A Stricter Standard for Online
Counseling
03/20/00
A new set of standards from the American Counseling Association is the first to mandate encryption for Online counseling. Is this a reasonable requirement? Online mental health services have developed over the last few years as the Internet has allowed people to communicate over vast distances. Therapists and counselors have begun to use the Net to supplement their practices. Professional organizations have struggled to develop standards for these interactions.
Previously the National Board of Certified Counselors published a standard for "WebCounseling." Their standard called for providers to "inform WebClients of encryption methods being used to help insure the security of client/counselor/supervisor communications." (NBCC, 1998) Encryption was not mandated, but it was encouraged.
Encryption is used extensively for financial transactions over the Internet, but encrypted email has yet to become widely used. These new standards, which apply only to members of the American Counseling Association, include additional rules for Online transactions. They represent the strictest standards yet adopted concerning mental health interactions on the Internet. Are they too strict?
These new standards seem to be reasonable for clinicians who are offering clinical services to the public. If the purpose of a site is to provide one-to-one interactions, then encryption should probably be offered. What about therapists who sometimes exchange email with their face-to-face clients? Should they be held to the same standard?
Such a requirement is understandably not a part of the new standard. Very few therapists and clients have access to encrypted email. It is essential, as the standards suggest, that all parties understand that the absolute confidentiality of unencrypted email cannot be guaranteed. Therapists also have a responsibility to let clients know how soon to expect an email reply. In no circumstance should email be used in an emergency or to communicate urgent information.
Other questions remain unanswered. Should all email between a therapist and face-to-face client be printed and included as a part of the official record? Some organizations are beginning to require this. How can a therapist be sure that the person sending an email is truly the client? What level of security is needed on a work or home computer that a therapist uses to communicate with clients? Stay tuned as we continue to explore these issues.
- The new American Counseling Association Standards
- A discussion of the NBCC WebCounseling Standards
- ZipLip.com Secure Email
- HelpHorizons.com provides a secure environment for counseling
- What do you think?