Disclosing, assessing, or permitting access to confidential client information without proper authorization is a violation of Center for Psychological Services policy, state laws, and federal laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).