By Lisa W. Clark and Erin M. Duffy
On January 3, 2018, the Substance Abuse and Mental Health Services Administration (SAMHSA) finalized revisions to the Confidentiality of Substance Use Disorder Patient Records regulations, found in 42 CFR Part 2. The new final rule implements the changes proposed a year ago by SAMHSA in its supplemental notice of proposed rulemaking (SNPRM), which was issued alongside the first major changes to the federal regulations governing Part 2 covered data since 1987. After receiving public comment on the SNPRM, SAMHSA has finalized provisions relating to the disclosure of patient-identifying substance use information for payment and healthcare-related purposes and the disclosure of patient-identifying substance use information for the purposes of carrying out a Medicaid, Medicare or Children’s Health Insurance Program (CHIP) audit or evaluation. The new final rule also permits lawful holders to issue an abbreviated notice of the prohibition on redisclosure to accommodate electronic health record systems with standard character limitations on free text fields.