rbt F.5 Confidentiality

By RBThub February 23, 2026

You are the keeper of secrets. As an RBT, you have access to sensitive medical and behavioral information.

The law (HIPAA) and the BACB Ethics Code are strict: What happens in the session, stays in the session. A single slip-up, like leaving a file in your car or posting a "cute" picture on Instagram, can cost you your job and your certification.

Executive Summary

This video illustrates the ethical obligations regarding Confidentiality (HIPAA). It follows the story of an RBT named Lea who correctly handles privacy (refusing to gossip) and safety (reporting abuse). It contrasts her good behavior with common errors like leaving files in cars or posting on social media.

⏱️ Video Timeline

00:05
The Golden Rule
Identify and comply with requirements for collecting, using, storing, and disclosing confidential info.
01:21
Storage & Security
Paper files in locked cabinets. Electronic data password-protected. Never leave data in a car.
04:25
Breach Examples
Discussing clients in public, leaving files unattended, or answering questions from other parents about a client.
05:18
Social Media
Strictly prohibited. Posting photos or videos of clients, even without names, is a major violation.

🔑 Key Insights

Need to Know: Only share info with people directly involved in the client's care (Supervisor, Parents). Not co-workers who aren't on the case.
Social Media: Zero tolerance. Do not "friend" clients. Do not post photos. Do not blog about them.
The Exception: Confidentiality is broken immediately if there is suspected abuse or neglect. Safety overrides privacy.
Transport: If you must carry physical files, they must be in a locked box in the trunk, never on the seat.

❓ Frequently Asked Questions

Q: A parent asks "How is the other boy in the group doing?"
A: "I cannot discuss other clients." You must politely refuse to share information about other children.
Q: Can I keep my data sheets in my car trunk?
A: Only if they are in a locked box. Leaving loose papers in a car (even a trunk) is risky and often a violation. Ideally, return them to the clinic daily.

1. The Circle of Confidentiality

Who is allowed inside the circle?
CLIENT ACCESS GRANTED BCBA, RBT on case, Parents ACCESS DENIED Other Parents Your Spouse Social Media Co-workers (not on case)

2. Social Media Policy

Zero Tolerance

Do not post about clients.
Even if you blur their face. Even if you use a fake name. Even if the parent says "It's okay."
Posting about clients violates their privacy and can be seen as exploitation. Just don't do it.

📝 Knowledge Check

Is it a breach?

Q1: You see a co-worker at the grocery store. You say, "Oh man, Lucas had a huge tantrum today, it was exhausting." Is this okay?

Answer: No (Breach).
You are discussing a client in a public place where others could hear. Also, the co-worker might not be on the case.

Q2: You suspect a client is being abused at home. You call Child Protective Services (CPS). Did you violate confidentiality?

Answer: No (Mandated Reporting).
Reporting suspected abuse is a legal exception to confidentiality. Safety comes first.
▶

Ethics Quiz

Mock Exam

Test your knowledge on HIPAA and Confidentiality.

Start Practice Test

Comments