Why Confidentiality Matters in Hypnotherapy

Hypnotherapy is a particularly disclosure-rich form of therapy. Clients often share material in the hypnotic state – or in the pre- and post-session discussions surrounding it – that they have not shared with anyone else. They may reveal personal history, trauma, relationship difficulties, or aspects of their inner world that feel deeply private. The expectation that this material will be treated with absolute discretion is fundamental to the therapeutic relationship and to the client’s ability to engage fully with the process.

A breach of confidentiality – even an inadvertent one – can cause significant harm to the client, damage the therapeutic relationship beyond repair, and expose the practitioner to professional sanctions and potential legal liability. Understanding the obligations and limits of confidentiality is therefore among the most important areas of professional knowledge for a practising hypnotherapist.

The Principle of Confidentiality

The fundamental principle is straightforward: information shared by a client in the therapeutic context is private and must not be disclosed to any third party without the client’s express consent. This applies to all identifying information – not just the content of sessions. Even the fact that a particular person is a client should be treated as confidential. In practice, this means: not discussing clients by name with colleagues, family, or friends; not acknowledging a client in public without their initiative; and not sharing client information with referrers, GPs, or other professionals without the client’s written consent, except in specific circumstances described below.

Limits of Confidentiality

Confidentiality is not absolute. There are specific circumstances in which the practitioner’s duty of care to the client, or their responsibilities to third parties or society, override the duty of confidentiality. These exceptions should be explained to the client at the outset of therapy as part of the informed consent process, so that the client understands the limits of confidentiality before choosing what to disclose.

Risk of Serious Harm to Self

Where a client discloses current, serious suicidal intent – including a specific plan and means – the practitioner has an ethical duty to act on this information. This does not necessarily mean breaching confidentiality immediately, but it does mean engaging directly with the risk, exploring the client’s safety, and where the risk is assessed as immediate and credible, taking appropriate action. This may include encouraging the client to contact their GP or crisis services, contacting emergency services with the client’s knowledge, or in extreme circumstances, making a disclosure without consent. Practitioners should be familiar with their professional body’s guidance on this issue and should have a clear personal protocol in place before they encounter such a situation.

Risk of Serious Harm to Others

Where a client discloses that they intend to cause serious harm to an identifiable third party, the practitioner may have a duty to take protective action. The appropriate response will depend on the nature and credibility of the threat, and practitioners should always seek supervision and consult their professional body’s guidance in such situations.

Child Protection

Where a practitioner has reasonable cause to believe that a child is at risk of significant harm, they have a responsibility to refer this concern to the appropriate statutory services (typically the local authority children’s services). This duty overrides the usual confidentiality obligation and does not require the client’s consent. Practitioners working with any client group should be familiar with child protection referral pathways in their area.

Court Orders

Practitioners may be legally required to disclose client records under a court order. This is rare in private hypnotherapy practice but possible. Practitioners should seek legal advice in such circumstances before disclosing any material.

Data Protection and Record-Keeping

Practitioners who hold client records are data controllers under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This carries specific legal obligations, including: obtaining explicit consent for holding personal data; retaining only the data necessary for the therapeutic purpose; keeping data securely (whether physically or digitally); not sharing data with third parties without consent; and deleting data once it is no longer required for its original purpose.

Client records – which include intake forms, session notes, consent forms, and any correspondence – should be stored securely. Digital records should be password-protected and held on encrypted systems. Physical records should be locked away. The retention period for client records is typically recommended as a minimum of seven years from the end of therapy for adult clients, and until the client reaches the age of 25 for records created when the client was a minor – though practitioners should check the most current guidance from their professional body.

Supervision and Confidentiality

Discussing client work in clinical supervision is not a breach of confidentiality, provided the client is not identified by name or in a way that would enable identification. Supervision is a professional requirement for practising hypnotherapists and serves both the practitioner’s development and the client’s safety. Material shared in supervision is itself subject to confidentiality obligations between supervisee and supervisor.