RBT · Ethics · 7 min read
Client Confidentiality and Privacy
- Identify what constitutes protected health information and explain the ethical and legal foundations of client confidentiality across all service settings.
- Apply required physical, electronic, verbal, and community safeguards to protect client records and everyday behavioral data.
- Describe the Registered Behavior Technician's role in handling record requests, mandatory reporting situations, and privacy incidents.
Foundations of Confidentiality and Client Information
Confidentiality is both an ethical and legal obligation requiring Registered Behavior Technicians to protect client information from unauthorized access. The RBT Ethics Code mandates that technicians maintain strict client confidentiality across every service environment, including home, school, clinic, and community settings. Protecting confidentiality is essential for preserving the personal dignity of individuals receiving behavior-analytic services, and maintaining these privacy practices builds and protects trust between families, caregivers, and the behavior-analytic team.
A central concept in privacy is protected health information, often called PHI. Under HIPAA, protected health information generally means individually identifiable health information held or transmitted by a covered entity or its business associate; certain records, including education records covered by FERPA, are excluded. Everyday details like a client's name or home address can be PHI when linked to their health or care information. However, HIPAA does not govern every single RBT work setting, so technicians must always understand that employer policies and state laws work together to protect private information.
Within daily behavior-analytic practice, RBTs collect only the information needed for their assigned services, following their supervisor's instructions and employer policies. When recording behavioral data during sessions, RBTs use the written procedures and instructions provided by their supervisor, which may include the client's behavior plan. Technicians must not collect personal, marital, or financial information from caregivers that is not relevant to behavior-analytic services, ensuring that data collection stays focused directly on authorized clinical goals.
Common mistakes
- Assuming that using client initials or a code name on personal social media or standard text messages completely satisfies confidentiality rules.
- Delaying a legally mandated report of suspected child abuse or neglect in order to track down or wait for permission from a supervisor.
- Sharing session progress or target behavior details with extended family members, such as grandparents or aunts, without verified legal authorization and employer approval.
- Attempting to handle outside record requests, subpoenas, or informal progress summaries independently instead of referring them directly to the supervisor.
Key points
- Confidentiality is a legal and ethical duty under the RBT Ethics Code that protects client dignity across home, school, clinic, and community environments.
- Protected health information (PHI) includes individually identifiable health details held by covered entities, and RBTs collect only data necessary for assigned behavior services.
- Physical records must be kept locked and secured, and electronic devices must be password-protected, encrypted when required, and locked whenever unattended.
- Identifiable client information must never be posted on social media or transmitted through unapproved standard text or personal email accounts.
- Outside inquiries, record requests, and subpoenas must be referred promptly to the supervisor, and confidentiality remains in effect indefinitely after discharge or departure.
- Mandatory reporting of suspected abuse or neglect must follow applicable law and procedures without delay, followed by notifying the supervisor as soon as safely possible.
- Any potential privacy incident, such as a lost data binder or misdirected email, must be reported to the supervisor immediately with objective, factual details.
Practice this section
Explained RBT Ethics questions, no account needed. RBT Ethics practice test
The full lesson continues with 4 more sections with exam tips, audio in English and Spanish, 5 Check yourself questions and 20 flashcards.
- 1 month
$44.99$22.49 - 3 months
$131.99$65.99 - Lifetime
$269.99$134.99
One payment, no subscription.
See RBT plansAlready a member? Log in
Sample lesson: Core Principles of the RBT Ethics Code25 practice questions on this exam
Each RBT practice test has 25 original questions with the answers explained. No account needed.
Open the RBT practice testsOriginal lesson written for RBT practice · updated October 25, 2026. Exam names are trademarks of their owners; tests.global is not affiliated with them.