EAP counseling records: the confidentiality framework cloud AI scribes bypass — and what employer discovery means for your sessions

What EAP counseling sessions are — and what they contain

Employee Assistance Programs are employer-sponsored benefit programs that provide employees and their family members with short-term confidential counseling, typically six to twelve sessions per presenting concern. EAPs are administered either by large managed behavioral health organizations — Optum (United Health Group), Beacon Health Options, Magellan Health, Lyra Health, Spring Health, ComPsych — or by smaller independent EAP vendors contracted directly with employers. Clinicians can be employed by the EAP vendor, contracted as independent affiliates, or operate in private practice receiving EAP referrals under a panel agreement.

The presenting concerns that bring employees to EAP counseling span the full range of adult mental health: stress and anxiety, relationship difficulties, grief, substance use concerns, parenting issues, financial stress, and adjustment to major life events. But a substantial portion of EAP sessions are workplace-adjacent in ways that make their content unusually sensitive from an employment law perspective:

Mandatory referrals. When an employer requires an employee to complete EAP counseling as a condition of continued employment — following a positive drug test, a workplace safety incident, a behavioral concern, or a disciplinary action in lieu of termination — the EAP session becomes directly connected to the employee's job status. The session covers the incident the employer responded to, the employee's account of what happened, the substance use history, the workplace relationships involved, and the employee's understanding of the employer's expectations going forward.

Fitness-for-duty referrals. When an employer has concerns about an employee's capacity to safely perform their job — following a threat assessment, a mental health crisis at work, or erratic behavior — the EAP may conduct a fitness-for-duty evaluation. These sessions include direct assessment of the employee's mental status, dangerousness, and work capacity. The clinical findings inform the return-to-work decision the employer is weighing.

Work stress and supervisor conflict. Even in voluntary EAP sessions, employees frequently discuss the specific details of supervisor-employee relationships: the name of the supervisor whose management style is causing distress, the particular incident that led to the current PIP, the specific comments made in a performance review, and the employee's assessment of whether the treatment they are experiencing constitutes harassment or discrimination. An EAP counselor documents these sessions in summary form. A cloud AI scribe vendor holds the verbatim account.

Substance use screenings. Many EAPs conduct substance use assessments as part of mandatory referrals or as an initial intake step for presenting concerns involving alcohol or drug use. For sessions that constitute SUD treatment at a federally assisted program, 42 CFR Part 2's heightened protections apply — a framework stricter than HIPAA that requires per-disclosure written consent and is not satisfied by a general Business Associate Agreement.

The EAP confidentiality framework — and where it stops

EAP confidentiality is primarily contractual. The EAP vendor's agreement with the employer includes provisions prohibiting disclosure of individual session content to the employer. The employer may receive aggregate utilization reports — aggregate numbers of employees who used the EAP, the category distribution of presenting concerns (work stress, relationship issues, substance use) — but not individual records identifying what any specific employee discussed. This confidentiality commitment is the foundation of employee trust in the EAP as a benefit.

The question for cloud AI scribes is not whether the EAP vendor keeps that commitment. The question is: who else holds session content, and what obligations do they have to the employee?

When an EAP counselor uses a cloud AI scribe during an EAP session, the scribe vendor receives and independently retains session audio as the vendor's own business records. The EAP vendor's contractual confidentiality commitment to the employer runs between those two parties. It does not run to the AI scribe vendor. The AI scribe vendor is not a party to the EAP-employer agreement, has no employment relationship with the client-employee, and has no contractual obligation to protect the employee's session content from third-party legal process.

Whether HIPAA applies to the EAP arrangement adds another layer of complexity. Some EAP vendors are HIPAA covered entities — health care providers that provide counseling services and transmit health information electronically for covered transactions. In those cases, HIPAA's Privacy Rule governs the EAP vendor's records, and a Business Associate Agreement is required for vendors who process EAP PHI on the vendor's behalf, including cloud AI scribes. The BAA covers the scribe vendor's handling of EAP PHI — limiting how the vendor can use and disclose the information and requiring appropriate safeguards. What the BAA does not do is make the vendor's independently retained session audio disappear as a legal record that can be sought through separate legal process directed at the vendor.

Some EAP arrangements are structured as employee welfare benefit plans under ERISA rather than as HIPAA covered entities in the traditional sense. In these arrangements, the HIPAA analysis is less straightforward, and EAP counselors operating as private practice affiliates may face genuine uncertainty about which framework governs the records they create in EAP sessions.

Employment litigation and the third-party vendor as discovery target

Employment litigation creates discovery rights that reach well beyond what voluntary disclosure rules cover. A former employee filing a wrongful termination claim, an EEOC discrimination complaint, or an ADA reasonable accommodation dispute puts their employment relationship directly at issue. Opposing counsel's discovery strategy frequently includes seeking records that illuminate the employee's mental state, performance history, and any relevant disclosures the employee made during the period in question — including EAP counseling records.

The EAP vendor's own records are subject to discovery and typically respond to subpoenas. The EAP vendor can assert applicable privilege claims and confidentiality protections, and courts must balance disclosure interests against confidentiality in the specific case. That same analysis, however, extends to third-party holders of related records — including cloud AI scribe vendors that independently retained session audio from the employee's EAP counseling sessions.

Rule 45 of the Federal Rules of Civil Procedure allows any party in federal litigation to serve a subpoena on a non-party requiring production of documents and electronically stored information, including audio recordings. In federal employment litigation — a wrongful termination claim under Title VII, an ADA accommodation dispute, or an ERISA benefits case — opposing counsel can serve a Rule 45 subpoena on the cloud AI scribe vendor seeking verbatim audio from the employee's EAP sessions during the relevant period.

The AI scribe vendor has no employment relationship with the employee-client and no contractual commitment to the EAP vendor's employer-client confidentiality agreement. The vendor can assert available privileges — attorney-client does not apply; psychotherapist-patient privilege under Jaffee v. Redmond may be asserted, though its application to a vendor's independently retained business records rather than the therapist's own records is legally untested in most jurisdictions. In the absence of a clear applicable privilege, the vendor's independently retained session audio is producible.

What is in that audio is everything the EAP counselor documented in summary form in the formal session note — plus the full verbatim account. The employee's description of the workplace incident that triggered the mandatory referral. The names of the supervisors involved in the performance dispute. The employee's account of the specific discriminatory comments they allege were made. The substance use history disclosed in the fitness-for-duty session. The functional limitations the employee disclosed when requesting FMLA leave or an ADA accommodation. The vendor's independently retained audio contains all of it, in the employee's own words, alongside the counselor's questions and clinical observations.

Mandatory referral sessions: where the stakes are highest

Voluntary EAP sessions — an employee seeking help for depression, relationship stress, or anxiety — carry employment litigation risk, but the connection between session content and the employment dispute is often less direct. Mandatory referral sessions are different. The employer's decision to require EAP participation and the session's content are causally connected to the employment outcome the litigation disputes.

When an employer terminates an employee following a mandatory EAP referral for a positive drug test and the employee claims the termination was retaliatory or discriminatory, the EAP session content is central to the disputed facts. Did the employee disclose prior treatment? What was the counselor's clinical assessment? What did the employee say about the workplace circumstances that led to the positive test? The formal EAP session note reflects the counselor's professional synthesis. The cloud AI scribe vendor's independently retained session audio holds the verbatim exchange — the employee's own words, not the counselor's summary.

For workers' compensation mental health claims with an EAP component, the documentation structure is similarly complex. An employee injured at work may be referred to an EAP for mental health support as part of the return-to-work program, creating an EAP record that intersects with the WC claim. The WC carrier's discovery in a contested WC claim can reach the EAP records under the claim authorization — and, through separate subpoena, the AI scribe vendor's independently retained session audio.

The mandatory referral context also raises specific concerns about the employee's employment-at-will status during the EAP program period. In many mandatory referral arrangements, the employee agrees to complete EAP counseling and to authorize release of attendance and completion records to the employer as a condition of maintaining employment. The employer receives confirmation of program completion — not session content. But the cloud AI scribe vendor's independently retained audio exists entirely outside that authorized release structure, available to the employer's attorneys through third-party discovery on paths the employee's EAP authorization never contemplated.

42 CFR Part 2 and EAP substance use sessions

When EAP sessions involve substance use disorder treatment at a program that qualifies as a federally assisted program under 42 CFR Part 2, the regulatory framework shifts significantly. Part 2 prohibits disclosure of patient records — including their identity as a patient — except with written patient consent, a court order issued after an in camera review under the regulation's specific standards, or in a medical emergency. Part 2's consent requirement is per-disclosure: a general BAA does not satisfy it because the BAA is not patient consent.

A cloud AI scribe vendor receiving session audio from a Part 2-covered EAP SUD treatment session would be subject to Part 2's prohibition on redisclosure in any form. The vendor's independently retained session audio would be Part 2-protected if the vendor's receipt of the audio was authorized under a patient consent that included the vendor by name or description as a recipient. Most cloud AI scribe vendor relationships are not structured this way: the clinician subscribes to the AI scribe service; the vendor processes the audio; there is no patient consent naming the AI scribe vendor as an authorized recipient under 42 CFR Part 2.

This creates a different problem from the general EAP context: rather than the vendor's independently retained audio being exposed to employment litigation discovery, it may be improperly held by the vendor in the first place if its receipt was not authorized under Part 2's consent framework. As with the general EAP context, on-device processing eliminates the Part 2 compliance analysis for session content: audio processed locally never reaches the vendor, so no disclosure to the vendor occurs and no Part 2 authorization is required for the processing step.

On-device processing for EAP counselors

For EAP counselors who use on-device note drafting, the third-party vendor archive does not exist. Session audio from mandatory referral sessions, fitness-for-duty assessments, and substance use screenings is processed entirely on the counselor's Mac — generating no separately retained copy at any vendor's infrastructure.

When employment litigation subpoenas reach the EAP vendor seeking records related to the employee's counseling sessions, the EAP vendor produces what it holds. There is no separately subpoenable cloud AI scribe vendor holding an independent archive of verbatim session audio, because the session audio was never transmitted to any vendor to hold.

The EAP counselor's professional documentation judgment governs the complete record: what appears in the formal session note, what is documented in the assessment, what the mandatory referral completion letter states. The employee's verbatim disclosures — the workplace incident account, the supervisor relationship details, the substance use history — exist in the counselor's documented synthesis, not in a parallel vendor archive that the employee's EAP confidentiality agreement never contemplated and that employment litigation discovery can reach on pathways entirely separate from the EAP vendor's own confidentiality obligations.

The contractual protections in the EAP framework are real. They bind the entities that signed them. The architectural protection — processing that generates no vendor archive because nothing is transmitted — extends to every entity that did not sign anything, including every potential future opposing counsel in every employment litigation case your current EAP clients may face.

Frequently asked questions