2023 Colorado Revised Statutes › Title 12 - PROFESSIONS AND OCCUPATIONS (§§ 12-1-101 — 12-315-310) › HEALTH CARE PROFESSIONS AND OCCUPATIONS (§§ 12-170-101 — 12-315-310) › Article 245 - MENTAL HEALTH (§§ 12-245-101 — 12-245-806) › Part 2 - GENERAL PROVISIONS (§§ 12-245-201 — 12-245-234) › Section 12-245-220 - Disclosure of confidential communications - definitions

(1)
A licensee, registrant, or certificate holder shall not disclose, without the consent of the client, any confidential communications made by the client, or advice given to the client, in the course of professional employment. A licensee's, registrant's, or certificate holder's employee or associate, whether clerical or professional, shall not disclose any knowledge of the communications acquired in that capacity. Any person who has participated in any therapy conducted under the supervision of a licensee, registrant, or certificate holder, including group therapy sessions, shall not disclose any knowledge gained during the course of the therapy without the consent of the person to whom the knowledge relates.
(2)
Subsection (1) of this section does not apply and a person may disclose confidential information when:
(a)
A client, or the heirs, executors, or administrators of a client, file suit or a complaint against a licensee, registrant, or certificate holder on any cause of action arising out of or connected with the care or treatment of the client by the licensee, registrant, or certificate holder;
(b)
A licensee, registrant, or certificate holder was in consultation with a physician, registered professional nurse, certified midwife, licensee, registrant, or certificate holder against whom a suit or complaint was filed based on the case out of which the suit or complaint arises;
(c)
A review of services of a licensee, registrant, or certificate holder is conducted by any of the following:
(I)
A board or a person or group authorized by the board to make an investigation on its behalf;
(II)
The governing board of a hospital licensed pursuant to part 1 of article
3
of title
25
, where the licensee, registrant, or certificate holder practices or the medical staff of the hospital if the medical staff operates pursuant to written bylaws approved by the governing board of the hospital; or
(III)
A professional review committee established pursuant to section
12-245-212 (1)
if the person has signed a release authorizing the review;
(d)
(I)
A client, regardless of age:
(A)
Makes an articulable and significant threat against a school or the occupants of a school; or
(B)
Exhibits behaviors that, in the reasonable judgment of the licensee, registrant, or certificate holder, create an articulable and significant threat to the health or safety of students, teachers, administrators, or other school personnel.
(II)
A licensee, registrant, or certificate holder who discloses information under this subsection (2)(d) shall limit the disclosure to appropriate school or school district personnel and law enforcement agencies. School or school district personnel to whom the information is disclosed shall maintain confidentiality of the disclosed information, regardless of whether the information constitutes an education record subject to FERPA, consistent with the requirements of FERPA and regulations and applicable guidelines adopted under FERPA, but may disclose information in accordance with section 1232g (b)(1) of FERPA and
34 CFR 99.36
if necessary to protect the health or safety of students or other persons.
(III)
A licensee, registrant, or certificate holder who discloses or fails to disclose a confidential communication with a client in accordance with this subsection (2)(d) is not liable for damages in any civil action for disclosing or not disclosing the communication. This subsection (2)(d)(III) does not rescind any statutory duty to warn and protect specified in, and does not eliminate any potential civil liability for failure to comply with, section
13-21-117
.
(IV)
(A)
This subsection (2)(d) does not apply to an education record that, under FERPA, is exempt from the HIPAA privacy rule.
(B)
This subsection (2)(d) applies to covered entities, as defined in HIPAA.
(V)
As used in this subsection (2)(d):
(A)
"Articulable and significant threat" means a threat to the health or safety of a person that, based on the totality of the circumstances, can be explained or articulated and that constitutes a threat of substantial bodily harm to a person.
(B)
"FERPA" means the federal "Family Educational Rights and Privacy Act of 1974",
20 U.S.C. sec. 1232g
, as amended.
(C)
"HIPAA" means the federal "Health Insurance Portability and Accountability Act of 1996", as amended, Pub.L. 104-191.
(D)
"School" means a public or private preschool; elementary, middle, junior high, or high school; or institution of postsecondary education described in title 23, including the Auraria higher education center created in article
70
of title
23
.
(3)
The records and information produced and used in the review provided for in subsection (2)(c) of this section do not become public records solely by virtue of the use of the records and information. The identity of a client whose records are reviewed shall not be disclosed to any person not directly involved in the review process, and procedures shall be adopted by a board, hospital, association, or society to ensure that the identity of the client is concealed during the review process itself and to comply with section
12-245-226 (4)
.
(4)
Subsection (1) of this section shall not apply to any delinquency or criminal proceeding, except as provided in section
13-90-107
regarding any delinquency or criminal proceeding involving a licensed psychologist.
(5)
Nothing in this section shall be deemed to prohibit any other disclosures required by law.
(6)
Repealed.
Amended by 2023 Ch. 261,§ 47, eff. 5/25/2023.
Amended by 2020 Ch. 304, § 13, eff. 7/14/2020.
Renumbered from C.R.S. §
12-43-218
and amended by 2019 Ch. 136, § 1, eff. 10/1/2019.
Amended by 2017 Ch. 264, § 16, eff. 5/25/2017.
Amended by 2017 Ch. 121, § 2, eff. 4/6/2017.
Amended by 2016 Ch. 176, § 1, eff. 5/18/2016.
L. 88: Entire article R&RE, p. 544, § 1, effective July 1. L. 89: (4) amended, p. 699, § 5, effective July 7. L. 98: (1), (2)(a), (2)(b), IP(2)(c), (2)(c)(I), (2)(c)(II), and (3) amended, p. 1114, § 16, effective July 7. L. 2000: (1), (2)(a), (2)(b), IP(2)(c), and (2)(c)(II) amended, p. 1842, § 19, effective August 2. L. 2008: (1), (2), and (3) amended, p. 422, § 17, effective August 5. L. 2011: (1), IP(2), (2)(a), (2)(b), IP(2)(c), (2)(c)(I), (2)(c)(II), and (3) amended and (6) added, (SB 11 -187), ch. 285, p. 1302, § 32, effective July 1. L. 2016: (2)(d) added, (HB 16-1063), ch. 176, p. 605, § 1, effective May 18. L. 2017: (2)(d)(VI) repealed, (HB 17-1183), ch. 121, p. 425, § 2, effective April 6; IP(2)(d)(V) and (2)(d)(V)(B) amended, (SB 17-294), ch. 264, p. 1387, § 16, effective May 25.
This section is similar to former § 12-43-218 as it existed prior to 2019.