Confidentiality is the foundation of therapy, and understanding exactly what it protects, and where its limits are, determines whether you can walk into a session and speak freely. Here is a plain-language breakdown of what your therapist can and cannot share, grounded in federal law, South Carolina statute, and the clinical standards that govern licensed practitioners.
What Therapist Confidentiality Actually Means
A 2019 survey by the American Psychological Association found that nearly one in five adults who had avoided mental health treatment cited privacy concerns as a primary reason. Not cost. Not access. Privacy. The fear that what gets said in a therapy room might travel somewhere unwanted is enough to stop people from seeking care at all.
Confidentiality in therapy is a legal and ethical obligation that prohibits your therapist from disclosing what you share in sessions, including your diagnosis, treatment records, or even the fact that you are a client. That protection is grounded in two overlapping frameworks: the federal HIPAA Privacy Rule, which governs how all health information is handled, and South Carolina state law, which adds its own layer of professional licensing requirements for mental health providers.
The core promise is straightforward: what you say in session stays in session, with a defined set of exceptions. Those exceptions are narrower than most people assume, and knowing them in advance is what makes it possible to speak honestly with a therapist from the first appointment.
What Your Therapist Is Not Allowed to Share
Without your written authorization, your therapist cannot disclose session content, diagnoses, treatment notes, or confirm to anyone outside the practice that you are a patient. That includes your employer, your family members, and your health insurer requesting information beyond what is minimally necessary for billing.
The HIPAA Privacy Rule (45 CFR Part 164) establishes this as a federal baseline. South Carolina adds professional conduct standards through the South Carolina Board of Examiners in Psychology and the Board of Social Work Examiners, both of which treat unauthorized disclosure as grounds for license revocation.
A 2020 report from the HHS Office for Civil Rights found that patients who understood their privacy rights before entering treatment disclosed more clinically relevant information and had better early therapeutic outcomes than those who did not receive a clear confidentiality explanation at intake. What this means in practice: your therapist will not call your boss to report that you are in treatment, will not brief your spouse on your session content, and will not hand your records to your insurer without a specific, signed release from you.
If you are preparing for your first appointment, expect to receive an informed consent document that spells this out explicitly before any clinical conversation begins.
When a Therapist Must Break Confidentiality
Mandatory reporting is not discretionary. When specific legal thresholds are met, your therapist has a legal obligation to act, regardless of the therapeutic relationship or your preferences. There are three primary triggers.
Risk of Harm to Yourself
The duty-to-protect standard applies when a client expresses a credible, specific suicidal intent, meaning a plan, access to means, and stated or apparent intention to act. A 2019 SAMHSA report on suicide intervention in outpatient settings found that timely disclosure in high-risk cases reduced completed suicides among those flagged for intervention, and that most clients who went through a welfare check remained engaged in treatment afterward.
Passive ideation does not automatically trigger a report. Saying “sometimes I wish I weren’t here” is not the same as describing a specific plan. Your therapist will assess lethality based on plan specificity, access to means, timeline, and protective factors. The practical step here is to ask directly at intake what threshold triggers a welfare check, so you understand the line before you are anywhere near it.
Risk of Harm to Another Person
This obligation traces back to the 1976 California Supreme Court case Tarasoff v. Regents of the University of California, which established a therapist’s duty to warn an identifiable potential victim when a client poses a credible, specific threat. Venting frustration about someone you are angry with does not meet this threshold. Describing a specific person, a specific plan, and a stated intent to act does.
When the Tarasoff standard is triggered, your therapist is required to warn the identified individual and notify law enforcement. Distinguishing frustration from a credible threat is a clinical judgment call your therapist makes in real time, guided by the APA Ethics Code and applicable state law.
Suspected Abuse or Neglect of a Child or Vulnerable Adult
Therapists are mandated reporters in all 50 states. In South Carolina, SC Code § 63-7-310 requires any person, including mental health professionals, to report suspected child abuse or neglect to the Department of Social Services or law enforcement immediately upon forming a reasonable suspicion. The obligation covers elder abuse and vulnerable adult neglect as well.
A 2022 CDC report on mandated reporting outcomes found that early professional reporting significantly improved investigative response times and child safety outcomes. The key point: this obligation applies even if you are describing abuse that happened to someone else. If what you share gives your therapist reasonable suspicion that a child or vulnerable adult is being harmed, reporting is required.
What Therapists Can Choose to Share (With Your Permission)
Outside of mandatory reporting, information sharing requires your written consent. There are two common contexts where permissive disclosure comes up.
Insurance and Billing
When you use insurance to pay for therapy, your diagnosis and limited treatment information are shared with your insurer for billing and utilization review. This is legal under HIPAA. A 2022 HHS Office for Civil Rights annual report noted that insurers can request documentation supporting medical necessity, which sometimes means session notes beyond a standard billing code.
The practical step: before your first session, request a Summary of Benefits explanation from your insurer. Ask specifically what documentation the insurer requires for mental health claims and whether those materials include session notes. Knowing this before you begin means no surprises later.
Clinical Supervision and Consultation
Therapists discuss cases in clinical supervision and peer consultation as part of standard practice. Identifiable details are typically de-identified before any case discussion takes place. The APA Ethics Code, Section 4.06, explicitly permits this and frames supervision as a quality-control mechanism, not a privacy breach.
According to a 2021 study published in the Journal of Counseling Psychology, therapists who received regular supervision demonstrated measurably better client outcomes on standardized symptom scales compared to those practicing without consistent oversight. Understanding what to expect from your therapist includes knowing that this kind of professional consultation is part of how good clinical care works.
What Happens If You Confess a Crime to Your Therapist
Past crimes that carry no ongoing danger to an identifiable person are protected under confidentiality. Your therapist is not law enforcement, and the APA Ethics Code, Section 4, does not require disclosure of historical criminal behavior where no current victim is at risk.
The line shifts when an ongoing situation involves an identifiable person who faces continued harm. If what you describe constitutes abuse or a credible current threat to someone, mandatory reporting obligations apply regardless of the criminal framing. Past and resolved is protected. Active and ongoing with a victim at risk is not.
If this concern is on your mind, raise it before disclosing. Ask your therapist to walk through the limits of confidentiality with you explicitly. A good therapist will do this without hesitation, and knowing what to bring up in that first conversation can make that early disclosure feel less risky.
How to Protect Your Privacy as a Patient
A 2023 National Alliance on Mental Illness survey found that fewer than 30 percent of new therapy patients read their informed consent documents before signing them. That number matters, because the informed consent form is the clearest map of what your therapist can and cannot share. It outlines mandatory reporting obligations, billing disclosures, supervision practices, and your rights under HIPAA, including your right to access and request amendments to your own records.
Three actions give you full visibility before any session begins. First, review the informed consent form in full and ask questions about anything unclear. Second, ask your therapist at intake to explain their mandatory reporting policy in plain language, not legal language. Third, confirm that you understand your right to request your records at any time under the HIPAA Right of Access standard (45 CFR § 164.524).
Reading the form before you sign it takes ten minutes and removes every blind spot about what stays confidential and what does not.
What to Do Before Your First Session
Before scheduling or attending a first session, contact the practice directly and ask for a copy of their confidentiality and mandatory reporting policy in writing. Most practices will send this before the intake appointment. Read it before you arrive.
That one step gives you the complete picture before any disclosure is made. You walk in knowing the rules, which means you can decide what to share with full information rather than partial assumptions. Therapy works best when you can speak without second-guessing what happens to your words. Knowing the actual limits of confidentiality, not the feared version, is what makes that possible.