42 CFR Part 2

42 CFR Part 2 is the federal regulation governing the confidentiality of substance use disorder patient records. Part 2 places stricter controls than HIPAA on disclosure of SUD records: written patient consent is generally required for any disclosure, and recipients are prohibited from re-disclosure. Behavioral health software handling addiction treatment records must implement Part 2 safeguards in addition to HIPAA.