College athlete mental health, NIL-era disclosures, and cloud AI scribes: the vendor archive NCAA enforcement, concussion litigation, and Title IX proceedings can reach

The dual-track structure of college athlete mental health — and where cloud AI scribes enter

The NCAA's 2019 Mental Health Best Practices guidelines, updated through subsequent Division I legislation, require member institutions to provide student-athletes with access to mental health services. Division I athletic departments responded in two distinct structural configurations that have meaningfully different documentation and privacy implications.

The first track is in-house: psychologists, licensed counselors (LPC, LMFT, LCSW), and social workers employed directly by the university's athletic department or counseling services program. These providers are university employees. The records they create for student-athletes are subject to FERPA — the Family Educational Rights and Privacy Act — not HIPAA. Under 45 CFR 164.501, HIPAA explicitly excludes from the definition of protected health information any records that are education records under FERPA. A cloud AI scribe vendor offering an in-house athletic department counselor a HIPAA Business Associate Agreement is offering the wrong regulatory instrument for the records environment in which that provider works.

The second track is contracted: licensed psychologists (PsyD, PhD) or licensed therapists in private practice who consult with the athletic department on a contracted basis, seeing athletes for sport psychology services, performance consultation, or mental health treatment in their own practice setting. These providers are HIPAA covered entities with their own records, their own compliance obligations, and their own vendor relationships — including cloud AI scribes. The athletic department contracts their services but does not control their documentation systems. When a contracted sport psychologist uses a cloud AI scribe, the vendor's archive exists entirely outside the university's records infrastructure. The university has not vetted this vendor, has no BAA with this vendor, and has no visibility into what the vendor retains.

In both tracks, the practical result is the same: a cloud AI scribe vendor independently holds verbatim session content from college athlete mental health encounters. The regulatory analysis differs between the two tracks, but the adversarial exposure converges. Sport psychologists in private practice have their own vendor archive exposure across professional sports, WADA proceedings, and collegiate contexts — but the college athlete environment adds specific institutional and NIL-era dimensions that create additional adversarial pathways.

What college athletes disclose in therapy — the NIL layer and the adversarial exposure it creates

Before June 2021, college athlete therapy sessions followed a relatively predictable content pattern: performance anxiety, injury recovery and return-to-play stress, team dynamics and conflict with coaching staff, academic pressure, personal relationships and family stress, transition to professional athletics, and the identity challenges that arise at the end of an athletic career. This content was clinically relevant and sensitive, but its adversarial exposure was primarily limited to the clinical modalities already covered by general HIPAA and FERPA analysis.

The Supreme Court's decision in NCAA v. Alston (2021) and the subsequent wave of state NIL legislation created a new category of disclosure in college athlete therapy sessions. Athletes who can now earn money from their name, image, and likeness routinely process the psychological dimensions of that commercial reality in therapy. What does it mean to be approached by a brand when you're twenty years old and new to your school? How do you evaluate whether your NIL collective is treating you fairly? How do you handle the conflict when your university's sponsor relationships conflict with your personal NIL deals? What do you do when your NIL agent is pressuring you in ways that feel coercive? How do you manage the anxiety of a significant NIL deal and the fear of the income disappearing if your performance drops?

These disclosures are clinically legitimate — role conflict, financial stress, identity development, exploitation, and performance anxiety are all valid therapy content. But they are also commercially sensitive. A cloud AI scribe vendor retains verbatim session content that may include NIL deal valuations, agent names and fee structures, collective payment schedules, sponsor relationship terms, and the athlete's own assessment of whether they are being treated fairly or exploited. That content exists in the vendor's archive as independently subpoenaable business records — available to brand partners in a breach-of-contract dispute, to agents in a fee arbitration, to rival NIL collectives in a claims proceeding, and to the athlete's own legal counsel in a dispute with the collective or the university.

Alongside NIL content, college athlete sessions continue to carry the older categories of adversarially significant disclosures. NCAA eligibility and compliance topics arise in therapy when athletes are under pressure related to transfer rules, amateurism questions, extra benefits from boosters, or relationships with agents prior to exhausting eligibility. An athlete who is anxious about whether a booster's gift was NCAA-permitted may process that anxiety in therapy, describing the gift, the booster, and the nature of the relationship in verbatim detail. What cloud AI scribes capture and retain from that session is a verbatim account of a potential NCAA rules violation — independently held by a vendor outside the university's compliance architecture.

Concussion history and head injury symptom timelines arise when athletes processing the psychological dimensions of injury also describe their physical symptoms, their team's response to those symptoms, and the pressure — explicit or implicit — to return to play before full recovery. Athletes who later bring concussion injury lawsuits need contemporaneous evidence of their symptom experience and of institutional awareness of that experience. The cloud AI scribe vendor holds exactly that evidence in verbatim form, in a format that reflects not the team physician's records or the athletic trainer's documentation, but the athlete's own words in a therapeutic relationship where they are expected to be candid.

Title IX-adjacent situations arise when athletes who are involved in sexual harassment or assault situations — as complainants, respondents, or third-party witnesses — process those experiences in therapy before or during formal proceedings. The content of those sessions can be directly relevant to both sides of a Title IX proceeding and to any civil litigation that follows.

The regulatory framework — FERPA, HIPAA, and why the vendor sits outside both

For in-house athletic department mental health providers, FERPA governs the records environment. The FERPA framework for college counseling services and the mismatch with cloud AI scribe vendors is covered in detail in an earlier analysis. The key principle for athletic department contexts is the same: FERPA's treatment records exception under 34 CFR 99.3 applies only to records maintained solely by providing professionals for treatment purposes and disclosed only to treatment providers. A cloud AI scribe vendor is a commercial entity with its own data governance, its own retention policies, and its own staff who access session content as part of normal operations. The vendor's records are not "maintained solely for treatment purposes" — they are maintained by a commercial vendor for the vendor's own business purposes. The treatment records exception cannot extend to shield content the vendor independently holds.

Cloud AI scribe vendors are not "school officials" under FERPA's 34 CFR 99.31(a)(1) exception, which permits disclosure of education records to school officials with legitimate educational interests. School officials must perform institutional services under the direct control of the educational institution and be subject to FERPA requirements. A national cloud AI scribe company with customers at hundreds of institutions, operating under its own contracts and its own data governance framework, is not under the direct control of any particular athletic department. It does not qualify as a school official, and the records it independently retains are not education records that FERPA governs or protects from third-party access.

For contracted private-practice sport psychologists, HIPAA governs. A BAA with the cloud AI scribe vendor is the appropriate instrument for the private-practice context. But a BAA does not prevent the vendor from disclosing protected health information in response to lawful subpoena, court order, or government investigation. The HIPAA Privacy Rule at 45 CFR 164.512(e) expressly permits covered entities and their business associates to disclose PHI in judicial and administrative proceedings in response to lawful process. A BAA establishes the contractual relationship between the therapist and the vendor and requires the vendor to protect PHI from unauthorized disclosure — it does not make the vendor archive invisible to courts, arbitrators, or regulatory investigators.

Legal and regulatory proceedings where the vendor archive is reachable

NCAA enforcement investigations and infractions proceedings. The NCAA's enforcement program under Bylaw 19 operates through institutional cooperation and self-reporting, which limits the direct investigative reach of enforcement staff into third-party commercial vendors. But NCAA enforcement proceedings frequently generate collateral litigation — scholarship breach-of-contract claims, § 1983 civil rights claims challenging sanctions, and contract disputes between athletes and collectives or agents that arise in the context of enforcement scrutiny. Those civil proceedings activate Rule 45 subpoena authority, allowing any party to obtain documents from third-party custodians. A cloud AI scribe vendor holding records of a session in which an athlete described an agent contact, a booster gift, or an extra-benefits situation is a Rule 45 target in any civil proceeding arising from or related to the NCAA enforcement matter. The vendor's records reach adversarial hands through the civil litigation channel, not through the NCAA's own investigative process — a distinction that does little to protect the athlete's disclosures from reaching the enforcement context.

Title IX proceedings. Department of Education Office for Civil Rights investigations and civil litigation under Title IX both create pathways to the cloud AI scribe vendor's archive. In OCR investigations, the DOE has administrative subpoena authority to compel production of documents from third parties relevant to the investigation. In federal civil litigation arising from Title IX — which college athletes facing discriminatory treatment, harassment, or inadequate institutional response to sexual assault increasingly pursue — Rule 45 subpoena authority reaches third-party document custodians. Athletic department-specific Title IX contexts have distinctive features: scholarship status, team membership, housing assignments, and access to facilities create dimensions of institutional power over athletes that differ from the general student population. The power dynamics and institutional responses that athletes process in therapy after a sexual assault or harassment situation are exactly the content Title IX litigants and investigators seek. When that content exists verbatim in a vendor archive, it is reachable independently of the therapist's clinical notes and independently of the university's records management.

NIL commercial dispute arbitration and civil litigation. NIL disputes — between athletes and their agents, between athletes and NIL collectives, between athletes and brand partners, and between athletes and their universities over NIL-related program rules — are increasingly resolved through arbitration or federal court litigation. Arbitration panels have subpoena authority to compel production of relevant documents from third parties. Federal court litigation activates Rule 45. A vendor holding verbatim session content in which the athlete discussed the terms of a NIL deal, their assessment of whether their collective was fulfilling its obligations, their conversations with a brand partner representative, or their concerns about their agent's conduct is a third-party custodian with directly relevant evidence in any NIL commercial dispute. The athlete's own words about the dispute, captured verbatim in a therapy session, may be more valuable to the adverse party than any formal communication or contract — because the therapy session captures the athlete's unfiltered assessment of the situation rather than their negotiating position.

Concussion injury litigation. The third-party subpoena pathway to AI scribe vendor archives is particularly significant in concussion injury litigation because of the unique evidentiary value of contemporaneous symptom accounts. Athletes who bring personal injury or wrongful death suits alleging CTE, chronic traumatic encephalopathy, or other head-injury conditions need to establish the timeline of symptom onset, the duration and severity of symptoms during their playing career, the institutional knowledge of those symptoms, and the pressure — explicit or implicit — they experienced to continue playing despite symptoms. The treating sport psychologist's clinical notes capture a professionally filtered version of this history. The cloud AI scribe vendor's verbatim archive captures what the athlete actually said in sessions during their playing career: specific descriptions of headache frequency, cognitive changes they noticed, conversations they had with athletic trainers or team physicians, and the psychological experience of feeling pressure to perform through injury. Concussion plaintiffs' attorneys who identify a vendor archive through discovery can subpoena it independently, obtaining evidence that predates any litigation strategy and reflects the athlete's contemporaneous experience rather than retrospective reconstruction.

Transfer portal eligibility disputes. NCAA transfer rules have undergone significant revision — the one-time transfer exception became the standard framework, and subsequent legislation has continued to adjust the eligibility landscape. But transfer-related eligibility disputes continue, particularly in cases where conference-specific rules, scholarship grant limitations, or alleged recruiting violations affect eligibility determinations. When an athlete's reasons for transferring — documented in a waiver application or eligibility appeal — are contested by the institution, the content of therapy sessions from the period of the transfer decision may become relevant. Eligibility proceedings within the university system, and any civil litigation challenging an adverse determination, create procedural contexts in which the athlete's own account of their reasons for leaving — as disclosed in therapy sessions — is potentially the most probative evidence available. If a vendor holds verbatim session content from the transfer decision period, that content is reachable through civil discovery in any proceeding that challenges the eligibility determination in federal court.

What on-device processing changes for athletic department counselors and contracted sport psychologists

The clinical work does not change. Sport psychologists and athletic department counselors continue to see college athletes, provide mental health services, document sessions for clinical purposes, and coordinate with athletic department staff as appropriate given their employment or contracting arrangement. What changes is whether verbatim session content — NIL deal discussions, eligibility concerns, concussion symptom accounts, Title IX situation processing, team conflict narratives — exists in a vendor archive that sits outside the therapist's control and outside the university's records management.

When you use TherapyDraft to document college athlete sessions, the session audio is captured, transcribed, and processed entirely on your Mac. No audio, transcript, or draft note text is transmitted to vendor infrastructure. Your own clinical records — maintained under your professional obligations as a licensed clinician and under whatever regulatory framework applies to your specific practice context — remain the sole detailed record of the sessions. There is no vendor archive for NCAA enforcement to reach through civil discovery, no verbatim NIL deal disclosure for an arbitrator to compel from a third-party custodian, no contemporaneous concussion symptom timeline for a plaintiff's attorney to subpoena, and no Title IX session content for OCR investigators or civil litigants to obtain outside your clinical documentation.

The athlete's disclosures — including the full scope of what they share about their commercial relationships, their compliance concerns, their physical symptoms, and their institutional experiences — stay within the therapeutic relationship. No parallel verbatim record exists in a vendor's commercial infrastructure whose data retention policies, access controls, and response to legal process neither you nor the university controls. The only record of what the athlete said in therapy is the record you maintain under your professional and regulatory obligations — with whatever protections HIPAA, FERPA, state psychotherapy privilege, and your own professional ethics provide.

Frequently asked questions