• videocam Live Webinar with Live Q&A
  • calendar_month June 2, 2026 @ 1:00 PM ET/10:00 AM PT
  • signal_cellular_alt Intermediate
  • card_travel Health
  • schedule 90 minutes

New OCR Civil Enforcement Authority for Part 2 Compliance: Key Stakeholder Requirements, Investigations, Penalties

Early Bird Pricing!
MSRP
$297.00
$252.45
Save $44.55

Discount expires 5/19/26

This course is $0 with these passes:

CLE
ALL
  1. keyboard_arrow_leftBack

About the Course

Introduction

This CLE webinar will examine OCR's new civil enforcement program for 42 C.F.R. Part 2 (Part 2) noncompliance that will enforce key requirements of the 2024 Final Rule for SUD records confidentiality. The panel will address what covered stakeholders may expect in a civil investigation. The panel will also discuss the latest OCR guidance and compliance tools, including the updated model HIPAA NPP and model Part 2 patient notice, and offer best practices for compliance.

Description

OCR recently launched its new Part 2 civil enforcement program in conjunction with the compliance date for the 2024 Final Rule revising Part 2 regulations related to SUD records confidentiality. OCR's new program implements the civil enforcement provisions established by the CARES Act and incorporated in the February 2024 Final Rule that aims to align federal privacy standards for SUD records more closely with HIPAA standards. 

This is the first time OCR will exercise civil enforcement authority over covered stakeholders in a manner comparable to HIPAA enforcement. OCR may now impose civil monetary penalties and multi-year corrective action plans; investigations may follow complaints and breach reports; and SUD confidentiality is now operationally tied to HIPAA compliance infrastructure.

In addition to announcing the new civil enforcement program, OCR has provided updated guidance and compliance tools including: (1) an updated model HIPAA NPP for HIPAA covered entities; (2) a model Part 2 patient notice; (3) an online portal to file a Part 2 complaint for noncompliance; and (4) guidance for Part 2 programs regarding reporting breaches of unsecured Part 2 records.

Listen as our expert panel examines best practices for Part 2 compliance, the latest OCR guidance and compliance tools, and what the new civil enforcement program may mean for stakeholder clients.

Credit Information

  • This 90-minute webinar is eligible in most states for 1.5 CLE credits.


  • Live Online


    On Demand

Date + Time

  • event

    Tuesday, June 2, 2026

  • schedule

    1:00 PM ET/10:00 AM PT

I. Introduction

II. Key stakeholder requirements in the 2024 revised Part 2 regulations

A. Updating NPPs

B. Revising patient consent/authorization forms

C. Updating business associate agreements and qualified service organization agreements

D. Creating and implementing incident response plan and breach notification processes

E. Updating processes and procedures

III. New OCR Part 2 civil enforcement program

A. OCR enforcement focus

B. What may be expected in an OCR civil investigation

C. Civil monetary penalties and other remedies

IV. OCR updated guidance and compliance tools

A. Updated model HIPAA NPP

B. Model Part 2 patient notice

C. Online portal to file Part 2 complaints

D. Guidance for reporting breaches of unsecured Part 2 records

V. Best practices for compliance

VI. Key takeaways

The panel will review these and other important considerations:

  • What key requirements in the 2024 Final Rule revising Part 2 regulations are covered entities now required to comply with?
  • What is noteworthy about OCR's new Part 2 civil enforcement authority?
  • What may covered stakeholders expect in a Part 2 civil investigation? With what potential penalties?
  • What updated guidance and compliance tools have been provided by OCR for covered entities?