Safety Norms: Clinical Psychology and Psychotherapy

1Purpose, Scope, and Safety Principles

This document supports safe, ethical, and compliant practice in clinical psychology and psychotherapy. It applies to psychological assessment, formulation, treatment, crisis contact, group work, telehealth, consultation, and clinical supervision delivered in hospitals, outpatient clinics, community mental health services, schools, private practice, and digital platforms.

Safety here means preventing psychological, physical, social, and informational harm to clients, trainees, staff, and third parties. The guiding principles are client welfare first, the least restrictive effective care, evidence-based methods, transparency with clients, and decisions that are documented and reviewable.

• Mandatory: every clinician must work within their licensed or authorized scope and under any supervision required by their jurisdiction.
• Mandatory: no service may be offered that the organization has not approved for the population, setting, and modality concerned.
• Recommended: review this document at least annually and after any serious incident, then adapt it to local procedures.

2Roles, Competence, and Accountability

The treating clinician is accountable for clinical decisions, risk assessment, consent, and documentation. Supervisors are accountable for the competence of supervisees and for reviewing high-risk cases. Organizations are accountable for staffing, on-call coverage, facilities, and information systems. Administrative staff, receptionists, and interpreters also have defined duties for confidentiality and escalation.

Competence is not assumed from a credential alone. A clinician who has not been trained in a specific evidence-based protocol, such as exposure-based treatment for anxiety or a structured program for conduct problems, should complete training and supervision before offering it independently.

• Mandatory: practice only with current licensure, registration, or formal authorization for the specific service and population.
• Mandatory: trainee and newly qualified clinicians receive documented supervision before working independently with high-risk clients.
• Mandatory: every case file names a responsible clinician and a covering clinician for planned and unplanned absences.
• Recommended: maintain a competence log listing completed training in suicide risk assessment, trauma-informed care, and each manualized treatment used.

3Course-Specific Hazards and Risk Assessment

Hazards in this field are mostly psychological, relational, and informational, although physical risks also exist. A risk assessment identifies the hazard, who could be harmed, how likely harm is, how severe it would be, and which controls reduce it. Record risk levels as low, moderate, or high, and review them whenever circumstances change.

Risk matrices may be used but must be validated locally. Do not rely on a single score to decide whether a client is safe. Clinical judgment, collateral information, and supervision are required for decisions about risk.

• Suicide and self-harm: high severity. Assess ideation, plan, intent, access to means, protective factors, and recent losses at intake, after any crisis, and at significant change points. Record the structured tool used.
• Violence toward staff or others: assess history, specific threats, intoxication, weapons access, and agitation. Use a second staff member nearby for high-risk contacts.
• Child and vulnerable adult safeguarding: assess disclosures of abuse or neglect. Mandatory reporting duties and thresholds vary by jurisdiction and must be verified locally.
• Boundary violations and dual relationships: moderate to high severity. Avoid social, financial, sexual, or business relationships with current or former clients where professional codes prohibit them.
• Medication and physical health: clinicians without prescribing authority must not advise on medication changes. Refer the matter to the prescriber and document the communication.
• Treatment-related distress: some interventions, such as trauma processing or exposure, can temporarily increase symptoms. Monitor outcomes with brief measures and adjust the plan.
• Environmental hazards: trip hazards, ligature points, unsecured sharp objects, poor lighting during home visits, and unsafe locations for outreach work.
• Infection: exposure to respiratory or bodily fluids during physical assessments, procedures, or close contact in crisis or residential settings.

4Preventive Controls and Safe Practice

Preventive controls reduce the likelihood of harm before it occurs. They include screening, structured assessment, informed consent, treatment planning, safety planning, and clear communication with clients about what to do during a crisis.

Safe telehealth requires verifying the client's identity, confirming the physical location for emergency dispatch, agreeing on a backup contact method, and having a written procedure for dropped connections. Video alone is not a reliable way to judge intoxication or self-harm, so clinicians should ask direct questions and seek collateral information where permitted.

Infection prevention applies wherever clinicians handle shared tools or share spaces. Perform hand hygiene before and after contact with clients who may be unwell, clean shared surfaces and assessment materials between clients using products approved by the facility, and avoid face-to-face work while acutely ill. Clean and disinfect shared physical equipment, such as blood pressure cuffs or reusable testing materials, according to manufacturer instructions. Specific infection control standards are jurisdiction-dependent and should be verified with the facility's infection prevention team.

• Mandatory: complete a documented suicide and violence risk screen at intake and before any session where risk indicators are present, using an instrument approved by the organization.
• Mandatory: create a written safety plan with the client for any moderate or high risk, listing warning signs, coping steps, contacts, and emergency numbers valid for the client's location.
• Mandatory: obtain informed consent before assessment or treatment. Explain the service, its risks and benefits, alternatives, the right to decline or withdraw, the limits of confidentiality, and fee and cancellation rules.
• Mandatory: record consent in writing or in an approved electronic system, and revisit it when treatment changes, when a minor approaches an age of decision-making under local law, or when capacity is in question.
• Mandatory: maintain professional boundaries. Do not enter sexual or romantic relationships with clients or former clients within the period set by professional codes, and document any unavoidable overlap and how it is managed.
• Mandatory: do not practice while impaired by alcohol, drugs, severe fatigue, or illness affecting judgment. Arrange coverage and inform a supervisor.
• Mandatory: select evidence-based protocols suited to the presenting problem and the client, and document the rationale. Where evidence is limited, record the uncertainty and seek supervision.
• Mandatory: never leave a high-risk client without a managed plan. Activate the escalation pathway described in the escalation section of this document.
• Recommended: use brief, validated symptom measures at intake and regularly thereafter to detect deterioration early.
• Recommended: begin and end sessions with a short check on current risk, medication changes reported by the client, and immediate needs.

5Environment, Information, and Protective Safeguards

The consulting room, waiting area, and digital systems are all part of the safety system. Rooms should allow the clinician to leave without obstruction, minimize ligature points where clients are assessed as at risk, and keep emergency contacts accessible. Personal protective equipment is seldom required in talking therapy, but it may be needed for physical procedures or when exposure risks are identified, and must follow local occupational health rules.

Information safety covers confidentiality, consent for recording, and data security. Recordings require written consent and a stated purpose, and they must be stored under the same controls as clinical records. Disclosure without consent is permitted only where law, professional ethics, or a serious risk to life allows it, and the reason must be documented. Privacy and record retention rules vary by jurisdiction and must be verified.

• Mandatory: keep a duress alarm or agreed signal in rooms used for high-risk clients, and test it on a fixed schedule.
• Mandatory: secure or remove items that could be used for self-harm or violence, including cords, letter openers, and glass objects, in rooms used for crisis work.
• Mandatory: store records, test materials, and any prescription pads in locked cabinets with restricted key access.
• Mandatory: use only encrypted systems approved by the organization for client information. Do not send client details through personal messaging apps or personal email.
• Mandatory: use unique passwords, enable multifactor authentication where offered, and set devices to lock automatically.
• Recommended: position seating so the clinician can reach the door, and use sound barriers to protect confidentiality.
• Recommended: use discreet appointment names and prevent screens showing client information from being visible in waiting areas.

6Incident, Emergency, and Escalation Procedures

Incidents include suicide attempts, self-harm, assaults, client-reported medication errors, data breaches, boundary complaints, and near misses. Near misses, such as a misfiled risk assessment or a session in which a high-risk client nearly left without a plan, must be reported because they reveal system weaknesses.

Escalation is a clinical decision, not a sign of weakness. Escalate to a supervisor when risk is rising, when a client refuses or cannot follow the safety plan, when a mandatory report may be required, or when the clinician is uncertain. Clinicians must not manage serious risk alone. This educational guidance does not replace emergency services, crisis lines, or the organization's approved crisis procedure.

• Mandatory: if a client is in immediate danger, contact local emergency services first. Do not delay for paperwork.
• Mandatory: inform the supervisor or on-call clinician as soon as it is safe, and document the time, actions taken, and people informed.
• Mandatory: report incidents through the organization's incident system within the timeframe set by local policy. Verify that timeframe before relying on it.
• Mandatory: report suspected data breaches to the privacy officer immediately. Notification duties to regulators and affected individuals are jurisdiction-dependent.
• Mandatory: inform the client of the outcome as policy and law require, unless disclosure would increase risk, and record the decision.
• Recommended: hold a structured debrief for staff after serious incidents, and update protocols using the findings.

7Records, Training, Inspection, and Review

Documentation shows that safety decisions were made and gives the next clinician what they need to continue safely. Notes should describe observations, the risk formulation, decisions, the rationale for chosen protocols, consent discussions, and escalation steps. Avoid vague entries such as client seemed fine, because they cannot support later review.

Training should include simulated crisis drills, supervised practice with high-risk cases, and training in each evidence-based protocol used. Periodic review should involve clients where appropriate, such as feedback on safety planning and consent processes. Approved local procedures take precedence over this guidance.

• Mandatory: complete risk and safety documentation at every session where risk is assessed or changed.
• Mandatory: complete required training before independent practice and refresh it on the schedule set by the regulator or employer.
• Recommended: audit a sample of case files each quarter for consent records, risk documentation, and boundary notes.
• Recommended: review outcomes and incident trends at least annually and revise this document and local procedures accordingly.

Implementation checklist

• Confirm current licensure and supervision arrangements before seeing any client.
• Complete a documented risk screen at intake and whenever risk changes.
• Obtain and record informed consent, including the limits of confidentiality.
• Create or update a written safety plan for every moderate or high risk client.
• Use approved, evidence-based protocols and record the rationale for each choice.
• Perform hand hygiene and clean shared equipment between clients.
• Secure records, devices, and room items that could cause harm.
• Escalate immediately when danger is imminent and contact local emergency services.
• Report incidents and near misses within the timeframe set by local policy.
• Verify applicable laws, codes, and standards with licensing and professional bodies.