The following section outlines your state-specific privacy rights. Because Minnesota and Massachusetts share significant overlap in mental health privacy protections and general data rights, we have combined these states where laws are substantively similar. Where laws differ materially, we have separated them into distinct subsections.

​

 

Rights Shared by Minnesota and Massachusetts Residents

 

Mental Health Information — Heightened Protection

Both Minnesota and Massachusetts provide heightened protections for mental health records beyond standard HIPAA requirements. Mental health records — including therapy session notes, diagnoses, and treatment information — may not be disclosed without your specific written authorization, except in narrow legally defined circumstances (imminent danger, court order, mandatory reporting of child abuse/neglect, etc.).

 

• You have the right to access your own mental health records upon written request.

• You have the right to request correction of inaccurate information in your records.

• You have the right to know to whom your records have been disclosed.

• Your records will not be shared with employers, schools, or family members without your written authorization, except as required by law.

​

General Website Data Rights (Both States)

Regardless of where you live, all Anchoring Services website visitors have the right to:

​

• Know what personal information we collect about you through this website.

• Access personal information we hold about you by submitting a written request to info@anchoringservices.com.

• Delete personal information collected through website forms or marketing lists (not clinical records, which have mandatory retention requirements).

• Opt out of marketing emails at any time via the unsubscribe link or by contacting us.

• Opt out of targeted advertising by adjusting settings on Meta, LinkedIn, and Google platforms.

• Non-discrimination: We will not discriminate against you for exercising any privacy rights.

​​

​

​Minnesota-Specific Provisions
 

Minnesota Health Records Act — Minn. Stat. §§ 144.291–144.298

Minnesota law provides some of the strongest mental health privacy protections in the country. Under the Minnesota Health Records Act:

​

• Mental health records are defined broadly and include any information created or maintained by a health care provider that relates to the past, present, or future physical or mental health of a patient.

• You have the right to access your complete health record within 30 days of a written request (or 10 business days if records are maintained electronically).

• You may request that your records not be disclosed to specific individuals or entities (subject to legal limitations).

• We are required to maintain a log of disclosures made without your authorization.

• Psychotherapy notes receive special additional protection and require a separate, specific authorization — distinct from general medical record authorization.

​

​

Minnesota Consumer Data Privacy Act (MCDPA) — Effective July 31, 2025
Minnesota's Consumer Data Privacy Act grants residents of Minnesota the following rights regarding personal
data collected by our website:​

 

• Right to Know: You may request confirmation of whether we process your personal data and access a copy of that data.

• Right to Correct: You may request correction of inaccurate personal data.

• Right to Delete: You may request deletion of personal data we collected from you (subject to legal retention obligations).

• Right to Data Portability: You may request a portable copy of your personal data in a commonly used format.

• Right to Opt Out: You have the right to opt out of (a) targeted advertising, (b) sale of personal data, and (c) profiling that produces legal or similarly significant effects. We do not sell personal data.

• Right to Appeal: If we deny your privacy request, you may appeal by contacting us in writing within 30 days of our decision.

 

To exercise any Minnesota privacy rights, submit a written request to:

info@anchoringservices.com or Rebecca Zuehlke, LICSW, 15815 Franklin Trail SE, Prior Lake, MN 55372. We will respond within 45 days (extendable by an additional 45 days with notice).

Minnesota Mandatory Reporting

Anchoring Services clinicians are mandated reporters under Minnesota law (Minn. Stat. § 626.556 and § 626.557). We are required to report suspected maltreatment of minors and vulnerable adults to the appropriate authorities, regardless of confidentiality protections. This is a legal obligation, not a discretionary disclosure.

​

Massachusetts-Specific Provisions

Massachusetts Mental Health Confidentiality — M.G.L. c. 123, § 36; c. 112, § 135B

Massachusetts law provides robust confidentiality protections for communications between mental health professionals and clients. Under Massachusetts General Laws:

​

• Communications between a licensed mental health professional and a client are privileged and confidential.

• Records may not be disclosed without written consent, except in specifically enumerated circumstances: imminent danger to self or others (Tarasoff-type duty to warn), child abuse reporting, court orders, and certain insurance/billing requirements.

• You have the right to inspect and copy your records within a reasonable time following a written request.

• Clients receiving services through telehealth from a Massachusetts address retain all state confidentiality protections applicable to in-person services.

 

Massachusetts Data Security Regulation — 201 CMR 17.00

Massachusetts has one of the most comprehensive data security laws in the country. Under 201 CMR 17.00, Anchoring Services is required to maintain a comprehensive Written Information Security Program (WISP) to protect personal information of Massachusetts residents. Our data security practices include:

• Designation of a data security coordinator responsible for our information security program

• Regular risk assessments of our data collection, storage, and transmission practices

• Employee training on data security policies and procedures

• Disciplinary measures for violations of our data security policies

• Restrictions on access to personal information to those with a business need to know

• Encrypted transmission of personal information across public networks

• Reasonable monitoring of systems for unauthorized use

• Up-to-date firewall protection and security software on systems handling personal information

 

Definition of Personal Information (MA): Under Massachusetts law, personal information means a Massachusetts resident's first name and last name or first initial and last name combined with any one or more of the following: Social Security number, driver's license or state ID number, or financial account number (with or without a PIN). Anchoring Services does not collect Social Security numbers or financial account numbers through our website.

 

Massachusetts Telehealth Clients

Anchoring Services holds active licensure to provide telehealth services to Massachusetts residents. Rebecca Zuehlke, LICSW holds Massachusetts licensure. Telehealth services provided to Massachusetts clients are conducted in compliance with Massachusetts telehealth regulations (M.G.L. c. 175, § 47BB; 211 CMR 37.00) and HIPAA. All clinical data for Massachusetts telehealth clients is protected under both HIPAA and Massachusetts mental health confidentiality law.

 

Massachusetts Breach Notification — M.G.L. c. 93H

In the event of a security breach involving personal information of Massachusetts residents, Anchoring Services will provide written notice to affected individuals and the Massachusetts Attorney General's Office as soon as reasonably possible, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore reasonable integrity of the data system.

​

​