Resource Center

The resources within this section are provided to promote awareness and strengthen knowledge and skills for professionals who are seeking to understand and apply Protected Health Information (PHI) privacy laws and regulations on the job and for individuals and families when accessing services.

Resources are presented by categories for Substance Use Disorder (SUD) Treatment Providers, Mental Health (MH) Treatment Providers, Healthcare Providers, for professionals working in Educational Institutions, and for Patients and Families.

Resources included in each category address PHI Law and Regulations, Official Guidance, Tips for Implementing PHI, and Sample Templates and Forms and many are available in downloadable format.

Substance Use Disorder (SUD) Treatment Providers

OFFICIAL GUIDANCE

The following resources clarify how to share and protect patients' substance use disorder records pursuant to two federal privacy laws: the Health Insurance Portability & Accountability Act (HIPAA) and the Confidentiality of Records Relating to Substance Use Disorder Patient Records (Part 2).

Title Type Date Author
Disclosure of Substance Use Disorder Patient Records: Does Part 2 Apply to Me?  Infobrief  2018  ONC,   SAMHSA
Disclosure of Substance Use Disorder Patient Records: How Do I Exchange Part 2 Data?  Infobrief  2018  ONC,   SAMHSA
How HIPAA allows doctors to respond to the opioid crisis  Infobrief  2018    OCR
Consent2Share: How to Download, Install and Run Consent2Share  Webinar                           4/25/2018   SAMHSA

HIPAA Privacy Rule and the National Instant Criminal Background Check System (NICS)

Guidance 2016 OCR

 


Practical Application

The following resources are not official guidance from a federal agency, but may provide useful information about specific applications of the federal privacy protections for substance use disorder patient records.

Title  Type Date            Author  

Sharing Patient Substance Use Treatment Records In Hospitals and Large Healthcare Networks

 FAQs  12/24/2018   CoE-PHI
Privacy Rights of Patients Treated for Overdose in Emergency Departments  Infobrief  2018     LAC

What SUD Treatment Providers Should Know: The 2017 Amendments to 42 CFR Part 2, Federal SUD Confidentiality Regulations

 Infobrief  2/27/2017    LAC   
What SUD Treatment Providers Should Know: The 2018 Amendments to 42 CFR Part 2, Federal SUD Confidentiality Regulations  Infobrief  2018  LAC
How Does 42 CFR Part 2 Apply to Your SBIRT (Screening, Brief Intervention, and Referral to Treatment) Program?  Landing page with
 decision tree and   related infobriefs
 2018  LAC

 


PHI LAW AND REGULATIONS

The following federal laws and regulations govern the confidentiality of protected health information. Other federal and state laws may also apply.

Title Type 
Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub. L. 104-191  Law
HIPAA Rules, 45 CFR Parts 160, 164, 165  Regulations (HHS)
Confidentiality of Substance Use Disorder Patient Records, 42 USC 290dd-2  Law
Confidentiality of Substance Use Disorder Patient Records Regulations, 42 CFR Part 2  Regulations (SAMHSA)
 

 


SAMPLE TEMPLATES & FORMS

The following samples and templates may be used both by Part 2 programs as well as other healthcare providers and entities that manage patient records protected by 42 CFR Part 2. Programs, healthcare providers, and other entities should always consult with local counsel when developing consent forms and responding to subpoenas.

Title Type Date    Author  
Sample letter in response to a criminal subpoena  Template                                 2018    LAC
Sample letter in response to a civil subpoena  Template  2018    LAC
Sample consent to individual  Template  2018  LAC
Sample consent to third-party payer  Template  2018  LAC
Sample consent to entity with treating provider relationship  Template  2018  LAC
Sample consent to entity without treating provider relationship and with participants  Template  2018   LAC
Sample notice prohibiting re-disclosure  Template  2018  2018
Mental Health (MH) Treatment Providers

OFFICIAL GUIDANCE

The following official guidance documents clarify how to share and protect patients' mental health treatment records pursuant to federal privacy law: the Health Insurance Portability & Accountability Act (HIPAA). 

Title   Type   Date   Author 
HIPAA Privacy Rule & Sharing Information Related to Mental Health  Infobrief    12/19/2017  OCR
HIPAA helps MH professionals to prevent harm  Infobrief    2017/8   OCR
HIPAA helps families and friends stay connected  Infobrief  2017/8  OCR
When can I obtain treatment information about my loved one?  Infobrief  2017/8  OCR
HIPAA helps caregiving connections   Infobrief  2017/8  OCR
When your child, teenager, and young adult has mental illness: what parents   Infobrief  2017/8  OCR
When may a mental health professional use professional judgment to decide whether to share a minor patient's treatment information with a parent?  Infobrief  2017/8  OCR
When can parents access information about their minor child's mental health treatment  Infobrief  2017/8  OCR
Mental health FAQs  FAQs  Undated  OCR
How HIPAA allows doctors to respond to the opioid crisis Infobrief 2018 OCR
HIPAA Privacy Rule and the National Instant Criminal Background Check System (NICS) Guidance 2016 OCR
FAQ: When may a provider disclose that a patient poses a danger? FAQs Undated OCR
FAQ: What is a provider's duty to warn? FAQs Undated OCR
FAQ: What constitutes a serious and imminent threat? FAQs Undated OCR
FAQ: When may a provider contact patient's family or law enforcement? FAQs Undated OCR
FAQ: When must a provider notify the patient before sharing information with others? FAQs Undated OCR
FAQ: When may a school administrator or healthcare professional share concerns about a student? FAQs Undated OCR

Practical APPLICATION

Coming soon


PHI LAW & REGULATIONS

The following federal laws and regulations govern the confidentiality of protected health information. Other federal and state laws may also apply.

Title   Type
 Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub. L. 104-191   Law                             
 HIPAA Rules, 45 CFR Parts 160, 164, 165  Regulations (HHS)

SAMPLE TEMPLATES & FORMS

The following samples and templates may be used both by Part 2 programs as well as other healthcare providers and entities that manage patient records protected by 42 CFR Part 2. Programs, healthcare providers, and other entities should always consult with local counsel when developing consent forms and responding to subpoenas.

Title Type Date    Author  
Sample letter in response to a criminal subpoena  Template                                 2018    LAC
Sample letter in response to a civil subpoena  Template  2018    LAC
Sample consent to individual  Template  2018  LAC
Sample consent to third-party payer  Template  2018  LAC
Sample consent to entity with treating provider relationship  Template  2018  LAC
Sample consent to entity without treating provider relationship and with participants  Template  2018   LAC
Sample notice prohibiting re-disclosure  Template  2018  2018
Other Healthcare Providers

PRACTICAL APPLICATION

The following resources are not official guidance from a federal agency, but may provide useful information about specific applications of the federal privacy protections for substance use disorder patient records.

Title  Type   Date   Author  
Sharing Patient Substance Use Treatment Records In Hospitals and Large Healthcare Networks  FAQs  12/24/2018    CoE-PHI
Message to Nation's Healthcare Providers regarding HIPAA and disclosing information when a patient presents a serious danger to himself or other people Infobrief 1/15/2013 Department of Health & Human Services, Office for Civil Rights
HIPAA helps MH professionals to prevent harm Infobrief Undated Department of Health & Human Services, Office for Civil Rights
HIPAA Privacy Rule and the National Instant Criminal Background Check System (NICS) Infobrief 2016 Department of Health & Human Services, Office for Civil Rights
HIPAA Privacy Rule & Sharing Information Related to Mental Health Infobrief 2017 Department of Health & Human Services, Office for Civil Rights
How HIPAA allows doctors to respond to the opioid crisis Infobrief 2018 Department of Health & Human Services, Office for Civil Rights
Privacy Rights of Patients Treated for Overdose in Emergency Departments Infobrief 2018 LAC

SAMPLE TEMPLATES & FORMS

The following samples and templates may be used both by Part 2 programs as well as other healthcare providers and entities that manage patient records protected by 42 CFR Part 2. Programs, healthcare providers, and other entities should always consult with local counsel when developing consent forms and responding to subpoenas.

Title Type Date    Author  
Sample letter in response to a criminal subpoena  Template                                 2018    LAC
Sample letter in response to a civil subpoena  Template  2018    LAC
Sample consent to individual  Template  2018  LAC
Sample consent to third-party payer  Template  2018  LAC
Sample consent to entity with treating provider relationship  Template  2018  LAC
Sample consent to entity without treating provider relationship and with participants  Template  2018   LAC
Sample notice prohibiting re-disclosure  Template  2018  2018
Professionals Working in Educational Institutions

OFFICIAL GUIDANCE

The following resources clarify how to share and protect student health records, including mental health and substance use disorder records. These resources include official interpretations of the following federal laws: the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA).

Title  Type  Date  Author
Guidance explaining 2016 regulation permitting reporting of certain PHI to the NCIS by state and other authorized healthcare entities. Infobrief 2016 OCR
FAQ: When may a school administrator or healthcare professional share concerns about a student? FAQs Undated OCR
Dear Colleague Letter to School Officials at Institutions of Higher Education Letter 8/24/2016 U.S. DOE
FAQs about student privacy  FAQs  Undated  U.S. DOE
Training modules: FERPA  Online training modules  9/8/2012  U.S. DOE
FERPA  Infobrief  3/1/2018  U.S. DOE
 

 


PHI LAWS & REGULATIONS

The following federal laws and regulations govern the confidentiality of protected health information. Other federal and state laws may also apply.

Title  Type
Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub. L. 104-191   Law
HIPAA Rules, 45 CFR Parts 160, 164, 165   Regulations (HHS)
Confidentiality of Substance Use Disorder Patient Records, 42 USC 290dd-2   Law
Confidentiality of Substance Use Disorder Patient Records Regulations, 42 CFR Part 2   Regulations (SAMHSA)
Family Educational and Privacy Rights (FERPA), 20 USC 1232g   Law
FERPA Rules, 34 CFR Part 99   Regulations (DOE)

Patients & Families

OFFICIAL GUIDANCE

The following resources are designed for consumers, patients, and families whose loved ones receive treatment for a substance use disorder and/or mental health.

  Title  Type  Date  Author
Schools FAQs about student privacy for parents and students  FAQs  Undated   U.S. DOE
Schools FERPA General guidance for parents Compilation of Resources

Updated 
March 2017  

 U.S. DOE
Schools FERPA General guidance for students Compilation of Resources Updated
June 2015
 OCR
Schools Am I my child's personal representative under HIPAA Infobrief  2017/8  OCR
Mental Health HIPAA helps families and friends stay connected  Infobrief  2017/8  OCR
Mental Health When can I obtain treatment information about my loved one?  Infobrief  2017/8  OCR
Mental Health When your child, teenager, or young adult has mental illness: what parents need to know about HIPAA  Infobrief  2017/8  OCR