Last Update: 04/05/2026 at 2:50 PM EST
Health Plans Tighten SUD Privacy Notices
Coverage from HHS.gov, Pennmedicine, and others
Articles
15
Latest Article
02/26
Active Days
43
Executive Summary
Group health plans must update privacy notices by February 16, 2026 to reflect Part 2 SUD rules and remove vacated reproductive health language.
- HHS updates model Notice of Privacy Practices templates for Part 2 SUD information
- Group health plan sponsors must revise HIPAA Privacy Notices by February 16, 2026
- Notices must explain stricter confidentiality rules for certain SUD records
- Previously added reproductive health language must be removed after court vacatur
- Fully insured plans shift notice responsibility to carriers, not plan sponsors
- OCR begins civil enforcement of Part 2 confidentiality on February 16, 2026
- Noncompliance can trigger investigations, corrective action plans, and monetary penalties
Quick Facts
- What: Updating HIPAA notices for Part 2 SUD confidentiality
- Where: United States health plans and SUD programs
- Why: To reflect stricter SUD privacy rules and current law
- Who: HHS OCR and group health plan sponsors
- When: Effective February 16 2026
Coverage Timeline: 43 Days
Featured Article
HHS OCR enforces Part 2 confidentiality rules for federally assisted substance use disorder programs in the United States, with updates effective by 2026.
Additional Articles
⭐⭐⭐⭐⭐
Penn Medicine published a February 16, 2026 privacy notice supplement in Pennsylvania detailing HIPAA and Part 2 protections for substance use disorder treatment records.
Health plans and insurers in the United States must align notices with Part 2 confidentiality rules by February 16 2026 to reflect stricter substance use disorder record protections.
HIPAA covered entities and Part 2 Programs in the United States must update notices by February 16, 2026.
HIPAA covered entities and Part 2 programs must update notices by February 16 2026 in the United States to reflect Part 2 confidentiality alignment.
US Department of Health and Human Services finalizes 42 CFR Part 2 confidentiality rule in the United States to strengthen privacy protections for substance use disorder records.
HHS updates HIPAA privacy notices to reflect Part 2 rules for US health plans in 2026.
HHS Office for Civil Rights begins civil enforcement of 42 CFR Part 2 confidentiality in the United States on February 16, 2026 to safeguard substance use disorder records.
Group health plan sponsors must update HIPAA Privacy Notices by February 16 2026 to reflect Part 2 confidentiality rules and remove vacated reproductive health language.
Healthcare entities must update privacy notices by the regulatory deadline to reflect new SUD protections and patient rights.
OCR enforces HIPAA penalties against health care entities in the United States from 2020 through 2026.
Healthcare entities must update HIPAA notices by February 16 2026 to reflect Part 2 confidentiality changes affecting SUD records nationwide.
HIPAA covered practices update notices by February 16 2026 to reflect Part 2 confidentiality for substance use disorder records in medical and dental settings in the United States.
US health care providers and Part 2 programs must update notices by February 16 2026 as OCR enforcement begins under the HIPAA Privacy Rule in the United States.
⭐⭐⭐
Who: U.S. Department of Health and Human Services and SAMHSA; What: finalize rule updates to confidential SUD information; When: by February 16 2026; Where: United States federal health system.