OCR launches Part 2 civil enforcement program, new breach portal features

The HHS Office for Civil Rights announced new civil enforcement mechanisms to protect substance use disorder, or SUD, patient records. Effective Feb. 16, 2026, entities subject to 42 CFR Part 2 rules, commonly known as "Part 2," are required to comply with breach notification requirements or else face penalties aligned with those administered under HIPAA. Entities are now able to file breach reports under Part 2 using a new form on OCR's existing breach portal, and OCR will accept complaints of alleged violations. 

Read More