LEGAL · PRIVACY & DISCLOSURES
State-Specific Privacy Laws: Alabama, Maryland & Illinois
Multi-state privacy, confidentiality, informed consent, and client rights information for Protect Each One Consulting, LLC clients.
🔐 Multi-State Privacy Notice
Privacy Protections for Clients Across Multiple States
Protect Each One Consulting, LLC serves clients across multiple states. In addition to federal HIPAA requirements, state-specific laws and licensing board standards may apply to clients residing in Alabama, Maryland, and Illinois.
Effective Date: May 3, 2026 | Last Updated: May 3, 2026 | Next Review: May 3, 2027
- This notice is for informational purposes only and does not constitute legal advice. PEO LLC recommends consulting a licensed attorney in your state for specific legal guidance.
Privacy Law Directory
State-Specific Privacy & Confidentiality Requirements
Section A · Alabama State Law Requirements
Alabama privacy requirements include privileged communications for counselors, mental health confidentiality protections, counseling board standards, and HIPAA-related privacy rules.
- Ala. Code § 34-8A-21 — Privileged Communications (Counselors): Confidential communications between an LPC or Associate Licensed Counselor and their client are privileged. Counselors may not disclose client information without written consent except as required by law.
- Ala. Code § 34-26-2 — Psychologist & Mental Health Confidentiality: Confidential relations between licensed psychologists, licensed psychiatrists, licensed psychological technicians, and clients are protected. Disclosure is prohibited except in limited circumstances defined by law.
- Alabama Board of Examiners in Counseling — Chapter 255-X-11: Licensed counselors must ensure client welfare, informed consent, confidentiality, and autonomy in in-person and virtual/telehealth settings.
- Ala. Admin. Code r. 660-1-6-.14 — HIPAA Privacy Policy: Alabama state agencies and covered entities must comply with the HIPAA Privacy Rule, restricting PHI use and disclosure while supporting client access to medical records.
Section B · Maryland State Law Requirements
Maryland law provides heightened protection for mental health records, confidentiality requirements for health records, and board standards for counselors, therapists, and social workers.
- Md. Health-General § 4-307 — Disclosure of Mental Health Records: Maryland provides heightened confidentiality protections for mental health records. Providers may not disclose records without authorization except in limited circumstances. Provider personal notes kept solely by the provider are not part of the medical record and are not discoverable.
- Md. Health-General § 4-302 — Confidentiality and Disclosure Generally: Health records are confidential and generally require written authorization for disclosure, except as permitted by law.
- COMAR 10.58.03.08 — Board of Professional Counselors & Therapists: Counselors must maintain privacy and confidentiality, release records only with consent or as permitted by law, and provide informed consent covering purpose of treatment, costs, alternatives, and the right to withdraw.
- COMAR 10.42.03 — Board of Social Work Examiners: Social workers must follow ethics standards, maintain confidentiality, disclose conflicts involving confidentiality, and release records only with proper authorization or legal requirement.
- Maryland Consumer Data Privacy: Maryland health data privacy protections may apply to residents receiving services from out-of-state providers. Clients may have rights to access, correct, and restrict use of personal health information.
Section C · Illinois State Law Requirements
Illinois law includes strong mental health confidentiality protections, counselor and social worker privileged communication laws, and IDFPR professional regulation.
- 740 ILCS 110/ — Mental Health and Developmental Disabilities Confidentiality Act: Illinois provides strong mental health confidentiality protections. Records and communications made during mental health or developmental disability services are confidential and may not be disclosed without written consent except in limited circumstances such as imminent danger, mandatory reporting, or court order.
- P.A. 103-474 — MHDDCA Amendment: Effective January 1, 2024, HIPAA personal representatives may access mental health records, with limited exceptions when disclosure would not be in a minor’s best interest or could pose risk of harm.
- 225 ILCS 107/75 — Privileged Communications (Counselors): LPCs and LCPCs may not disclose information acquired professionally without written consent except to prevent clear and imminent serious harm, in mandatory reporting situations, or where privilege is waived.
- 225 ILCS 20/16 — Privileged Communications (Social Workers): LCSWs and LSWs may not disclose client information without written consent except in cases involving imminent risk, mandatory reporting, adult protective services investigations, or waived privilege.
- IDFPR: Licensed counselors and social workers are regulated by the Illinois Department of Financial & Professional Regulation and must follow confidentiality statutes, ethical standards, and continuing education requirements.
Applicable Privacy Coverage
Alabama, Maryland, Illinois & Federal HIPAA Requirements
This privacy notice summarizes state-specific confidentiality, client record, informed consent, and complaint rights for clients residing in Alabama, Maryland, and Illinois, alongside applicable federal HIPAA privacy standards.
Client Rights Summary
Section D . Your Multi-State Privacy Rights
01 · Right to Access Records
Clients in Alabama, Maryland, and Illinois have the right to request and receive copies of their health records, subject to applicable state timelines and fee provisions.
02 · Right to Confidentiality
Mental health records receive heightened protection in these states beyond standard HIPAA requirements.
03 · Right to Informed Consent
Before services begin, clients must be informed of fees, treatment purpose, alternatives, risks, and confidentiality limitations.
04 · Right to File a Complaint
Clients may file complaints with their state licensing board, the HHS Office for Civil Rights, or their state Attorney General.
Complaint & Contact Information
Questions about state-specific privacy rights?
Contact Protect Each One Consulting, LLC: 540-736-7501 | 540-300-7888 | protecteachone.com/contact/
State Attorney General Contacts: Alabama AG: (334) 242-7300 | Maryland AG: (410) 576-6300 | Illinois AG: (312) 814-3000
HHS Office for Civil Rights: hhs.gov/ocr | 1-800-368-1019
PRIVACY QUESTIONS
Need Help Understanding Your Privacy Rights?
For questions about state-specific privacy rights, confidentiality, records access, or disclosures, contact Protect Each One Consulting, LLC.
This page is informational only and does not constitute legal advice.
📲 Contact: 540-736-7501 | 540-300-7888 | protecteachone.com/contact/