Practice Standards 3.1 - 3.7
Client-Therapist Relationship

Confidentiality, consent, interprofessional communication, electronic practice, unnecessary treatment, the complaints process and the prohibition on conversion therapy: the standards that carry the most weight on the exam.
Study module, 45 min read. Read it below, or work it as a lesson first.
- Area 3 · Therapeutic relationship
- Area 6 · Professional practice
- Area 2 · Working relationship
Lesson, about 60 minutes. A few questions first, then this module in 15 short pieces with a check after each, then a two minute recap. What you answer comes back for review in Today's session.
If you learn one section of the Professional Practice Standards properly, learn this one. Blueprint area 3, the therapeutic relationship, is 25 to 30 percent of the exam, and area 6 adds a further 10 to 15 percent. Confidentiality and consent items are seeded into simulations that appear to be about something else entirely: a risk assessment, a family session, a report to an insurer.
Two structural points about how this section is tested. First, confidentiality and consent are almost never tested as recall. They are tested as timing and sequence: the option is right, and it is offered at the wrong point in the case. Second, the exam rewards the therapist who talks to the client about the limit before hitting it, and penalises the therapist who acts first and explains afterwards.
Competency links: 4.1e and 4.1h (explain rights to privacy and confidentiality and their legal limits; explain and obtain informed consent), 3.1a and 3.1b (comply with legislation and with CRPO standards), 3.5c (protect client privacy, disclosing only where permitted or required), 2.3 (interprofessional collaboration) and 4.4d (report to authorities as required by law).
3.1 Confidentiality
The rule. Registrants do not collect, use or disclose information about a client without the informed consent of the client or their authorized representative, except as permitted or required by law. They must know and comply with privacy law, and must train and supervise anyone providing them with reception or administrative support.
What it actually requires
- 3.1.1: no collection, use or disclosure without informed consent, except as permitted or required by law. That final clause is the whole examinable field.
- 3.1.2: familiarise yourself with and comply with relevant privacy laws.
- 3.1.3: if you rely on others for reception or administrative support, train and supervise them on confidentiality and privacy. A breach by your receptionist is your standards problem.
The definitions to hold verbatim
- Confidentiality: "the duty to keep information secret subject to legal limits."
- Personal health information: "any identifying information about a client in oral or recorded format (written or electronic) that relates to his or her physical or mental health, including his or her family history, payment for healthcare, health care providers and substitute decision makers." Note that payment information is PHI.
- Privacy: "a person's interest in restricting the collection, use, and disclosure of their personal information."
- Express consent: "an expression of consent that is specifically communicated, e.g., orally or in writing."
The governing legislation is the Personal Health Information Protection Act, 2004 (PHIPA) and the Regulated Health Professions Act, 1991.
The six permitted disclosures without consent
CRPO introduces these as "notable limits to confidentiality", so the list is not exhaustive: PHIPA permits other disclosures, and Standard 3.3's emergency exception below is one. Learn the six as the core set. A distractor that invents a ground with no basis in law, such as "the information is not clinical" or "another provider asked for it", is still wrong.
- Risk of harm. Where the registrant believes on reasonable grounds that disclosure is necessary to eliminate or reduce a significant risk of serious harm, including physical or psychological harm, to the client or anyone else. Suicide and homicide are CRPO's examples. CRPO adds that where you believe a significant, imminent risk of serious bodily harm exists, there may be a professional and legal duty to warn the intended victim, contact police or crisis services, or inform a physician involved in the client's care, and it advises getting legal advice because the law on the duty to warn is complex and evolving. The statutory permission is PHIPA s. 40 (1), which allows disclosure where you believe on reasonable grounds it is necessary to eliminate or reduce "a significant risk of serious bodily harm". PHIPA permits; it does not require. No Ontario statute imposes a general duty to warn, so any such duty comes from professional obligations and evolving case law, not from PHIPA.
- Mandatory reporting under Standard 1.3.
- Legal proceedings, by subpoena or other legal requirement.
- Authorized investigations, meaning an investigation or inspection authorized by warrant or by any provincial or federal law.
- Emergency contact, for the purpose of contacting a relative, friend or potential substitute decision-maker where the individual is injured, incapacitated or ill and unable to give consent personally.
- Regulatory and disciplinary, meaning disclosure to a college for the administration or enforcement of the RHPA, for example a complaint investigation or a Quality Assurance practice assessment.
Special circumstances, all high-yield
- Circle of care. PHIPA permits implied consent in some contexts, but CRPO strongly encourages registrants to obtain express consent when disclosing to other providers. In team settings, explain what will be shared and who will have access. Only information that is relevant and necessary may be disclosed.
- Shared records in group, family or couple therapy. When one participant requests access, you may provide only information about that individual, unless the other participants have consented.
- Deceased clients. "The right to confidentiality does not end upon the death of a client." In Ontario the right to consent to collection, use or disclosure for a deceased individual is held by the estate trustee or administrator.
- Police and court requests. Registrants "may have options": you may be able to negotiate an alternative, or work with a lawyer to file a legal objection. You must make reasonable efforts to inform the client of efforts to compel disclosure.
- Insecure communication. Avoid email and similar channels for confidential information unless the client consents and no practical alternative exists.
- Breach. Where PHI is stolen, lost, or used or disclosed without authority, promptly notify the client and, if applicable, the Information and Privacy Commissioner (IPC). The client is always told, including that they may complain to the IPC. The IPC is notified of the individual breach where it falls within the circumstances prescribed under PHIPA (for example theft, or a disclosure by someone who knew it was not permitted), and every breach counts in the annual statistics reported to the IPC. See the legal framework module for the prescribed circumstances.
- Method of consent is documented. Record the consent and also how it was given: verbal, gestural, or written.
- Guests and interpreters. When a client brings a guest, such as a partner or a parent, decide whether it serves the client, say who the client is and what the service is (a partner's attendance does not make it couple therapy), set the guest's role and how many sessions they may join, and document why they came. An interpreter who only supports communication is not a guest, but confirm they will keep the information confidential and discuss the limits of interpreted sessions in the consent conversation.
- Client stories online. CRPO's Guideline on Social Media (June 2026) keeps confidentiality the same on personal and professional accounts: "identifiable client information should never be shared, unless a legal exception applies." Disguising a story is not enough: "Information that has been anonymized (e.g., a redacted name or pseudonym, job title redacted, etc.) may still result in individuals being able to identify a client, particularly in smaller communities." The test is the one in Standard 3.1's definition, information that "can be reasonably foreseen to identify an individual, either alone or with other information", so ask whether a neighbour, a colleague or the client could recognise the story, not whether the name has gone. Standard 3.1 draws the line from the other side: "Information that does not allow the client to be identified is not personal health information and is not subject to PHIPA." Truly de-identified information is outside PHIPA; a story someone could recognise is still personal health information, whatever was changed. Using client information to market a practice also needs the client's express consent (PHIPA s. 33), and that consent is no way round Standard 6.2: registrants do not "request or solicit testimonials or use them in their advertising."
How it appears in a simulation. Two vehicles dominate. The first: a police officer attends your office asking about a client. The second: a client discloses something that appears to engage risk of harm, and the section asks what you do next.
The +3 option in the risk scenario is the assessment, not the disclosure: "Ask the client directly about intent, plan, means and timing." A +3 also attaches to obtaining consent before disclosing where consent is possible. Disclosure without assessment scores badly even when the eventual disclosure turns out to be justified, because the threshold is "reasonable grounds" and you have not yet established them.
The +2 option in the police scenario: "Tell the officer that you can neither confirm nor deny that the person is a client, and ask what legal authority the request is made under." A second +2: "Tell the client about the request and about the steps you are taking."
The plausible -2 options are the cooperative ones:
- "Confirm the client's attendance dates to the officer, since attendance is not clinical content." Attendance is personal health information. The distinction between "clinical content" and "the fact of the relationship" does not exist in the definition.
- "Provide a copy of the file in response to the subpoena the same day, to avoid obstructing the process." A subpoena is a permitted disclosure route, and the standard still expects you to consider whether options exist, to disclose only what is required, and to inform the client.
- "Email the client's progress notes to the family doctor who called about her." Insecure channel, no express consent, and more than relevant and necessary.
A genuine 0: "Review your practice's privacy policy." Sensible, and nothing happens in the room.
A common -1: "Tell the officer you will need to check with the College before saying anything." Not wrong, mildly defensive, and it neither protects the client nor advances the situation.
The trap. The conscientious therapist believes that a risk disclosure is urgent and therefore comes before the conversation with the client. In most simulations it does not. The sequence the exam rewards is: assess, then tell the client what you are required to do and why, then disclose only what is relevant and necessary, then document. Speed is not the virtue being tested; proportionality is.
A second trap is the family doctor. Therapists trained in team settings treat circle of care as authority to share. CRPO's position is more conservative than PHIPA's floor: express consent is strongly encouraged, and the content is limited to what is relevant and necessary.
3.2 Consent
The rule. Consent must be informed, voluntary, specific, free of misrepresentation, assessed for capacity, obtained on an ongoing basis, honoured immediately when withdrawn, and documented. Physical touch requires express consent every single time.
What it actually requires
- 3.2.1: where a client appears to lack capacity, assess and document the client's capacity. If the client lacks capacity, identify the substitute decision-maker(s).
- 3.2.2: ensure consent is voluntary, specific, and does not involve misrepresentation or fraud.
- 3.2.3: seek consent only after ensuring the client understands the process of therapy, the possible benefits and risks or adverse outcomes, other therapeutic options, and the implications of not proceeding.
- 3.2.4: obtain informed consent on an ongoing basis. Consent is not an intake event.
- 3.2.5: comply immediately with the withholding or withdrawal of consent.
- 3.2.6: document conversations about and indications of consent, "including the date when consent was provided, refused, or revoked."
- 3.2.7: obtain express consent in every instance before using physical touch as part of psychotherapy treatment.
The elements of informed consent, from the Health Care Consent Act, 1996:
- The person received information about the nature of the treatment, the expected benefits, the material risks, the material side effects, alternative courses of action, and the likely consequences of not having the treatment.
- The person received responses to their requests for additional information about those matters.
Capacity. Capacity may generally be assumed unless there are reasonable grounds to believe otherwise. You assess it by discussing the proposed therapy: does the client understand the information and appreciate the possible risks or consequences. The sentence that examiners love: a client "may be incapable with respect to certain issues and capable with respect to others." Capacity is decision-specific, not global.
Age. "There is no minimum age for consent." Clients under 18 can consent if they are capable of understanding and appreciating the consequences of their decision. Decisions are made case by case on capacity and applicable law. Candidates arrive believing in a magic number, usually 12, 14 or 16. There is none.
Substitute decision-makers, in rank order. The hierarchy is examinable, in order:
| Rank | Substitute decision-maker |
|---|---|
| 1 | Court-appointed guardian of the person |
| 2 | Attorney for personal care |
| 3 | Person appointed by the Consent and Capacity Board |
| 4 | Spouse or partner |
| 5 | Child or parent, or a children's aid society or other person lawfully entitled to consent in the place of a parent (who then displaces the parent) |
| 6 | Parent with a right of access only |
| 7 | Sibling |
| 8 | Other relative |
A substitute must be capable, at least 16 years old (unless they are the incapable person's parent), available and willing to act (HCCA s. 20 (2)). There is no ninth rank: if nobody on the list qualifies, or equal-ranked substitutes disagree, the Public Guardian and Trustee decides (HCCA s. 20 (5) and (6)). A spouse is a person you are married to, or live with in a conjugal relationship outside marriage where you have cohabited for at least a year, are together the parents of a child, or have a cohabitation agreement; spouses living separate and apart after a breakdown are excluded. A partner is someone you have lived with for at least a year in a close personal relationship of primary importance to both (HCCA s. 20 (7) to (9)). Only a partner carries the one year test on its own.
What must be documented: dates consent was provided, refused or revoked; the options, risks and benefits discussed; the method of indicating consent, for example oral or written; any change in therapeutic approach together with the consent obtained for it; and the reasons for a withdrawal of consent.
Two pitfalls CRPO states explicitly. First: "A signature on a form does not necessarily constitute informed consent." The discussion must precede the signature, and the signature evidences the discussion rather than replacing it. Second: registrants must not assume implied consent to touch a client, even if they have used similar techniques with that client in the past. Ongoing consent to therapy generally can be implied by a client continuing to attend after receiving relevant information. That inference never extends to touch.
How it appears in a simulation. The heaviest vehicle is the change of approach mid-therapy: you propose EMDR, or an exposure protocol, or a body-based intervention, to a client who consented to talk therapy four months ago. A second is the adolescent client whose parent wants to know what is discussed. A third is the client whose capacity is in question, usually an older adult or a client in an acute state.
The +2 option in a change-of-approach section: "Describe the proposed approach, its expected benefits, its risks and the alternatives, including continuing as you are, and ask the client to decide." The +2 in the touch scenario is short: "Ask the client for permission before any physical contact, on this occasion." Note "on this occasion". That phrase is what makes it +2 rather than +1.
The plausible -2 options:
- "Proceed with the technique, since the client signed a consent to treatment form at intake that covers the therapist's therapeutic approaches." Form-based consent is the named error.
- "Place a hand on the client's shoulder as she becomes distressed, as you have done before in sessions where grounding helped." Kind, therapeutically motivated, and precisely the prohibited inference.
- "Ask the client's daughter to sign the consent, since the client seems confused today." Apparent confusion is a reason to assess capacity under 3.2.1, not a substitute for the assessment, and the daughter is rank five in the hierarchy, consulted only if the client is found incapable.
- "Tell the fifteen-year-old client that you will need her mother's consent before continuing." There is no minimum age. If she is capable, she consents.
A -1 that catches good candidates: "Explain the new approach at length and begin it in the same session." The explanation is there, the decision was never handed to the client.
The trap. The conscientious therapist treats consent as an administrative artefact completed at intake and revisited only if something goes wrong. The standard treats it as continuous, decision-specific and documented at each point of change. The second trap is protective paternalism around capacity: the therapist who sees distress, cognitive slowing or intoxication and moves straight to a substitute decision-maker. 3.2.1 requires you to assess and document capacity before that, and capacity is decision-specific, so a client who cannot manage a complex decision today may still be capable of consenting to the session in front of her.
Children, separated parents and custody disputes
CRPO's manual names failing to involve both custodial parents as one of the College's most common complaint issues, and custody disputes as a frequent source of investigations. The rules, from the manual and CRPO's guidance on consent with divorcing parents:
- Assess the child first. Capacity is assessed case by case, not by age, and many 12 to 17 year olds can consent to their own therapy. Document how you assessed it, especially in a borderline case, and revisit it when circumstances change. Capacity can be partial: a child may consent to some aspects of care and not others.
- If the child is incapable, a parent usually decides. Ask whether there is another custodial parent, and read the parenting order or agreement: joint custody may still give health decisions to one parent only. The presenting parent may consent unless the order says otherwise, and one parent's consent may be accepted unless there is reason to believe the other disagrees. Seeking the other parent's consent where it applies reduces any appearance of bias; if they cannot be reached, decide in the child's best interests and document every attempt. If two parents who share decision-making disagree, treatment cannot proceed.
- A capable child controls their information. Sharing it with a parent needs the child's informed consent, even where involving the parent would be clinically wise to suggest.
- Know your role before the court asks. Have a policy on whether, when and for whom you will write reports for custody proceedings, and tell everyone at the start. If you write one, separate facts from interpretations and stay within what you observed: "the client said" is a fact, and "she is a good parent" is an opinion you cannot verify. High-conflict cases, especially with intimate partner violence, call for training, regular supervision and careful documentation.
CRPO's published case study shows the rules working. An RP treating an 11-year-old during a contested divorce gave the court the treatment summary it asked for, recorded what the child said, reported the child's disclosure to the children's aid society after consulting her supervisor, and kept treating the child after the mother withdrew consent, having assessed and documented the child's capacity. The ICRC took no action on any part of the complaint.
3.3 Communicating Client Care
The rule. Registrants make reasonable attempts to communicate with a client's other relevant health care providers about the client's care, and document any decision to deny another provider access.
What it actually requires
- 3.3.1: make reasonable attempts to communicate with other relevant health care providers about the client's care. There are three exceptions, and they are worth memorising as three: the client refuses consent; communication would be counter-therapeutic; communication is unnecessary.
- 3.3.2: when you deny another care provider access to a client's information, enter the decision and the reasons into the clinical record and discuss the decision with the client. Both halves are required.
- Note unsuccessful attempts at communication of client care in the clinical record. A call that was not returned is a documented event.
- Sharing must comply with the confidentiality and consent standards, must be limited to what is necessary and therapeutically beneficial, and must respect client requests not to share.
Commentary worth knowing. Communication methods include written communication, conference calls, team meetings and family meetings, and all of them are documented in the clinical record. Clients direct the scope of collaboration, and your role is to explain the benefits of interprofessional sharing and the implications of withholding, not to overrule the client's decision. There is an emergency exception: prior consent is not required in an emergency, for example a hospital admission, provided the client has not prohibited disclosure.
A client who already sees another therapist. CRPO has no rule specific to concurrent therapy: no standard forbids working with a client who has another psychotherapist, and none requires one of the two to stop. Standard 3.3 is what governs. The other therapist is one of the client's "other relevant health care providers", the commentary expects communication with "those who provide care to the same client", and its reason fits two therapists best of all: appropriate communication "may help reduce conflicting or inconsistent information or advice given to clients." The same three exceptions apply (the client refuses consent, it would be counter-therapeutic, it is unnecessary), the client sets the scope, and a decision not to share, like an attempt that gets no answer, goes in the record. In practice: learn early whether anyone else is treating the client, explain the benefit of the two of you talking and what it means if you do not, ask what they want shared, and agree who works on what so the two treatments do not pull against each other. Whether two treatments make sense together is a clinical question to settle with the client (Standard 3.5.2: "Registrants involve clients in determining whether therapy offers a reasonable prospect of benefit"), not a breach in itself.
How it appears in a simulation. Usually a psychiatrist, family physician or school has contacted you, or should have been contacted, and the client is ambivalent about it.
The +2 option: "Explain to the client what you would share with her physician, what the benefit would be, and what the implications are if nothing is shared, and ask what she would like you to do." The revealed response is often partial: the client agrees to share her attendance and treatment goals but not the content of sessions, which is a legitimate outcome and not a failure.
The plausible -2 option: "Send the physician a brief summary of the client's presentation, since they are part of her circle of care and coordination is in her interest." Circle of care again, as the reasoning that looks collaborative and bypasses the client's direction.
A second -2: "Decline the physician's request without discussing it with the client." That breaches 3.3.2 twice: no record of the reasons, and no conversation with the client.
A good 0: "File the physician's letter in the client record." Necessary housekeeping, not a decision.
The trap. The conscientious therapist, especially one trained in a hospital or a family health team, defaults to collaboration as an unqualified good. This standard makes the client the author of the scope. The second trap is the silent refusal. Denying access is permitted; denying it without recording the reasons and without discussing it with the client is not.
3.4 Electronic Practice
The rule. All professional standards apply identically whether practice is electronic, telephonic, in person or hybrid. Electronic practice additionally requires specific informed consent, secure technology, adequate insurance, and compliance with licensing requirements where the client is located.
What it actually requires
- 3.4.1: adhere to all professional standards whether practice is electronic, telephonic, in person, or a hybrid. There is no reduced standard for virtual work.
- 3.4.2: obtain informed consent regarding the use of electronic communication media, specific to the technology being used.
- 3.4.3: take reasonable steps to ensure the technology is "secure, confidential, and appropriate given the needs of the client." Appropriateness to the client is part of the test, not just security.
- 3.4.4: ensure professional liability insurance provides sufficient coverage for electronic services prior to treating clients. The timing is in the standard.
- 3.4.5: comply with relevant professional licensing requirements in the jurisdictions where clients are located. The client's location governs, not yours.
- 3.4.6: where the modality involves written communication, for example secure text or email based therapy, include copies of correspondence and treatment-related communication in the clinical record.
- 3.4.7: do not rely on computer-generated assessments, reports or statements without exercising your own professional judgment.
Further expectations. Do not use social media platforms to deliver therapy. Employ caution in providing advice, clinical assessment or clinical information that is accessible to the general public on websites, blogs, forums or other platforms. Clients need a clear understanding of safety and privacy protections and of any potential risks associated with the technology. Before providing services electronically, enter into an agreement with the client. And, stated flatly: "Registrants do not provide psychotherapy to anonymous clients."
Jurisdiction. Licensing requirements vary: some jurisdictions require a licence to practise psychotherapy or counselling, and some do not regulate it at all. Where a client is located elsewhere, you also need familiarity with the client's emergency contact, local emergency services, crisis lines and child welfare agencies in that jurisdiction, because your Ontario protocols will not function there.
Where you are, and where the client is. There is no requirement to live or work in Ontario to be a CRPO registrant, and registration lets you serve clients in Ontario from wherever you are, subject to the law where you are located. When the client is elsewhere, their jurisdiction's rules on titles and licensing decide. CRPO's manual gives both directions: an RP whose client moves to Prince Edward Island, where only the "counselling therapist" title is reserved, may continue as an RP; but an Ontario registrant who wants to practise psychotherapy with clients in Quebec needs a permit from the Ordre des psychologues du Québec. When a regular client's background suddenly looks different, ask where they are: a client on holiday is in another jurisdiction, and you need the location in case of an emergency. Choose a platform built for private health information; CRPO's example of what not to use is Facebook video calling.
Anonymous clients, interpreted. Call-in, drop-in and shelter settings are not fully anonymous, and CRPO accepts a consistent identifier in place of a name, with the client's informed consent to the risks of not giving a name or location (for example, that nobody can be sent in an emergency), documented under the identifier.
How it appears in a simulation. The standard vehicle is the client who travels: a university student who returns to another province or country for the summer, or a client who relocates mid-therapy and wants to continue by video.
The +2 option: "Before the next session, confirm whether the jurisdiction where the client will be located requires a licence to provide psychotherapy, and confirm that your liability insurance covers electronic services there." A second +2: "Establish and record an emergency protocol for the client's new location, including local crisis services and an emergency contact."
The plausible -2 option: "Continue the sessions by video as usual, since the therapeutic relationship and the treatment plan are unchanged." Continuity again as the reasoning that hides the breach. Another strong -2: "Offer to continue the work through direct messages on the social media platform the client already uses, which she finds easier than video." Convenient, client-led, and expressly contrary to the standard.
A -1: "Ask the client to sign the practice's general consent form again before the first video session." Something happened, and it was not informed consent to the use of electronic media.
A 0: "Test your video platform's connection quality before the session."
The trap. The conscientious therapist believes that if the therapy is unchanged, nothing else is. Electronic practice adds four requirements that in-person practice does not have: specific consent to the medium, secure and client-appropriate technology, insurance verified before treating, and licensing where the client is. The second trap is the emergency protocol. Therapists who deliver excellent virtual therapy routinely have no answer to "what would you do if this client became unsafe right now", and that question is where virtual simulations turn.
3.5 Unnecessary Treatment
The rule. Registrants provide or continue therapy only where there is a reasonable prospect of benefit, involve the client in that judgment, and raise the option of discontinuing when therapy is no longer indicated or has ceased to be effective.
What it actually requires
- 3.5.1: provide or continue therapy only when there is a reasonable prospect of benefit to the client.
- 3.5.2: involve clients in determining whether therapy offers a reasonable prospect of benefit. This is a shared judgment, not a unilateral clinical one.
- 3.5.3: when it appears that therapy is no longer indicated or has ceased to be effective, discuss the option of discontinuing.
The definitions to hold:
- Reasonable prospect of benefit: "some likelihood that the client's condition or well-being will stabilize or improve with treatment, as determined by clinical judgment." Note stabilize as well as improve. Maintenance work with a client whose condition would deteriorate without therapy meets the test.
- Indicated: "suggested by symptoms or assessment, as appropriate."
What CRPO expects you to do. Develop and periodically reassess treatment goals in collaboration with the client. Document the clinical rationale for specific assessments or interventions, and document discussions about continuation or discontinuation.
The harm. CRPO names it plainly: unnecessary therapy poses a risk of harm by raising false expectations and wasting the client's time and money.
How it appears in a simulation. A long-standing client, warm relationship, no measurable movement for a year, still attending weekly. Or a client whose presenting problem has resolved and who continues to book.
The +2 option: "Review the original goals with the client, ask her what has changed and what has not, and raise the question of whether continuing weekly sessions still serves her." The revealed response is frequently uncomfortable, for example the client saying she would find it very hard to stop.
The plausible -2 option: "Continue the weekly sessions, since the client values them and ending would be experienced as a loss." This is compassionate and it is the exact conduct 3.5.1 addresses. A second -2: "Decide that therapy is no longer indicated and inform the client that you will be ending the work in four weeks." Unilateral, and it breaches 3.5.2 even though the underlying judgment may be right.
A 0: "Note in the record that the client continues to attend weekly."
The trap. The conscientious therapist conflates being valued with being beneficial. The client's attachment to the sessions is clinical material, not a justification. The mirror trap is over-correction: deciding alone that therapy should end. The standard requires the client to be involved in determining the question, and an option that reaches the right conclusion without the client will still be weighted down.
3.6 Complaints Process
The rule. As part of the consent process, registrants tell clients that they are registered with CRPO and that CRPO sets the rules for and considers complaints about registered psychotherapists. If asked, they tell people they have the right to file a complaint, give the College's contact information, and explain that the College regulates in the public interest.
What it actually requires
- 3.6.1: as part of the consent process, inform clients that you are registered with CRPO and that CRPO is the organization that sets the rules for and considers complaints about registered psychotherapists.
- 3.6.2: if asked, inform individuals of their right to file a complaint with the College.
- 3.6.3: if asked, provide the College's contact information.
- 3.6.4: if asked, inform clients that the College's mandate is to regulate registered psychotherapists in the public interest, and that its standards and policies are on its website.
CRPO registration and role should be disclosed during consent discussions, which is where this standard connects to 3.2 and to competency 4.1a. Registrants also provide general College information to clients and the public, and explain complaint procedures when directly asked.
The College's contact information, as stated on the standard: College of Registered Psychotherapists of Ontario, 375 University Avenue, Suite 800, Toronto, ON M5G 2J5, telephone 416-479-4330 or 1-844-712-1364.
How it appears in a simulation. Usually inside an orientation or first-session section, or, more sharply, when a client is dissatisfied and says something like "somebody should know about how this was handled."
The +2 option in the dissatisfied-client scenario is counterintuitive and it is the whole teaching point: "Tell the client that she has the right to file a complaint with CRPO, give her the College's contact information, and offer to discuss her concerns with her as well." You do not defend yourself first, and you do not have to choose between repair and disclosure.
The plausible -2 option: "Apologise, explain your reasoning, and ask her to give the work another few sessions before deciding anything." Reparative, sincere, and it steers her away from the College at the moment she is asking, in effect, who should know. CRPO's commentary makes it your responsibility to direct anyone who asks to whom they can complain to the College. A second -2: "Tell the client she can raise it with your clinical supervisor or the agency's manager." Redirecting to an internal process instead of the College.
A 0: "Document the client's dissatisfaction in the clinical record." Required elsewhere, and not an answer here.
The trap. The conscientious therapist experiences telling a dissatisfied client how to complain as an invitation to be complained about, and substitutes repair. Strictly, 3.6.2 to 3.6.4 apply "if asked", but a remark like hers is a question about who should know, and once someone asks, the duty is not discretionary and does not depend on whether you think the complaint would have merit. The second trap, common in agency practice, is treating the employer's internal complaint process as a substitute for the College's. It is not, and a candidate who names only the internal route will lose the mark.
What happens after a complaint or report
Clients ask what a complaint involves, and you should be able to tell them accurately. The process is on CRPO's Filing a Complaint and Filing a Report pages and in the Health Professions Procedural Code.
Complaint or report. Anyone can complain about care from an RP, and a support person can file for a client. A complaint about a practitioner who belongs to another college, such as a social worker or a psychologist, goes to that college. A complainant is a party: the RP is given notice within 14 days (HPPC s. 25 (6)), and the complainant receives the decision and may ask for a review. A reporter, such as an employer, another professional or a member of the public raising a concern without a complaint, is not a party and generally does not learn the outcome. Neither is anonymous: the RP sees the name, though not personal contact details.
The ICRC. After an investigation and the registrant's response, a panel of the Inquiries, Complaints and Reports Committee decides. Its outcomes, from least to most serious: take no action; written advice; a remedial agreement; a specified continuing education or remediation program (SCERP); an oral caution, attended in person; undertakings, such as practice restrictions or resignation; and referral to the Discipline Committee. It can make an interim order restricting practice where the public is at immediate risk. Oral cautions, SCERPs and undertakings appear on the public register. A frivolous or vexatious complaint can be closed with no action (s. 26 (4)), and with both parties' consent the Registrar may refer a complaint to alternative dispute resolution (s. 25.1).
Review. The complainant or the registrant may ask the Health Professions Appeal and Review Board to review an ICRC decision within 30 days of being told of the right; a referral to discipline or to incapacity proceedings cannot be reviewed (s. 29 (2), (3)).
What the College cannot do. Order compensation, settle an employment dispute, make a registrant change a professional opinion or report, or require an apology. Clients who want those things need to hear it early.
Three different findings. Professional misconduct is conduct below the profession's minimum standards, with penalties from a reprimand to revocation. Incompetence is a lack of knowledge, skill or judgment in caring for clients. Incapacity is a physical or mental condition that makes it desirable, in the public interest, to restrict or end the registrant's practice, and it is not treated as misconduct. Incapacity goes to a Health Inquiry Panel, which can require a health examination, and then to the Fitness to Practise Committee, whose hearings are generally private. Discipline hearings, before CRPO's Discipline Committee (the Ontario Registered Psychotherapists Discipline Tribunal), are generally public, and its decisions can be appealed to the Divisional Court. Burnout or stress leave is not incapacity in itself: CRPO's test is whether clients are at risk of harm.
3.7 Affirming Sexual Orientation and Gender Identity
The rule. Registrants refrain from providing conversion or reparative therapy: services that seek to change or direct a person's sexual orientation or gender identity.
The operative statement, verbatim: "Members refrain from providing services such as conversion or reparative therapy, which seek to change or direct a person's sexual orientation or gender identity." The page still uses the older word "Members" rather than "Registrants". Quote it as it stands.
What it actually requires
- Obtain informed consent to work with a client on issues relating to sexual orientation or gender identity.
- Document discussions with clients about sexual orientation or gender identity, including client goals and progress.
- Ensure you have adequate training, experience and supervision to provide services relating to a person's sexual orientation or gender identity.
The legal foundation and the gap that examiners use. Ontario's Bill 77, the Affirming Sexual Orientation and Gender Identity Act, passed in June 2015, amending the Health Insurance Act and the Regulated Health Professions Act, 1991. The legislation makes it an offence to provide treatment seeking to change sexual orientation or gender identity in minors who lack capacity to consent. CRPO's standard is broader than the statute: it directs registrants to refrain from such services entirely, with no age or capacity qualification. That gap is a ready-made distractor, and it is also incomplete, because a federal law now applies as well: since 2022 the Criminal Code makes it an offence to knowingly cause another person to undergo conversion therapy, including by providing it, with no age or consent limit. So a client's age, capacity or agreement never makes conversion therapy permissible: it is prohibited by CRPO's standard at every age, and providing it is a criminal offence.
What remains permissible, verbatim. The prohibition does not restrict "services that provide acceptance, support or understanding of a person or the facilitation of a person's coping, social support or identity exploration or development nor to any services related to gender affirming activities". Exploration is not conversion. A client who is uncertain, questioning, or in conflict between their identity and their family or faith community can be worked with, at length, without breaching this standard. What is prohibited is work directed at an outcome in orientation or identity.
How it appears in a simulation. The most common vehicle is a parent, sometimes with a faith or cultural framing, who brings an adolescent and asks for help with the child's gender identity or attraction. A second vehicle is an adult client who asks you directly to help them stop being attracted to people of the same sex.
The +2 option with the adult client: "Explore with the client what is driving the request, including any pressure, distress or conflict he is carrying, without agreeing to work toward changing his orientation." The revealed response may be resistant: the client says he did not come here to talk about his family. That is expected.
The +2 option with the parent: "Meet with the young person, establish what she wants from therapy, and explain to both that you can offer support and exploration but not treatment aimed at changing her identity."
The plausible -2 options:
- "Agree to a short course of work focused on the client's goal of reducing his same-sex attraction, on the basis that the goal is the client's own and informed consent has been obtained." Client autonomy and informed consent are real principles, and neither one licences this. Consent does not make conversion therapy permissible.
- "Since the young person is sixteen and capable of consenting, decline the parent's request but agree to work with the young person toward the goal the parent has set." The statute's minor-and-incapable framing is a distractor. The standard applies regardless.
- "Refer the family to a practitioner whose faith-based program aligns with their values." Referring for a prohibited service is not a neutral act.
A clear 0: "Give the parent written information about the College's role."
The trap. The conscientious therapist reaches for client autonomy. Where a competent adult asks for something, respecting that request feels like the ethical position, and 4.2g (foster client autonomy) seems to support it. It does not, because the standard is a refrain-from obligation and consent does not unlock it. The second trap is the opposite: the therapist who becomes so cautious about this standard that they avoid working with sexual orientation or gender identity material at all. That is also an error, as the permissible-services passage makes clear. Acceptance, support, coping, social support, identity exploration, identity development and gender affirming activities are all expressly within scope.
High-yield facts
| Item | The fact |
|---|---|
| Confidentiality, definition | "The duty to keep information secret subject to legal limits" |
| Notable limits to confidentiality | Six named by CRPO (not an exhaustive list): risk of harm; mandatory reporting; legal proceedings; authorized investigations; emergency contact; regulatory and disciplinary |
| Circle of care | PHIPA allows implied consent, but CRPO strongly encourages express consent; disclose only what is relevant and necessary |
| Shared records | Provide only the requesting participant's own information unless others consent |
| Deceased clients | Confidentiality does not end at death; the estate trustee or administrator holds the right to consent |
| Privacy breach | Promptly notify the client, and, if applicable, the Information and Privacy Commissioner (the prescribed circumstances under PHIPA) |
| Avoid insecure communication unless the client consents and no practical alternative exists | |
| Consent documentation | Date consent was provided, refused, or revoked, and the method (verbal, gestural, written) |
| Signature | "A signature on a form does not necessarily constitute informed consent" |
| Physical touch | Express consent in every instance, even where the same technique was used with that client before |
| Withdrawal of consent | Comply immediately |
| Capacity | May be assumed unless reasonable grounds suggest otherwise; a client may be incapable on some issues and capable on others |
| Age of consent | There is no minimum age. Capacity, not age, governs |
| SDM requirements | Capable, at least 16 (unless a parent), available, willing (HCCA s. 20 (2)) |
| Spouse or partner as SDM | A married spouse needs no cohabitation period; a conjugal spouse qualifies by a year together, a shared child or a cohabitation agreement; a partner, a year living together in a close relationship of primary importance (HCCA s. 20 (7) to (9)) |
| SDM hierarchy | Guardian of the person; attorney for personal care; Consent and Capacity Board appointee; spouse or partner; child or parent (or a children's aid society or other person lawfully entitled to consent in a parent's place); parent with access only; sibling; other relative. The Public Guardian and Trustee decides if nobody qualifies or equal ranks disagree (s. 20 (5), (6)) |
| 3.3 exceptions | Three: client refuses consent; communication would be counter-therapeutic; communication is unnecessary |
| Denying a provider access | Record the decision and reasons and discuss it with the client |
| Unsuccessful contact attempts | Documented in the clinical record |
| Emergency sharing | Prior consent not required in an emergency if the client has not prohibited disclosure |
| Electronic practice insurance | Confirm coverage for electronic services prior to treating clients |
| Electronic practice licensing | Comply with licensing in the jurisdiction where the client is located |
| Anonymous clients | "Registrants do not provide psychotherapy to anonymous clients" |
| Social media | Not used to deliver therapy |
| Written-modality records | Copies of correspondence and treatment-related communication go in the clinical record |
| Reasonable prospect of benefit | "Some likelihood that the client's condition or well-being will stabilize or improve" |
| Discontinuation | The client is involved in determining whether therapy offers a reasonable prospect of benefit |
| Complaints | At consent, tell clients you are registered with CRPO and that it sets the rules and considers complaints; if asked, tell them they may complain, give the College's contact information, and explain it regulates in the public interest |
| College contact | 375 University Avenue, Suite 800, Toronto, ON M5G 2J5; 416-479-4330 / 1-844-712-1364 |
| Conversion therapy | Refrain entirely, at any age and whatever the consent. CRPO's standard is broader than Bill 77 (June 2015), and the Criminal Code makes providing conversion therapy an offence |
| Still permitted | Acceptance, support, understanding, coping, social support, identity exploration or development, and gender affirming activities |
Ten-point recall list
- Six notable limits to confidentiality. The list is not exhaustive, but an option that invents a ground with no basis in law is wrong.
- Assess before you disclose. Reasonable grounds are established by asking the client, not by inferring.
- Circle of care is not consent. Express consent is strongly encouraged, and only relevant and necessary information goes out.
- A signature is not consent, and consent is ongoing, decision-specific and documented with its method.
- Touch requires express consent every time, including with a client you have touched before.
- No minimum age. Capacity governs, and capacity is issue-specific.
- Three exceptions to communicating with other providers: refusal, counter-therapeutic, unnecessary. Denial is recorded and discussed.
- Electronic practice adds four requirements: consent to the medium, secure and appropriate technology, insurance confirmed before treating, and licensing where the client is.
- Being valued is not being benefited, and the decision to continue or stop is made with the client.
- Tell the dissatisfied client how to complain. And refrain from conversion therapy entirely, whatever the client's age, capacity or consent.