Code of the District of Columbia

Chapter 12. Mental Health Information.

Subchapter I. Definitions; General Provisions.

§ 7–1201.01. Definitions.

For purposes of this chapter:

(1) “Administrative information” means a client’s name, age, sex, address, identifying number or numbers, dates and character of sessions (individual or group), and fees.

(2) “Client” means any individual who receives or has received professional services from a mental health professional in a professional capacity.

(3) “Client representative” means an individual specifically authorized by the client in writing or by the court as the legal representative of that client.

(4) “Data collector” means a person other than the client, mental health professional and mental health facility who regularly engages, in whole or in part, in the practice of assembling or evaluating client mental health information.

(5) “Diagnostic information” means a therapeutic characterization which is of the type that is found in the Diagnostic and Statistical Manual of Mental Disorders of the American Psychiatric Association or any comparable professionally recognized diagnostic manual.

(6) “Disclose” means to communicate any information in any form (written, oral or recorded).

(7) “Group session” means the provision of professional services jointly to more than 1 client in a mental health facility.

(8) “Insurance transaction” means whenever a decision (be it adverse or otherwise) is rendered regarding an individual’s eligibility for an insurance benefit or service.

(8A) “Joint consent” means a process established by the Department of Mental Health pursuant to § 7-1131.14(6) to enable all participating providers to rely on a single form in which a consumer of mental health services consents to the use of his or her protected mental health information by participating providers in the Department of Mental Health’s organized health care arrangement, for the purposes of delivering treatment, obtaining payment for services and supports rendered, and performing certain administrative operations, such as quality assurance, utilization review, accreditation, and oversight.

(9) “Mental health information” means any written, recorded or oral information acquired by a mental health professional in attending a client in a professional capacity which:

(A) Indicates the identity of a client; and

(B) Relates to the diagnosis or treatment of a client’s mental or emotional condition.

(10) “Mental health facility” means any hospital, clinic, office, nursing home, infirmary, provider as defined in § 7-1131.02(27), or similar entity where professional services are provided.

(11) “Mental health professional” means any of the following persons engaged in the provision of professional services:

(A) A person licensed to practice medicine;

(B) A person licensed to practice psychology;

(C) A licensed social worker;

(D) A professional marriage, family, or child counselor;

(E) A sexual assault counselor, as that term is defined in § 23-1907(10), who is under the supervision of a licensed social worker, nurse, psychiatrist, psychologist, or psychotherapist;

(F) A licensed nurse who is a professional psychiatric nurse; or

(G) Any person reasonably believed by the client to be a mental health professional within the meaning of subparagraphs (A) through (F) of this paragraph.

(11A) “Organized health care arrangement” means an organized system of health care in which more than one provider participates, and in which the participating providers hold themselves out to the public as participating in a joint arrangement, and either:

(A) Participate in joint activities that include utilization review under Chapter 8 of Title 44, in which health care decisions by participating providers are reviewed by other participating providers or by a third party on their behalf; or

(B) Participate in quality assessment and improvement activities under Chapter 8 of Title 44, in which mental health services or mental health supports provided by participating providers are assessed by other participating providers or by a third party on their behalf.

(11B) “Participating provider” means a provider of mental health services or mental health supports who, through participation in the joint consent promulgated by the Department of Mental Health pursuant to § 7-1131.14(6), joins the organized health care arrangement created by the Department of Mental Health.

(12) “Person” means any governmental organization or agency or part thereof, individual, firm, partnership, copartnership, association or corporation.

(13) “Personal notes” means mental health information regarding a client which is limited to:

(A) Mental health information disclosed to the mental health professional in confidence by other persons on condition that such information not be disclosed to the client or other persons; and

(B) The mental health professional’s speculations.

(14) “Professional services” means any form of diagnosis or treatment relating to a mental or emotional condition that is provided by a mental health professional.

(15) “Third-party payor” means any person who provides accident and sickness benefits or medical, surgical or hospital benefits whether on an indemnity, reimbursement, service or prepaid basis, including, but not limited to, insurance carriers, governmental agencies and employers.

§ 7–1201.02. Disclosures prohibited; exceptions.

(a) Except as specifically authorized by subchapter II, III, or IV of this chapter, no mental health professional, mental health facility, data collector or employee or agent of a mental health professional, mental health facility or data collector shall disclose or permit the disclosure of mental health information to any person, including an employer.

(b) Except as specifically authorized by subchapter II or IV of this chapter, no client in a group session shall disclose or permit the disclosure of mental health information relating to another client in the group session to any person.

(c) No violation of subsection (a) or (b) of this section occurs until a single act or series of acts taken together amount to a disclosure of mental health information.

§ 7–1201.03. Personal notes.

If a mental health professional makes personal notes regarding a client, such personal notes shall not be maintained as a part of the client’s record of mental health information. Notwithstanding any other provision of this chapter, access to such personal notes shall be strictly and absolutely limited to the mental health professional and shall not be disclosed except to the degree that the personal notes or the information contained therein are needed in litigation brought by the client against the mental health professional on the grounds of professional malpractice or disclosure in violation of this section.

§ 7–1201.04. General rules governing disclosures.

(a) Upon disclosure of any of the client’s mental health information pursuant to subchapter II, III, or IV of this chapter, a notation shall be entered and maintained with the client’s record of mental health information which includes:

(1) The date of the disclosure;

(2) The name of the recipient of the mental health information; and

(3) A description of the contents of the disclosure.

(b) All disclosures of mental health information, except on an emergency basis as provided in § 7-1203.03, shall be accompanied by a statement to the effect that: The unauthorized disclosure of mental health information violates the provisions of the District of Columbia Mental Health Information Act of 1978 (§§ 7-1201.01 to 7-1207.02). Disclosures may only be made pursuant to a valid authorization by the client or as provided in title III or IV of that Act. The Act provides for civil damages and criminal penalties for violations.

Subchapter II. Disclosures With the Client’s Consent.

§ 7–1202.01. Disclosures by client authorization.

Except as provided in § 7-1202.06, a mental health professional, mental health facility, data collector or employee or agent of a mental health professional, mental health facility or data collector shall disclose mental health information and a client in a group session may disclose mental health information upon the voluntary written authorization of the person or persons who have the power to authorize disclosure under § 7-1202.05.

§ 7–1202.02. Form of authorization.

(a) Any written authorization which authorizes disclosure pursuant to § 7-1202.01 shall:

(1) Specify the nature of the information to be disclosed, the type of persons authorized to disclose such information, to whom the information may be disclosed and the specific purposes for which the information may be used both at the time of the disclosure and at any time in the future;

(2) Advise the client of his right to inspect his record of mental health information;

(3) State that the consent is subject to revocation, except where an authorization is executed in connection with a client’s obtaining a life or noncancellable or guaranteed renewable health insurance policy, in which case the authorization shall be specific as to its expiration date which shall not exceed 2 years from the date of the policy; or where an authorization is executed in connection with the client’s obtaining any other form of health insurance in which case the authorization shall be specific as to its expiration date which shall not exceed 1 year from the date of the policy;

(4) Be signed by the person or persons authorizing the disclosure; and

(5) Contain the date upon which the authorization was signed and the date on which the authorization will expire, which shall be no longer than 365 days from the date of authorization.

(b) Repealed.

(c) A copy of such authorization shall:

(1) Be provided to the client and the person authorizing the disclosure;

(2) Accompany all such disclosures; and

(3) Be included in the client’s record of mental health information.

§ 7–1202.03. Redisclosure.

Mental health information disclosed pursuant to this subchapter cannot be further disclosed by the recipient without authorization as provided in § 7-1202.01.

§ 7–1202.04. Revocation of authorization.

Except as provided in § 7-1202.02(a)(3), the person or persons who authorize a disclosure may revoke an authorization by providing a written revocation to the recipient named in the authorization and to the mental health professional, mental health facility or data collector authorized to disclose mental health information. The revocation of authorization shall be effective upon receipt. After the effective revocation date, no mental health information may be disclosed pursuant to the authorization. However, mental health information previously disclosed may be used for the purposes stated in the written authorization.

§ 7–1202.05. Power to grant authorization.

(a) When a client is 18 years of age or over, the client or client representative shall have the power to authorize disclosures.

(b) When a client is under the age of 18, but beyond the age of 14, disclosures which require authorization may only be authorized by the joint written authorization of the client and the client’s parent or legal guardian. When a client is less than 14 years of age, disclosures which require authorization may only be authorized by the client’s parent or legal guardian. However, if the client’s parent or legal guardian has not expressed consent to the mental health professional regarding the client’s receipt of professional services, the client may, by written authorization, consent without any authorization from his parent or legal guardian.

§ 7–1202.06. Authority of mental health professional to limit authorized disclosures.

(a) The mental health professional primarily responsible for the diagnosis or treatment of a client may refuse to disclose or limit disclosure of the client’s mental health information even though such mental health information is disclosable by virtue of a valid authorization; provided, that:

(1) Such mental health professional reasonably believes that such refusal or limitation on disclosure is necessary to protect the client from a substantial risk of imminent psychological impairment or to protect the client or another individual from a substantial risk of imminent and serious physical injury; and

(2) The mental health professional notifies the person or persons who authorized the disclosure, in writing, of: (A) the refusal or limitation on disclosure; (B) the reasons for such refusal or limitation; and (C) the remedies under this chapter; provided, further, that, in an insurance transaction, the mental health professional shall inform the insurer that the authorized disclosure was refused or limited.

(b) In the event the disclosure is limited by the mental health professional pursuant to subsection (a) of this section, the person or persons who authorized the disclosure may designate an independent mental health professional who shall be in substantially the same or greater professional class as the mental health professional who initially limited disclosure and who shall be permitted to review the client’s record of mental health information. The independent mental health professional may authorize disclosure in whole or in part if, after a complete review of the client’s record of mental health information, the independent mental health professional determines that the disclosure does not pose to the client a substantial risk of imminent psychological impairment or pose a substantial risk of imminent and serious physical injury to the client or another individual.

(c) A person who has taken action to achieve disclosure in accordance with subsection (b) of this section may institute an action in the Superior Court of the District of Columbia to compel the disclosure of all or any part of the record of the client’s mental health information which was not disclosed by the mental health professionals. An action instituted under this subsection shall be brought within 6 months of the denial, in whole or in part, of the disclosure by the independent mental health professional or the denial, in whole or in part, of disclosure to the independent mental health professional by the mental health professional. In the event that a person is indigent and is unable to obtain the services of an independent mental health professional, he may institute an action in the Superior Court of the District of Columbia, without regard to the provisions of subsection (b) of this section; provided, that the action is brought within 6 months of the denial, in whole or in part, of the disclosure by the mental health professional. If the person who instituted the action establishes that he executed a valid authorization which was transmitted to the mental health professional prior to the denial of disclosure by such mental health professional, the burden of proof shall then be placed upon the mental health professional to establish, by a preponderance of the evidence, that the denial of disclosure was in conformity with paragraphs (1) and (2) of subsection (a) of this section.

(d) Any refusal or limitation on disclosure shall be noted in the client’s record of mental health information including, but not limited to, the names of the mental health professionals involved, the date of the refusal or limitation, the requested disclosure and the actual disclosure, if any.

(e) This section shall not apply to disclosures under § 21-562 (concerning the disclosure of records of a client hospitalized in a public hospital for a mental illness) or court-related disclosures under subchapter IV of this chapter.

§ 7–1202.07. Limited disclosure to 3rd-party payors.

(a) A mental health professional or mental health facility may disclose to a 3rd-party payor mental health information necessary to determine the client’s entitlement to, or the amount of, payment benefits for professional services rendered; provided, that the disclosure is pursuant to a valid authorization, or for participating providers, a joint consent, and that the information to be disclosed is limited to:

(1) Administrative information;

(2) Diagnostic information;

(3) The status of the client (voluntary or involuntary);

(4) The reason for admission or continuing treatment; and

(5) A prognosis limited to the estimated time during which treatment might continue.

(b) In the event the 3rd-party payor questions the client’s entitlement to or the amount of payment benefits following disclosure under subsection (a) of this section, the 3rd-party payor may, pursuant to a valid authorization, or for participating providers, a joint consent, request an independent review of the client’s record of mental health information by a mental health professional or professionals. Mental health information disclosed for the purpose of review shall not be disclosed to the 3rd-party payor.

Subchapter III. Exceptions.

§ 7–1203.01. Disclosures within a mental health facility or to participating providers.

(a) Mental health information may be disclosed to other individuals employed at the individual mental health facility when and to the extent necessary to facilitate the delivery of professional services to the client.

(b) Subject to subsection (c) of this section, a health care provider or its third-party payor may disclose mental health information to another health care provider in connection with the diagnosis, evaluation, treatment, case management, conduct of quality assessment and improvement activities, or rehabilitation of a health or mental disorder or disease when and to the extent necessary to facilitate the delivery of health or professional services to the client. The authority to disclose mental health information under this subsection does not include the authority to disclose progress notes.

(c)(1) A health care provider shall notify its clients, in plain language in writing, upon registration:

(A) Whether the health care provider or its third-party payor privacy practices permit the disclosure of mental health information pursuant to subsection (b) of this section; and

(B) That a client may request that his or her mental health information not be disclosed pursuant to subsection (b) of this section.

(2) If a client requests that his or her mental health information not be disclosed, the health care provider or its third-party payor shall not disclose the client’s mental health information pursuant to subsection (b) of this section; provided, that nothing contained in this subsection shall prohibit a health care provider from disclosing mental health information pursuant to another provision of this chapter or pursuant to Chapter 2B of this title [§ 7-241 et seq.].

(d) For the purposes of this section, the term:

(1) “Health care provider” means:

(A) A person who is licensed, certified, or otherwise authorized under Chapter 12 of Title 3 [§  3-1201.01 et seq.] to provide health care in the ordinary course of business or practice of a health occupation or in an approved education or training program;

(B) A person licensed or permitted to practice a health occupation under the laws of another state; or

(C) A facility where health or mental health services are provided to patients or recipients, including a hospital, clinic, office, nursing home, infirmary, health maintenance organization, medical laboratory, provider, as defined by § 7-1131.02(27), or similar entity licensed, certified, or otherwise authorized by the District of Columbia.

(2) “Progress notes” means notes recorded, in any medium, by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint, or family counseling session and that are separated from the rest of the individual’s medical record. The term “progress notes” excludes medication prescription and monitoring, counseling session start and stop times, the modalities and frequencies of treatment furnished, results of clinical tests, and any summary of the following items: diagnosis, functional status, the treatment plan, symptoms, prognosis, and progress to date.

§ 7–1203.02. Disclosures under law.

*NOTE: This section includes amendments by emergency legislation that will expire on June 23, 2024. To view the text of this section after the expiration of all emergency and temporary legislation, click this link: Past Permanent Version.*

Mental health information may be disclosed by a mental health professional or mental health facility where necessary and, to the extent necessary:

(1) To meet the requirements of § 21-586 (concerning financial responsibility for the care of hospitalized persons);

(2) To meet the compulsory reporting provisions of District or federal law that seek to promote human health and safety, including § 4-1371.12;

(3) For the purposes of and in accordance with Chapter 2B of this title [§ 7-241 et seq.]; or

(4) To meet the requirements of § 22-4234(b-3) and (d).

§ 7–1203.03. Disclosures on an emergency basis.

(a) To the extent the disclosure of mental health information is not otherwise authorized by this chapter, mental health information may be disclosed, on an emergency basis, to one or more of the following if the mental health professional reasonably believes that such disclosure is necessary to initiate or seek emergency hospitalization of the client under § 21-521 or to otherwise protect the client or another individual from a substantial risk of imminent and serious physical injury:

(1) The client’s spouse, parent, or legal guardian;

(2) A duly accredited officer or agent of the District of Columbia in charge of public health;

(3) The Department of Mental Health;

(4) A provider as that term is defined in § 7-1131.02(27);

(5) The District of Columbia Pretrial Services Agency;

(6) The Court Services and Offender Supervision Agency;

(7) A court exercising jurisdiction over the client as a result of a pending criminal proceeding;

(8) Emergency medical personnel;

(9) An officer authorized to make arrests in the District of Columbia; or

(10) An intended victim.

(a-1) Any disclosure of mental health information under this section shall be limited to the minimum necessary to initiate or seek emergency hospitalization of the client under § 21-521 or to otherwise protect the client or another individual from a substantial risk of imminent and serious physical injury.

(b) Mental health information disclosed to the Metropolitan Police Department pursuant to this section shall be maintained separately and shall not be made a part of any permanent police record. Such mental health information shall not be further disclosed except as a court-related disclosure pursuant to subchapter IV of this chapter. If no judicial action relating to the disclosure under this section is pending at the expiration of the statute of limitations governing the nature of the judicial action, the mental health information shall be destroyed. If a judicial action relating to the disclosure under this section is pending at the expiration of the statute of limitations, the mental health information shall be destroyed at the termination of the judicial action.

(c) Mental health information contained in a certification of incapacity, pursuant to § 21-2204, may be disclosed to initiate a proceeding pursuant to Chapter 20 of Title 21.

§ 7–1203.04. Disclosures for collection of fees.

(a) A mental health professional or mental health facility may disclose the administrative information necessary for the collection of his or its fee from the client to a person authorized by the mental health professional or mental health facility for the collection of a fee from such client if the client or client representative has received a written notification that the fee is due and has failed to arrange for payment with the mental health professional or mental health facility within a reasonable time after such notification.

(b) In the event of a claim in any civil action for the collection of such a fee, no additional mental health information shall be disclosed in litigation, except to the extent necessary:

(1) To respond to a motion of the client or client representative for greater specificity; or

(2) To dispute a defense or counterclaim.

§ 7–1203.05. Disclosures for research, auditing and program evaluation.

In addition to the disclosures authorized pursuant to Chapter 2B of this title [§ 7-241 et seq.], a mental health professional or mental health facility may disclose mental health information to qualified personnel, if necessary, for the purpose of conducting scientific research or management audits, financial audits or program evaluation of the mental health professional or mental health facility; provided, that such personnel have demonstrated and provided assurances, in writing, of their ability to insure compliance with the requirements of this chapter. Such personnel shall not identify, directly or indirectly, an individual client in any reports of such research, audit or evaluation, or otherwise disclose client identities in any manner; except, that de-identified data may be shared in accordance with the Health Insurance Portability and Accountability Act of 1996, approved August 21, 1996 (110 Stat. 1936; 42 U.S.C. § 1320d et seq.).

§ 7–1203.05a. Disclosures to correctional institutions or law enforcement officials.

(a) A mental health professional or mental health facility may disclose to a correctional institution or a law enforcement official having lawful custody of an individual mental health information about the individual to facilitate the delivery of mental health services and mental health supports to the individual.

(b) Any disclosure of mental health information under this section shall be limited to the minimum necessary to facilitate the delivery of mental health services and mental health supports.

§ 7–1203.06. Redisclosure.

Mental health information disclosed pursuant to this subchapter shall not be redisclosed except as specifically authorized by subchapter II, III or IV of this chapter or for the purposes of and in accordance with Chapter 2B of this title [§ 7-241 et seq.].

Subchapter IV. Court-Related Disclosures.

§ 7–1204.01. Court-ordered examinations.

Except as provided elsewhere by law, mental health information acquired by a mental health professional pursuant to a court-ordered examination may be disclosed in a manner provided by rules of court or by order of the court.

§ 7–1204.02. Civil commitment proceedings; extreme risk protection orders.

Mental health information may be disclosed by a mental health professional when and to the extent necessary to:

(1) Initiate or seek civil commitment proceedings under § 21-541; or

(2) Request an extreme risk protection order under subchapter X of Chapter 25 of this title.

§ 7–1204.03. Court actions.

(a) Mental health information may be disclosed in a civil or administrative proceeding in which the client or the client representative or, in the case of a deceased client, any party claiming or defending through or a beneficiary of the client, initiates his mental or emotional condition or any aspect thereof as an element of the claim or defense.

(b)(1) In addition to mental health information that is disclosed when a defendant’s competence or mental health is at issue or when otherwise authorized by law, in a criminal proceeding, the court may order the disclosure, or redisclosure, of a defendant or offender’s mental health information when and only to the extent necessary to monitor the defendant or offender’s compliance with a condition of pretrial release, probation, parole, supervised release, or diversion agreement that the defendant or offender obtain or comply with mental health treatment ordered by a court or the U.S. Parole Commission.

(2) Any disclosure or redisclosure of mental health information ordered under this subsection shall be limited to the minimum necessary to monitor the individual’s compliance and the court’s order shall specify the information that may be disclosed or redisclosed.

(c) Mental health information shall be disclosed to the Office of the Attorney General for the District of Columbia in response to a court order issued pursuant to § 7-2502.03(f)(3)(A)(i) or § 7-2510.03(d)(2)

§ 7–1204.04. Redisclosure.

Redisclosure of any mental health information disclosed pursuant to this subchapter shall be governed by order of the court or, if no order is issued, by the rules of the Superior Court of the District of Columbia.

§ 7–1204.05. Court records; anonymity of parties.

A client, client representative or any other party in a civil, criminal or administrative action, in which mental health information has been or will be disclosed, shall have the right to move the court to denominate, style or caption the names of all parties as “John Doe” or otherwise protect the anonymity of all of the parties.

Subchapter V. Client’s Right to Access and Right to Correct Information.

§ 7–1205.01. Right to access.

Except as provided in this subchapter and in § 7-1201.03, a mental health professional, mental health facility or data collector shall permit any client or client representative, upon written request, to inspect and duplicate the client’s record of mental health information maintained by the mental health professional, mental health facility or data collector within 30 days from the date of receipt of the request. A mental health professional, responsible for the diagnosis or treatment of the client, shall have the opportunity to discuss the mental health information with the client or client representative at the time of such inspection. In the case of a request to a data collector for disclosure of mental health information pursuant to this section, the data collector shall grant access either: (1) directly to the requestor; or (2) indirectly by providing the mental health information to a mental health professional designated by the requestor. If the mental health professional designated by the requestor is not the person who disclosed the mental health information to the data collector, he shall be in substantially the same or greater professional class as the mental health professional who disclosed the mental health information to the data collector.

§ 7–1205.02. Authority to limit access.

A mental health professional or mental health facility may limit the disclosure of portions of a client’s record of mental health information to the client or client representative only if the mental health professional primarily responsible for the diagnosis or treatment of such client reasonably believes that such limitation is necessary to protect the client from a substantial risk of imminent psychological impairment or to protect the client or another individual from a substantial risk of imminent and serious physical injury. The mental health professional shall notify the client or client representative if the mental health professional does not grant complete access.

§ 7–1205.03. Review by independent mental health professional.

In the event that disclosure of the client’s information is limited, the client or client representative may designate an independent mental health professional who shall be in substantially the same or greater professional class as the mental health professional who initially limited disclosure and who shall be permitted to review the client’s record of mental health information. The independent mental health professional shall permit the client or client representative to inspect and duplicate those portions of the client’s record of mental health information which, in his judgment, do not pose a substantial risk of imminent psychological impairment to the client or pose a substantial risk of imminent and serious physical injury to the client or another individual. In the event that the independent mental health professional allows the client to inspect and duplicate additional portions of the client’s record of mental health information, the mental health professional primarily responsible for the diagnosis or treatment of the client shall have the opportunity to discuss the information with the client at the time of transmittal, examination and duplication of information.

§ 7–1205.04. Judicial action to compel access.

A client or client representative who has taken action in accordance with this subchapter may institute an action in the Superior Court of the District of Columbia to compel access to all or any part of the client’s record of mental health information which was denied by the mental health professional. An action initiated under this section shall be brought within 6 months of the denial of access, in whole or in part, by the independent mental health professional. In the event that a person is indigent and is unable to obtain the services of an independent mental health professional, he may institute an action in the Superior Court of the District of Columbia, without regard to the provisions of § 7-1205.03; provided, that the action is brought within 6 months of the denial of access, in whole or in part, by the mental health professional. If the person who instituted the action establishes that he made a request for access in compliance with § 7-1205.01, the burden of proof shall be placed upon the mental health professional to establish by a preponderance of the evidence that the denial of access was in conformity with subchapter V of this chapter.

§ 7–1205.05. Right to correct information.

(a) The mental health professional, mental health facility and data collector shall maintain the client’s mental health information in an accurate and complete manner.

(b) In the event that the client or client representative questions the accuracy or completeness of the client’s record of mental health information, he may, within 15 days of the date of access, submit a written amendment of reasonable length to the mental health professional, mental health facility or data collector, as the case may be. The mental health professional, mental health facility or data collector shall either:

(1) Amend the client’s mental health information record in accordance with the proposed amendment; or

(2) Include the proposed amendment as part of the client’s mental health information record; provided, that the client may, at his option, withdraw the proposed amendment or file a more concise statement of disagreement as a substitute for the proposed amendment.

(c) If the requested amendment was adopted, the mental health professional, mental health facility or data collector shall either promptly transmit the client’s amended record or the requested amendment to all persons to whom the client’s unamended mental health information had been disclosed or promptly inform the client of the names and addresses of such persons not receiving the amended record or the requested amendment. In any such disclosure made pursuant to this subsection, the mental health professional, mental health facility or data collector, as the case may be, may also include a statement of reasons for not adopting the requested amendment.

Subchapter VI. Security.

§ 7–1206.01. Security requirement.

Mental health professionals, mental health facilities and data collectors shall maintain records of mental health information in a secure manner as to effectuate the purposes of this chapter. Any entity that receives mental health information shall have appropriate administrative, technical, and physical safeguards in place to protect the confidentiality of mental health information and shall promptly notify the Department of Mental Health in writing of any unauthorized disclosure or use of mental health information.

§ 7–1206.02. Notice requirement — Employees and agents with access to information.

Mental health professionals, mental health facilities and data collectors shall provide employees and agents who have lawful access to mental health information in the course of their employment with a written statement of the requirement of maintaining the security of records of mental health information and of the penalties provided in this chapter for unauthorized disclosure.

§ 7–1206.03. Notice Requirement — Clients in group sessions.

Mental health professionals shall provide clients in a group session with a written statement of the prohibition against the unauthorized disclosure of mental health information and the penalties provided in this chapter for unauthorized disclosure.

Subchapter VII. Penalties.

§ 7–1207.01. Civil liability.

(a) Except for violations of § 7-1205.05(a), any person who negligently violates the provisions of this chapter shall be liable in an amount equal to the damages sustained by the client plus the costs of the action and reasonable attorney’s fees.

(b) Except for violations of § 7-1205.05(a), any person who willfully or intentionally violates the provisions of this chapter shall be liable in damages sustained by the client in an amount not less than $1,000 plus the costs of the action and reasonable attorney’s fees.

(c) Either party is entitled to trial by jury, upon request.

§ 7–1207.02. Criminal penalties.

(a) Except for violations of subchapter V of this chapter, any person who willfully violates the provisions of this chapter shall be guilty of a misdemeanor and such violator shall be fined not more than $1,000 or imprisoned for not more than 60 days, or both.

(b) Any person who knowingly obtains mental health information from a mental health professional, mental health facility or data collector, under false pretenses or through deception, shall be guilty of a misdemeanor and shall be fined not more than $5,000 or imprisoned not more than 90 days, or both.

Subchapter VIII. Miscellaneous Provisions.

§ 7–1208.01. Penalties under other laws.

Any civil liability or criminal penalty imposed for violation of this chapter is, in addition to and not in lieu of, any civil or administrative remedy, penalty or sanction otherwise authorized by law. This chapter and the penalties prescribed for violations of this chapter shall not supersede but shall supplement all statutes of the District government and the United States government in which similar conduct is prohibited or regulated.

§ 7–1208.02. Prescriptions.

Nothing in this chapter shall be construed as limiting or interfering with District of Columbia, state or federal regulation and monitoring of the handling and dispensing of prescription drugs.

§ 7–1208.03. Authority of the Commission on Mental Health.

Nothing in this chapter shall be construed to apply to the operations of the Commission on Mental Health.

§ 7–1208.04. Prohibition against waiver.

Any consent or agreement purporting to waive the provisions of this chapter is hereby declared to be against public policy and void.

§ 7–1208.05. [Reserved].

§ 7–1208.06. Conflict with federal law.

Nothing in this chapter shall be construed or applied to necessarily require or excuse noncompliance with any provision of any federal law.

§ 7–1208.07. Effective date.

The provisions of this chapter shall take effect pursuant to § 1-206.02(c)(1) and shall govern all mental health information regardless of when such information came into existence. However, the provisions of this chapter which create liabilities shall only apply to acts or failures to act which occur on or after the effective date.