42 CFR Part 2 Confidentiality Regulations (Substance Use)

When you reach out for help with a substance use concern, you share some of the most private details of your life. 42 CFR Part 2 is a federal regulation that protects the confidentiality of substance use disorder (SUD) treatment records, including your identity, diagnosis, and treatment history.

For clients in Burbank, California, these federal rules work together with California privacy laws and general medical privacy rules like the Health Insurance Portability and Accountability Act (HIPAA) to create multiple layers of protection. At a mental health clinic such as Hope Therapy Center in Burbank, your substance use–related information is treated as uniquely sensitive and handled with great care.

Understanding these safeguards can help you feel more confident taking the next step toward therapy and support.

42 CFR Part 2 is a federal confidentiality rule that applies to programs and providers that diagnose, treat, or refer people for substance use disorders, especially when those services are federally assisted.

While HIPAA protects general health information, Part 2 goes further by strictly limiting when and how SUD treatment records can be shared. It covers any record that could identify you as having, or having had, a substance use disorder, directly or indirectly. You can see the federal government’s own Part 2 fact sheet for more detail.

A recent final rule from the U.S. Department of Health and Human Services (HHS) updates Part 2 so that some aspects now align more closely with HIPAA. For example, a single written consent can now authorize future uses and disclosures of Part 2 records for treatment, payment, and health care operations, but the rule still restricts use of those records in legal proceedings unless you consent or a court issues a specific order.

For clients in Burbank, this means any information that might identify you as receiving substance use–related care is handled more carefully than most other health data.

Under 42 CFR Part 2, programs generally cannot even confirm you are a patient or disclose information that identifies you as having a substance use disorder without your written consent, except in very limited circumstances such as a medical emergency or a specific court order.

In California, Health and Safety Code § 11845.5 adds another layer of protection by making the identity, diagnosis, prognosis, and treatment information of patients in substance use programs confidential and protected by a specific patient privilege. For a plain‑language overview of these state protections, you can review a summary of California substance use privacy laws.

When federal and state rules differ, providers generally must follow the most protective standard for your records. For residents of Burbank, this means your SUD-related information is shielded more tightly than most other types of health information.

Outside narrow exceptions, both 42 CFR Part 2 and California law require a valid written authorization before SUD records can be disclosed. A compliant consent form typically:

As of 2026, a single consent may allow HIPAA‑covered entities to use and redisclose Part 2 information for treatment, payment, and health care operations, but only within the limits you authorize and consistent with law. A Burbank mental health clinic that takes compliance seriously will walk you through this process in clear, everyday language.

Best practices recommend that providers segregate SUD information within the electronic health record and clearly mark it as subject to Part 2, so staff handle it under stricter access rules. Guidance from a national center on behavioral health privacy outlines practical steps clinics can take to implement the updated Part 2 requirements, including staff training, technical safeguards, and careful tracking of disclosures.

This often includes limiting which clinicians and administrative staff can view SUD details and using a “minimum necessary” approach to information sharing, defaulting to non‑disclosure unless a valid consent or clear legal exception exists. Clinics are also warned not to release SUD records based only on a subpoena unless a court order that meets Part 2 standards is in place.

For a client in Burbank, this means your therapist and their team should only access or share what is truly needed to support your care.

HHS has given organizations a two‑year implementation period after the 2024 final rule to fully comply with the updated Part 2 requirements, including new consent standards, patient rights, and alignment with HIPAA enforcement. Implementation materials emphasize updating policies, training staff, and revising consent and notice forms so they match the new rule.

When a Burbank mental health clinic stays current on these expectations, you receive care in a setting that reflects the latest privacy standards rather than outdated practices.

For people in Burbank and the greater Los Angeles area, understanding these protections can make seeking help feel less risky.

In practice:

Your privacy supports your recovery. Whether you are dealing with substance use, co-occurring mental health concerns, or behavioral challenges, Hope Therapy Center offers a setting grounded in the latest 2026 privacy standards. Get started by connecting with George Holbrook, our Los Angeles-based substance abuse specialist. George provides the expert guidance you need with the strict confidentiality you deserve.

You can request an appointment here.