Summary/analysis

The federal confidentiality protections for substance use disorder (SUD) treatment records under 42 CFR Part 2 generally require a patient’s written consent to share information. Providers often have questions about how to fill out a consent form that authorizes disclosures to multiple parties in a way that complies with Part 2 and the HIPAA Privacy Rule.

Archived recording of March 2023 two-part virtual learning series facilitated by the Mental Health Technology Transfer Center (MHTTC) Network and the CoE-PHI to assist mental health professionals working in schools in understanding how the federal health privacy laws apply to student mental health information

During the COVID-19 public health emergency (PHE) the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) sought to increase patient access to telehealth services by waiving penalties for violations of certain requirements under HIPAA. OCR also provided flexibility for sharing patient identifying protected heath information (PHI) for public health purposes. With the end of PHE, these measures have expired.

During the COVID-19 public health emergency (PHE) the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) sought to increase access to treatment by issuing guidance on the use of remote communication technologies, including audio-only technology (e.g.,Voice over Internet Protocol (VoIP) and mobile technologies that use electronic media such as the internet, intra-and extranets, cellular, and Wi-Fi), to provide telehealth2 in compliance with HIPAA. While the PHE ended on May 11, 2023, OCR’s guidance on the use of audio-only technology for telehealth remains in effect.

Many patients receive substance use disorder (SUD) treatment and related services at integrated healthcare facilities such as community mental health centers (CMHCs) or certified community behavioral health centers (CCBHCs). Some SUD providers at CMHCs or CCBHCs may be subject to the federal law and regulations for substance use disorder treatment records under 42 CFR Part 2. This resource describes key privacy considerations for patients’ SUD treatment records that originate from a Part 2 program or provider within a CMHC.

Archived recording of July 2023 national webinar facilitated by the CoE-PHI to update our audiences on the current state of the federal laws, regulations, and guidance related to the privacy of substance use disorder and mental health treatment information.