ABA glossary
Confidentiality
Definition
The professional duty to protect information learned through work with a client and to share it only as allowed by consent, law, and policy.
In plain words
Everything an RBT learns about a client, including name, diagnosis, behavior, family details, and even the fact that they receive services, is confidential. It can be shared only with people who need it for the client's care and are authorized to receive it, or with a signed release, or when the law requires it (for example, suspected abuse). Confidentiality covers conversations, data sheets, photos, texts, and social media. Most breaches happen casually: talking in public, leaving data sheets in a car, or posting a photo.
Example from a session
A teacher at a client's school asks the RBT how another student she works with is doing. The RBT replies, "I can't share information about other students. For Liam, I share only what my supervisor has told me we have a release to share." Later, the RBT keeps her data sheets in a locked folder, uses initials rather than names in agency messages as policy requires, and never posts photos from sessions.
For BCBA candidates and supervisors
Behavior analysts follow both the ethics code and laws such as HIPAA, which governs protected health information held by covered providers (including minimum necessary disclosure, security, and breach notification), and FERPA, which governs student education records in schools. Confidentiality has limits that should be explained at intake: mandated reporting of suspected abuse or neglect, imminent risk of serious harm, and court orders. Supervisors train staff on secure electronic communication, de-identification for presentations or training, and what to do when a breach occurs.
Often confused with informed consent, limits of confidentiality
Confidentiality is the duty to protect information; informed consent is the client's or guardian's agreement to services or to a specific disclosure, after understanding it. A signed release allows specific information to go to specific people for a stated purpose; it does not open the whole record. The limits of confidentiality are the situations in which information must be shared without consent, such as suspected abuse.
Exam tip
When a stem asks whether to share client information, check three things: is the person an authorized member of the care team, is there a signed release, or does the law require it? For an RBT, sharing also goes through the supervisor's direction. If none apply, do not share. Mandated reporting always overrides confidentiality.
Can you spot confidentiality in a scenario?
Practice RBT F.5 with exam-style questions and instant feedback.