Criterion 6: Confidentiality agreement

Criterion 5 built the intake record. Criterion 6 turns the confidentiality and consent threads that record leaves open into formal signed agreements. The work here is where the ethical obligations named in Criterion 4 become instruments a client reads and signs, and where the vulnerability that makes psychedelic disclosure valuable also makes it dangerous if the protections around it are weak.

Learning Objectives

By the end of this module, the trainee will be able to:

• Explain why confidentiality and rights protections carry heightened weight in psychedelic work, given the depth of disclosure and the vulnerability of the altered state.
• Distinguish confidentiality, privacy, and privilege, and use each term accurately rather than interchangeably.
• Enumerate the client rights a signed agreement should protect, and state each in language a client can understand.
• Describe the limits of confidentiality, including mandated reporting and the duty to protect, and explain why these must be disclosed before admission rather than invoked later.
• Explain the informed-consent challenge specific to psychedelics, that a person is consenting in advance to a potentially transformative experience they cannot fully anticipate, and describe how the field proposes to handle it.
• Distinguish true anonymization from de-identification and coding, and describe research and clinical confidentiality accurately rather than with the loose term often used.
• Address group confidentiality in retreat and group settings, where the program cannot fully control disclosure by other participants.
• Produce a complete confidentiality-and-rights agreement package and verify it is signed and understood before admission.

Key Terms

Confidentiality. The professional and legal obligation of a provider to protect information a client discloses in the course of care, and to share it only as the client has authorized or the law requires. It is a duty owed by the provider.

Privacy. The client's underlying right to control access to information about themselves. Confidentiality is one mechanism by which privacy is protected; the two are related but not identical.

Privilege. A narrower legal protection that shields certain communications from compelled disclosure in legal proceedings. Privilege is defined by law, varies by jurisdiction and by the provider's licensure, and may not attach to an unlicensed facilitator at all.

Informed consent. The process, not merely the signature, by which a client comes to understand the nature, risks, benefits, and alternatives of what is offered and agrees to it voluntarily. In psychedelic care it carries a specific difficulty addressed in the ethics literature (Lee, Rosenbaum, & Buchman, 2024; Jacobs, 2023).

Transformative experience. An experience that can change a person's values or sense of self in ways they could not have fully known in advance, which complicates ordinary informed consent because the person consenting may not be able to anticipate what they are consenting to (Jacobs, 2023).

Mandated reporting. A legal obligation to report specific categories of harm, most commonly suspected abuse of a child or vulnerable adult, to designated authorities, overriding confidentiality in those defined circumstances.

Duty to protect. A provider's legal obligation, originating in Tarasoff v. Regents of the University of California (1976), to take reasonable steps to protect an identifiable third party from a serious threat of violence by a client, which can require breaching confidentiality. The standard varies by jurisdiction (see Core Teaching).

De-identification and coding. The removal or replacement of identifiers from data, typically with a key retained separately that allows re-identification when necessary. This is distinct from true anonymization, in which no such key exists and re-identification is not possible.

Group confidentiality. The confidentiality of disclosures made in a group or retreat setting, which depends on the conduct of every participant and which the program cannot fully guarantee, only structure and reinforce through explicit group agreements.

Core Teaching

Why the protections carry more weight here

Psychedelic work asks a person to disclose more, and to do it from a more exposed position, than most other forms of care. The disclosures at intake and in session are not limited to symptoms. They reach into trauma, addiction, grief, shame, and sometimes conduct that is itself illegal, including the person's use of a federally controlled substance, discussed in Criterion 4. The altered state deepens the exposure further, because a person under a psychedelic is highly suggestible and often loses the ordinary guardedness that protects them in daily life. The value of the work depends on that openness, and the openness is only safe if the protections around it are real. This is the reason confidentiality and rights agreements are not a formality to be rushed through, but a precondition for asking a person to be vulnerable at all.

The signed agreement does two things at once. It binds the facilitator and program to a standard of care, creating an accountable, written commitment rather than a verbal assurance that evaporates when a dispute arises. And it empowers the client by telling them in advance, in plain language, what will happen to their information, what rights they hold, and what the limits of the protection are. A person who knows the boundaries of confidentiality before they disclose can make an informed choice about what to share. A person who learns the boundaries only when confidentiality is breached has been failed.

Confidentiality, privacy, and privilege: three words, three meanings

These terms are often used as if they were synonyms, and the imprecision causes real errors, so it is worth separating them. Privacy is the client's underlying right to control access to information about themselves. Confidentiality is the provider's duty to protect what the client discloses and to share it only with authorization or as the law requires; it is the mechanism through which a provider honors the client's privacy. Privilege is narrower and more technical: it is a legal protection that shields certain communications from being compelled in legal proceedings, and it is defined by statute and case law that vary by jurisdiction and by the provider's licensure.

The practical consequence is especially important for facilitators who are not licensed clinicians. A licensed psychotherapist may hold a legal privilege that protects their client's communications from subpoena; an unlicensed facilitator may hold no such privilege at all, which means that what a client discloses to them could, in some circumstances, be legally compelled. A facilitator who promises a client that their disclosures are legally protected, without knowing whether privilege actually attaches to their role, has made a promise they may not be able to keep. Honesty here requires knowing the limits of one's own legal position and representing it accurately, which connects directly to the scope-of-practice humility of Criterion 4.

The rights a signed agreement should protect

A confidentiality-and-rights agreement should enumerate the client's rights in language the client can actually read, not in dense legal prose that defeats the purpose of informing them. The core rights are stable across settings. The right to confidentiality, with its limits stated. The right to informed consent, meaning a genuine understanding of what is offered before agreeing. The right to withdraw from the program at any time, which in this work includes the right to stop or pause a process the person finds intolerable. The right to respectful, non-discriminatory treatment. The right to have one's records protected and to know how they are stored and shared. In group and retreat settings, the agreement should also affirm the right to personal boundaries, including the right to decline any activity that feels unsafe, since the social pressure of a group can otherwise erode a person's sense that refusal is permitted.

Stating these rights is not sufficient on its own; the rights have to be honored in practice, and the agreement is the client's reference point for holding the program to them. A right to withdraw that is written into the agreement but discouraged in the room is not a real right. The document and the culture have to match, a theme that recurs below in the discussion of group confidentiality as a lived practice rather than a signature.

The limits of confidentiality, and why they are disclosed first

Confidentiality is not absolute, and the honest handling of its limits is a test of a program's integrity. There are defined circumstances in which a provider may or must breach confidentiality, and the client is entitled to know these before they disclose, not after. The two principal categories are mandated reporting and the duty to protect.

Mandated reporting is a legal obligation to report specific categories of harm, most commonly suspected abuse or neglect of a child or a vulnerable adult, to designated authorities. The categories and the reporting thresholds are set by state law and vary, but the existence of such duties is near-universal across the helping professions, and they are not waived by an informal or retreat setting, as the vignette in Criterion 5 illustrated. The duty to protect is the second category, and it has a specific legal history worth knowing. It originates in the California Supreme Court case Tarasoff v. Regents of the University of California. The court's first decision, in 1974, established a duty to warn an identifiable potential victim of a serious threat of violence by a patient; on rehearing in 1976, the court broadened this to a duty to protect, which a provider may discharge in several ways, including notifying police or warning the potential victim (Tarasoff v. Regents of the University of California, 1976). Most states have since adopted some version of this duty, but the specifics differ substantially: in roughly thirty states the duty is mandatory, while in others it is permissive, and the triggering conditions vary. The practical instruction for a facilitator is the same as in Criterion 4: know the law of your own jurisdiction rather than assuming a single national rule, because the threshold at which you are permitted or required to breach confidentiality is set locally.

These limits are disclosed in the signed agreement precisely so that they cannot become a betrayal. A client who is told at intake that abuse of a child must be reported can decide how to proceed with that knowledge. A client who discloses in the belief that everything is protected, and then finds that it was not, experiences the breach as a violation of trust even when the provider acted lawfully. Transparency about the limits is what distinguishes a lawful, ethical disclosure from a betrayal, and it is the reason the exceptions belong in the agreement the client signs before admission.

The informed-consent problem unique to psychedelics

Informed consent in ordinary care asks a person to understand a procedure and its risks and to agree voluntarily. Psychedelic work introduces a difficulty that ordinary consent frameworks were not built to handle, and the ethics literature has begun to take it seriously rather than wave it away. A psychedelic experience can be transformative in a strong sense: it can change a person's values, beliefs, and sense of self in ways they could not have fully anticipated beforehand (Jacobs, 2023). This creates a genuine philosophical and practical problem for consent, because the person consenting in advance may not be able to know what they are consenting to, and the person who emerges may hold different values than the person who signed.

The consent challenge is compounded by the vulnerability and heightened suggestibility of the medicated state, which the ethics literature identifies as raising the stakes for how consent is obtained and how the encounter is conducted (Lee, Rosenbaum, & Buchman, 2024). The field's proposed responses do not resolve the problem so much as manage it honestly. They include treating consent as an ongoing process rather than a one-time signature, disclosing the possibility of unexpected and destabilizing experiences directly, discussing in advance how physical touch and other in-session interventions will be handled, and being explicit that the person may emerge changed. A facilitator does not need to have solved the philosophy of transformative experience to practice well, but they do need to understand that the standard consent form is a floor rather than a ceiling, and that consent in this work is a conversation sustained over time rather than a document executed once.

Describing research and clinical confidentiality accurately

Programs frequently reassure clients that their data will be protected, and the reassurance is often phrased imprecisely in a way that a credentialing workbook should correct. Data in clinical research and care are usually not anonymized in the strict sense. True anonymization means that identifiers have been irreversibly removed and no key exists to link the data back to the person, so re-identification is impossible. What clinical trials and clinical care almost always use instead is de-identification or coding, in which identifiers are removed or replaced but a key is retained, held securely and separately, so that the data can be re-linked to the person when necessary, for example to act on a safety finding. This is not a pedantic distinction. It changes what is truthfully being promised. A facilitator who tells a client their data is anonymized, when in fact a re-identification key exists, has misdescribed the protection, however well-intentioned. Accurate language is part of honest consent: say that data are coded or de-identified and that a secured key exists, rather than promising an anonymity that the system does not actually provide.

Group confidentiality, which the program cannot guarantee

Much psychedelic work happens in groups, and group settings introduce a confidentiality problem that individual work does not have. A program can bind itself and its staff to confidentiality, but it cannot unilaterally bind the other participants, each of whom witnesses the others' disclosures and is free, absent an agreement, to repeat them. The honest position is that the program cannot guarantee group confidentiality the way it can guarantee its own. What it can do is structure and reinforce it. The standard mechanism is an explicit group confidentiality agreement, in which every participant pledges to protect the privacy of what is shared in the group, established openly at the outset and treated as a genuine commitment rather than a throwaway line.

The limits of this mechanism should be stated to participants plainly, because overpromising is its own breach. A group agreement changes the norms and creates accountability, and it meaningfully reduces casual disclosure, but it does not carry the force of the program's own confidentiality obligation and cannot prevent a determined participant from talking. Clients are entitled to weigh that reality when they decide what to share in a group. The facilitator's task is to build the group agreement with care, to model the confidentiality it asks for, and to be honest about what it can and cannot protect, so that a participant's decision about vulnerability in the group is an informed one.

Signatures before admission, and consent as a living practice

The operational rule that ties this criterion together is that the agreements are completed before the client is formally admitted. No intake is complete until the confidentiality-and-rights agreement is signed, signed copies are kept on file, and the client is given their own copy for reference. This sequencing is not bureaucratic tidiness. It ensures that the person has been informed of the protections and the limits before they begin disclosing, which is the only point at which that information can do its protective work.

At the same time, the signature is the beginning of the obligation rather than its completion. Confidentiality is a lived practice, sustained by how staff handle records, how they speak about clients, and whether the culture of the program actually protects privacy, not only by a form in a file. Consent, likewise, is sustained across the arc of the work rather than settled at intake, which the transformative-experience problem makes unavoidable. This criterion produces the signed instruments, and it hands forward to the orientation work of Core Function III, where the program's goals, rules, and the client's rights and obligations are explained in full, and where the commitments signed here are put into practice.

Clinical and Decision Tools

Tool 1. Confidentiality, privacy, and privilege

Use each term accurately. The distinctions matter most for facilitators who are not licensed clinicians, since privilege may not attach to their role.

Tool 2. Client rights checklist for the agreement

Confirm each right is stated in the agreement in plain, client-readable language. Shaded rights carry special weight in group and altered-state settings.

Tool 3. Limits of confidentiality: what to disclose before admission

Every limit below should be disclosed in the agreement before the client discloses anything. Jurisdiction determines the exact thresholds; know your local law.

Tool 4. Anonymization versus de-identification

Use accurate language when describing data protection to a client. Promising anonymity that does not exist is a misrepresentation, however well-intended.

Tool 5. Group confidentiality agreement essentials

A group agreement structures and reinforces confidentiality that the program cannot unilaterally guarantee. Include each element and state its limit honestly.

1. Every participant explicitly pledges to protect the privacy of what others share in the group.
2. The pledge is established openly at the outset and treated as a genuine commitment, not a throwaway line.
3. Participants are told plainly that the program cannot guarantee others' silence the way it guarantees its own.
4. The facilitator models the confidentiality the agreement asks for, in how they speak of clients and handle records.
5. Clients are invited to weigh this reality when deciding what to disclose in the group.

Worked Example: A Confidentiality-and-Rights Agreement Package

The following models the structure and reasoning of a complete agreement package. It is an outline of contents with the key language, not a legal template; a program should have its agreements reviewed by counsel in its jurisdiction. Details are fictional.

Program and context: A group psilocybin retreat with an outside prescriber relationship for medication questions. Setting requires both individual and group confidentiality provisions.

1. Confidentiality commitment: States that the program and its staff will protect what the client discloses and share it only as the client authorizes or the law requires. Names how records are stored (secure, access-limited) and that data shared with the outside prescriber is coded, with a re-identification key held securely and separately, not anonymized.

2. Limits of confidentiality: Discloses, before any disclosure by the client, that suspected abuse of a child or vulnerable adult must be reported; that a serious threat of violence to an identifiable person may require action under the jurisdiction's duty-to-protect law; that imminent serious self-harm will be handled under the crisis protocol; and that the facilitator, being unlicensed, cannot promise legal privilege against a subpoena.

3. Client rights: Enumerates, in plain language, the rights to confidentiality with limits, to ongoing informed consent, to withdraw or pause at any time, to respectful and non-discriminatory treatment, to know how records are handled, and to personal boundaries including the right to decline any activity.

4. Informed consent: States that the experience may be intense and, at times, destabilizing, and that it can produce lasting changes in outlook the person cannot fully anticipate in advance. Describes how physical touch and in-session support will be handled, and frames consent as an ongoing conversation the client can revisit.

5. Group confidentiality: Includes a group pledge that every participant will protect the privacy of what others share, established openly at the first gathering, with an explicit statement that the program cannot guarantee others' silence the way it guarantees its own.

6. Signatures and copies: Completed and signed before admission. Signed copies kept on file; the client is given their own copy. Intake is not considered complete until this step is done.

Case Vignettes

Work each vignette by identifying the confidentiality or consent issue, the obligation in play, and the correct handling. Fillable response sheets are in the companion worksheet PDF.

Vignette A

A facilitator reassures an anxious client at intake that everything they say is completely confidential and legally protected, no exceptions, to help the client feel safe enough to disclose. The client then reveals ongoing abuse of their child.

Guided questions: What did the facilitator promise that they could not deliver? Which limit of confidentiality now applies, and what does the facilitator have to do? How has the earlier overpromise made this moment worse, and what should have been said at intake?

Vignette B

An unlicensed retreat facilitator tells a client that their disclosures carry the same legal privilege as therapy and cannot be subpoenaed. Later, in an unrelated legal matter, the client's disclosures are sought by a court.

Guided questions: What is the difference between confidentiality and privilege here? Was the facilitator's assurance accurate? How should an unlicensed facilitator represent the legal protection of disclosures honestly?

Vignette C

A client signs a standard consent form at intake. Midway through a psilocybin session they undergo an intense experience that shifts their sense of self, and afterward they say they would not have agreed had they understood how disorienting it would be.

Guided questions: What is the transformative-experience problem this illustrates? Why is a one-time signature an insufficient model of consent for this work? What consent practices would have served this client better, and does the earlier signature settle the matter?

Vignette D

A program tells participants their session data is anonymized and therefore cannot ever be traced back to them. In fact the program keeps a securely stored key linking coded data to identities so it can follow up on safety concerns.

Guided questions: Is the program's claim accurate? Distinguish anonymization from de-identification in this case. Why does the imprecise promise matter for honest consent, and how should the program describe its data handling instead?

Vignette E

After a group retreat, one participant repeats another participant's disclosure to people outside the group. The affected participant is distressed and asks why the program let this happen, believing the group confidentiality pledge made it impossible.

Guided questions: What can a program actually guarantee about group confidentiality, and what can it not? Was the group pledge worthless, or was it oversold? How should the program have framed the limits of group confidentiality so this participant could have decided what to share with accurate expectations?

Role-Play and Practice Scripts

Practice in pairs, then switch. The aim is to explain confidentiality, its limits, and consent honestly, in a way that builds trust precisely because it does not overpromise.

Explaining confidentiality and its limits at intake

“What you share with me is protected, and I want to be equally clear about the few situations where I am legally required to act. If I learn that a child or a vulnerable adult is being harmed, I have to report that. If someone is in serious danger of violence, I may have to act to protect them. And I want you to know that because I am not a licensed clinician, I cannot promise the same legal privilege a therapist might have. I would rather you know all of this before you decide what to share.”

Correcting an overpromise honestly

“I want to correct something, because being precise matters more than sounding reassuring. I should not have said there are no exceptions to confidentiality. There are a few, set by law, and you deserve to know them clearly. Let me walk you through exactly what they are.” Practice choosing accuracy over the easy reassurance, and repairing an overpromise rather than compounding it.

Framing consent as ongoing

“This form is a starting point, not the whole of your consent. This experience can be intense, and it can shift how you see things in ways neither of us can fully predict. So consent here is a conversation we keep having. You can ask questions, set limits, and change your mind as we go, including during the process itself.” Practice presenting consent as a living agreement rather than a one-time signature.

Establishing a group confidentiality pledge

“Before we begin, I am asking each of you to commit to protecting the privacy of everything shared in this circle. This pledge matters, and I take it seriously. I also have to be honest that I can promise you how the program and I will protect your privacy, but I cannot control what another participant does. I am asking for this commitment, and I want you to weigh that reality as you decide what to share.”

Self-Assessment and Reflection

Knowledge check

1. Explain why confidentiality and rights protections carry heightened weight in psychedelic work specifically.
2. Distinguish confidentiality, privacy, and privilege, and explain why the distinction matters most for an unlicensed facilitator.
3. List the client rights a signed agreement should protect, and explain why the right to withdraw carries special weight in this work.
4. Name the principal limits of confidentiality and explain why they must be disclosed before admission rather than invoked later.
5. State the origin and the jurisdictional variability of the duty to protect.
6. Explain the transformative-experience problem and why a one-time signature is an insufficient model of consent here.
7. Distinguish anonymization from de-identification and give the truthful way to describe most clinical data to a client.
8. Explain what a program can and cannot guarantee about group confidentiality.

Reflection

1. Review your own intake language for any promise of confidentiality or privilege you cannot actually keep. Where are you overpromising, and how would you correct it?
2. How do you currently describe data handling to clients? Is the language accurate, or does it claim an anonymity the system does not provide?
3. In group settings you run, how is the confidentiality pledge framed? Does it honestly state its limits, or does it imply a guarantee the program cannot deliver?

Summary

Criterion 6 turns the confidentiality and consent threads of intake into signed agreements, and it matters more here than in most care because the work asks for unusually deep disclosure from an unusually vulnerable position. A sound agreement binds the program to a standard and empowers the client by stating, in plain language and before any disclosure, what will happen to their information, what rights they hold, and where the limits lie. Confidentiality, privacy, and privilege are distinct, and the distinction is sharpest for unlicensed facilitators, who may hold no legal privilege and must represent that honestly. The limits of confidentiality, mandated reporting and the duty to protect that originates in Tarasoff and varies by jurisdiction, are disclosed before admission precisely so they cannot become betrayals. Consent carries a difficulty unique to this field, because a transformative experience cannot be fully anticipated in advance, which makes consent an ongoing conversation rather than a one-time signature. Data should be described accurately as coded or de-identified rather than anonymized when a re-identification key exists. Group confidentiality can be structured and reinforced through an explicit pledge but cannot be guaranteed, and honesty about that limit is itself part of the protection. The agreements are signed before admission, kept on file, and copied to the client, and they mark the point where the ethical commitments of Criterion 4 become instruments the client holds. This criterion closes the core intake documentation and hands forward to the orientation of Core Function III.

References

Anderson, B. T., Danforth, A. L., & Grob, C. S. (2020). Psychedelic medicine: Safety and ethical concerns. The Lancet Psychiatry, 7(10), 829–830. https://doi.org/10.1016/S2215-0366(20)30146-2

Jacobs, E. (2023). Transformative experience and informed consent to psychedelic-assisted psychotherapy. Frontiers in Psychology, 14, 1108333. https://doi.org/10.3389/fpsyg.2023.1108333

Lee, A., Rosenbaum, D., & Buchman, D. Z. (2024). Informed consent to psychedelic-assisted psychotherapy: Ethical considerations. The Canadian Journal of Psychiatry, 69(5), 309–313. https://doi.org/10.1177/07067437231225937

Tarasoff v. Regents of the University of California, 17 Cal. 3d 425, 551 P.2d 334 (1976). https://scocal.stanford.edu/opinion/tarasoff-v-regents-university-california-30278/

American Psychological Association. (2017). Ethical principles of psychologists and code of conduct (2002, amended effective June 1, 2010, and January 1, 2017). https://www.apa.org/ethics/code