top of page

Nuts and Bolts

At Human Experience Psychotherapy, your privacy and confidentiality are a must. Here are the latest laws and regulations to provide you with the information you need, so you may feel certain you are taking a secure step in the right direction.  All our virtual sessions are offered via a Secure and HIPPA compliant platform through Simple Practice.


California Board of Behavioral Sciences says in their Regulations: NECESSITY OF LICENSE



 "(1) Many California families and many individual Californians are experiencing difficulty and distress, and are in need of wise, competent, caring, compassionate, and effective counseling in order to enable them to improve and maintain healthy family relationships.


  (2) Healthy individuals and healthy families and healthy relationships are inherently beneficial and crucial to a healthy society, and are our most precious and valuable natural resource. Licensed marriage and family therapists provide a crucial support for the well-being of the people and the State of California."

Receiving Professional Psychotherapy Services via Telehealth- excerpt from the California Association of Marriage and Family Therapists (CAMFT) Website

"In order to practice marriage and family therapy via telehealth with a client who is physically located in California, the therapist must have a valid and current license or registration issued by the BBS.3 Therefore, LMFTs who are licensed in other states must also hold valid California licenses or registrations in order to provide psychotherapy services, including via telehealth, to clients who are physically located in California.

It is important to note that these regulations do not mention MFT Trainees. Per Business and Professions Code Section 2290.5, MFT Trainees, while under appropriate supervision and working in lawful, exempt settings, may provide psychotherapy services via telehealth. The BBS does not have jurisdiction over any complaints filed against the MFT Trainee as MFT Trainees do not hold a registration or license issued by the BBS. Nevertheless, the BBS and CAMFT strongly encourage MFT Trainees to comply with these regulations as they establish the standard of care for marriage and family therapy services via telehealth in California.

Upon Initiation of Telehealth Services
The regulations require the therapist to engage in four specific one-time actions upon initiation of telehealth services to a client. The four actions are as follows:

  1. Obtain Consent: The therapist providing telehealth services must obtain consent from the client as required by the “telehealth statute” (Business and Professions Code Section 2290.5).4 The statute requires the therapist to 1) inform the client about the use of telehealth; 2) obtain from the client verbal or written consent for the use of telehealth as an acceptable mode of delivering psychotherapy services; and 3) document the consent obtained by the client in the client’s treatment record.

  2. Disclose Risks/Limitations: The therapist must inform the client of the potential risks and limitations of receiving treatment via telehealth.5 This disclosure may be done verbally or in writing. Either way, documentation of the disclosure in the client’s record is recommended. Potential risks and limitations of telehealth may include: technical failures; interruption by unauthorized persons; unauthorized access to transmitted and/or stored confidential information; and decreased availability of the therapist in the event of a crisis. CAMFT Code of Ethics Section 1.4.2 also requires the therapist who is rendering telehealth services to “inform patients of the potential risks, consequences, and benefits, including but not limited to, issues of confidentiality, clinical limitations, transmission difficulties, and ability to respond to emergencies.”

  3. Disclose License/Registration: The therapist must also provide the client with his or her license or registration number and the type of license or registration.6 This disclosure can be done verbally or in writing. Most therapists have this information on their Disclosure Statements or Informed Consent Forms.

  4. Provide Contact Information of Relevant Resources: The therapist must document reasonable efforts to ascertain the contact information of relevant resources, including emergency services in the client’s geographic area.7 Section 1.5.3 of the CAMFT Code of Ethics also specifies that when a therapist is not located in the same geographic area as the patient, he or she must provide the client with appropriate resources in the patient’s locale for contact in case of emergency. The therapist may achieve this by sending or emailing the relevant resources to the client or by providing the information verbally and documenting in the client’s record (e.g., the therapist informed the client of the University Hospital, located on Washington Street, which provides emergency services and inpatient psychiatric services, including specialized services for children). The emergency services near the client’s location may include telephone numbers and addresses for nearby emergency rooms, the psychiatric emergency team telephone number; and telephone numbers to local crisis hotlines/centers.


For Each Telehealth Session

The regulations provide three actions the therapist must take each and every time he or she performs telehealth with a client. The three actions are as follows:

  1. At the beginning of each telehealth session, the therapist must verbally obtain from the client the client’s name and document such name and the address of the client’s present location. According to the BBS, obtaining the client’s full name and present location may lessen the possibility of impersonation of a client. Further, should an emergency situation arise, the therapist would be equipped with information regarding the client’s location, which may change from session to session.

  2. The therapist, during each telehealth session, must assess whether the client is appropriate for telehealth, including but not limited to, consideration of the client’s psychosocial situation. The BBS is concerned the client’s mental health could change from session to session, hence the therapist should assess whether the rendering of psychotherapy via telehealth continues to be appropriate for the client. CAMFT Code of Ethics , Section 1.4.2 also provides that when therapists are providing telehealth services to clients, they should take care to evaluate the appropriateness and suitability of this therapeutic modality to the clients’ needs.

  3. The necessary documentation of this issue may vary, depending on the client and his or her particular circumstances. For example, in circumstances where the client is in significant distress, or has a chronic history of serious behavioral health problems, a therapist may determine that it is appropriate to document in considerable detail, his or her effort to carefully assess the suitability and appropriateness of telehealth services for the particular patient at that time. In other circumstances, it may be adequate to document that the therapist believes, based upon his or her discussion with the client, that the use of telehealth is appropriate to the client’s needs.

  4. For each session, the therapist must utilize industry best practices for telehealth to ensure both client confidentiality and the security of the communication medium. Therapists who are interested in utilizing a videoconferencing platform for telehealth services are encouraged to research the platform’s security and privacy protocols, including the security of the transmission of communication. A key inquiry is whether the voice, video, and file transfers through the platform are secured or encrypted. In addition, consider researching if any video or voice data is stored on the platform’s server(s) and if yes, whether the files on the server(s) are encrypted. Documentation of the therapist’s due diligence in researching and verifying the security of the communication medium is essential. Therapists who utilize a videoconferencing platform for telehealth should take care to protect their computers from viruses that can not only damage the computer, but also collect private stored data by installing antivirus software and firewalls. The computer or mobile device used for videoconferencing should be regularly receiving the most recent security updates. It is recommended to choose strong and unique passwords for both the computer and the platform’s account. Providers who are HIPAA “covered entities” should ensure the technology used for telehealth services is compatible with HIPAA requirements." (CAMFT Website)

The Use of Emails

"These days it is easier than ever to access e-mail given the availability of computers and smart phones. As a result, therapists are increasingly communicating with their clients via e-mail and, are being routinely asked by their clients “Can I e-mail you?” While no California law prohibits e-mail communications between a therapist and a client, it is important for therapists to consider the legal and ethical ramifications pertaining to this issue.


How are e-mails used in the typical therapy practice? Many therapists prefer to limit e-mail communications with clients to appointment scheduling and other administrative purposes, such as sending billing information, transmitting scanned forms for clients’ review, and sending referrals. Others utilize e-mails to exchange communications of a clinical nature with clients, for instance, following up in between sessions and clarifying instructions for “homework.” In addition, a number of therapists have also provided some form of therapy services to clients through e-mail, and in some situations, in conjunction with other modes of telehealth services, such as videoconferencing or online chatting.


Disclosure Statement About E-Mail Use 
Therapists who wish to exchange e-mails with their clients should consider providing clients with a statement (perhaps included in the Informed Consent or Disclosure Statement) that details the therapist’s guidelines and limitations on the use of e-mail, potential risks to confidentiality, and expected turnaround time.


Confidentiality and HIPAA 
A therapist has the legal and ethical obligation to preserve client confidentiality and take reasonable steps to ensure that client confidential information is protected. E-mails exchanged between therapist and client are confidential and should be reasonably maintained in a manner that protects the privacy of the communication." (CAMFT Website) 

Therapist’s guidelines and limitations on the use of e-mail, potential risks to confidentiality, and expected turnaround time

At Human Experience Psychotherapy, e-mail communications with clients is limited to appointment scheduling and other administrative purposes, such as sending billing information, transmitting scanned forms for clients’ review, and sending referrals only.

Warning: "communicating confidential information via e-mail or text message may not be secure and the client's confidentiality may be breached. Threats to the client’s confidentiality include, but are not limited to: 1) the transmission may be intercepted; 2) the transmission may be sent to the wrong recipient; and 3) the e-mail or text message may be accessed by an unauthorized person" (CAMFT Website) 

At Human Experience Psychotherapy we return messages within 48 hours. If you are experiencing an emergency, please call 911 or go to your nearest emergency clinic.

Additional Resources on Confidentiality and Privacy Available at the Board of Behavioral Sciences (BBS)

Therapy Never Includes Sexual Behavior

"California’s lawmakers and licensing boards want the public to know that professional therapy never includes sexual contact between a therapist and a client. It also never includes inappropriate sexual suggestions, or any other kind of sexual behavior between a therapist and a client. Sexual contact of any kind between a therapist and a client is unethical and illegal in the State of California. Additionally, with regard to former clients, sexual contact within two years after termination of therapy is also illegal and unethical. It is always the responsibility of the therapist to ensure that sexual contact with a client, whether consensual or not, does not occur."

"What You Can Do: Report the Therapist—What happened to you may be illegal and unethical and you should report it to the appropriate licensing board as soon as possible in order for the board to take appropriate action within the statute of limitations. 

The purpose of these licensing boards is to protect the health, safety, and welfare of consumers. Licensing boards have the authority to discipline therapists by using the administrative law process." (BBS Website)

bottom of page