Client rights policy template: Free PDF download

Key Takeaways

Client rights define patient entitlements to confidentiality, informed consent, respectful treatment, and the ability to refuse or withdraw from services.

Every client rights policy must include informed consent documentation, grievance procedures, privacy protections, and clear communication about client responsibilities.

HIPAA, state regulations, and accreditation standards (Joint Commission, CARF) require practices to provide written client rights at the start of care.

Pabau’s digital forms and client portal features help practices document client rights acknowledgment, store consent securely, and maintain audit trails for compliance.

Download your free client rights policy template

Client rights are the fundamental protections and entitlements that patients and clients must understand before receiving healthcare, mental health, therapy, or wellness services. A written client rights policy is not optional — it is a legal requirement under HIPAA, state regulations, and accreditation standards.

This guide explains what belongs in a comprehensive client rights document and how to implement one in your practice. Whether you operate a medical spa, mental health practice, therapy practice, or primary care office, this template and checklist will ensure you meet regulatory obligations and communicate clearly with every client from day one.

What is a client rights policy?

A client rights policy is a written document that outlines the legal protections, entitlements, and responsibilities of patients and clients receiving services. It serves three purposes:

• Transparency: clients understand their protections before consenting to treatment.
• Compliance: the document demonstrates adherence to HIPAA, state laws, and accreditation standards.
• Risk management: clear written policies reduce liability by establishing shared expectations.

Under CMS Conditions of Participation and state licensing regulations, practices must provide this document to every client in writing at the start of services. The document is often called a “bill of rights” or “patient rights notice.”

How to create a client rights policy for your practice

Building a client rights policy is a straightforward process. Follow these five operational steps to draft, review, and implement a compliant document:

1. Define your practice’s core client rights: Start with the template sections below and adapt them to your clinical context. A mental health practice will emphasize confidentiality and the right to refuse psychiatric medication, while a medical spa will emphasize informed consent for cosmetic procedures and the right to decline treatments.
2. Add your practice’s specific policies: Include your confidentiality practices, complaint procedures, how clients can access their own records, payment responsibilities, and cancellation policies. These details make the policy specific to your practice, not generic.
3. Review for legal and regulatory compliance: Have your compliance officer or legal counsel review the document against your state’s licensing regulations and HIPAA requirements. This ensures you meet jurisdiction-specific obligations.
4. Obtain written acknowledgment: Require every client to sign or digitally acknowledge the client rights policy before the first session. Use digital forms to capture and securely store acknowledgment signatures — this creates an audit trail.
5. Review and update annually: Regulations and your practice’s policies change. Review your client rights policy every 12 months and update it to reflect new laws, accreditation requirements, or internal policy changes.

Using a downloadable template accelerates this process by providing the foundational language that meets regulatory standards. You customize it for your practice’s specifics rather than starting from scratch.

What to include in your client rights template

A compliant client rights document must include these core sections:

• Confidentiality and privacy rights: Explain HIPAA protections, exceptions to confidentiality (abuse/neglect reporting, imminent danger), and how clients can access their own medical forms and records.
• Informed consent: Describe what informed consent means, what treatment options are available, and the potential risks and benefits of each option. Clients must understand treatment before accepting it.
• Right to refuse or withdraw: State clearly that clients can refuse recommended treatment or withdraw from services at any time without penalty.
• Right to respectful treatment: Commit to non-discrimination, dignity, and freedom from abuse or exploitation.
• Grievance and complaint procedures: Outline step-by-step how clients can file a formal complaint, who they contact, expected timelines for response, and how you’ll investigate and resolve the grievance.
• Client responsibilities: Specify expectations: keeping appointments, honesty in disclosing medical history, following treatment recommendations, and paying fees as agreed.
• Privacy practices notice: Summarize your practice’s Notice of Privacy Practices under HIPAA, or reference where the full notice is available.

The core rights every client should have

All clients receiving healthcare, mental health, therapy, or wellness services must have these fundamental rights, regardless of practice type or service:

• Confidentiality: All information shared is kept private and only disclosed with written consent, except in cases of legal obligation (abuse/neglect reporting, imminent danger to self or others).
• Informed consent: Clients must understand the nature, risks, benefits, and alternatives of any proposed treatment before agreeing to it.
• Right to refuse or withdraw: Clients can decline treatment, request a different provider, or stop services at any time without retaliation or loss of care.
• Access to records: Clients have the right to inspect and obtain copies of their own treatment records within a reasonable timeframe (typically 30 days under HIPAA), usually by submitting a records release form.
• Respectful, non-discriminatory care: Clients cannot be denied care, charged differently, or treated disrespectfully based on race, gender, sexual orientation, disability, religion, or other protected characteristics.
• Right to file a grievance: Clients can formally complain about care, treatment, or policy violations without retaliation, and the practice must investigate within a specific timeframe.

Responsibilities of clients

Client rights are balanced by client responsibilities. A comprehensive policy explains what is expected of clients to maintain a professional therapeutic and clinical relationship:

• Keep appointments and provide timely notice of cancellations: Respect the practice’s time by attending scheduled sessions or canceling with 24 hours notice.
• Provide accurate health information: Disclose medical history, current medications, allergies, and mental health background honestly on your client information form to enable safe, appropriate care.
• Follow treatment recommendations: While clients have the right to refuse, they should engage with clinician recommendations and communicate if treatment is not working.
• Pay fees as agreed: Clients are responsible for paying for services according to the fee schedule and payment terms.
• Respect practice policies: Abide by confidentiality rules, cancellation policies, and the practice’s code of conduct (e.g., no threats or harassment toward staff).

Clarifying responsibilities helps establish mutual accountability and reduces misunderstandings about what the clinical relationship requires.

Grievance and complaint procedures

Every client rights policy must include a clear grievance process so clients know how to raise concerns without fear of retaliation. A formal grievance procedure strengthens trust and gives you the opportunity to resolve problems before they escalate into regulatory complaints or lawsuits.

Your template should include:

1. Informal resolution: Encourage clients to first speak with their clinician or practice manager to address concerns directly and informally.
2. Formal written complaint: If informal resolution does not work, clients can file a written complaint to a designated staff member (often the practice manager or medical director).
3. Investigation timeline: Specify how quickly the practice will investigate (e.g., within 10 business days) and how the client will be notified of findings.
4. Appeal process: Allow clients to appeal if they disagree with the investigation outcome, escalating to the owner or board if necessary.
5. External escalation: Reference the client’s right to file a complaint with SAMHSA (for mental health/substance use), their state licensing board, or consumer protection agencies if internal resolution fails.

Having a documented grievance procedure demonstrates regulatory compliance and signals to clients that you take concerns seriously.

Confidentiality, privacy, and informed consent

HIPAA confidentiality rules require practices to protect patient health information. Your client rights policy must spell out what confidentiality means for clients: all information they share stays private except in mandatory reporting situations (abuse/neglect, imminent danger, or court order).

Informed consent is the process of ensuring clients understand what treatment involves before agreeing to it. Your policy should describe how you obtain informed consent (conversation, written form, or both), what information you provide (benefits, risks, alternatives), and how you document that consent was given. This is especially critical for:

• Mental health or therapy services: Explain the nature of therapy, confidentiality limits, fee structure, and the clinician’s qualifications.
• Cosmetic or medical procedures: Describe the procedure, recovery timeline, potential side effects, and alternatives to the recommended treatment.
• Medication or substance use treatment: Document that clients understand medication risks, side effects, and non-pharmaceutical alternatives.
• Photography or before/after documentation: Obtain written consent if the practice takes photos of clients for treatment records or before/after portfolio purposes.

Use client portals to share treatment plans and consent documents digitally, ensuring clients can review information before their appointment and ask questions.

Many practices still rely on paper consent forms that get misfiled, left blank, or stuffed in a drawer between visits. Moving that acknowledgment step online keeps a complete, timestamped record without adding front-desk work.

Simplify client rights compliance with Pabau

Use Pabau's digital forms to collect client acknowledgment of rights, store consents securely, and maintain audit trails for regulatory inspections.

Book a demo

How Pabau helps you manage client rights documentation

Implementing a client rights policy is only half the battle. You also need documentation practices that hold up to scrutiny, the same standard applied to nursing documentation, so you can prove compliance during audits or inspections.

Practice management software like Pabau lets you build a paperless consent workflow: clients sign the client rights acknowledgment form on a tablet in the waiting room or receive it via email before their first appointment. The signed form lands in their secure record with an automatic timestamp and audit trail.

This approach ensures every client has acknowledged their rights, eliminates lost or illegible paper forms, and gives you searchable proof of compliance for state licensing boards or CMS audits. Capturing client signatures digitally also speeds up check-in and reduces friction for new clients.

Putting your client rights policy into practice

A written client rights policy is both a legal requirement and a trust-builder that strengthens client relationships and day-to-day operations. The template above covers all the core sections regulatory bodies expect: confidentiality, informed consent, right to refuse treatment, grievance procedures, and client responsibilities.

Implementing this policy takes effort: draft the document, have it reviewed for legal compliance, collect written acknowledgment from every client, and update it annually. That investment pays for itself by reducing liability, demonstrating professionalism, and helping clients understand their protections before they walk through your door.

Book a Pabau demo to see how digital forms and secure client records can streamline your acknowledgment process and keep your compliance documentation organized.

Continue your research

How do you structure informed consent conversations? Patient portal software lets clients review treatment information and consent forms before their appointment, ensuring they arrive informed and ready to discuss.

Need a HIPAA compliance checklist? HIPAA compliance basics covers the documentation and safeguards required to protect client confidentiality.

How do you prove compliance during a state inspection? Patient management software with audit trails and secure record storage gives you searchable proof of client acknowledgments and policy compliance.

Frequently asked questions about client rights