Behavioral Health Providers

What arrives

Part 2 security
42 CFR 2.16. Formal policies and procedures protecting patient identifying information in substance use disorder records, on paper and electronic.
Source
The 2024 Part 2 rule
Confidentiality of Substance Use Disorder Patient Records final rule, published February 16, 2024. Compliance required by February 16, 2026.
Source
The risk analysis
HIPAA Security Rule, 45 CFR 164.308(a)(1)(ii)(A). An accurate and thorough assessment of the risks and vulnerabilities to electronic protected health information.
Source
Breach notice
HIPAA Breach Notification Rule, 45 CFR 164.404. Notice to each affected individual without unreasonable delay, and no later than 60 calendar days after discovery.
Source
Two wooden armchairs by a window in a quiet counselling room.

Request an Introduction