I specifically had to sign a consent form before starting therapy, with exactly how my data would be handled and what could or could not be done with it. I think that is SOP in the field.
In the US, afaik, there is no such requirement, and publishing anonymized stories in pyschiatric journals is common practice, without any sort of consent.