You can confess a crime to a therapist, and in most cases what you say stays in the room. Therapist-patient privilege and the HIPAA Privacy Rule protect the substance of therapy conversations from being shared with law enforcement, insurers, or courts without your permission. The protection is strongest for past, completed crimes. It weakens or disappears when the conduct is ongoing, when you describe a plan to harm someone in the future, or when the crime involved serious physical injury to a victim.
What Therapy Confidentiality Actually Covers
The legal protection has two layers. The first is privilege: the U.S. Supreme Court recognized a psychotherapist-patient privilege in federal courts in Jaffee v. Redmond in 1996, holding that confidential communications between a licensed psychotherapist and a patient during treatment cannot be forced into disclosure.1Justia. Jaffee v. Redmond, 518 U.S. 1 (1996) Every state recognizes some version of the same privilege.
The second layer is HIPAA. Psychotherapy notes — the session-by-session record of what you actually discussed — are kept separate from the rest of your medical file and generally cannot be released without your written authorization.2U.S. Department of Health and Human Services. Does HIPAA Provide Extra Protections for Mental Health Information Compared With Other Health Information? Your insurer sees your diagnosis and dates of service, not the content of your sessions. Other doctors and family members have no automatic access to any of it.
Before your first appointment, your therapist is required to give you a Notice of Privacy Practices that spells out how your information can be used and the specific exceptions where confidentiality can be broken.3eCFR. 45 CFR 164.520 – Notice of Privacy Practices for Protected Health Information Read it. The exceptions are where confessions get complicated.
When a Therapist Is Required to Report
Therapists are mandated reporters. The law requires them to break confidentiality in specific situations, and failing to report when required is itself a criminal offense in most states. Roughly 47 states classify failure to report suspected child abuse as a misdemeanor, with some states elevating it to a felony in serious cases.4Office of Justice Programs. Penalties for Failure to Report and False Reporting of Child Abuse and Neglect: Summary of State Laws
The main triggers for mandatory reporting are:
- Suspected child abuse or neglect. If a therapist has reasonable suspicion that a child is being harmed or neglected, they must notify Child Protective Services or law enforcement. The duty applies whether you describe something you did, something you witnessed, or something you suspect. There is no discretion.
- Suspected abuse of an elder or vulnerable adult. A growing number of states require reporting of abuse, neglect, or financial exploitation of adults who cannot protect themselves due to age or incapacity.
- Serious threats of violence toward an identifiable person. The 1976 California Supreme Court decision Tarasoff v. Regents of the University of California established that when a patient presents a serious danger of violence to another person, the therapist has an obligation to take reasonable steps to protect the intended victim. About 23 states have made this duty mandatory by statute, roughly 10 impose it through court decisions, and about 11 give therapists discretion to warn but don’t require it.5Justia. Tarasoff v. Regents of University of California
- Imminent risk of self-harm. If you describe suicidal intent with a plan and the means to act on it, your therapist can contact emergency services or take other protective steps.
None of these triggers is about punishing you for a past crime. They exist to prevent someone from being harmed going forward, which is why timing matters so much.
Past Crimes, Ongoing Crimes, and Future Threats
The single most important question is where your confession falls on a timeline.
A Completed Past Crime
Confessing to a crime that is finished is generally protected. Theft from a former employer, old tax fraud, a fight years ago, drug possession in the past — if the conduct is over and no one is in continuing danger from it, your therapist has no legal duty to report. The therapeutic point is to work through the guilt or the patterns that led to it, not to turn you in.
One caveat matters here. HIPAA permits — but does not require — a therapist to disclose information to law enforcement when a patient admits participation in a violent crime that the therapist reasonably believes caused serious physical harm to the victim.6eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required A past assault that left bruises sits differently from a past assault that put someone in the hospital. Most therapists will not use this permission, but the legal option exists.
A Crime That Is Still Happening
This is where people most often miscalculate. Framing something as a past confession doesn’t protect it if the conduct is continuing. If you tell your therapist about abusing a child you still live with, neglecting a parent in your care, or an ongoing pattern of domestic violence, the mandatory reporting rules apply the moment the therapist has reasonable suspicion. The fact that the behavior started years ago is irrelevant.
A Crime You’re Planning
Describing an intent to harm a specific person in the future triggers the duty to protect. A statement like “I’m going to hurt my ex next week” gives a therapist both the specificity and the imminence to act, which may mean warning the intended victim, calling police, or taking other reasonable steps depending on your state. Vague expressions of anger — the sort of thing people say about a boss or a relative when venting — typically don’t trigger reporting, though a therapist may want to talk them through.
The Crime-Fraud Exception
Privilege doesn’t cover someone who uses therapy itself as a tool for crime. Federal appellate courts have recognized a crime-fraud exception, reasoning that the protection falls away when a patient is not seeking treatment but trying to plan a crime, build a false mental health defense, or avoid detection under cover of the therapeutic relationship. It is a narrow exception, but it is real.
What Happens If Someone Tries to Get Your Records Later
A past confession in therapy can also come up if someone later tries to pull your records in a legal case. The level of protection depends on what kind of legal process is used.
A subpoena issued by an attorney is not the same as a court order. Under HIPAA, a therapist cannot simply hand over records in response to an attorney’s subpoena; there has to be evidence that you were notified and given a chance to object, or that a qualified protective order was sought.7U.S. Department of Health and Human Services. Court Orders and Subpoenas Your therapist should push back rather than automatically comply.
A court order signed by a judge is different. A therapist who refuses can be held in contempt. Even then, disclosure is limited to what the order specifically describes; a judge does not get open-ended access to your file.7U.S. Department of Health and Human Services. Court Orders and Subpoenas
What a Mandated Report Actually Looks Like
When a report is required, it is narrower than most people fear. The therapist typically starts with a phone call to the relevant agency — a child abuse hotline, adult protective services — and many states then require a written report within a set number of days.8APA Services. Mandatory Reporting for Psychologists
The report focuses on the specific concern that triggered it: the nature of the suspected harm, the people involved, and the basis for the suspicion. Your diagnosis, your other issues, your history, the unrelated things you talked about in other sessions — none of that is dumped into the report. Investigating what happens next is the receiving agency’s job, not the therapist’s.
Most therapists will tell you before they file, unless telling you first would put someone in danger. That is partly ethics and partly practical: the therapeutic relationship can sometimes survive a report that is handled transparently.
Ask Before You Disclose
If you are weighing whether to raise something specific, ask your therapist directly about the limits of confidentiality before you say it. Every therapist has to explain these limits and will usually do so at intake, but that explanation often reads like paperwork. You can slow it down. You can describe a hypothetical. You can ask where the lines are in your state before you decide what to share.
For past, completed crimes that did not seriously injure a victim and that do not involve ongoing harm to a child or vulnerable adult, the legal risk of talking honestly with your therapist is low. The privilege is well established, HIPAA protections are real, and therapists have strong professional reasons to keep what you say confidential. The places where confidentiality breaks are specific and mostly predictable: ongoing abuse of someone who cannot protect themselves, credible threats of future violence, and admissions of past violent crimes that caused serious physical harm. Outside those lines, the therapy room remains one of the most legally protected conversations you can have.