PDF

During the COVID-19 public health emergency (PHE) the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) sought to increase access to treatment by issuing guidance on the use of remote communication technologies, including audio-only technology (e.g.,Voice over Internet Protocol (VoIP) and mobile technologies that use electronic media such as the internet, intra-and extranets, cellular, and Wi-Fi), to provide telehealth2 in compliance with HIPAA. While the PHE ended on May 11, 2023, OCR’s guidance on the use of audio-only technology for telehealth remains in effect.

Many patients receive substance use disorder (SUD) treatment and related services at integrated healthcare facilities such as community mental health centers (CMHCs) or certified community behavioral health centers (CCBHCs). Some SUD providers at CMHCs or CCBHCs may be subject to the federal law and regulations for substance use disorder treatment records under 42 CFR Part 2. This resource describes key privacy considerations for patients’ SUD treatment records that originate from a Part 2 program or provider within a CMHC.

The federal health privacy laws and regulations for SUD and MH treatment have recently changed, and more changes are forthcoming. This resource provides information about the changes and links to resources where you can learn more.

CoE-PHI resource that describes the Information Blocking Rule and explains that it does not preempt stricter privacy laws and regulations such as 42 CFR Part 2.

This framework can help answer a fundamental question: “How are we considering the impacts to individuals as we develop our state’s 988 crisis response network?”

Resource describing the key privacy protections for deceased patients’ treatment records under 42 CFR Part 2 and the way these protections interact with similar provisions in the HIPAA Privacy Rule.