Privacy in Rehab: Confidentiality, Coming Out and Your Records

Worry about privacy keeps a lot of people out of treatment. You may be wondering who will find out you went to rehab, whether your parents will see an insurance statement, what your employer can learn, and whether you have to come out to get good care. Federal law gives substance use treatment records strong protection, and you keep a lot of control over what you share. This guide explains the basics in plain language and gives you questions to ask before you start.

This is general information, not legal advice. Rules can differ by state and by program, so confirm the details with the program and your health plan.

The two federal privacy laws that matter most

HIPAA

HIPAA protects health information held by "covered entities": health plans, most health care providers and health care clearinghouses, plus business associates such as outside billing companies. Under HIPAA, your health information cannot be used or shared without your written permission unless the law allows it. The law does allow sharing for your treatment and care coordination, and to pay providers and run health care operations. Without your authorization, a provider generally cannot give your information to your employer.

HIPAA also gives you rights: to see and get a copy of your health records, and to file a complaint with your provider, your insurer or the U.S. Department of Health and Human Services (HHS) if you think your rights were violated.

42 CFR Part 2

Substance use disorder treatment records get an extra layer of protection under a federal regulation known as 42 CFR Part 2. It covers records of the identity, diagnosis, prognosis or treatment of patients in federally conducted or assisted substance use disorder programs. Key points, as HHS describes them:

• Consent is central. Disclosures generally require your written consent, and a disclosure made with consent must come with a copy of the consent or a clear explanation of its scope.
• Counseling notes get extra protection. Substance use disorder counseling notes require a separate consent.
• Limits on use against you. Part 2 restricts the use of your records and testimony in civil, criminal, administrative and legislative proceedings against you unless you consent or a court issues an order. Records cannot be used to investigate or prosecute you without your written consent.
• Your rights. You can ask the program to limit certain disclosures, ask for an accounting of disclosures, and file a complaint with the program or directly with HHS.

Part 2 is aligned with HIPAA in areas like breach notification and privacy notices, but its protections against use of records in legal proceedings remain stricter. Ask any program you are considering whether it is covered by Part 2 and to give you its privacy notice.

Who can actually see your records

In practice, the people with access to your treatment information are the clinical team caring for you and the staff who handle billing and operations, within the limits above. Anyone else, including family, an employer or a landlord, generally needs your written permission.

A few practical tips:

• Read every consent form before you sign. Each one should say who receives information, what information and for what purpose. You can ask to narrow a consent to only what is needed.
• Decide who your contacts are. Programs often ask for an emergency contact or someone to update. That can be a partner, a friend or chosen family rather than a relative.
• Ask how sexual orientation and gender identity are recorded. Massachusetts guidance for programs serving LGBTQ adults calls for intake forms that let clients choose whether and how to disclose this information, and for data safeguards that specifically protect it.

Being out, or not, in treatment

You do not have to come out to get treatment, and you do not have to be out to everyone at a program. You can decide who knows: your counselor, your group, your roommate, or no one.

That said, many people find it helps to tell at least their primary clinician. A counselor can only help with what they know about, and stress tied to stigma or hiding who you are may be part of the picture. Our guide to minority stress and addiction explains the research.

Some things to know:

• Group therapy is different. Other clients in your group are not your providers. Ask what privacy expectations the group sets, and share only what you are comfortable having others know.
• Names and pronouns. Massachusetts guidance calls for programs to use the name and gender a person identifies and lives as in all interactions, and for treatment plans to account for a legal name that differs from the name a person uses, for example on insurance paperwork. Ask how a program handles this. Our transgender rehab guide covers more.
• LGBTQ groups. If a program has an LGBTQ group, joining it is still your choice. See our questions to ask an LGBTQ rehab for what to ask on the first call.

Insurance and explanation-of-benefits concerns

If you are covered as a dependent on a parent's or partner's plan, you may worry that statements about your treatment will reach them. HealthCare.gov notes that young adults can generally stay on a parent's job-based plan until age 26, even if they are married or live elsewhere, so this situation is common.

HIPAA gives you a tool here. Providers must accommodate reasonable requests to send communications to a different address or by a different method, and cannot require you to explain why. Health plans must accommodate such requests when you clearly state that disclosure of all or part of the information could endanger you. A plan may require the request in writing and may ask for that statement.

Steps to take:

• Call the member services number on your card and ask where explanations of benefits and other notices for your care are sent, and whether you can redirect them.
• If disclosure could put you at risk, for example if family members are hostile to your identity, say so and submit a written confidential communications request.
• Ask the treatment program to send its own communications only to the address, phone and email you choose.
• Our insurance guides explain what major carriers cover. If family conflict is part of the picture, read family rejection and recovery.

Your job and FMLA

Providers generally cannot share your information with your employer without your authorization. If you need time away for treatment, the federal Family and Medical Leave Act may help.

• The U.S. Department of Labor says substance abuse treatment may be a serious health condition under FMLA when the conditions for inpatient care or continuing treatment are met. A mental health condition requiring an overnight stay in a hospital or residential treatment facility is one example of a serious health condition.
• FMLA leave applies to treatment provided by a health care provider, or by a provider on referral. Absence because of substance use itself, rather than for treatment, does not qualify.
• Your employer may not retaliate against you for using FMLA leave for treatment, though an employer may still act under a consistently applied policy on substance use that was communicated to employees.
• Employers must keep FMLA medical records confidential and separate from routine personnel files. Supervisors may be told you need to be away or about work restrictions, but employers may not share or threaten to share your health information to discourage you from using leave.
• You can also take FMLA leave to care for a covered family member in substance use treatment.

FMLA has eligibility rules about your employer and your work history, so check with HR or the Department of Labor. If you prefer, you can request leave through HR rather than your direct supervisor.

Your next steps

• Ask each program whether it is covered by 42 CFR Part 2 and request its privacy notice.
• Read consent forms carefully and name only the contacts you trust.
• Decide ahead of time who you want to know about your identity during treatment. You can change your mind later.
• Call your health plan about where notices go, and submit a confidential communications request if needed.
• Talk to HR about FMLA if you need time off, and share only what is required.
• Compare inpatient and outpatient options; outpatient care may be easier to fit around work.
• Browse programs that report a program or group for LGBTQ clients to SAMHSA, or search by state. If you are supporting someone else, see helping an LGBTQ loved one with addiction.

Sources

• HHS: Your Rights Under HIPAA
• HHS: Fact Sheet, 42 CFR Part 2
• eCFR: 45 CFR 164.522, Rights to Request Privacy Protection
• HealthCare.gov: Health Coverage for Young Adults Under 26
• U.S. Department of Labor: FMLA and Substance Abuse Treatment
• U.S. Department of Labor: FMLA and Mental Health
• Massachusetts: Treatment Services for LGBTQ Adults

Related guides

• Why LGBTQ-Specific Addiction Treatment Matters | LGBTQ Rehab
• Questions to Ask an LGBTQ Rehab Before You Enroll
• Transgender Rehab: Finding Addiction Treatment That Respects Your Gender
• Minority Stress and Addiction: How Stigma Affects Substance Use
• Family Rejection, Chosen Family and Recovery
• LGBTQ-Friendly vs LGBTQ-Specific Rehab: What's the Difference?

Find treatment

LGBTQ Rehab by stateLGBTQ Addiction Treatment by stateLGBTQ-Friendly Rehab by state