Massage therapy ethics are the professional conduct rules that govern how a therapist treats clients, handles their information, and runs the business side of a practice. The baseline comes from the National Certification Board for Therapeutic Massage and Bodywork (NCBTMB), which publishes both a Code of Ethics and Standards of Practice, and each state licensing board adds its own requirements on top. The stakes are real: license revocation, civil penalties that reach over $73,000 per violation for privacy breaches, and criminal charges for the most serious misconduct.
Boundaries With Clients
The therapeutic relationship carries a built-in power imbalance. The client is physically vulnerable, often undressed beneath draping, and relying on the practitioner’s expertise. The NCBTMB Standards of Practice require practitioners to avoid dual or multidimensional relationships that could impair professional judgment or lead to exploitation of a client.1National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice A dual relationship means taking on a second role with the client, such as business partner, close friend, or romantic interest.
Sexual relationships with current clients are categorically prohibited. The NCBTMB sets a minimum six-month waiting period after the therapeutic relationship ends before any sexual relationship can begin, and even then only if no prior power imbalance is being exploited.2National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standard VI Some state licensing boards impose longer waiting periods, so the six-month rule is a floor rather than a ceiling. Check your state board before relying on it.
Boundary violations short of sexual misconduct still carry disciplinary consequences. State boards can impose administrative fines, required additional education, supervised practice, suspension, or permanent revocation depending on the severity and pattern of the conduct.
Informed Consent
Informed consent is not a one-time form. It is a conversation that starts before any contact and continues through every session. The NCBTMB Code of Ethics requires practitioners to obtain and record informed consent before providing treatment, and that consent may be written or verbal.3National Certification Board for Therapeutic Massage & Bodywork. Code of Ethics
At minimum, the client needs to understand what techniques you plan to use, what body areas you will address, and any potential risks or discomfort. The client can set limits on any area, decline any technique, and withdraw consent at any point without explanation. A therapist who continues after a client says stop is no longer practicing massage; that is battery. A signed intake form documents the starting point, but it does not replace verbal check-ins during the session. When the treatment plan changes meaningfully, get updated consent and note it.
Minors
Clients under 18 need written consent from a parent or legal guardian before a session. Standard practice involves the parent or guardian in completing the health history and keeps them physically present in the treatment room for younger children (generally age 15 and under). For older teens, some practitioners allow the parent to consent to the minor being treated alone, but that should be captured in explicit written authorization. Skipping parental consent exposes the therapist to both licensing complaints and civil liability.
Draping, Hygiene, and Sexual Misconduct
Everything about physical contact in a session has to reinforce that the touch is therapeutic. Draping is the clearest expression of that principle. The NCBTMB requires appropriate draping to protect the client’s physical and emotional privacy.4National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standard I Sheets, towels, or blankets cover the full body, only the area actively being worked is exposed, and sensitive areas stay covered unless there is a specific clinical need and the client has given prior written consent.
Communicate before moving to a new body area and check in on pressure and comfort. Silence is not the same as comfort. Ask.
On hygiene, the NCBTMB requires standard precautions and personal hygiene appropriate to a therapeutic setting, including clean, modest, professional clothing.4National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standard I The treatment environment must meet all legal health and safety requirements. Best practice is sanitizing the table, face cradle, and contact surfaces between clients, laundering linens after each use, and washing hands immediately before and after every session.
Soliciting or engaging in sexual activity during a massage is a criminal offense in most states, ranging from a misdemeanor to a felony depending on the jurisdiction. Consequences extend past losing a license to imprisonment and, in some jurisdictions, mandatory sex offender registration. Licensing boards have moved increasingly toward zero-tolerance enforcement, and revocation is typically permanent.
Staying Within Scope and Knowing When to Refer
Massage therapists are trained in soft tissue manipulation, and their legal authority stops there. Diagnosing medical conditions, prescribing medications, and performing spinal adjustments all fall outside scope. The NCBTMB requires practitioners to know their scope and to practice only within those limits.4National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standard I Going beyond it can trigger criminal charges for practicing medicine, chiropractic, or another licensed profession without authorization. Professional liability insurance usually covers only activity within the license or certification, so a claim arising from an out-of-scope activity may be denied, leaving the therapist personally on the hook.5American Massage Therapy Association. Massage Insurance for Professionals and Graduates
The scope limit covers psychological counseling too. Clients share emotional material during sessions, and the kind response is to listen without judgment and, when appropriate, suggest a qualified mental health professional. Giving psychological guidance is both outside scope and potentially harmful.
The NCBTMB Code of Ethics requires practitioners to acknowledge the limitations of and contraindications for massage therapy, and to refer clients to appropriate health professionals when needed.3National Certification Board for Therapeutic Massage & Bodywork. Code of Ethics A contraindication is a condition that makes massage inadvisable or dangerous, such as a deep vein thrombosis, a fever indicating active infection, or an undiagnosed lump. When one is present, decline the session and refer. Pressing on because the client insists, or because you do not want to lose the booking, is the kind of decision boards punish.
Confidentiality and HIPAA
Not every massage therapist is subject to HIPAA. The law applies to covered entities, which includes health care providers only if they transmit health information electronically in connection with covered transactions, such as electronic insurance claims.6U.S. Department of Health & Human Services. Covered Entities and Business Associates A cash-only solo practitioner who never files electronic claims may not technically qualify. Even so, HIPAA-level protection is the standard most state privacy laws effectively require.
For therapists who do qualify, HIPAA requires administrative, physical, and technical safeguards against unauthorized access to protected health information.7eCFR. 45 CFR Part 160 – General Administrative Requirements The 2026 inflation-adjusted civil penalties published in the Federal Register are:8Federal Register. Annual Civil Monetary Penalties Inflation Adjustment
- Unknowing violation: $145 to $73,011 per violation, up to $2,190,294 per calendar year for identical violations.
- Reasonable cause, not willful neglect: $1,461 to $73,011 per violation, same annual cap.
- Willful neglect, corrected within 30 days: $14,602 to $73,011 per violation.
- Willful neglect, not corrected: $73,011 to $2,190,294 per violation.
A single careless disclosure at the lowest tier now starts at $145, and intentional violations can bankrupt a small practice.
The ethical duty of confidentiality is broader than HIPAA. Everything a client shares during a session, verbal, emotional, and physical, is confidential. The main exceptions are mandatory reporting duties. Most states classify massage therapists as mandated reporters who must notify authorities when they suspect child abuse or elder neglect, and in those situations the disclosure should be limited to the minimum needed to address the immediate safety concern.
If a covered entity discovers that unsecured protected health information has been compromised, HIPAA requires notice to affected individuals without unreasonable delay and no later than 60 calendar days after discovery.9eCFR. 45 CFR 164.404 – Notification to Individuals A breach affecting 500 or more people also triggers notice to the Department of Health and Human Services and to prominent media in the affected area. A stolen unencrypted laptop or an email sent to the wrong recipient can both count. The notice must describe what happened, what information was involved, and what the individual can do to protect themselves.
Records: Retention and Disposal
Good documentation protects both sides. The NCBTMB requires accurate and truthful records, adequate progress notes for each session, and retention of client files for at least four years from the end of the therapeutic relationship.10National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standards II, III, and IV Some states require longer, so check your board. Financial records, contracts, and tax documents must be kept at least three years.
Progress notes should capture the session date, the client’s stated complaints, your observations, and the techniques applied. If a complaint or malpractice claim is filed years later, the therapist with thorough notes has a defense. The one without is guessing.
When records reach the end of their retention period, you cannot just throw them out. HIPAA requires protected health information to be rendered unreadable and indecipherable before disposal.11U.S. Department of Health & Human Services. Frequently Asked Questions About the Disposal of Protected Health Information For paper, that means shredding, burning, or pulverizing. For electronic media, acceptable methods include overwriting with software built for the purpose, degaussing, or physical destruction. Tossing intake forms into a public recycling bin is itself a HIPAA violation.
Honest Billing
Billing fraud is an active enforcement target, especially for therapists working with insurance or government programs. The VA Office of Inspector General has flagged the most common forms in massage therapy: charging for sessions that never happened and upcoding the type of service actually provided.12VA Office of Inspector General. Help Stop Medical Billing Fraud for Massage Therapy Warning signs include billing both manual therapy and massage therapy for a single session, listing dates the client never visited, and pressuring clients to accept extra services billed to their benefits.
Outside of insurance, financial ethics mean transparent pricing, honest representation of credentials and training, and careful handling of client gifts. A gift intended to influence treatment blurs the therapeutic boundary. The safest practice is to decline anything beyond nominal value and to document any situation where a client’s generosity creates an uncomfortable dynamic. Keep bookkeeping meticulous. The NCBTMB requires accurate financial records for at least three years, and sloppy records can become evidence of deeper problems during a licensing investigation.13National Certification Board for Therapeutic Massage & Bodywork. Standards of Practice – Standard IV
Continuing Education and Ethics Hours
Ethical practice is not static. Techniques evolve, research changes contraindication lists, and privacy law shifts. The NCBTMB requires 24 hours of continuing education every two years for board certification renewal, with at least 3 of those hours specifically in ethics.14National Certification Board for Therapeutic Massage & Bodywork. Board Certification Renewal State boards add their own continuing education for license renewal, generally 12 to 36 hours per cycle depending on the state. Courses cannot be reused across renewal periods or carried over.
The ethics hours are the place to catch up on emerging issues like social media boundaries, trauma-informed care, and changes to privacy law. The AMTA Code of Ethics also requires practitioners to acknowledge the inherent worth and individuality of each person and to refrain from discrimination based on age, race, ethnicity, religion, sexual orientation, gender, disability, or health status.15American Massage Therapy Association. Core Documents
Social Media and Digital Communication
Social media creates boundary problems that did not exist when most ethics codes were written. Accepting a current client’s friend request on a personal account is a modern form of dual relationship: the client sees your personal life, opinions, and social circle, and the treatment-room dynamic shifts. Keep personal and professional accounts separate, and think hard before connecting with any current client.
The same logic applies to messaging. A client who reaches you through personal channels rather than the business line creates an informal dynamic that erodes professional boundaries. Respond courteously and redirect clinical communication to a business phone, business email, or a HIPAA-compliant scheduling platform. Assume anything posted on social media, even on a private account, could be seen by clients, licensing boards, and future employers.