Medically reviewed by Kevin Wandler, MD, Chief Medical Advisor
Fear of other people finding out is a common reason adults delay addiction or mental health treatment. You might worry about your employer, your family, your insurance company or your community. The good news is that federal and Texas laws provide strong privacy protections for health information, and substance use treatment records have especially strong protections.
This article explains the basics of HIPAA and 42 CFR Part 2, how they apply, and the limited exceptions to know about. This is general information, not legal advice.
HIPAA: The Foundation of Health Privacy
The Health Insurance Portability and Accountability Act, known as HIPAA, sets national standards for protecting health information. Its Privacy Rule applies to health plans, health care clearinghouses and health care providers that conduct certain transactions electronically, as well as the business associates that work on their behalf.
Under HIPAA, covered providers and plans can use and share your health information for treatment, payment and health care operations, and in certain other situations the law allows. For most other purposes, they need your written authorization. HIPAA also gives you rights, including the right to:
- See and get a copy of your health records
- Ask for corrections to your records
- Get a list of certain disclosures of your information
- Ask to be contacted in a certain way or at a certain place, such as a different phone number or address
- Ask a provider not to share information about a service with your health plan if you pay for that service in full yourself
42 CFR Part 2: Extra Protection for Substance Use Treatment Records
Federal regulations known as 42 CFR Part 2 add another layer of protection for records from many substance use disorder treatment programs that receive federal assistance. These rules exist because people are less likely to seek help if they fear their treatment records could be used against them.
In general, Part 2 requires your written consent before a covered program shares information that identifies you as someone receiving substance use disorder treatment, with limited exceptions. It also places strong limits on using these records in civil, criminal, administrative or legislative proceedings against you. Such use generally requires your consent or a court order that meets specific legal standards.
Federal rules updated in 2024 brought Part 2 closer to HIPAA in some ways. For example, patients can now give a single consent for future uses and disclosures of their records for treatment, payment and health care operations. The strong protections against using records in proceedings against the patient remain.
Texas Privacy Laws
Texas has its own laws protecting the confidentiality of medical and mental health information. Some Texas privacy requirements apply to a broader range of organizations than HIPAA does. When federal and state laws both apply, the more protective rule often controls.
Who Can Learn About Your Treatment
- Family members: as an adult, you decide whether your treatment team can share information with family. You can sign a release for specific people and limit what’s shared.
- Your employer: providers generally can’t share your treatment information with your employer without your written authorization.
- Your health plan: your plan receives information needed for payment and authorization, and it must protect that information too.
- Law enforcement and courts: access to substance use treatment records is tightly restricted and generally requires your consent or a qualifying court order.
Exceptions to Know About
Confidentiality is strong but not absolute. Limited exceptions can include:
- Medical emergencies, when information is needed to treat you
- Reports of suspected child abuse or neglect required by state law
- Certain court orders issued under specific legal standards
- Some audits, evaluations and research activities, under strict safeguards
Covered providers must give you a notice describing how they use and protect your information. If anything in it is unclear, ask your provider to explain it before you sign.
Practical Privacy Tips
- Read every consent form before signing and ask what information will be shared, with whom and for how long.
- Know that you can generally revoke a consent in writing, though it won’t undo disclosures already made.
- If you’re on someone else’s insurance plan, ask the plan how explanation of benefits statements are sent and whether you can request confidential communications.
- Choose one or two trusted people as your contacts during treatment, and tell the team exactly what each person may know.
Privacy protections apply whether you receive care in person or through a virtual intensive outpatient program. If you’d like family involved on your terms, family therapy can be a structured way to do that. For more common questions, visit our FAQ page.
Frequently Asked Questions
Will my family find out I’m in rehab?
Not from your treatment provider unless you give permission, with limited exceptions such as certain emergencies. You decide who is informed.
Will rehab show up on a background check?
Treatment records are medical records, not criminal records, and standard criminal background checks don’t include them. Legal issues separate from treatment are a different matter.
Can police access my treatment records?
Access to substance use treatment records by law enforcement is tightly restricted under federal rules and generally requires your consent or a court order meeting specific standards.
Can my spouse see my records if we share an insurance plan?
Sharing a plan doesn’t give a spouse access to your treatment records. The policyholder may receive explanation of benefits statements, though, so ask your plan about confidential communications if that’s a concern.
Take the First Step Privately
Our insurance verification is free and confidential. Learn about our addiction treatment services, review our insurance options, contact us, or call (469) 546-9303.