42 CFR Part 2 Final Rule: What's Changing and What Do You Need to Know?

42 CFR Part 2 Final Rule: What's Changing and What Do You Need to Know?

November 13, 2025 · 42 min · Season 1 · Episode 91

About this episode

The episode discusses the changes and implications of the 42 CFR Part 2 final rule regarding substance use disorder treatment records and its alignment with HIPAA.

By early 2026, substance use disorder (SUD) providers, health plans, clinicians, health information exchanges (HIEs), and vendors must meet new federal privacy standards for SUD treatment records or face Health Insurance Portability and Accountability Act (HIPAA)-level enforcement and penalties. On this episode, Epstein Becker Green attorneys Lisa Pierce Reisz , David Shillcutt , and Laura DePonio join Nichole Sweeney, General Counsel and Chief Privacy Officer at CRISP , to break down the 42 CFR Part 2 final rule: what's changing, what's staying the same, and what organizations often miss. The group explains how the final rule aligns with (but does not replace) HIPAA, why patient consent remains central, and what new operational risks are emerging. Key Takeaways: Adoption of HIPAA Penalties: Part 2 now adopts HIPAA's enforcement and penalty structure. Operational Readiness Challenges: Operational readiness, not technology, is the biggest challenge. Expanded Compliance Duties: Payors and HIEs face major shifts in data access and compliance duties. Visit our site for related resources and email contact information: https://www.ebglaw.com/dhc91 . Subscribe for email notifications…

People in this episode

Host: Epstein Becker Green

Guests: Lisa Pierce Reisz, David Shillcutt, Laura DePonio, Nichole Sweeney

Topics covered

Keywords

Mentioned in this episode

Organizations: CRISP

More episodes of Diagnosing Health Care Podcast

Explore listener stats, chart rankings, contacts and more on the Diagnosing Health Care Podcast podcast page.