Tag Archives: 42 CFR Part 2

Part III: Changes to 42 CFR Part 2 –Enforcement Like Never Before

Buckle up.  The 42 CFR Part 2 enforcement ride is about to begin.  In the 2020 CARES Act, Congress directed that the civil and criminal penalties under the Health Insurance Portability and Accountability Act (HIPAA) apply to the federal regulations protecting substance use disorder (SUD) records. The Department of Health and Human Services (HHS) issued […]

Part II: Changes to 42 CFR Part 2 – Alignment with HIPAA

As discussed in Part I of this series, Congress amended the federal law protecting the confidentiality of substance use disorder (SUD) records as part of the 2020 CARES Act and directed the Department of Health and Human Services (HHS) to revise the related regulations at 42 CFR Part 2.  Congress’s goal was to align the […]

Part I: Changes to 42 CFR Part 2 – The Single Consent for Treatment, Payment and Healthcare Operations

In the 2020 Coronavirus Aid, Relief, and Economic Security Act (CARES Act), Congress amended the federal law protecting the confidentiality of substance use disorder (SUD) records to facilitate the coordination of care in an effort to combat the opioid epidemic.  It also directed the Department of Health and Human Services (HHS) to revise the related […]

Three Important Take-Aways from the Proposed Changes to 42 CFR Part 2

On November 28, 2022, the Department of Health and Human Services (HHS) issued proposed changes to regulations implementing amendments Congress made in 2020 to the confidentiality of substance use disorder (SUD) records law.  These long-awaited (and overdue) proposals paint an important picture of things to come, especially with respect to enforcement. Below are three key […]

CARES Act Makes Long-Awaited Changes to 42 CFR Part 2’s Information Sharing Rules

The CARES Act made important changes to 42 CFR Part 2 rules by aligning use and disclosure rules more closely with HIPAA. This is an important development and will require some operational tweaks by Part 2 Providers such as obtaining initial consent and ensuring the use of a Notice of Privacy Practices.