Mandatory Reporting — When, How, and What Comes Next

Why this matters

The Epstein files include clinical encounters with girls who were trafficked and exploited, and the records describe clinicians who saw what was in front of them and did not report. There are sworn descriptions of a doctor — referred to in the files only as "the Israeli doctor" — who coordinated abortions for minors inside the network. There are clinical notes describing victims as "emotionally immature," which is a clinician's phrasing, which means a clinician was sitting in front of a child and producing that note. Every state in this country has had mandatory reporting laws in place for the entire duration of Epstein's operation. The architecture existed. It was not used. The girls were not saved by the system that was specifically designed to save them, and that fact is not Epstein's failure — it is the medical system's.

I am writing this guide because the most consistent thing I hear from providers, when I ask them why they did not report a case I think they should have reported, is that they were not sure. They were not sure whether what they were seeing met the threshold. They were not sure whether the report would harm the patient. They were not sure whether they would face liability if they reported wrongly. None of those uncertainties is unique to the cases that got missed. All of them are present in the cases that get caught, too. Mandatory reporting is not a discretionary judgment. It is a procedural obligation that triggers at a defined threshold, and the threshold is lower than most clinicians think it is.

What the law actually says

Federal baseline. The Child Abuse Prevention and Treatment Act (CAPTA), originally enacted in 1974 and most recently reauthorized in 2010, conditions federal child-protection funding to states on the existence of state mandatory-reporting statutes that cover, at minimum, suspected child abuse and neglect. CAPTA does not itself create a federal mandatory-reporting duty for individual clinicians; that duty arises from your state statute. CAPTA does establish that all 50 states have enacted such statutes — none are optional, none have opted out — and that those statutes share certain structural features even where they diverge in detail.

What is universally true across all 50 states.

• Licensed clinical providers are mandated reporters. Physicians, nurse practitioners, physician assistants, nurses, licensed mental-health clinicians, dentists, and licensed school personnel are mandated reporters in every state. Many states extend the duty further — to social workers, school employees, child-care workers, clergy in some states, and in eighteen states to any adult who suspects abuse. If you have any clinical license touching minors, you are a mandated reporter. Check your state for the exact list.
• The threshold is "reasonable suspicion," not certainty. Across all 50 states, the statutory standard is some variant of reasonable cause to suspect or reasonable suspicion. You are not required to have proof, evidence, witness corroboration, or even a disclosure from the patient. You are required to have a suspicion that a reasonable clinician with your training would also hold given the same information. That is a low bar by design.
• Good-faith immunity exists in every state. Every state's reporting statute includes statutory immunity from civil and (typically) criminal liability for reports made in good faith. A report that turns out to be wrong, made by a clinician who genuinely believed reasonable suspicion was present, is legally protected. The immunity is structural — it does not depend on whether CPS substantiates the report. It depends on whether you reported in good faith. The fear of reporting wrongly is a real feeling. It is not a real liability.
• Failure to report is itself a violation. In all 50 states, knowing failure to report by a mandated reporter is at minimum a misdemeanor, and in many states a felony for repeat or willful violations. Several states impose civil liability for failure to report that proximately causes further harm to the child. The asymmetric legal risk runs strongly against not reporting.
• Confidentiality privileges do not override. The standard physician-patient privilege, the psychotherapist-patient privilege, and most clergy-penitent privileges do not override the mandatory reporting obligation in the abuse context. The patient's request that you not report is not a defense. The patient's parent's request that you not report is not a defense.

For trafficking specifically. The Trafficking Victims Protection Act (TVPRA, 22 U.S.C. § 7101 et seq.) and the Justice for Victims of Trafficking Act establish that any minor under 18 engaged in commercial sexual activity is, as a matter of federal law, a victim of trafficking — regardless of whether force, fraud, or coercion can be demonstrated. The minor cannot consent into trafficking. This matters for the threshold: if a minor patient discloses commercial sexual activity (paid sex, exchange of sex for housing, exchange of sex for drugs, "the bottle is on me if you come back to my hotel" exchanges), you have a mandated trafficking report, not just a mandated abuse report. The hotline pathway for trafficking-specific CSEC reports is the National Human Trafficking Hotline (1-888-373-7888), which supplements your CPS report.

The decision tree

How to actually make the report

The mechanics vary by state, but the structure is consistent. You call (or in some states, submit through a portal) your state's mandated-reporter hotline. The intake worker takes a structured set of details. You give them what you have. You do not need a complete picture. The report initiates an investigation; the investigation produces the picture.

The call typically takes ten to fifteen minutes. The intake worker will ask you to repeat or clarify; that is normal. You will be given a report number. Write it in the chart. Many states require a follow-up written report within 24 to 48 hours; the intake worker will tell you the format.

Adult disclosures of historical CSA

When an adult patient discloses CSA from childhood, the mandatory reporting calculus is different. The reporting duty in most states is triggered if (a) the alleged perpetrator continues to have access to children, or (b) the patient is asking you to report. Disclosure of historical CSA absent ongoing risk to other minors generally does not trigger mandated reporting in most states, but state law varies — verify yours.

Three things to discuss with an adult patient who discloses historical CSA:

• What she wants from this disclosure. Some patients want information about how to report; some want support and not reporting; some want neither and were simply ready to tell someone. Ask. Do not assume.
• Whether other children are currently at risk. If the perpetrator continues to have access to minors, the disclosure may trigger your mandatory report. If she does not know, you do not have a duty to investigate, but you should help her think it through.
• The statute-of-limitations landscape. Many states have reformed civil and criminal SOLs for CSA over the past five years, including the creation of "lookback windows" in some jurisdictions. The patient may have legal options she does not know exist. Refer her to CHILD USA for current state-specific SOL guidance. You are not her attorney; you are pointing her toward people who are.

The gap between obligation and practice

The most uncomfortable thing in the published literature on mandatory reporting is that the practitioners with the highest level of training are not the ones with the highest reporting rates. Pediatricians and OB/GYNs report at rates substantially below what the prevalence data would predict. The reasons providers give in survey research are consistent: fear of being wrong, fear of damaging the patient relationship, fear of triggering family disruption, lack of confidence in the CPS system's capacity to actually help, and — the one that comes up most in private conversation but rarely in surveys — the suspicion that reporting is not the right move for this child even though the statute says it is.

I want to address that last one directly because it is the one that drove the failures documented in the Epstein record. The judgment that this child is somehow an exception to the reporting framework — that this child's circumstances make reporting actively harmful, that this child needs you to hold the disclosure rather than escalate it — is a judgment clinicians are not statutorily empowered to make. The mandatory reporting framework is a constraint on clinical discretion precisely because clinicians, in aggregate, have been demonstrated to be wrong about this kind of judgment often enough that the public-policy answer was to remove it from us. The discomfort of reporting when you are not sure is the price of operating inside a framework that has correctly concluded clinicians cannot be trusted with the discretion to skip the report.

For your own care

Making a report is hard. The patient may be angry; the family may be angry; you will second-guess for weeks. The asymmetric legal risk runs strongly against not reporting, but the emotional cost runs the other direction — not reporting feels easier in the moment, and reporting feels heavy long after. That asymmetry is part of why under-reporting is the dominant failure mode. The legal architecture exists precisely to make the decision not depend on whether it feels heavy. The statute carries the weight; you make the call.

The cases I have had the hardest time recovering from are the ones where I reported and did not get to know what happened. CPS does not owe you a debrief. The patient does not owe you a follow-up. You will sometimes do the right thing and never know whether it worked, and you will have to make peace with that. That is the work. It is heavy. Find your person, do not do this alone, and remember that the call you made was not the harm — the harm was already there. You named it. The system has to do the rest.