Chapter 8: Medical Privacy

CIPP/US 42 CFR Part 2 confidentiality guide

42 CFR Part 2 contains confidentiality rules for substance use disorder patient records. It requires a separate scope analysis from the HIPAA Privacy Rule.

Practical example

For a treatment program disclosure, identify the program, record, recipient, consent and exception facts before deciding whether Part 2 applies.

Common mistake

Assuming HIPAA analysis alone resolves a substance use disorder record question without testing Part 2 coverage.

The current Part 2 regulations are published in 42 CFR Part 2. The precise disclosure rule depends on the program, record, recipient and applicable exception.

For CIPP/US study, use the record and program facts to separate Part 2 from HIPAA before comparing the disclosure rule.

How this supports CIPP/US study

Use this lesson to separate sectoral scope, data type and regulated entity before testing an exception. Continue with the CIPP/US practice exam.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.