Therapist confidentiality is not just a courtesy; it is a statutory requirement rooted in both state law and professional codes. At its core, the rule obligates clinicians to keep session content private unless a specific exception is met—such as imminent harm to self or others, court orders, or mandated reporting of abuse. The distinction between a private conversation and a record that can be subpoenaed is critical. A clear understanding of these boundaries empowers clients to ask informed questions and ensures that therapists maintain proper documentation practices that protect both parties.

While the law provides a framework, everyday practice often introduces subtle breaches. A therapist’s informal note‑taking, the use of cloud‑based electronic health records, or sharing case details with colleagues can inadvertently expose sensitive data. Furthermore, patients may assume that an email or a text chat is as secure as a face‑to‑face conversation, which is rarely the case. By recognizing these everyday vulnerabilities and learning the remedies, both therapists and clients can create a fortified environment where secrets stay just that—secret.