|To view the regulations for your state, click here|
|HHS Finalizes Rule Updating Substance Use Disorder Px Records Confidentiality Regs|
February 17, 2017
Nearly a year after the department first released proposed changes to the underlying requirements, the United States Department of Health and Human Services (HHS) last month issued a rule finalizing revisions to Confidentiality of Alcohol and Drug Abuse Patient Records regulations (42 CFR Part 2).
Protocol that ran behind technology
Part 2 confidentiality requirements were designed in 1975 to spare substance use disorder patients the stigma that a violation of privacy might bring about (thereby potentially dissuading them from seeking help); the provisions were last adjusted in 1987. However, the manner in which patient data is currently shared and transmitted has radically changed since then, and therefore, the provisions intended to benefit patients might have been the source of unintended hurdles.
"General designation consent" pathway most substantial revision
Although the finalized rule touches on a few different aspects of bringing the confidentiality regulations up-to-date, what follows is the main way it modernizes the existing regulations:
Prior to the rule update:
Part 2 programs and healthcare practitioners in receipt of Part 2 patient records were required to get the patient’s written permission to share the records for the purposes of payment, treatment, and healthcare in such a way that the consent form had to specify with whom the disclosure was to be made. This was a departure from the HIPAA rule that allows the consent to share information form to more generally indicate a type of recipient rather than naming each one specifically.
After the final rule:
There will now be a "general designation consent" pathway that allows Part 2 programs ("and other lawful recipients" of Part 2 records) to share Part 2 records with all of a patient’s past, present, and future substance use disorder providers through third parties named on the consent (like ACOs, HIE, and clinically integrated networks) without specifying each individual provider. The caveat is that the named third party that has been granted permission to disclose patient records must possess the proper technology to limit access to the patient data to those providers directly involved in the individual’s care, as well as possess the capacity to furnish the patient—should s/he request it—with a "list of disclosures" revealing which providers are in receipt of the records.
Patient privacy prioritized by the HHS
"Today’s changes will further enhance health services research, integrated treatment, quality assurance and health information exchange activities while at the same time safeguarding the essential privacy rights of people seeking treatment for substance use disorders," said HHS Deputy Assistant Secretary, Kana Enomoto. "These efforts clear the way for integrated health care models that can provide a better, more cost-effective health care system that also empowers people to make key decisions about their health care."
For more information/questions regarding any legal matters, please email email@example.com or call 310.203.2800.
SOURCE: Nelson Hardiman