Behavioral Health Protocols for Family Offices

Last updated: 2026-03-05 · 8 sections

Why a Written Protocol Exists

Family offices maintain documented procedures for wire transfers, cybersecurity incidents, and business continuity. Behavioral health events are typically handled without any procedure at all, despite being at least as disruptive and considerably more likely. The result is improvisation under pressure, usually at night, usually by whichever staff member received the call.

A behavioral health protocol does not require the office to become clinical. It requires the office to decide, in advance, who is called, who decides, what is disclosed, and to whom. Published treatments of the family office behavioral health playbook converge on those four questions.

The Single Coordinator Role

The most consequential design decision is naming one person as coordinator before an event occurs. In the absence of a designated coordinator, information moves through whoever happens to be available, which is how confidentiality breaches originate and how clinical teams end up receiving contradictory instructions from different family members.

The coordinator is usually a senior office executive or chief of staff rather than a clinician. Responsibilities are: receiving the initial report, activating the clinical and legal contacts, controlling the flow of information, and serving as the single point of contact for outside professionals. The coordinator does not make clinical decisions and should not be asked to.

Information Tiers

Not all information carries the same sensitivity, and a protocol that treats it uniformly will either over-disclose or paralyze the response. A workable structure separates categories.

• Clinical detail. Diagnosis, medication, assessments. Shared only between treating clinicians and the designated decision maker.
• Operational detail. Location, transport logistics, appointment scheduling, insurance coordination. Shared with the coordinator and essential staff on a need to know basis.
• General status. That the person is receiving care and that privacy is requested. This is what extended family, household staff, and institutional contacts receive.
• External statement. A pre-drafted holding statement containing no clinical content, reviewed by counsel before release.

The failure mode is a well-meaning staff member volunteering clinical information to a colleague. Analyses of confidentiality in behavioral health consistently identify informal disclosure by trusted insiders, rather than external breach, as the dominant exposure.

Regulatory Exposure the Office Carries

Family offices routinely hold protected health information without recognizing that they do. Payment records for treatment, correspondence with providers, and insurance appeals all constitute health information, and offices that administer self-funded health plans may fall within HIPAA's scope directly.^[2]

Substance use disorder records receive stricter treatment under 42 CFR Part 2 than under HIPAA, including limits on redisclosure that survive the initial consent.^[1] Guidance on HIPAA obligations in a family office context addresses where those duties attach. The practical control is storage discipline: behavioral health records held in the same document system as everything else, accessible to the same staff, is the arrangement most likely to produce an avoidable disclosure.

Selecting and Vetting Outside Professionals

Offices should identify providers before a crisis, not during one. The categories that matter are a psychiatrist able to assess on short notice, an independent coordinator, counsel familiar with the applicable involuntary commitment framework, and where relevant a communications professional.

Vetting questions are the same as for any vendor: licensure, liability coverage, conflicts, and whether the professional accepts compensation from facilities they recommend. Firms that work regularly with family offices should be able to answer the conflicts question in writing.

The Crisis Sequence

A usable protocol reduces to a short sequence the coordinator can follow without interpretation.

• Confirm immediate physical safety and contact emergency services if indicated
• Notify the designated decision maker and no one else initially
• Activate the clinical contact for assessment
• Engage counsel if law enforcement, commitment, or capacity questions are in play
• Restrict account and asset access only on advice of counsel
• Apply the information tiers to all internal and external communication
• Document actions and timing contemporaneously

Where the person in crisis is an adolescent and a placement is secured, transport is usually the next operational question. The transport services overview describes what those services involve, and coordination standards for transport under private-care conditions address the discretion requirements offices typically impose.

Annual Review

Contact lists decay. Clinicians retire, counsel changes firms, children move to new schools in new jurisdictions, and state law is amended. A protocol reviewed once and filed is a protocol that will fail at the moment it is needed. Offices that treat the behavioral health protocol like the business continuity plan, reviewed annually and tested against a hypothetical, retain the benefit.