Many patients receive substance use disorder ("SUD") treatment and related services at integrated healthcare facilities such as community mental health centers ("CMHCs") or certified community behavioral health clinics ("CCBHCs"). Some…
Laws and regulations
Three major federal laws and their regulations protect the privacy of mental health and substance use disorder treatment records: HIPAA, 42 CFR Part 2, and FERPA. Find all three laws and regulations compiled here in one convenient location. Other federal and state laws may also apply.
Laws and regulations resources
As substance use and mental health treatment services are increasingly delivered within integrated care settings it’s essential for providers and administrators to understand how federal privacy protections—specifically 42 CFR Part…
This resource addresses three common themes of questions from the CoE-PHI's July 2025 Webinar, Part 2 Final Rule: Implementing Changes to SUD Privacy Rules.
Archived webinar outlining the requirements of the 2024 Final Rule amending 42 Part 2.
Fact sheet created by HHS summarizing the agency's proposed changes to the HIPAA Security Rule.
On February 8, 2024, HHS, through SAMHSA and OCR, announced final rule changes to 42 CFR Part 2 (“Part 2”), the federal law that protects the confidentiality of substance use disorder (SUD) treatment records. This HHS Fact Sheet provides further information about the final rule changes.