Requirements ยท Healthcare
42 CFR Part 2
Confidentiality of Substance Use Disorder Patient Records. 7 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
42 CFR Part 2 protects the confidentiality of substance use disorder patient records kept by federally assisted treatment programs. It is issued by HHS; a February 2024 final rule from the HHS Office for Civil Rights and the Substance Abuse and Mental Health Services Administration (SAMHSA) brought it closer to HIPAA, as the CARES Act required. It still limits how the records may be used in legal proceedings against the patient.
Source: 42 CFR Part 2 (eCFR). This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2) 6 products
- 42 CFR Part 2, for substance use disorder treatment records 1 product
For what it requires of your organization, read the rule itself or ask your counsel.
Products
The 7 products that support it
Housing & Homelessness HMIS Wrapper
Addressing homelessness requires coordination across multiple agencies while strictly protecting client privacy. This solution is a wrapper for Homeless Management Information Systems (HMIS), designed around HUD's HMIS data and privacy standards, that lets shelters, social services and police partners coordinate care for unhoused people under the consent each client has given. Police partners can refer but cannot see client records, and what may be shared remains the Continuum of Care's decision.
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Clinical Collaboration
Provisioning Microsoft Teams under business associate agreements for secure video consults and care team chat. Privacy policy decisions and HIPAA compliance remain your organization's.
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Cloud Fax
Digitizing the fax intake, routing documents directly to EMR inboxes (interoperability gap filler).
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Identity Governance
Role-Based Access Control (RBAC) tying nurses' access to their unit and job, supporting HIPAA Minimum Necessary. Patient-level limits are enforced in the EHR; access decisions remain yours.
Lists:
- 42 CFR Part 2, for substance use disorder treatment records
Integration Engine
Managing the HL7/FHIR message flows between disparate clinical systems.
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Patient Privacy Monitoring
AI detection of "snooping" in the EMR (e.g., employees looking up VIP/neighbor records).
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Secure Printing
"Follow-me" printing that holds patient records until the sender taps a badge at the device. Some clinical printing uses exception devices with compensating controls.
Lists:
- Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.