The resources within this section are provided to promote awareness and strengthen knowledge and skills for professionals who are seeking to understand and apply federal health privacy laws and regulations on the job, and for individuals and families to understand what their privacy rights are when accessing SUD and mental health services.
Topics
Featured Resources
![Archived Webinar: 42 CFR Part 2 Final Rule – What You Need to Know](https://coephi.org/app/uploads/2024/05/phi-42-cfr-webinar-1080x720-1.png)
During this webinar, we outlined recent changes to Part 2, the federal law that protects the confidentiality of substance use disorder (SUD) treatment records, and applied learning to common scenarios through interactive case studies. During the webinar, considerations for next steps regarding implementation of recent changes to the law were also discussed.
![HHS 42 CFR Part 2 Rulemaking Fact Sheet](https://coephi.org/app/uploads/2021/07/R-60_1080x720.png)
The U.S. Department of Health and Human Services (HHS), through the Office for Civil Rights (OCR) and the Substance Abuse and Mental Health Services Administration (SAMHSA), has announced proposed changes to the Confidentiality of Substance Use Disorder (SUD) Patient Records under 42 CFR part 2 (“Part 2”). This HHS Fact Sheet describes the proposed changes.
Search all resources
Enter search criteria in the form below to search resources.
Keywords
Topic
Type
Laws
![Archived Webinar: 42 CFR Part 2 Final Rule – What You Need to Know](https://coephi.org/app/uploads/2024/05/phi-42-cfr-webinar-1080x720-1.png)
During this webinar, we outlined recent changes to Part 2, the federal law that protects the confidentiality of substance use disorder (SUD) treatment records, and applied learning to common scenarios through interactive case studies. During the webinar, considerations for next steps regarding implementation of recent changes to the law were also discussed.
![Information Sharing and Confidentiality in School-Based Health Centers](https://coephi.org/app/uploads/2024/05/phi-information-sharing-1080x720-1.png)
This resource explains what information each law protects, when information can be disclosed, how the laws are similar and different, and how they interact with state privacy laws. It was developed by the School Based Health Alliance in partnership with the National Center for Youth Law to provide guidance to school-based health centers about navigating federal privacy laws that apply to both education and healthcare entities (HIPAA and FERPA).
![Telehealth Privacy and Security Tips for Patients](https://coephi.org/app/uploads/2024/03/phi-hhs-resource-1080x720-1.png)
HHS resource outlining tips for patients to protect and secure their information during telehealth visits.
![eLearning Module: Part 2’s Medical Emergency Exception](https://coephi.org/app/uploads/2024/03/phi-emergency-exception-1080x720-1.png)
This module is designed to help professionals who provide or administer substance use disorder related services identify what constitutes a medical emergency, and describes who may receive records pursuant to the medical emergency exception under Part 2.
![HHS Fact Sheet – 42 CFR Part 2 Final Rule](https://coephi.org/app/uploads/2021/07/R-60_1080x720.png)
On February 8, 2024, HHS, through SAMHSA and OCR, announced final rule changes to 42 CFR Part 2 (“Part 2”), the federal law that protects the confidentiality of substance use disorder (SUD) treatment records. This HHS Fact Sheet provides further information about the final rule changes.
![Archived Webinar: HIPAA and 42 CFR Part 2: Medications for Opioid Use Disorder in Jails](https://coephi.org/app/uploads/2023/12/hipaa-42-webinar-1080x720-1.jpg)
Archived recording of May 2023 webinar facilitated by the CoE-PHI to explain how the federal health privacy regulations apply to medications for opioid use disorder (MOUD) in correctional entities, especially jails, prisons, and detention centers. This webinar includes common scenarios in which patient information may or may not be shareable, and assists learners in determining the proper course of action for each scenario.
![Sharing SUD Treatment Records With Multiple Providers: How to Use Multi-Party Consent Forms](https://coephi.org/app/uploads/2023/12/sharing-sud-treatment-records-with-providers-1050x390-1.jpg)
The federal confidentiality protections for substance use disorder (SUD) treatment records under 42 CFR Part 2 generally require a patient’s written consent to share information. Providers often have questions about how to fill out a consent form that authorizes disclosures to multiple parties in a way that complies with Part 2 and the HIPAA Privacy Rule.
![Virtual Learning Series: Federal Health Privacy Laws: Basics for School Professionals](https://coephi.org/app/uploads/2023/12/federal-health-privacy-laws-1050x390-1.png)
Archived recording of March 2023 two-part virtual learning series facilitated by the Mental Health Technology Transfer Center (MHTTC) Network and the CoE-PHI to assist mental health professionals working in schools in understanding how the federal health privacy laws apply to student mental health information
![End of the COVID-19 Public Health Emergency](https://coephi.org/app/uploads/2023/11/end-of-covid-public-health-emergency-1080x720-1.png)
During the COVID-19 public health emergency (PHE) the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) sought to increase patient access to telehealth services by waiving penalties for violations of certain requirements under HIPAA. OCR also provided flexibility for sharing patient identifying protected heath information (PHI) for public health purposes. With the end of PHE, these measures have expired.
![Guidance on Remote Communication Technologies for Delivering Audio-Only Telehealth](https://coephi.org/app/uploads/2023/11/guidance-on-remote-communication-for-telehealth-1080x720-1.png)
During the COVID-19 public health emergency (PHE) the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) sought to increase access to treatment by issuing guidance on the use of remote communication technologies, including audio-only technology (e.g.,Voice over Internet Protocol (VoIP) and mobile technologies that use electronic media such as the internet, intra-and extranets, cellular, and Wi-Fi), to provide telehealth2 in compliance with HIPAA. While the PHE ended on May 11, 2023, OCR’s guidance on the use of audio-only technology for telehealth remains in effect.