Three major federal laws and their regulations protect the privacy of mental health and substance use disorder treatment records: HIPAA, 42 CFR Part 2, and FERPA. Find all three laws and regulations compiled here in one convenient location. Other federal and state laws may also apply.