HHS publishes proposed rule to align substance use disorder patient records with HIPAA privacy rules

-
BlogOn December 2, the U.S. Department of Health and Human Services Office for Civil Rights and Substance Abuse and Mental Health Services Administration (SAMHSA) published a proposed rule to align 42 CFR Part 2, which protects the confidentiality of Substance Use Disorder patient records with the Health Insurance Portability and Accountability Act (HIPAA) privacy rules.HHS publishes proposed rule to align substance use disorder patient records with HIPAA privacy rules
-
Blog
HHS publishes proposed rule to align substance use disorder patient records with HIPAA privacy rules
On December 2, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and Substance Abuse and Mental Health Services Administration (SAMHSA) published a proposed rule to align 42 CFR Part 2, which protects the confidentiality of Substance Use Disorder (SUD) patient records with the Health Insurance Portability and Accountability Act (HIPAA) privacy rules. This proposed rule implements provisions in the Protecting Jessica Grubb’s Legacy Act (Legacy Act), which was passed through Section 3221 of the Coronavirus Aid, Relief and Economic Security Act (CARES Act) (P.L. 116-136) in 2020.
Under the CARES Act, the Legacy Act changes existing privacy regulations under 42 CFR Part 2 to stop the prescription of opioids to individuals in recovery and prevent other adverse events related to limitations on the use and disclosure of patient SUD treatment records that impede comprehensive and coordinated medical care. The proposed rule would simplify the process in which patients give consent to providers to release SUD treatment information and would allow healthcare providers more appropriate access to patient information that is essential for providing effective and safe care, while still protecting patient privacy.
Key provisions within the proposed rule include:
- Aligning the rules for 42 CFR Part 2 covered information consent with HIPAA by only requiring patients to provide consent once for an SUD record to be disclosed for treatment, payment and operations purposes and other purposes permitted under HIPAA
- Outlining that consent can be revoked at any time by a patient for the sharing of their 42 CFR Part 2 covered information
- Requiring 42 CFR Part 2 programs to follow HIPAA privacy and security breach notification requirements
- Implementing updated Notice of Privacy Practices requirements to account for the new 42 CFR Part 2 covered information consent, disclosure and revocation requirements
- Detailing how and when law enforcement can access a patient’s SUD 42 CFR Part 2 records and how those records are to be handled and proceedings continue if a patient’s records are inadvertently accessed
- Clarifying when and how a patient’s SUD data can be shared in a de-identified format
- Information on how 42 CFR Part 2 SUD data can be shared for public health activities
The proposed rule would help county health systems better address the nation’s behavioral health crisis as it will ensure that all members of a patient’s treatment team have access to a person’s history of substance use disorder, which will help improve care coordination and reduce stigma, while protecting individuals in treatment from discrimination.
The deadline to submit comments in response to the proposed rule is January 31, 2023. NACo will continue to track when the final rule will be released and when compliance will begin to be enforced.
ADDITIONAL RESOURCES
- One Pager: Behavioral Health Matters to Counties
- NACo Policy Brief: Enhance Counties' Ability to Prevent and Treat Mental Illness and Substance Abuse Disorders
- NACo Blog: Nearly 150 county officials sign onto NACo’s behavioral health advocacy letter to Congress
On December 2, the U.S. Department of Health and Human Services Office for Civil Rights and Substance Abuse and Mental Health Services Administration (SAMHSA) published a proposed rule to align 42 CFR Part 2, which protects the confidentiality of Substance Use Disorder patient records with the Health Insurance Portability and Accountability Act (HIPAA) privacy rules.2022-12-16Blog2022-12-16
On December 2, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and Substance Abuse and Mental Health Services Administration (SAMHSA) published a proposed rule to align 42 CFR Part 2, which protects the confidentiality of Substance Use Disorder (SUD) patient records with the Health Insurance Portability and Accountability Act (HIPAA) privacy rules. This proposed rule implements provisions in the Protecting Jessica Grubb’s Legacy Act (Legacy Act), which was passed through Section 3221 of the Coronavirus Aid, Relief and Economic Security Act (CARES Act) (P.L. 116-136) in 2020.
Under the CARES Act, the Legacy Act changes existing privacy regulations under 42 CFR Part 2 to stop the prescription of opioids to individuals in recovery and prevent other adverse events related to limitations on the use and disclosure of patient SUD treatment records that impede comprehensive and coordinated medical care. The proposed rule would simplify the process in which patients give consent to providers to release SUD treatment information and would allow healthcare providers more appropriate access to patient information that is essential for providing effective and safe care, while still protecting patient privacy.
Key provisions within the proposed rule include:
- Aligning the rules for 42 CFR Part 2 covered information consent with HIPAA by only requiring patients to provide consent once for an SUD record to be disclosed for treatment, payment and operations purposes and other purposes permitted under HIPAA
- Outlining that consent can be revoked at any time by a patient for the sharing of their 42 CFR Part 2 covered information
- Requiring 42 CFR Part 2 programs to follow HIPAA privacy and security breach notification requirements
- Implementing updated Notice of Privacy Practices requirements to account for the new 42 CFR Part 2 covered information consent, disclosure and revocation requirements
- Detailing how and when law enforcement can access a patient’s SUD 42 CFR Part 2 records and how those records are to be handled and proceedings continue if a patient’s records are inadvertently accessed
- Clarifying when and how a patient’s SUD data can be shared in a de-identified format
- Information on how 42 CFR Part 2 SUD data can be shared for public health activities
The proposed rule would help county health systems better address the nation’s behavioral health crisis as it will ensure that all members of a patient’s treatment team have access to a person’s history of substance use disorder, which will help improve care coordination and reduce stigma, while protecting individuals in treatment from discrimination.
The deadline to submit comments in response to the proposed rule is January 31, 2023. NACo will continue to track when the final rule will be released and when compliance will begin to be enforced.
ADDITIONAL RESOURCES

About Blaire Bryant (Full Bio)
Legislative Director – Health | Large Urban County Caucus
More from Blaire Bryant
-
Webinar
Prepare your employee health plan for the end of the COVID-19 emergency declarations with Buck
May. 3, 2023 , 2:00 pm – 3:00 pmWith the end of the declared public health emergency on May 11, 2023, we’ll discuss the cost and compliance implications for county government health plans. Join us to learn: -
Press Release
Counties Recognize Mental Health Awareness Month
National Association of Counties commission to visit White House, Capitol Hill as counties across the U.S. advocate for mental health policy priorities -
Blog
CMS releases guidance on new opportunity for pre-release Medicaid coverage for incarcerated individuals
On April 17, the Centers for Medicaid and Medicaid Services released guidance on a new Medicaid Reentry Section 1115 demonstration opportunity to increase access to community-based health care and improve care transitions for incarcerated individuals prior, to their release back into the community. -
Reports & Toolkits
Myths & Facts: American Rescue Plan Coronavirus State & Local Fiscal Recovery Funds
The Coronavirus State and Local Fiscal Recovery Fund (SLFRF), part of the American Rescue Plan Act (ARPA), allocated $65.1 billion in direct, flexible aid for every county, parish and borough in America. -
County News
NACo supports counties through the Reaching Rural Initiative
The Reaching Rural Initiative focuses on helping rural counties leverage assets they may already have and forming bolder regional opportunities for collaboration to meet these challenges. -
Press Release
Counties Applaud New Opportunity for Pre-Release Medicaid Coverage for Incarcerated Individuals
New guidance will improve health, reduce recidivism and costs
Contact
-
Legislative Director – Health | Large Urban County Caucus(202) 942-4246
-
Legislative Assistant(202) 942-4259
Related Posts
-
BlogU.S. Surgeon General releases Advisory and National Strategy to Advance Social ConnectionMay. 23, 2023
-
BlogHow counties can extend the reach of drug disposal programs with at-home drug deactivation and disposalMay. 9, 2023
-
BlogBipartisan legislation introduced in House and Senate to address Medicaid Inmate Exclusion PolicyMay. 9, 2023
Related Resources
-
Press ReleaseNational Association of Counties Releases Data on Mental Health CrisisMay. 11, 2023
-
Reports & ToolkitsBehavioral Health Conditions Reach Crisis Levels: Counties Urge Stronger Intergovernmental Partnership and OutcomesMay. 11, 2023
-
Press ReleaseCounties Recognize Mental Health Awareness MonthMay. 1, 2023
Related Events
-
13Jun2023Webinar
Prenatal-to-Three Peer Learning Network: How the Social Determinants of Health Impact Families and Children
Jun. 13, 2023 , 2:00 pm – 3:00 pm -
15Jun2023Webinar
Prenatal-to-Three Peer Learning Network: How the Social Determinants of Health Impact Families and Children
Jun. 15, 2023 , 2:00 pm – 3:00 pm
More From
-
Legislative Analysis for Counties: The Consolidated Appropriations Act of 2023
This analysis includes funding highlights for key programs impacting counties.
Learn More