Balancing Privacy and Safety in School Mental Health Disclosures

In the wake of the Parkland shooting, Florida's school safety law inserted a single sentence requiring new students to disclose any prior mental health referral, positioned right next to questions about arrests and expulsions. This grouping forces school counselors to navigate a precarious line: how to identify at-risk students without transforming a therapeutic history into a permanent scarlet letter. The result is a legal and ethical tightrope where well-intended safety mandates can erode the trust that counseling depends on.

Why School Mental Health Disclosures Are so Contentious

After the Parkland shooting, Florida's school safety bill included a single sentence requiring new students to disclose any history of mental health referral and allocated nearly $70 million to increase mental health staffing in schools. According to a 2018 ABC News/WUSF investigation, Broward County alone used part of its $6 million share to hire 50 new counselors, psychologists, and social workers.¹ The intent was clear: identify at-risk students early. But the execution ignited a fierce debate over privacy, stigma, and the unintended consequences of well-meaning policy.

A Single Sentence with Far-Reaching Consequences

The disclosure mandate, buried in a 105-page bill that also raised the gun purchase age and permitted arming school employees, asks families to check a box indicating whether a child has ever been referred for mental health services. Laura Goodhue, a Florida mother of two children with mental health histories, told ABC News she worries the information could become part of permanent school records and be held against her children later.¹ Her concern resonates broadly: once a disclosure is made, control over that information often vanishes.

Stigma, Labeling, and Who Sees the Data

Michael Cowley, manager of psychological services for Pinellas County Schools, noted that the mental health question was grouped on forms with items about arrests or expulsions. This framing, he said, can increase stigma. Alisa LaPolt, executive director of NAMI Florida, stated bluntly: "There is stigma around mental illness and getting treatment for it."¹ Across Florida, districts varied widely in who could access disclosed data. Some limited access to psychologists and administrators, while others shared it with teachers and front-office staff. This inconsistency left families uncertain about how broadly sensitive information might travel.

The National Question: Safety vs. Help-Seeking

The Florida case study exemplifies a tension sweeping the country: Do mandatory mental health disclosures actually improve school safety, or do they drive families away from seeking help for fear of being labeled? The teen mental health provider shortage compounds this risk. If the process of identifying vulnerable students inadvertently punishes transparency, the very children such laws aim to protect may end up isolated from the support they need. Meanwhile, the mental health workforce shortage means that even well-funded school initiatives can struggle to staff the counseling roles that make early intervention effective.

FERPA Vs. HIPAA: Which Law Actually Governs Student Mental Health Records?

The tension here is between what most people assume, that HIPAA protects all health information, and the reality that K-12 student mental health records fall under a different federal privacy law entirely. This catches many counselors and parents off guard, especially when sensitive session details end up in places they never expected.

Why HIPAA Often Doesn't Apply in Schools

FERPA, the Family Educational Rights and Privacy Act, governs almost all student records maintained by a public school, including mental health notes generated by school counselors.¹ HIPAA, in contrast, covers health information held by health care providers. Because the school is not acting as a HIPAA-covered entity when a counselor provides services, those records are generally education records under FERPA.² For a record to remain HIPAA-protected, it must stay with an outside provider, such as a community mental health clinic that bills insurance. The moment a copy crosses into the school system, that copy becomes subject to FERPA.²

The FERPA Sole-Possession Records Exception

There is one critical nuance: FERPA's sole-possession exception. A counselor's personal notes are not considered education records if they remain in the sole possession of the maker, are used only as a memory aid, and are not accessible or revealed to anyone except a temporary substitute.³ This means a counselor can keep private, informal notes that are outside the official student file. However, this protection is fragile. If those notes are shared verbally with an administrator, placed in a cumulative folder, or documented in a student information system, they instantly become FERPA education records that parents and eligible students have a right to inspect.² The same transformation happens if the notes are used to make decisions about the student's services, discipline, or placement.

When HIPAA Does Apply

HIPAA can apply inside a school in narrow circumstances, typically when a school-based health center operates as a legally separate entity and bills Medicaid or other insurance for services.² In those cases, the clinic's records are HIPAA-protected while they remain within the clinic. If a copy is shared with school staff outside the clinic, that copy is once again governed by FERPA. There has been no major reinterpretation of these boundaries by the Department of Education between 2024 and 2026, but the practical challenges persist.⁴

Actionable Implications for Counselors

• What to keep in official records: Only include factual, objective information that you would be comfortable sharing with parents, such as dates of sessions, general topics discussed, and any mandatory reporting actions. Never embed subjective clinical impressions or raw therapeutic process notes in a student's educational file.⁵
• What to keep in personal notes: Use a separate, secure system for personal memory aids. These notes should never be stored in the school's student information system, shared with colleagues, or used to inform formal team decisions. If they are, they lose sole-possession status instantly.³
• When to redirect to an outside provider: For deeper therapeutic work, consider referring to community-based clinicians whose records remain under HIPAA. This creates a clearer boundary and reduces confusion about which law applies to which set of notes.²

When School Counselors Must Break Confidentiality

When exactly can a school counselor legally and ethically disclose a student's private mental health information? The decision is never taken lightly, but there are clear thresholds that require breaking confidentiality to protect the student or others.

Three Universally Recognized Exceptions

School counselors face three situations where they must report, even without student consent: imminent danger to self, imminent danger to others, and suspected child abuse or neglect.¹ For example, a student who says they plan to harm themselves after school and has a weapon in their locker presents an imminent danger to self. A student who describes a detailed plan to get revenge on a peer with a specific time and place is an imminent danger to others. If an elementary student discloses ongoing physical harm by a parent, that triggers a mandated child abuse report. Each scenario demands immediate action to ensure safety.

Legal Foundations: Duty to Warn and Mandatory Reporting

The obligation to breach confidentiality rests on legal pillars that override FERPA's privacy protections. School counselors inherit a duty to warn and protect rooted in Tarasoff principles, which have been adapted to school settings through case law and state statutes. When a student poses a serious threat of violence, the counselor must notify potential victims and law enforcement. Mandatory reporting laws for child abuse and neglect create a parallel duty: all school personnel, including counselors, must report suspected abuse to child protective services or police.² FERPA permits these disclosures under the health and safety emergency exception, so it does not act as a barrier. Additionally, court orders or subpoenas may compel release of records.

Navigating the Gray Areas

Real-world situations rarely present with textbook clarity. A student might say, "Sometimes I wish I wouldn't wake up," but deny any plan or intent. Does that cross the threshold? The ASCA position statement on confidentiality (2024) advises that the determination of serious and foreseeable harm must account for the student's developmental and chronological age, the setting, parental or guardian rights, and the nature of the harm.³ Suicidal ideation without a plan or access to means may warrant a safety assessment and parent notification only if the risk is elevated. Vague threats, such as "people will be sorry someday," require careful exploration; if the counselor determines no identifiable victim or imminent action, the threat may not yet be reportable. Substance use disclosures are even less clear. Weekend binge drinking by a 16-year-old, while concerning, typically does not rise to imminent danger unless there is acute intoxication, driving, or a severe substance use disorder indicating neglect. Counselors must judge each case on its facts, and school counseling career preparation increasingly emphasizes training for exactly these judgment calls.

Ethical Standards for Decision Making

The ASCA Ethical Standards for School Counselors (2022) provide essential guidance.² Standard A.2.e requires counselors to address the limits of confidentiality in developmentally appropriate terms at the outset of the relationship. The core rule states: "Keep information confidential unless legal requirements demand that information be revealed or a breach is required to prevent serious and foreseeable harm." When in doubt, counselors must consult with appropriate professionals such as supervisors, social workers, or legal counsel, and collaborate with the student to the extent possible, using the most appropriate and least intrusive method to breach confidentiality.² The 2024 ASCA position statement reinforces that families must be informed about these exceptions.³ The overarching principle is clear: protect safety while respecting the therapeutic bond, and always document the reasoning behind any disclosure.

State-By-State Variation in Student Mental Health Disclosure Laws

No two states take the same approach to student mental health disclosures. The result is a patchwork of mandates, opt-in consent models, and privacy protections that counselors must navigate daily, especially when students transfer across state lines.

States with Mandatory Screening or Disclosure

• Illinois: The first state to require universal mental health screenings for grades 3-12 (enacted 2025, full compliance by 2027-28).¹ Parents can opt their children out, but the default is participation. Screening data access protocols are still being finalized by districts.
• New Mexico: Through state administrative code, all students must undergo health and well-being screenings that include behavioral health.² The regulation does not carve out a separate consent process for mental health, making it effectively mandatory. Details on record access and use are left to local implementation.

Privacy-First Models

• Florida: The state's path illustrates the tension between early intervention and confidentiality. A 2018 law required new students to disclose prior mental health referrals, but the current framework, under the Parents' Bill of Rights, mandates active written parental consent for any mental health screening. Districts vary widely in who can see the information: some restrict access to psychologists and administrators, while others share it with teachers and front-office staff, as an ABC News investigation revealed.²
• Utah: Strong statutory privacy protections require prior written parental consent for any psychological exam, test, or survey.³ State-funded screenings are available but not mandatory, and they are limited to a narrow set of conditions (anxiety, depression, suicidal ideation). Access is tightly controlled, with results typically shared only with licensed mental health professionals and parents.

The Optional and Incentivized Middle Ground

• New Jersey: The state offers grants to districts that voluntarily implement annual depression screening for grades 7-12.² While not mandatory, many districts participate, creating a landscape where a student's experience can differ dramatically from one school to the next.
• South Carolina and Iowa: South Carolina has pending legislation (HB 3478) to create a statewide screening program for grades 6-12, while Iowa's 2024 law permits third-party organizations to conduct behavioral health screenings in schools.² Neither yet imposes a universal requirement, but both signal a trend toward greater data collection.

Since 2018, legislation around student mental health disclosures has accelerated, driven largely by school safety concerns.⁴ Counselors navigating licensure requirements often encounter students whose records reflect the disclosure laws of their previous state, creating confusion when those rules conflict with current district policies. Keeping informed about not only their own state's rules but also the broad national contours is now a core professional responsibility.

Related Articles

Student Consent, Parental Rights, and Documentation Best Practices

Do parents have the right to see everything in their child's school counseling file? The answer depends on the type of record, the student's age, and what state you practice in. Understanding the intersection of consent, parental rights, and documentation is critical for school counselors who must balance transparency with student trust.

Understanding FERPA and Parental Rights

Under the Family Educational Rights and Privacy Act (FERPA), parents generally have the right to inspect and review their child's education records until the student turns 18 or attends a postsecondary institution. For most K-12 school counselors, this means the students you serve are minors, and their parents retain legal access to many school records. However, FERPA does not grant parents blanket access to every note you write. The law distinguishes between "education records" and "sole-possession records," a distinction that becomes your most practical shield for protecting sensitive mental health conversations.

What Counselors Must (and Don't Have to) Disclose

Legal mandates require you to break confidentiality when there is a clear threat of harm to self or others, suspicion of abuse or neglect, or a court order. Beyond these, much of what you share with parents falls under professional discretion, not legal obligation. For example, if a student reveals anxiety about an upcoming test but asks you not to tell their parents, you are not legally required to disclose that under FERPA. Determining when to inform parents becomes an ethical judgment call, not a legal mandate. The best practice is to clearly define this boundary at the start of the counseling relationship and to consult your school's policies and your professional ethical code.

Three Types of Documentation

Counselors typically generate three categories of records, each with different privacy protections:

• Official education records: These are FERPA-covered documents such as transcripts, enrollment forms, and disciplinary records. They can be shared with parents and school officials with a legitimate educational interest. This category often includes the cumulative file that follows a student from school to school.
• Sole-possession notes: These are personal notes kept in your sole possession, used only as a memory aid, and not shared with anyone else except a substitute counselor. If properly maintained, they are exempt from FERPA access. For them to remain protected, they must never be placed in the student's cumulative file or shared orally with others.
• Treatment records from school-based health clinics: If your school operates a clinic that provides medical or mental health services, those records are often governed by HIPAA rather than FERPA, and release rules follow a different set of consent requirements.

Best Practices for Sole-Possession Notes

To truly protect sole-possession status, store notes in a separate, locked location, ideally a physical file cabinet that only you can access. Do not store them in an electronic system that other school personnel can view; even password-protected systems can compromise sole-possession status if administrators or IT staff have backend access. In your notes, record objective observations and clinical impressions, avoiding value judgments or speculation that could be misinterpreted if ever subpoenaed. For official records, document only the minimum necessary: dates of meetings, general topics discussed (e.g., "academic stress"), and any referrals made. Never include session details or subjective comments in the cumulative file.

The Florida Case and Cumulative Files

A 2018 Florida law required new students to disclose any prior mental health referrals on enrollment forms. Parents and advocates raised alarms when they learned this information was being placed directly into cumulative files that follow students across districts.¹ The practical risk is real: once sensitive mental health history becomes a permanent part of a school record, it can shape perceptions of the student for years, potentially affecting disciplinary decisions, teacher expectations, and even college applications. Counselors should advocate within their districts to segregate such disclosures from the standard cumulative file and to train registration staff on the importance of confidentiality safeguards. If your school collects mental health history at enrollment, push for clear protocols on who can access that information and how it is stored. clinical supervision hours for licensure frameworks offer a useful model here: just as supervision documentation distinguishes between formal logs and personal reflective notes, mental health disclosure records at schools benefit from similarly clear category boundaries.

How to Explain Confidentiality Limits to Students and Families

The most critical moment for building trust is also the moment when students and families learn that confidentiality has limits. When counselors address this tension directly at the start, they lay the groundwork for honest engagement rather than later feelings of betrayal.

Explaining Limits to Students: Age-Appropriate Scripts

For elementary students: "What you tell me is private, unless I'm worried about your safety or someone else's safety. If that happens, I will talk to the grown-ups who can help. But I'll always try to tell you first."

For middle and high school students: "Our conversations are confidential, with three exceptions: if you tell me you're going to hurt yourself, hurt someone else, or someone is hurting you, I have to report that. I'll always let you know if I need to share something, and I'll only tell the people who need to know to keep you safe."

The Parent and Guardian Conversation

At the start of the year or during intake, set expectations with a direct but supportive statement: "My role is to support your child's well-being. I keep what students share private, but if I hear something that signals danger to self or others, I am legally required to act. In those cases, I'll involve you as soon as possible, because you are essential partners. My goal is to create a safe space where your child feels comfortable being open, which ultimately helps them grow and build resilience." This upfront clarity helps prevent misunderstandings and builds trust between home and school.

Why Upfront Transparency Matters

Research on therapeutic alliance shows that predictability about disclosure rules reduces anxiety and fosters disclosure. Students who know the boundaries are more likely to share their concerns early, when intervention is most effective. Cultural mistrust in mental health therapy can compound this challenge, making it especially important for counselors to communicate limits with sensitivity and care. Avoiding surprise disclosures protects both the counseling relationship and the student's sense of agency.

Preventing Stigma and Advocating for Ethical Disclosure Policies

School mental health disclosure policies risk amplifying stigma when they treat a counseling referral like a disciplinary infraction. In Florida, the 2018 school safety law that required new students to disclose any prior mental health referrals placed that question alongside items about arrests and expulsions. One district psychologist noted this grouping could inadvertently increase stigma, a concern echoed by mental health advocates.¹ Counselors are ethically bound to push back against such design choices that discourage help-seeking.

The Stigma of Grouping Mental Health with Discipline

When school forms list counseling history next to criminal history, students and families receive a clear but damaging message: seeking support is a red flag akin to rule-breaking. This design flaw is not just poor aesthetics. It can deter families from providing accurate health information, undermining early intervention. Under the Americans with Disabilities Act (ADA) and Section 504, schools cannot use mental health disclosures to justify discriminatory discipline, yet enforcement remains inconsistent. Counselors must educate administrators that these legal protections exist and advocate for intake processes that separate health data from disciplinary records entirely.

Practical Safeguards Counselors Can Champion

School counselors can spearhead concrete policy changes that reduce stigma. First, limit access to disclosed mental health information strictly to personnel with a legitimate educational interest, such as the school psychologist or counselor. Second, ensure that mental health records are stored separately from disciplinary files and are not included in a student's permanent cumulative folder. Third, push for mandatory annual training on confidentiality for all staff who might encounter student health data, including front-office staff and teachers. The ASCA universal screening position statement recommends active parental consent and confidential, secure data handling with regular purging of old records², setting a standard that exceeds the minimum federal floor of the Protection of Pupil Rights Amendment (PPRA).

The Counselor's Advocacy Imperative

ASCA's 2025 safe schools guidance explicitly advises counselors to protect confidentiality and avoid quasi-law-enforcement roles.³ Its 2020 student mental health position calls on counselors to be vocal advocates for ethical screening practices, even when state mandates create pressure for over-disclosure. Because counselors understand both the clinical risks of stigma and the operational realities of school systems, they are uniquely positioned to influence how disclosure policies are implemented. By championing privacy, separation of records, and trauma-informed communication, counselors transform mandates from punitive checklists into genuine safety nets. The professional imperative is clear: accept no disclosure design that treats a student's therapeutic history as a liability.

Common Questions About School Counselor Confidentiality and Mental Health Disclosures

School counselors navigate a complex landscape of privacy laws and ethical duties when handling student mental health information. These frequently asked questions clarify the boundaries of confidentiality, the role of federal laws like FERPA, and the practical implications of mandatory disclosure policies in states like Florida.