Independent New Hampshire Journalism · Northfield, NH

When Your Doctor Can Call the Police on You

Wellness checks, duty-to-warn calls, subpoenas, mandatory reports, commitment papers: New Hampshire law opens five narrow doors between your medical file and the police. Most of them say may, not must.

Your doctor can pick up the phone and send the police to your house. No consent form, no court order, no warning. Federal privacy law and New Hampshire statute both allow it — and both keep that power far narrower than most patients, and more than a few providers, seem to believe.

Here is the shape of it. Confidentiality is the default, enforced by a state privilege law that predates HIPAA and by the federal privacy rule itself. A primary care provider who wants to call the police about you, or to answer when the police call about you, has to walk through one of a handful of specific legal doors. Most are marked may. A few are marked must. Knowing which is which tells you what your doctor was permitted to do, what the law compelled, and where to push when a disclosure went past the line.

The default is silence

Start with the state rule, because it is older and blunter. RSA 329:26 places what you tell your doctor “on the same basis as those provided by law between attorney and client.” That is the strongest confidentiality comparison New Hampshire law knows how to make. The statute then adds its own escape hatch: the privilege holds except as otherwise provided by law. The state supreme court has treated the relationship as carefully guarded while conceding, in a 2004 fight over grand jury subpoenas for hospital records, that the privilege is “not fixed and unbending.” Protected, with statutory exits.

The federal layer works the same way. HIPAA bars a covered provider from handing your records to law enforcement unless the disclosure fits a permission listed in the regulations, chiefly 45 CFR 164.512. And the federal rule is a floor: where a state guards medical privacy more tightly, federal regulators treat the stricter state rule as the one that survives. Every door below is an exception to that default, and each has its own frame.

Door one: the wellness-check call

The provision that produces most police welfare checks is 45 CFR 164.512(j). It lets a provider disclose patient information, consistent with law and professional ethics, when the provider believes in good faith the disclosure is “necessary to prevent or lessen a serious and imminent threat” to someone’s health or safety, or the public’s, and makes it to a person positioned to intervene. Police qualify. So do family members, and so, in the regulation’s own words, does the target of a threat.

Federal health officials have said the quiet part in writing. Guidance from the Office for Civil Rights tells providers they may alert police, relatives, or campus police about a patient who presents a serious and imminent danger to self or others, and after the Newtown shooting the office sent a message to the nation’s health care providers saying HIPAA was no barrier to that call. The same guidance promises deference: regulators will not second-guess a clinician’s good-faith judgment about the threat, and the regulation presumes good faith when the belief rests on the provider’s own knowledge or on a credible report from someone who appears to have it.

Two limits still matter. The disclosure covers necessary information: for a welfare check, that looks like your name, your address, and the reason for concern, and nothing like your chart. And under federal law it is a permission, never a duty. HIPAA does not require your doctor to call anyone.

Door two: the duty to warn

New Hampshire converts that federal may into a state must in exactly one situation. RSA 329:31 imposes on every licensed physician a duty to warn, or to take reasonable protective steps, when a patient has communicated “a serious threat of physical violence against a clearly identified or reasonably identifiable victim” — or, in a clause most states never wrote, a serious threat of substantial damage to real property. Threaten a person or a building in the exam room, specifically, and the confidentiality you assumed stops being the doctor’s choice.

The immunity does the quiet work. A physician sued for breaking confidence can point to the statute. A physician sued for silence after a specific, communicated threat cannot. That asymmetry is the point of the law, and it is why the call to the local police department is the discharge route doctors reach for first. Parallel statutes lay the same duty on psychologists, mental health practitioners, and licensed alcohol and drug counselors, according to a University of California, San Francisco compilation of New Hampshire confidentiality law.

Watch the trigger, though. Vague worry is not a trigger. A hard week is not a trigger. The statute demands a communicated, serious threat aimed at an identifiable target. Below that line, the doctor is back in door one, weighing seriousness and imminence under a federal rule that permits and never compels.

Door three: when police come asking

Traffic runs the other way too, and different rules govern it. Under 45 CFR 164.512(f), a provider may release records in compliance with a court order, a court-ordered warrant, a subpoena or summons from a judicial officer, or a grand jury subpoena, limited to what the process demands. An administrative subpoena or investigative demand with no judge attached gets records only if the information is relevant and material to a legitimate inquiry, the request is specific and limited in scope, and de-identified data would not do the job.

An officer hunting a suspect, fugitive, material witness, or missing person can ask for a fixed identifier list: name and address, date and place of birth, Social Security number, blood type, injury type, dates and times of treatment or death, and distinguishing physical features. Then the regulation slams the drawer. Under that provision the provider may not hand over DNA or its analysis, dental records, or the typing of body fluids or tissue. Narrower permissions cover crime victims, deaths the provider suspects were criminal, and evidence of a crime committed on the practice’s own premises.

The practical translation for patients: nothing in the rule obliges a practice to volunteer your records to an officer who simply asks, and the menu of what an asking officer can lawfully receive without legal process is short. In New Hampshire courtrooms, the RSA 329:26 privilege adds a second wall: the 2004 hospital-records case reached the state supreme court because prosecutors had to litigate for charts they could not simply collect.

Door four: the reports the law forces

Three New Hampshire statutes strip the choice away entirely. RSA 631:6 makes it a misdemeanor for anyone who has knowingly treated a gunshot wound, or any injury believed to have come from a criminal act, to fail to notify law enforcement immediately with everything they know about the injury. The legislature carved one exception: an adult victim of sexual assault or of abuse as defined in the domestic violence chapter can object and stop the report, unless the injury is a gunshot or other serious bodily harm, in which case the report goes in over the objection.

RSA 169-C:29 covers children, and its reach is unusual. The list of mandated reporters runs through physicians, nurses, teachers, and clergy before ending at “any other person having reason to suspect” abuse or neglect. The duty belongs to every adult in the state, and the report goes to the Division for Children, Youth and Families or to police. RSA 161-F:46 does the same for vulnerable adults: suspected abuse, neglect, self-neglect, or exploitation requires an immediate oral report to the state, and after hours or on a weekend the statute routes that call to the local police department or the county sheriff. Good-faith reports under both chapters carry immunity, per the state health department’s own reporting manual.

Door five: the commitment certificate

The most consequential path from an exam room to a cruiser runs through RSA 135-C. A provider who concludes a patient poses a danger as a result of mental illness can complete an involuntary emergency admission certificate under RSA 135-C:28: physicians, physician assistants, and advanced practice registered nurses approved by a receiving facility or community mental health program can sign one. Once the certificate exists, state law puts a police officer into the chain: RSA 135-C:29 governs the officer’s custody of the person for transport to a receiving facility.

The street-side version belongs to the officer alone. An officer who observes behavior giving reasonable suspicion of mental illness, plus probable cause that the person poses an immediate danger of bodily injury to self or others, may take that person into protective custody and must deliver them to an emergency room. The custody ends when a clinician decides whether to order admission, or at six hours, whichever comes first. The chapter now also lets a completed certificate be rescinded before police ever take custody, when a mobile crisis team or a community provider accepts the person’s care: the legislature’s attempt to keep handcuffs out of health care where a clinical handoff will do.

What happens at your door

Everything above governs what your doctor may say. None of it governs what the responding officers may then do, and the U.S. Supreme Court drew that line through a wellness check. In 2015, a Rhode Island man put a handgun on the dining room table during an argument and told his wife to “shoot [him] and get it over with.” She spent the night at a hotel, could not reach him the next morning, and asked police to check on him. He agreed to a psychiatric evaluation; while he was gone, officers entered the house and took his guns.

In Caniglia v. Strom, 593 U.S. 194 (2021), a unanimous Court held that no freestanding community-caretaking exception lets police search a home or seize property during a welfare check. Warrants still work. Consent still works. True exigency — an officer entering to reach someone visibly injured or in imminent danger — still works. What died was the idea that checking on someone is its own substitute for a warrant. For a New Hampshire patient, the sequence matters: a lawful disclosure by your doctor does not launder an unlawful entry by the police, and the two questions get answered under two different bodies of law.

If your file walked out the door

The system’s honest description is this: the law hands your doctor discretion at the front end, wrapped in a good-faith presumption regulators promise not to second-guess, and hands you a paper trail at the back end. Use the trail. Ask the practice, in writing, what was disclosed, to whom, on what date, and under which legal provision. Federal rules give patients the right to request an accounting of certain disclosures, and releases to law enforcement sit squarely in the category that accounting reaches.

If the answer does not hold up, the complaint routes are real. The federal Office for Civil Rights takes HIPAA complaints. The New Hampshire Board of Medicine takes conduct complaints against physicians, and the state licensure office publishes a plain-language guide to your records rights. The statute with teeth is RSA 332-I, the state’s medical-records and patient-information chapter, which gives a patient whose information was disclosed without authority a civil action with damages of at least $1,000 per violation, plus costs and reasonable attorney’s fees. That chapter is getting a workout: a class action over Concord Hospital’s website tracking tools, brought partly under state patient-privacy and wiretap claims, reached an $800,000 settlement that won preliminary court approval in June, according to ClassAction.org.

The doors between your medical file and the police are narrow, and they are real. So is the ledger. A patient who knows which door a disclosure went through is the only person positioned to say whether it was opened lawfully — and, when it was not, the only one who will ever ask.

Fact check

Editor’s note. Every factual claim above was verified against the sources listed before publication; see the fact-check table. Statute text was read in the current Justia codes and checked against the General Court’s published RSAs; federal regulatory text was read in the eCFR as displayed on August 14, 2026. This article reports what the law says. It is not legal advice, and neither the writer nor this outlet is a lawyer; a patient weighing action against a provider or an agency should consult one. Corrections: Granite State Report corrects verified errors promptly and appends a note identifying what changed and when.