The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a civil enforcement program to implement and enforce federal confidentiality protections for substance use disorder patient records under 42 CFR Part 2. The initiative, tied to the Great American Recovery Initiative, brings civil penalties for non‑compliance with privacy rules, aligning Part 2 protections more closely with HIPAA standards. Covered entities must adhere to patient consent, redisclosure limits, and privacy notifications — and OCR can now impose settlements, corrective actions, or monetary penalties for violations. HHS emphasizes that enhanced enforcement will help instill confidence for people seeking SUD treatment, reduce stigma, and improve care coordination across providers while maintaining privacy safeguards for sensitive information. This marks a significant shift toward stronger accountability for SUD data privacy in the U.S. healthcare system.
Source: HHS Press Release — https://www.hhs.gov/press-room/hhs-announce-civil-enforcement-program-sud-patient-records.html