementThe person in treatmentThe family member has no independent right to the record; every disclosure to them requires the client's consent. Family sessions are documented in the client's chart.
The couple or family as the unit of treatmentThe systemConsent for disclosure generally requires all adult participants; one member cannot unilaterally release the joint record.
Separate clients seen individually and jointlyEach person separatelyThe most complex and the most error-prone; requires separate records and an explicit written policy on secrets.

The secrets policy. Decide in advance and state it: will you hold information one partner tells you privately, or will you refuse to keep secrets that are material to the joint work? Both policies are defensible; having no policy is not, and it is how counselors end up holding an affair disclosure with no ethical exit.


4. Collateral Contacts: The Asymmetry That Matters

The rule is directional and easy to remember:

  • Incoming information does not require a release. A worried mother can call and tell you that her son has been drinking again. You may listen, and you may use the information clinically.
  • Outgoing information always requires a valid consent. You may not confirm that her son is a client, that he has an appointment, or that he is even in the building. Confirming enrollment is itself a disclosure that he has a substance use disorder.

The script: "I can't confirm or deny whether anyone is a client here — that's federal law, and it protects everyone including your son. But I can listen to anything you'd like to tell me, and I can give you general information about how families can support someone."

Document it. Note that the call was received, from whom, the content, and that no information was disclosed. Then decide clinically whether and how to raise the content with the client — telling a client "your mother called and said you're drinking" may be clinically correct, or may endanger the client's relationship or safety. Think before you relay.

Anonymous or protected sources. If a collateral asks that their identity not be revealed to the client, you cannot promise unconditional protection — the record may be reachable by an authorizing court order — and you must weigh the clinical cost of holding a secret from your client.


5. The Orientation Script That Prevents Most of This

Cover all of it at orientation, in writing, and document that you did. NAADAC Standard I-3 (Mandatory Disclosures) requires the informed consent document to include the legal and ethical definitions of privacy and confidentiality and an explanation of their limits, including duty to warn, and adherence to HIPAA, 42 CFR Part 2, and other applicable laws.

  1. What I keep confidential — everything, under federal law that is stricter than ordinary medical privacy.
  2. The exceptions — imminent danger to self or others, suspected child or elder abuse, a crime on the premises or against staff, a medical emergency, an authorizing court order, and internal program communication on a need-to-know basis.
  3. What group confidentiality can and cannot guarantee.
  4. Who has already been given access — a referring court under a Section 2.35 consent, a parent under state law, an insurer under a TPO consent.
  5. What happens when someone calls about you — we will not confirm you are here.
  6. How to revoke a consent, and where a consent is not revocable at will for a period.
  7. How to file a grievance if you believe your privacy was breached.
Test Your Knowledge

A 16-year-old is receiving outpatient SUD treatment in a state whose law permits minors to consent to such treatment without parental involvement. The teen's mother calls the program's billing office and asks for an itemized statement so she can submit it to her insurance. What does 42 CFR Section 2.14 require?

A
B
C
D
Test Your Knowledge

During orientation to a process group, a new member asks, "So everything anyone says in here is protected by federal law, right?" What is the accurate response?

A
B
C
D
Test Your Knowledge

A client's employer telephones a Part 2 program and says, "I just need to confirm that Maria kept her appointment yesterday so I can approve her sick leave — she told me she was there." No release is on file. What should the counselor do?

A
B
C
D