Can Law Enforcement or a Custody Lawyer Subpoena Your Telehealth Records?
Yes, in principle. But the process has procedural protections that are more robust than people think, and the circumstances under which a telehealth GLP-1 record actually becomes relevant evidence are narrower than the headlines suggest. Here's a mechanical walk-through.
This is general information, not legal advice. If you're facing a specific legal matter — a custody dispute, a criminal investigation, a civil lawsuit — speak with a licensed attorney in your state. The rules vary substantially by jurisdiction.
The basic principle
Medical records are confidential, but they are not absolutely privileged. Under HIPAA, Protected Health Information can be disclosed to third parties without patient authorization in specific circumstances, including:
- Court orders and court-ordered subpoenas
- Subpoenas, discovery requests, or other lawful processes — with additional safeguards
- Law enforcement requests that meet specific statutory criteria
- Public health reporting mandated by law
- Abuse and neglect reporting
These are the legal categories in which a telehealth company can, or in some cases must, disclose your records over your objection.
Types of legal process, from weakest to strongest
Attorney subpoena
An attorney in a civil lawsuit can issue a subpoena for medical records. This alone is not sufficient under HIPAA — the requesting party must also provide either your authorization, a court order, or "satisfactory assurance" that you've been notified and given an opportunity to object or that a protective order has been sought. A telehealth company that receives only a bare subpoena without these additional elements should (and in most cases does) push back or require one of them.
Court-issued subpoena
A subpoena signed by a judge or issued under court authority is a stronger instrument. It still must be either consented to, given satisfactory assurance as described above, or accompanied by a court order. The telehealth company's legal team evaluates each.
Court order
A court order from a judge, after evaluation, compels production. The telehealth company must comply unless it moves to quash and succeeds.
Grand jury or administrative subpoena
In criminal contexts, a grand jury subpoena or administrative subpoena (from, say, DEA) has different procedural rules but generally compels production more readily than civil process.
Search warrant
A search warrant is the most direct. If law enforcement has a signed warrant, they can seize records directly.
What actually happens when a subpoena arrives
At a legitimate telehealth company with a compliance program, the sequence looks like this:
- The legal department reviews the subpoena for facial validity (correct format, correct jurisdiction, proper signatures).
- The legal department evaluates HIPAA compliance — is there patient authorization, a court order, satisfactory assurance of notice, or a protective order?
- If requirements are not met, the company responds with a request for additional documentation, or moves to quash.
- If requirements are met, the company often notifies the patient before production — though this is not always required and can be delayed in criminal matters.
- Production is limited to the specific records requested, not the entire chart. Good compliance programs push back on overbroad requests.
- Production is logged in an accounting of disclosures, which you have a HIPAA right to request.
Custody and family law specifically
Family law is where telehealth records come up most often in routine litigation. In a custody dispute, an opposing party might seek medical records to argue unfitness, address mental health concerns, or establish a pattern of substance use. GLP-1 prescriptions typically don't bear on custody — they're weight-loss or diabetes medications, not controlled substances, and don't imply impaired caregiving.
That said, there are narrow scenarios:
- Psychiatric history on an intake form. If you disclosed psychiatric diagnoses or medications on a telehealth intake form, that information is in your telehealth record. Custody litigation sometimes subpoenas for psychiatric history even when the direct concern is something else.
- Eating disorder history. Some GLP-1 intake forms ask about history of eating disorders as a safety screen. If you disclosed this, it's in the record.
- Any allegation of concealment. If one party alleges the other is hiding medical information relevant to the child, courts may permit broader discovery.
In all of these scenarios, your family law attorney is the right resource. Most experienced family lawyers know how to limit discovery, seek protective orders, and argue against fishing expeditions.
Criminal matters
In criminal cases involving controlled substances, telehealth records for a non-controlled GLP-1 are usually not relevant. GLP-1s are not scheduled substances. They don't show up on standard drug panels. They don't indicate criminal activity.
The exception is when a GLP-1 is part of a broader pattern — for example, if someone is accused of obtaining a prescription by fraud, or if a telehealth platform itself is under investigation. In those cases, subpoenas to the platform can sweep in all patients of interest, and individual records become evidence.
What you can do preemptively
- Be honest on intake forms, but don't overshare. Answer the clinical questions truthfully — that's a safety matter. But you don't need to volunteer information beyond what's asked.
- Keep your own copies of medical records. Under HIPAA, you have a right of access. Request and retain copies of your GLP-1 records, lab results, and communications. If litigation looms, you'll want your own version before anything else.
- Understand your state's medical privilege rules. Most states recognize a physician-patient privilege, but its scope varies — especially in custody cases, where many states waive the privilege when a party puts health at issue.
- If you anticipate litigation, get a lawyer early. Not after the subpoena lands. Before. An attorney can negotiate with the other side's counsel, seek protective orders, and prepare you for what's likely to be discoverable.
- Don't alter or destroy records. Spoliation — destruction of evidence when litigation is reasonably anticipated — is a serious legal issue that can produce sanctions worse than whatever the original record said.
The broader point
The notion that telehealth records are some kind of free-floating target for subpoenas isn't accurate. HIPAA, state medical privilege laws, and procedural protections impose real friction on the process. Most subpoenas for medical records are rejected, narrowed, or negotiated before production. The ones that proceed typically involve genuinely relevant medical history in cases where the court has evaluated the need.
That doesn't mean it can't happen, and it doesn't mean you should be casual about what you write on an intake form. But it does mean: choose a telehealth provider with a real legal team and a documented compliance process, understand your own rights of access and objection, and get your own attorney early if you think your records might ever be compelled. The system isn't perfect, but it works better than the folklore suggests.