HHS finalizes revisions to data privacy rules

Image of GettyImages-1219707257.jpg

Key Takeaways

On July 13, the Substance Abuse and Mental Health Services Administration (SAMHSA), under the U.S. Department of Health and Human Services (HHS), finalized new rules aimed at making it easier for providers to share substance use records.

Under 42 CFR Part 2, the federal regulations that govern health information sharing, when a person is identified as having a substance abuse disorder, no information, or even confirmation that the person is being treated, may be released without a written authorization by the client or guardian. The Health Insurance Portability and Accountability Act (HIPAA) privacy rule, on the other hand, permits the disclosure of health information needed for patient care and other important purposes (i.e., coordination of care, consultation between providers and referrals). 

The final rule intends to facilitate better coordination of care for substance use disorder (SUD) patients between health care providers and specialists and are an essential component of the federal response to the opioid epidemic. The revised rules would make it easier for patients to consent to the disclosure of their information to a wide range of entities and allows providers to note a patient’s treatment history directly on their electronic health record (EHR). Additionally, the rule aides in improving data sharing in the case of declared emergencies and makes allowances for states to share and access data on individuals being treated for opioid use disorder (OUD). However, the rule maintains its restrictions on the use of patient SUD records in criminal prosecutions against patients, and still requires patient consent for the disclosure of SUD treatment records outside of the outlined exceptions.

Last October, NACo submitted comments to the administration on the proposed rule change, calling for more congruence between 42 CFR Part 2 and HIPAA to enhance care coordination within the county health care safety net. While we applaud the administration’s efforts to advance the behavioral health of the nation while protecting the privacy of citizens, without additional changes to the proposed rule that fully align 42 CFR Part 2 with HIPAA, counties will not be able to fully provide coordinated, quality systems of care for people with substance abuse disorders while still protecting the patients right to treatment.  


Additional Resources:

Image of GettyImages-1219707257.jpg

Tagged In:

Attachments

Related News

Anxious, sad, young woman wearing hospital gown
Advocacy

Michelle Alyssa Go Act reintroduced in the 119th Congress, a critical step for county behavioral health systems

On September 18, the Michelle Alyssa Go Act was reintroduced in the U.S. House of Representatives. This bipartisan legislation aims to increase the number of federal Medicaid-eligible in-patient psychiatric beds from 16 to 36, providing critical support for individuals seeking treatment for mental health and substance use disorders.  

Medicines in hand
Advocacy

Congress passes SUPPORT Act reauthorization

On September 18, the U.S. Senate passed the SUPPORT for Patients and Communities Reauthorization Act of 2025 (SUPPORT Act Reauthorization) (H.R. 2483) by voice vote, following House passage earlier this year. With strong bipartisan backing in both chambers, the legislation now heads to the President’s desk for signature. 

Ambulance of emergency medical service on road
Advocacy

CMS releases Rural Health Transformation Program funding opportunity

On September 2, the Centers for Medicare & Medicaid Services (CMS) released additional details on the Rural Health Transformation (RHT) Program, overviewing program goals, requirements and timelines.