Back to News
Security News

‘We’re Open for Business’: OCR Assumes Part 2 Records Enforcement; Is Your NPP Updated?

UnknownApr 15, 2026(27 days ago)

The article discusses the enforcement of privacy policies and breach notification requirements related to substance use disorder records under 42 CFR Part 2.

Time’s up! Covered entities (CEs) and substance use disorder (SUD) providers who accept federal assistance have had two years to comply with a rule updating privacy policies, as well as implement breach notification requirements related to SUD records under 42 CFR Part 2, typically referred to simply as Part 2.... By: Health Care Compliance Association (HCCA)

Related News

Get Personalized Alerts

Track vendors and receive alerts when security incidents affect your supply chain.

What We Monitor

Security Incidents

Data breaches, ransomware, and unauthorized access

Vulnerabilities

CVEs and vendor security advisories

Compliance Updates

Regulatory changes and certification news

Legal News

Privacy laws and enforcement actions

Vendor Directory

Browse our directory of SaaS vendors with security documentation and compliance information.