OCR Launches Civil Enforcement for Substance Use Disorder Patient Records — FQHCs with BH Programs Now in Scope
HHS Office for Civil Rights began enforcing confidentiality protections for substance use disorder (SUD) patient records under 42 CFR Part 2, now aligned with HIPAA penalty tiers. FQHCs operating behavioral health or SUD treatment programs must ensure their consent forms, EHR configurations, and staff training comply with the new enforcement framework.
Noncompliance can trigger monetary settlements, corrective action plans, or civil money penalties.
Key takeaways
- 42 CFR Part 2 enforcement now aligned with HIPAA penalty tiers — real financial risk for noncompliance
- FQHCs with SUD/BH programs must audit consent forms, EHR access controls, and staff training immediately
- OCR can now investigate complaints and impose monetary penalties for SUD record mishandling
Primary source
HHS Office for Civil RightsFQHC Talent. (2026, February 16). OCR Launches Civil Enforcement for Substance Use Disorder Patient Records — FQHCs with BH Programs Now in Scope. Primary source: HHS Office for Civil Rights. Retrieved June 12, 2026, from https://www.fqhctalent.com/intel/ocr-sud-records-enforcement-feb-2026
More in Risk & Compliance
Jul 5
Section 1557 Language Access Annual Notice Year 1 Anniversary — July 5, 2026 Compliance Window
Jun 9
FTCA CY2027 redeeming applications due June 26 — miss it and your FQHC has a malpractice-coverage gap
Jun 1
Two Compliance Signals for FQHCs: HRSA's FY2026 340B Manufacturer-Audit Results Go Live, and OCR's Ransomware Settlements Preview a Tougher HIPAA Security Rule
Jun 1
Eli Lilly Gives ~50 Covered Entities Five Days to Hand Over 340B Claims Data — or Lose Their Discounts