42 CFR Part 2 is a federal rule that protects the confidentiality of substance-use disorder treatment records, and it is stricter than HIPAA on disclosures. It requires granular patient consent, detailed audit logs, and controls that prevent even acknowledging a patient is in treatment without authorization. We configure your EHR, access permissions, and logging so your systems enforce Part 2 rather than leaving it to chance.