As a practicing psychologist, understanding your legal and ethical obligations regarding mandatory reporting is essential. This article will outline the key areas of mandatory reporting relevant to psychologists:
- Reporting child abuse and neglect
- The duty to warn and protect
- Reporting elder and vulnerable adult abuse
While psychologists are generally obligated to maintain patient confidentiality, specific circumstances exist where the law either mandates or permits the disclosure of confidential information without patient consent.
- The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule permits disclosure of protected health information (PHI) without patient authorization in various situations including when the disclosure is required by law, when reporting to appropriate government authorities, or to avert a serious threat to health or safety when communicating with persons able to prevent harm from dangerous patients (as detailed on the U.S. Department of Health and Human Services websiteopens in new window).
- Section 4.05(b) of the APA Ethical Principles of Psychologists and Code of Conduct addresses disclosure of confidential information without consent when necessary to protect the patient, psychologist, or others from substantial harm.
Ultimately, psychologists need to know when specific laws within their jurisdiction require them to report confidential patient information.
Reporting child abuse and neglect
Most, if not all, states have specific laws mandating certain types of professionals, including psychologists, to report suspected child abuse or neglect immediately. This is the most consistent reporting requirement nationwide and this duty generally supersedes patient confidentiality. However, state laws and regulations vary in their specific reporting requirements, including:
Defining abuse and neglect
Each state defines child abuse and neglect differently, but generally, it includes physical abuse, sexual abuse, emotional abuse, and neglect. Psychologists must familiarize themselves with their state’s specific definitions to accurately identify situations that trigger the reporting requirement.
Statute of limitations (reporting past abuse)
State laws may differ regarding reporting past abuse. While state laws typically require immediate action when there is current suspicion of child abuse or neglect, some states require reporting even if the abuse happened in the past and the individual is now an adult.
Reporting methods and contents of the report
Most child abuse reports are made by calling your state’s child abuse reporting hotline. This hotline can also be used as a resource to obtain guidance on whether a particular situation triggers a duty to report. In addition, many states require subsequent submission of a written report. Before releasing any information beyond what is required in an initial report, psychologists should review child protection laws to ensure legal authority or obtain authorization from the child’s legal representative (usually a parent who is not the alleged perpetrator).
Anonymity and immunity for the reporter
All states have statutory provisions to maintain the confidentiality of abuse and neglect records. Most states permit mandated reports to remain anonymous, protecting the reporter’s identity from disclosure to the alleged perpetrator. However, some jurisdictions may allow the release of the reporter’s identity under specific circumstances, such as a court order based on a compelling reason. Importantly, all states and the District of Columbia provide some form of immunity from liability for good faith reporting, often extending to any necessary actions taken as a consequence of the report.
Actions required beyond reporting
Even if you aren’t legally required to report child abuse in a specific situation, clinical and ethical concerns may still necessitate action. This can include:
- Cooperating with an investigation or participating in a judicial proceeding based on the alleged maltreatment
- Responding to abuse by nonguardians (in limited mandatory reporting states): In states where mandatory reporting laws are specifically limited to abuse by a parent or legal guardian, if a child reports abuse by someone else (a nonguardian), you should still take action, such as:
- Encouraging the child’s parent or legal guardian to pursue legal and/or other protective measures against the alleged abuser.
- Ethically, you may need to continue therapy with the child and offer support and resources (such as information about support groups) to the parents.
- Addressing imminent danger: If there is reason to believe that the patient or another person is in imminent danger of serious harm, Ethics Code Standard 4.05(b) and relevant state “duty to protect” laws, may permit the release of confidential information. This is a separate consideration from mandatory child abuse reporting and more information on “duty to protect laws” can be found below.
Penalties for failure to report
The consequences for failing to report suspected child abuse or neglect can be severe and vary by jurisdiction. They may include:
- Criminal charges, ranging from misdemeanors to felonies, potentially leading to jail and/or fines.
- Civil liability for any damage caused by failing to report.
Given these significant variations in the law across states, being familiar with the specific mandatory reporting laws in your jurisdiction is important as failure to report can lead to serious penalties. The Child Welfare Information Gatewayopens in new window is an excellent resource for information on specific state requirements, including a list of hotline numbers.
Duty to warn/protect
The duty to protect (sometimes referred to as “duty to warn”) is a core responsibility for psychologists. This duty generally means that if a patient shares information during therapy indicating a serious threat of harm to themselves or others, psychologists have a legal obligation to take reasonable steps to prevent that harm, even if it means breaking confidentiality. Being aware of your legal obligations as a practicing psychologist when seeing a potentially dangerous patient who threatens to harm themselves or others is crucial. While the core principle of preventing harm remains consistent, the specifics of this legal mandate—“duty to protect” or “duty to warn”—vary by state, including:
When the duty applies
This generally hinges on the presence of a “reasonably identifiable victim,” which varies by state. Some states require a specific individual to be named while others accept a broader class of individuals.
The threshold for “imminent danger” also differs, requiring careful assessment of the patient’s intent, means, and opportunity to carry out the threat.
In addition, some jurisdictions extend the duty to protect to cases of potential self-harm while others focus solely on threats to others.
Necessary steps to take
The actions required to fulfill the duty to protect can vary and may include:
- Warning the potential victim(s), notifying law enforcement (typically in the vicinity of the potential victim or where the threatened harm is likely to occur), initiating involuntary hospitalization or commitment proceedings, or taking other reasonable steps deemed necessary to mitigate the identified risk.
- Understanding whether your state mandates reporting (requiring action) or permits it (allowing discretion in choosing the most appropriate course of action based on your professional opinion) is important.
Psychologists can avoid legal problems by endeavoring to:
- Know relevant state laws
- Pay close attention to definitions within your state’s law for key terms like “reasonably foreseeable victim” and “imminent danger”
- Keep up to date on changes to the law
- Understand when the duty applies
- Be aware of necessary steps
- In states lacking clear statutory guidance or relevant case law on the duty to protect, psychologists should
- Contact a licensed attorney with relevant experience
- Consider taking risk management workshops or consulting with one’s malpractice insurance carrier for guidance
- Check with the state psychological association
- In instances of uncertainty, whether or not the state has a statute or case law, consult a colleague or other experienced clinician with expertise in this area to assist in assessing the situation and deciding on advisable steps.
Elder and vulnerable adult abuse and neglect
As with child abuse, the definitions and reporting requirements for elder and vulnerable adult abuse and neglect vary by state. While there may be some similarities to child abuse reporting protocols in terms of general process of contacting a state agency, it is critically important for psychologists to check the specific state laws and regulations in their jurisdiction as the legal definitions, mandated reporter categories, and reporting procedures for elder and vulnerable adult abuse can differ considerably. Psychologists should be aware of these distinctions in their jurisdiction.
Abuse
The definition of elder and vulnerable adult abuse typically encompasses physical abuse, emotional abuse, and sexual abuse. Some states broaden these categories to include things like “financial exploitation” (the illegal or improper use of an elder’s funds, property, or assets) and “abandonment” (the desertion of an elder by a caregiver). Psychologists should contact the local Adult Protective Services office for guidance on how reportable abuse is defined in their state as well as specific reporting procedures.
Neglect
Various forms of neglect may be reportable to State Adult Protective Services Programs.
- Physical neglect (failure to provide basic needs like food, water, shelter, clothing, hygiene, and necessary medical care)
- Emotional neglect (withholding affection, support, or interaction or causing mental anguish through verbal or nonverbal actions)
- Abandonment (desertion by a caregiver, leaving the vulnerable adult without necessary care)
- Isolation (restricting contact with others)
- Financial neglect (misuse or exploitation of resources or failure to manage funds to meet the adult’s needs)
- Self-neglect (an adult’s inability to care for their own basic needs due to physical or mental impairment, which is reportable in many but not all jurisdictions)
Capacity and consent
A key difference from child abuse reporting can be the issue of the vulnerable adult’s capacity to make their own decisions. While reports often proceed regardless of consent if there is a strong suspicion of abuse, Adult Protective Services agencies often strive to balance the duty to protect with the adult’s right to self-determination. Adults are presumed to have the capability to make their own decisions “unless a court of law has determined otherwise,” which is fundamentally different from how child abuse cases are handled. In some cases, if an adult has capacity and refuses services, Adult Protective Services may have limited intervention options unless there is an imminent threat of serious harm.
The National Adult Protective Services Associationopens in new window provides helpful guidance on supporting victims of elder and vulnerable adult abuse and neglect, including how to report it.
The American Bar Association provides a summarized chart of relevant state laws on Adult Protective Services Reporting (PDF, 763KB)opens in new window.
Disclaimer: Legal issues are complex and highly fact-specific and state-specific. They require legal expertise that cannot be provided in this article. The information in this article does not constitute and should not be relied upon as legal advice and should not be used as a substitute for obtaining personal legal advice and consultation prior to making decisions.

