OCR Launches Civil Enforcement for Substance Use Disorder Patient Records — FQHCs with BH Programs Now in Scope
HHS Office for Civil Rights began enforcing confidentiality protections for substance use disorder (SUD) patient records under 42 CFR Part 2, now aligned with HIPAA penalty tiers. FQHCs operating behavioral health or SUD treatment programs must ensure their consent forms, EHR configurations, and staff training comply with the new enforcement framework. Noncompliance can trigger monetary settlements, corrective action plans, or civil money penalties.
Key takeaways
- 42 CFR Part 2 enforcement now aligned with HIPAA penalty tiers — real financial risk for noncompliance
- FQHCs with SUD/BH programs must audit consent forms, EHR access controls, and staff training immediately
- OCR can now investigate complaints and impose monetary penalties for SUD record mishandling
Primary source
HHS Office for Civil RightsFQHC Talent. (2026, February 16). OCR Launches Civil Enforcement for Substance Use Disorder Patient Records — FQHCs with BH Programs Now in Scope. Primary source: HHS Office for Civil Rights. Retrieved April 28, 2026, from https://www.fqhctalent.com/intel/ocr-sud-records-enforcement-feb-2026
More in Risk & Compliance
Jul 5
Section 1557 Language Access Annual Notice Year 1 Anniversary — July 5, 2026 Compliance Window
May 11
URGENT: HHS Section 504 WCAG 2.1 AA Digital Accessibility Deadline Hits FQHCs May 11, 2026 — 3 Weeks Away
Apr 27
HRSA 340B Rebate Model ICR Burden Comment Window Closes April 27 — Second Window for FQHCs After April 20 Main Deadline
Apr 22
Section 504 / WCAG 2.1AA 'Red Alert' — Enforcement Interpretation May Be Contested in Final Weeks Before May 11