HIPAA is wholly about medical records. I just think in terms of that and since my T was a psychologist, didn't even bother thinking about any notes she might have written. I didn't see a PDoc or do anything "inpatient" or medically and paid out-of-pocket so there wasn't any insurance mess, etc.