Policy Details

Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)

Summary

Aligns Part 2 confidentiality requirements more closely with Health Insurance Portability and Accountability Act (HIPAA)/HITECH pursuant to the CARES Act, enabling a single patient consent for future uses/disclosures; adds anti‑discrimination protections; harmonizes breach notification and enforcement provisions.

Healthcare Implications

AI analytics and decision support using SUD data must honor Part 2 consent and redisclosure restrictions. Developers and providers should segregate sensitive data and document lawful bases when training or operating models that involve SUD records.

Impact Level

Medium

Keywords

Privacy & Data

Stakeholders

Providers & Health Systems; Patients & Public; Regulators & Government