Give the People What They Want — But Not So Fast

By Gregory J. Radomisli, Esq. and Nicole S. Barresi, Esq.

Gregory J. Radomisli, Esq. and Nicole S. Barresi, Esq.

Typically, when a hospital or provider receives HIPAA authorization and a patient waives the physician-patient confidentiality of treatment records, the records can be produced to the patient and any third parties the patient authorizes. However, providers of mental health care should be aware that in situations involving psychiatric treatment, a further inquiry should be considered as to whether the records to be disclosed could cause harm to the patient. If the provider is concerned about the impact that sharing records with others would have on the patient, the provider and/or hospital can seek a protective order from the court to limit disclosure.

In Cynthia B v. New Rochelle Hospital Medical Center, 60 N.Y.2d 452 (1983), the Court of Appeals addressed situations in which a nonparty custodian of medical records may obtain a protective order prohibiting the disclosure of psychiatric records. The Court explained that the reason for the hesitancy behind the disclosure of psychiatric records, despite the waiver of confidentiality, was that these records were highly sensitive, and there was a concern that unsupervised disclosure could cause harm to the patient. Psychiatric records will often contain intimate details of past acts, hopes, fantasies, shames and doubts divulged during treatment that otherwise may not have been divulged. Therefore, providers have argued that a custodian or court should have discretion to withhold portions of records, or that adequate protective measures must be imposed in certain cases, so that only relevant material is disclosed.

The Court of Appeals ruled that a balancing process should be used in deciding whether to limit disclosure. Specifically, the court shall first broadly determine “whether the records are discoverable under CPLR article 31. If the records are found … to be material … and the patient … waived the privilege of confidentiality, either expressly by authorizing the record’s release or implicitly by placing his or her mental condition in issue, a strong presumption is created in favor of … disclosure. This presumption may be rebutted [by a record custodian] in a request for a protective order limiting discovery upon a showing of exceptional circumstances. [Exceptional circumstances may be present where] the custodian establishes that nondisclosure, in whole or in part, is reasonably necessary to prevent imminent and serious physical or psychological damage to the patient. … Should the custodian meet this burden, the court must then weigh the … information’s importance to the pending litigation against the harm that is claimed will occur by its disclosure. [F]actors such as the imminence and seriousness of the claimed harm, the materiality of the information to the litigation, and the potential conflicts of interest which the custodian may have in objecting to disclosure [will be considered.] After weighing all the circumstances, the court [will] then decide whether [and/or to what extent] a protective order should be granted.”

These considerations are particularly important when a patient requests his or her own psychiatric records, given that Section 18 of the Public Health Law generally gives patients the right to examine/obtain copies of their own records. The holding in Cynthia B. must be read in conjunction with Public Health Law Section 18(3)(d), which allows the healthcare provider to deny access to all or a part of the information requested if the information “can reasonably be expected to cause substantial and identifiable harm to the subject or others which would outweigh the qualified person’s right of access to the information.” Despite that admonition, however, case law clearly favors disclosure in most circumstances. See Mantica v. Department of Health, 94 NY2d58 (1999); Wheeler v. Social Servs Commr, 233 AD2d 4, 12 (2d Dept. 1997).

In sum, psychiatric providers should be cautious in automatic disclosures of records pursuant to HIPAA authorizations and may in appropriate circumstances consider seeking a protective order where it is believed that full disclosure may cause the patient harm. While the presumption is that when a patient waives confidentiality, the records should be released, providers should still conduct a preliminary analysis to ensure that highly sensitive records are evaluated before being sent to patients and third parties.

Partner Gregory J. Radomisli and Associate Nicole S. Barresi are attorneys at Martin Clearwater & Bell LLP, where they focus their practice on the defense of medical malpractice matters. For more information, visit

Source: MD News March 2022, Long Island Edition