Privacy Protections for Deceased Patients

CoE-PHI Resource, Including Case Study Example

Photo of lock on patient;s file.

This resource describes the key privacy protections for deceased patients’ treatment records under 42 CFR Part 2 and the way these protections interact with similar provisions in the HIPAA Privacy Rule.

Key Points

  • Both HIPAA and Part 2 generally protect the privacy of individuals after their death to the same extent as during their life.
  • Part 2 permits disclosures of information identifying a deceased patient as seeking or receiving treatment for a substance use disorder with written consent, including with a special consent provision for deceased patients.
  • A deceased patient’s Part 2 records may be released without consent in limited circumstances.