© Copyright 2025 MarriageFamilyTherapist.org
A state-aware breakdown of business setup, HIPAA, insurance, and ethics for new LMFT practice owners.
Roughly one third of the U.S. population, more than 122 million people, now lives in a designated mental health shortage area1, and private practice is where many licensed marriage and family therapists feel best positioned to meet that demand on their own terms. The appeal is obvious: more scheduling control, higher earning ceilings, and the chance to build a caseload around couples and family systems rather than an agency's intake list.
What's less obvious is how much legal and ethical scaffolding sits underneath that independence. Business structure, licensing board rules, HIPAA obligations, informed consent, dual-relationship boundaries, and multistate teletherapy each carry separate requirements, and none of them are optional once you open your own doors.
Requirements also shift sharply from one state board to the next, so nothing here substitutes for confirming current rules directly with your own licensing board before you sign a lease.
Fifty separate state licensing boards, plus the AAMFT Code of Ethics, govern the same LMFT who sees couples in a single MFT private practice office, and confusing the two rulebooks is one of the fastest ways to land in front of a disciplinary panel.
Legal standards come from state statutes, licensing board regulations, and case law , your LMFT private practice state licensing requirements. They are enforceable through civil penalties, license suspension, or criminal charges, and a state licensing board can act on them regardless of what any professional association says. Ethical standards, by contrast, come from voluntary professional codes such as the AAMFT Code of Ethics. They describe the conduct expected of a competent, trustworthy clinician, and membership organizations enforce them through censure, suspension, or expulsion rather than through the courts.
An act can satisfy one standard while violating the other. Billing a no-show fee that state law and your client's insurance contract both permit is legally sound, but charging it without disclosing the policy in writing beforehand can still be an ethics violation around informed consent and fair dealing. Flip the example: accepting a client's invitation to a family wedding may not break any state statute, since no specific law bans it, yet it is a textbook ethical breach of the boundaries around dual relationships that the AAMFT Code addresses directly.
Because the two systems run on separate tracks, the fallout differs too. A licensing board violation can mean formal discipline, fines, mandated supervision, or loss of the license itself. An ethics violation through a professional association typically brings censure or membership revocation, which carries reputational cost even without legal penalty. Civil lawsuits from clients can follow either type of failure, especially in cases involving negligence or breach of confidentiality.
Because legal exposure and ethical exposure do not always overlap, treat the two as related but separate tracks: what state law requires you to do, and what your professional code expects of you even when the law is silent.
The pull is understandable: you have finished your master's degree, you are accruing supervised clinical hours, and every month spent as someone else's employee feels like a month of income left on the table. The legal reality, in most states, is that associate-level licensees (called associates, interns, or registered marriage and family therapists depending on where you practice) cannot independently own and operate a private practice until they are fully licensed.
The distinction that matters is who holds clinical and legal responsibility for the client. As a pre-licensed associate, you deliver therapy under the authority of a qualified supervisor who reviews your cases, signs off on your hours, and carries accountability for the care provided. You are practicing on someone else's license.
Ownership is a different relationship entirely. An owner contracts directly with clients, bills insurers under their own credentials, holds the professional liability policy, controls the clinical record, and answers to the licensing board alone. Most boards treat that bundle of responsibilities as something only an independently licensed clinician can carry.
A handful of states permit an associate to form a business entity, rent office space, or hold an employer identification number without permitting unsupervised clinical work. In those jurisdictions you might legally own a company while still being barred from seeing clients outside a supervised arrangement, which creates real confusion about billing, advertising, and who may be listed as the treating provider.
Be cautious here. Owning an entity does not expand your scope of practice. Advertising yourself as a practice owner while pre-licensed can trigger complaints about misrepresentation, and improper fee-splitting arrangements between an associate-owned entity and a supervisor are a common source of board discipline.
Rules on associate ownership, supervisor-of-record requirements, and professional corporation shareholder eligibility vary significantly from state to state. Some require that every shareholder in a professional entity hold an active clinical license. Review the state-by-state breakdown that follows, then confirm directly with your licensing board before you register a business name or sign a lease.
Does every state let an LMFT associate own a private practice, or does ownership require a fully independent LMFT license? The honest answer is that it varies by state, and the rules are more fragmented than most starting therapists expect.
Texas has published some of the clearest guidance available right now. The Texas Behavioral Health Executive Council, which licenses individuals rather than business entities, does not restrict what entity form a therapist uses to structure a practice, and it does not require prior authorization before forming one.1 Notably, Texas allows some supervised licensees, including MFT Associates, to own and operate their own practice, provided the clinical work stays properly supervised even while the associate handles the business side independently. An associate can practice in private practice, an agency, or a hospital setting, but never without an active supervisory relationship.1
Texas associates working toward independent licensure typically complete 3,000 hours of supervised experience over about two years, including 1,500 direct clinical service hours, with at least 500 of those hours specifically in couples and family work.2 Supervision itself involves 200 hours of supervisory sessions, 100 of which must be individual, an associate may have no more than two supervisors without special approval2, and the supervisory agreement must be filed within 30 days of starting the arrangement.3 Associates also face restrictions on how they represent themselves to clients and the public, since accurate disclosure of supervised status is treated as a compliance issue, not a formality.4
Colorado offers a useful contrast: state law grants a fully licensed LMFT the right to independent private practice and to supervise other MFTs, but this applies to licensed practitioners, not associates still accumulating hours, so it does not tell us how Colorado treats associate-owned practices or entity requirements.
Beyond these two states, current, verifiable statutory detail on associate ownership, supervision structure, and entity mandates in states like Florida, New York, Illinois, Washington, and Georgia is not reliably available at this time. Rules in this area also change as boards update regulations, so what applies in one state, or even to one license type within a state, may not transfer to another.
Before signing a lease or filing paperwork, confirm current LMFT license requirements by state directly with your state's licensing board. Ask specifically whether associates can own a practice, whether a professional corporation or PLLC is mandated, and what supervision documentation the board expects, since assumptions borrowed from another state's rules can create real licensing exposure.
No single structure is right for every LMFT practice, and the rules shift at the state line. Start with the U.S. Small Business Administration's business structure comparison and the IRS guidance on business income and entity classification (including Publication 3402 on LLC taxation), then confirm what your state actually permits by checking your Secretary of State's filing portal and your MFT licensing board. Work the decision in order: identify your board's ownership restrictions, assess your personal liability risk, estimate your tax burden, review sample formation documents and operating agreements through professional associations or your graduate program's career center, and then pay a CPA or business attorney for a one-time review before you file.
| Business structure | Personal liability exposure | Federal tax treatment | Ownership rules | Verify before you file |
|---|---|---|---|---|
| Sole proprietorship | No separate business entity is created. Business assets and liabilities are not separate from your personal assets and liabilities, and you can be held personally liable for business debts and obligations. | Business income is reported on your personal tax return. The SBA comparison lists both self-employment tax and personal income tax. | One person. | Confirm whether your state requires a fictitious business name filing and whether your board allows practice under your license alone. Use the Bureau of Labor Statistics Occupational Outlook Handbook for wage and employment trend context. |
| Limited liability company (LLC) | Owners are generally not personally liable in most instances. Personal assets such as a vehicle, house, and savings accounts are generally not at risk if the LLC faces bankruptcy or lawsuits. | A single-member LLC is treated as a sole proprietorship for federal income tax purposes unless the owner elects corporate treatment. Depending on elections and member count, an LLC may be treated as a corporation, partnership, or disregarded entity. | One or more people. | Some states restrict licensed professionals from using a standard LLC or require a professional LLC (PLLC) instead. Check your Secretary of State and your MFT board before submitting formation documents. |
| Professional corporation (PC) | Federal small-business sources do not publish a directly comparable liability summary for professional corporations; protections are defined by state corporate and licensing statutes. | Not addressed in the federal comparison materials. Ask a CPA how your state's professional corporation rules interact with corporate tax elections. | Shareholder eligibility is set by state law and is typically tied to holding an active professional license in the field. | Ask your state MFT board which entity types licensees may own, and ask professional associations such as AAMFT, plus established practice owners in your state, which structure is standard locally. |
The tension here isn't whether privacy law applies to you, it's figuring out when it kicks in and how far your responsibility stretches once it does. Many solo LMFT practices assume they're too small to fall under HIPAA, but the trigger isn't size, it's whether you conduct covered electronic transactions like submitting claims electronically.1 Once that happens, you're a covered entity, and the Privacy and Security Rules apply to HIPAA compliant teletherapy platforms for MFTs, EHRs, and billing systems you touch.
If you submit electronic claims, you must provide clients a Notice of Privacy Practices2 and apply the minimum necessary standard3 to any disclosure of protected health information. Psychotherapy notes get an extra layer of protection: they generally require specific client authorization to release, separate from your general treatment records, with narrow exceptions such as disclosures to coroners, medical examiners, or HHS itself.4
Any telehealth platform, HIPAA compliant therapy software vendor, or cloud storage service that creates, receives, or transmits client data on your behalf is a business associate, and you need a signed agreement with each one before you start using it, even if the vendor markets itself as healthcare-specific or advertises encryption.6 A polished interface doesn't substitute for a contract. Encryption itself is technically an addressable safeguard rather than an absolute mandate, meaning you must assess whether it's reasonable for your setup and, if you skip it, document an equivalent alternative.5 In practice, encrypting stored records and any client communication in transit is the safer default given how often enforcement actions cite missing risk analyses and absent agreements as root causes.7
Your file for each client should document treatment plans, dated progress notes, signed consent forms, and any releases of information. Retention timelines vary by state licensing board rather than by a single federal rule, so check your board's requirement directly rather than assuming a national standard.
If you never submit electronic claims, insurance panels, or clearinghouse transactions, you may not trip the covered-entity trigger at all, which means a National Provider Identifier may not be strictly necessary for HIPAA purposes. That said, plenty of cash-pay practitioners still obtain one for referral networks, superbills, or future flexibility, so weigh convenience against the paperwork before deciding either way.
Before services begin, Section 1.2 of the AAMFT Code of Ethics calls for informed consent that is documented and written in reasonably understandable language.1 Every LMFT form should cover fees and billing, cancellation and no-show policy, the limits of confidentiality, telehealth-specific risks such as platform security and technology failures, emergency protocols and after-hours contact for therapist safety in private practice, and the therapist's duty to report when legally required. Consent is not a one-time signature; it is revisited as often as necessary during treatment.
In individual therapy, the client is one person. In couples and family therapy, the "client" is the relational system, and confidentiality cannot default to individual rules. Section 2.3 of the AAMFT Code requires therapists to clarify the confidentiality policy and its limits in advance because information shared by one member may need to be addressed in the conjoint session.1 The therapist should state who receives what information, how secrets will be handled, and what happens with records if one member requests them later.
Some LMFTs use a "no-secrets" policy: anything disclosed privately by one partner or family member may be brought into the joint session, because selective secrets can undermine treatment. Others preserve limited individual confidentiality and agree not to share certain disclosures unless safety requires it. The choice is not inherently wrong, but it must be disclosed before therapy starts. A no-secrets policy that is not explained upfront can disrupt therapist boundaries in couples counseling, create a dual relationship or loyalty conflict, and may violate the informed consent standard in Section 1.2.1 Sections 2.1 and 2.2 reinforce that confidences are not disclosed except by written authorization, waiver, or law, so LMFTs should document the chosen policy and secure written authorization when sharing across family members is necessary.1
Section 1.3 warns against dual relationships that could impair judgment or exploit clients, and in couples and family work the therapist is ethically holding multiple therapeutic relationships at once.1 A clearly written multi-client consent form, signed by all participating members, reduces the risk of misunderstanding. When a client wants to share information with an outside party, a written authorization under Section 2.2 protects the therapist and the family.1 The current controlling version is the revised AAMFT Code of Ethics effective January 1, 2026,2 so check practice forms against the 2026 edition.3
A single unlicensed clinician facing a board complaint can rack up tens of thousands of dollars in legal defense costs before a case even reaches a hearing, which is why standalone licensure board defense coverage of $35,000 shows up as a named benefit in the AAMFT Professional Liability Program administered through CPH & Associates.1 That figure alone illustrates why generic renter's or homeowner's coverage never substitutes for a policy built for clinical practice.
Occurrence-based policies, like the CPH/AAMFT program, cover incidents that happen during the policy period regardless of when a claim is filed later, which matters because a client can allege harm years after treatment ends.1 Claims-made policies only cover incidents if the policy is still active (or a costly tail endorsement is purchased) when the claim surfaces. For a practice owner planning for MFT private practice growth over decades, occurrence coverage generally removes the risk of a coverage gap after a policy lapses or a carrier switch.
Most LMFT-focused programs bundle several protections rather than selling bare-bones malpractice alone:
Pricing varies by claims history, location, and services offered, but published starting points give a workable range: some counselor-focused programs advertise premiums beginning near $150 a year, while other industry estimates put average monthly costs closer to $562, or roughly $670 annually. Broader guides peg a realistic yearly range for many solo LMFT owners between $100 and $500-plus once add-ons are included.3
Once an owner supervises associates or employs other clinicians, exposure expands beyond personal conduct to vicarious liability for the whole team's clinical decisions. That typically means higher limits, separate or shared policies for each supervisee, and a fresh look at whether the general liability and cyber limits still fit a larger, busier practice.1
Cross-state telehealth remains one of the least settled areas of private practice for LMFTs in 2026, with the client's physical location still controlling licensure. The core rule has not changed: you generally must hold a license or other legal authorization in the state where the client is sitting during the session, not just the state where your office or home license is based.
Licensure in one state does not create a national telehealth privilege or automatic LMFT licensure portability. Before offering online family therapy to a client across state lines, verify both your home state's permission to deliver telehealth outside its borders and the client-state's LMFT rules. Client-state requirements can include full licensure, registration, temporary practice authorization, or a compact privilege, along with consent, supervision, emergency, and recordkeeping duties.
A client on vacation or temporarily working in another state does not automatically remain treatable. The controlling question is usually the client's physical location at the moment of session. Some states recognize limited continuity-of-care exceptions for an established client temporarily in the state, but they vary in duration, eligibility, treatment type, and required notice. California, for example, permits a narrow exception only when an out-of-state MFT holds the highest-level independent clinical license in their home state, the client is in California, and the relationship was already ongoing when the client became located there. That authorization is capped at 30 consecutive days per calendar year, and California has no compact participation.
There is no operational Marriage and Family Therapy Compact in 2026, and no established participating states for MFTs. The Counseling Compact is moving forward for professional counselors. As of September 24, 2026, nine states are live for that compact: Arizona, Arkansas, Georgia, Indiana, Louisiana, Minnesota, Ohio, Tennessee, and Wyoming. Thirty-nine jurisdictions have enacted it, with rollout still in progress in 30. It does not cover LMFTs, and a counselor privilege is not a substitute for LMFT authorization.
Treating a client in a state where you are not licensed or otherwise authorized can lead to board discipline in the client's state, a complaint against your home-state license, and denial of malpractice coverage or payer reimbursement. Insurers often exclude unauthorized practice from coverage. Verify the client-state rule before the first session, and document the basis for any exception you rely on.
A sudden hospitalization is not the same as a planned retirement, but from a client's perspective, both create the same problem: who has their file, and who do they call. Solo LMFTs often build a marketing plan, a fee schedule, and a referral network, then never write down what happens to the practice if they cannot run it anymore. That gap is a licensing and ethical liability, not just an inconvenience.
Retention rules vary by state, so treat any single number as a starting point rather than a nationwide standard. Many boards land somewhere in the range of five to seven years after a client's last visit or the end of treatment, and several extend that window further for minors, often measured from the point the client turns eighteen rather than from the last session. Washington, for example, has been reported to require five years following a client's last visit, while California and Oklahoma have been described as requiring seven years from termination, with California extending minors' records to seven years past age eighteen. Because requirements shift and boards update rules, confirm the current figure with your specific state board rather than relying on general guidance.
A professional will names a trusted colleague, sometimes called a records custodian, who agrees in writing to step in if you die, become incapacitated, or close your practice unexpectedly. That person's job is to notify current clients, arrange referrals, and either transfer or securely destroy records once the retention period has passed. Practice-closure guidance generally recommends starting this planning at least twelve months before an intended closing date, and giving clients no less than ninety days' written notice with the custodian's contact information.
Even a planned closure does not allow records to simply be shredded. Files must stay secured for their full retention period, and any transfer or destruction has to follow the same confidentiality and security standards that applied while you were practicing. A named custodian who understands these obligations, paired with clear written instructions, is what keeps an unexpected life event from becoming a client's abandoned file and a licensing board complaint.
