Redline of Recent Revisions to the Confidentiality of Substance Use Disorder Patient Records Regulations

February 5, 2018 Alerts and Newsletters

On January 2, 2018, the Substance Abuse and Mental Health Services Administration ("SAMHSA") published revisions to 42 C.F.R. Part 2, Confidentiality of Substance Use Disorder Patient Records ("Part 2"). SAMHSA indicated that the changes were "intended to better align the regulations with advances in the U.S. health care delivery system while retaining important protections for individuals seeking treatment for substance use disorders."

The revisions, effective as of February 2, 2018, reflect the operational realities of the current health care delivery system, such as the rise in integrated health settings. Notable highlights include:

  • The required statement regarding re-disclosure may now be either the lengthy statement from the prior version of Part 2, or a simple statement indicating that documents cannot be re-disclosed. 42 C.F.R. § 2.32.
  • A patient may now consent to disclosure to a category of persons who are "generally identified," not to only one identified person. 42 C.F.R. § 2.33.
  • When a patient consents to disclosure for payment or health care operations, a lawful holder may disclose the covered information to contractors, subcontractors, or legal representatives for payment or health care operations purposes (not for purposes of diagnosis, treatment, or referrals). However, the lawful holder must comply with certain requirements. A lawful holder making such a disclosure must have a contract in place with the contractor, subcontractor, or legal representative requiring compliance with Part 2, and must provide notice regarding re-disclosure in accordance with § 2.32, require safeguards, and require reporting of unauthorized uses, disclosures or breaches. Further, the lawful holder may only disclose the necessary information for the contractor, subcontractor, or legal representative to perform its duties under the contract, and the contractor, subcontractor, or legal representative may not re-disclose to a third party except under certain specified circumstances. 42 C.F.R. § 2.33.
  • The provision regarding audits and investigations now applies not only to Part 2 programs, but also to lawful holders. It now also allows an individual or entity that provides financial assistance to a Part 2 program or other lawful holder and that is a third-party payer covering patients in the Part 2 program, or is such individual's or entity's quality improvement organization performing a review, to review patient identifying information. Similarly, an individual or entity conducting a Medicare, Medicaid, or CHIP audit or evaluation may disclose information to its contractor, subcontractor, or legal representative for purposes of the audit or evaluation. 42 C.F.R. § 2.53.

The revisions therefore clarify how Part 2 affects Part 2 programs and other lawful holders, while ensuring the confidentiality of patient information.

Download a PDF of Verrill Dana's redline of the recent revisions to the Confidentiality Requirements of Substance Use Disorder Patient Records regulations.

Firm Highlights


Conflicts of Interest

Reviewed medical center's systems, policies and procedures for identifying, assessing, and managing investigator and institutional conflicts of interest.


Verrill Welcomes Jeffrey A. Smagula, Experienced Health Care and Life Sciences Attorney, Former Health Plan Compliance Executive

(May 12, 2021) – Verrill is pleased to welcome Jeffrey A. Smagula to the firm’s Boston office as Counsel in its nationally recognized Health Care & Life Sciences Group. Jeff Smagula brings to Verrill...


European Union GDPR—Institution

Counseled a preeminent health system and academic medical center on its compliance with the European Union General Data Protection Regulation (GDPR) in relation to its clinical and research activities, including its international research studies...


Verrill Ranked in American Bar Association’s Health Law Top 10 in the Northeast

(January 19, 2021) – Verrill was recently ranked third in the American Bar Association (ABA) Health Law Section's Eighth Annual Top 10 Recognition for the Northeast Region. This is the sixth consecutive year that...


Verrill Welcomes Health Care Attorney Alicia Siani

(February 2, 2021) – Verrill is pleased to welcome health care attorney Alicia Siani to the firm’s Boston, Massachusetts office. Siani represents clients in a wide range of regulatory issues, including HIPAA privacy matters...


HHS Confirms Providers’ Right to 340B Discount Pricing for Contract Pharmacies

As a holiday gift to providers, the U.S. Department of Health and Human Services (HHS) General Counsel recently issued a strongly worded Advisory Opinion indicating that federal law requires drug manufacturers to deliver covered...


Fraud and Abuse Investigations Handbook for the Health Care Industry, Second Edition.

Health care attorney Paul Shaw co-authored Fraud and Abuse Investigations Handbook for the Health Care Industry, Second Edition with Robert Griffith, published by the American Health Law Association (AHLA). Paul and Robert provide legal...


Multi-Site Global Research

Developed and negotiated site and coordinating center agreements in connection with a multi-site, international, National Institutes of Health (NIH)-funded study, and advised on regulatory issues related to the conduct of the study and subsequent...


Massachusetts Health Care Bill Makes Several Significant Changes

While you were celebrating the New Year, Governor Baker signed Chapter 260 of the Acts of 2020, an “Act promoting a resilient health care system that puts patients first,” the result of the Legislature’s...


The Regulatory Sprint is Over - What’s at the Finish Line Under the New Stark and AKS Final Rules?

The U.S. Department of Health and Human Services (HHS) completed its “Regulatory Sprint” by finalizing changes to regulations pertaining to two federal fraud and abuse laws. On December 2, 2020, the Centers for Medicare...

Contact Verrill at (855) 307 0700