13.2 Exceptions to Confidentiality and Permitted Disclosures

13.2 Exceptions to Confidentiality and Permitted Disclosures

---

The Strict Default Rule: Non-Disclosure and Protection

In conventional social services, practitioners often assume that if a person in authority—such as a police detective, probation officer, landlord, or clinical doctor—asks for information, they have a right to know. In substance use disorder peer recovery practice, that assumption is dangerous and illegal.

Under federal law (42 CFR Part 2), the default posture of every peer recovery support specialist is absolute confidentiality. An unauthorized disclosure is not merely an ethical infraction. Since the CARES Act and the 2024 Final Rule, Part 2 violations carry the same civil and criminal penalties as HIPAA violations; the HHS Office for Civil Rights handles civil enforcement and began accepting Part 2 complaints on February 16, 2026, and criminal cases go to the Department of Justice.

To safeguard individuals, Part 2 limits disclosures without written consent to specific circumstances. The five most tested in peer practice are below.

┌─────────────────────────────────────────────────────────────────────────────┐
│                 FIVE KEY EXCEPTIONS TO CONSENT UNDER PART 2                  │
├─────────────────────────────────────────────────────────────────────────────┤
│ 1. MEDICAL EMERGENCIES (§ 2.51)                                             │
│    Immediate threat to life or health; treating medical personnel only;     │
│    mandatory immediate documentation in the clinical record                 │
├─────────────────────────────────────────────────────────────────────────────┤
│ 2. SUSPECTED CHILD ABUSE & NEGLECT (§ 2.12(c)(6))                           │
│    Initial report to child protective authorities permitted; underlying     │
│    treatment records remain completely protected                            │
├─────────────────────────────────────────────────────────────────────────────┤
│ 3. CRIMES ON PREMISES OR AGAINST PERSONNEL (§ 2.12(c)(5))                   │
│    Crimes committed on site or threats against staff; limited to facts of   │
│    incident, perpetrator status, and identifying demographic data           │
├─────────────────────────────────────────────────────────────────────────────┤
│ 4. QUALIFIED RESEARCH, AUDITS & PROGRAM EVALUATIONS (§§ 2.52, 2.53)        │
│    Strict data security protocols; absolute prohibition on re-identification│
├─────────────────────────────────────────────────────────────────────────────┤
│ 5. SPECIALIZED PART 2 COURT ORDERS + SUBPOENAS (§§ 2.61 - 2.67)             │
│    Standard subpoena alone is INVALID; requires judicial "good cause"       │
│    hearing weighing public interest against harm to the patient             │
└─────────────────────────────────────────────────────────────────────────────┘

---

Deep Dive: The Five Statutory Exceptions

1. Medical Emergencies (42 CFR § 2.51)

Under 42 CFR § 2.51, patient identifying information may be disclosed to medical personnel without consent only when there is a bona fide medical emergency.

• Definition: A medical emergency requires an immediate, acute threat to the life, limb, or physical health of an individual that requires immediate medical intervention (e.g., an acute fentanyl overdose, respiratory arrest, traumatic head injury, status epilepticus, or severe delirium tremens).
• Authorized Recipients: Information can be disclosed solely to treating medical personnel who need the information to manage the acute emergency (e.g., emergency medical technicians, paramedics, or emergency room physicians). Information cannot be shared with administrative staff, family members, or police officers who arrive at the scene.
• Mandatory Documentation: Following any emergency disclosure, federal law mandates that the program immediately document the event in the patient's record, including:
  1. The name and medical affiliation of the treating personnel to whom disclosure was made.
  2. The name of the individual within the program who made the disclosure.
  3. The exact date and time of the disclosure.
  4. The precise nature of the emergency and the specific information disclosed.

2. Suspected Child Abuse and Neglect Reporting (42 CFR § 2.12(c)(6))

Part 2 explicitly states that its federal restrictions do not apply to the reporting of suspected child abuse and neglect under state mandated reporting laws.

• The Initial Report: A peer specialist who forms a reasonable suspicion that a child is being abused or neglected can—and legally must—contact child protective authorities without patient consent.
• The Critical Limitation: Part 2's exception applies ONLY to the initial report of abuse or neglect. It does NOT apply to the patient's underlying treatment records, therapy notes, or historical peer files. If child welfare investigators or family court attorneys subsequently demand copies of the parent's full addiction treatment record, the program cannot release them without a signed Part 2 consent form or a specialized Part 2 court order. The child abuse exception is not an open door into the patient's file.

3. Crimes Committed on Program Premises or Against Program Personnel (42 CFR § 2.12(c)(5))

When a participant commits a crime—or threatens to commit a crime—on the physical premises of the program or against program staff members, the program may contact law enforcement without violating Part 2.

• Narrow Scope of Permitted Disclosure: The disclosure to police is limited to the circumstances of the incident, including the patient status of the person who committed or threatened the crime, that person's name and address, and their last known whereabouts. The program cannot release the individual's confidential treatment history, diagnostic summaries, or progress notes.
• Crimes Outside the Program: If a participant commits a crime away from the facility (such as a burglary across town) and is not threatening staff, this exception does not apply. The specialist cannot act as a police informant.

4. Qualified Research, Audits, and Program Evaluations (42 CFR §§ 2.52, 2.53)

Confidential records may be disclosed without patient consent to qualified researchers who have secured Institutional Review Board (IRB) approval, or to governmental auditors (such as SAMHSA, state licensing boards, or CMS) who evaluate program efficacy and financial compliance.

• Strict Privacy Safeguards: Auditors and researchers are legally prohibited from removing identifying information from the premises or disclosing patient identities in any published reports. Furthermore, researchers are strictly prohibited from re-identifying individuals or contacting them directly without separate institutional authorization.

5. Specialized Court Orders Accompanied by Subpoenas (42 CFR §§ 2.61 - 2.67)

This is one of the most important legal concepts for peer specialists. Peer specialists and healthcare workers are often confused when presented with legal paperwork bearing formal court seals.

Under 42 CFR Part 2, Subpart E, a program may release records only when a subpoena is accompanied by a Specialized Part 2 Court Order.

• The Subpart E Judicial Standard: Before issuing a Part 2 court order, the court gives the patient and the program notice and an opportunity to respond, and any hearing is held in a way that protects the patient's identity (for example, in chambers).
• The "Good Cause" Test: The court must make an explicit finding of "good cause," establishing that:
  1. Other reasonable ways of obtaining the information are not available or would be ineffective.
  2. The public interest and need for disclosure heavily outweigh the potential injury to the patient, to the therapeutic peer relationship, and to the ability of the program to attract people into recovery.
• Narrow Scope: Even when granted, the court order must be narrowly tailored to authorize disclosure of only the specific facts essential to the legal proceeding, and must include protective measures (such as sealing transcripts) to prevent public disclosure.

                      ┌────────────────────────────────────────┐
                      │   LEGAL REQUEST RECEIVED FOR RECORDS   │
                      └───────────────────┬────────────────────┘
                                          │
                      ┌───────────────────┴───────────────────┐
                      ▼                                       ▼
          ┌───────────────────────┐               ┌───────────────────────┐
          │   STANDARD SUBPOENA   │               │ SUBPOENA + SPECIALIZED│
          │   OR SEARCH WARRANT   │               │ PART 2 COURT ORDER    │
          │   (WITHOUT ORDER)     │               │ (Subpart E Compliant) │
          └───────────┬───────────┘               └───────────┬───────────┘
                      │                                       │
                      ▼                                       ▼
          ┌───────────────────────┐               ┌───────────────────────┐
          │  LEGALLY INSUFFICIENT │               │   JUDGE EVALUATED     │
          │  DO NOT RELEASE DATA! │               │   "GOOD CAUSE" TEST   │
          │  Contact supervisor   │               │   Release ONLY narrow │
          │  and agency counsel   │               │   scope authorized    │
          └───────────────────────┘               └───────────────────────┘

---

Practical Peer Practice Scenarios and Protocols

In daily community work, peer specialists encounter real-world pressures from outside entities demanding private information. Knowing how to respond assertively and legally is a core competency.

Scenario 1: Law Enforcement at the Facility Door

A police officer walks into a community recovery center, shows a badge, and states: "We are looking for Marcus Jenkins. We have an outstanding misdemeanor warrant for his arrest. Is he here right now, or what days does he meet with his peer specialist?"

The Legal Peer Response Protocol:

1. Maintain Professional Composure: Greet the officer respectfully without defensiveness.
2. Neither Confirm Nor Deny: Federal law prohibits confirming that Marcus Jenkins is a participant, has ever visited the center, or is enrolled in services. Stating "Marcus isn't here today; he comes on Thursdays" is an illegal breach of federal confidentiality.
3. Deliver the Federal Non-Disclosure Formula: "Officer, under federal confidentiality regulations (42 CFR Part 2) and our agency privacy policies, I am legally prohibited from confirming or denying the presence, enrollment, or records of any individual at this facility without a specialized Part 2 court order or signed consent."
4. Involve Supervision Immediately: Direct the officer to the agency executive director or legal counsel.

Scenario 2: Probation Officers Demanding Informal Updates

A peer's probation officer drops by the recovery center without an appointment, stating: "Marcus told me he has been meeting with you weekly. I just need a quick verbal update on his progress and whether he has been drug-free."

The Legal Peer Response Protocol:

• Even if the peer is legally mandated to attend recovery support as a condition of probation, the specialist cannot provide a single word of confirmation or progress update without first verifying that a valid, unexpired Part 2 written consent form is in the file that specifically names the probation officer as the authorized recipient.
• If a valid release exists, the specialist provides only the factual information specified in the scope (e.g., "Marcus has attended four out of four scheduled peer recovery sessions this month"), avoiding subjective speculation or clinical opinions.
• If no valid release exists, the specialist must decline: "I cannot confirm whether Marcus is receiving services or discuss his progress until we have a signed Part 2 release on file. I will gladly discuss this with Marcus during our next scheduled session to see if he wishes to execute a release."

Scenario 3: Landlords and Community Members

A landlord calls stating that a peer has failed to pay rent and threatens eviction unless the peer specialist confirms the peer's enrollment in a supportive housing subsidy program.

The Legal Peer Response Protocol:

• Even if disclosure seems to benefit the peer, disclosing information without a valid release form is illegal. The specialist cannot confirm enrollment.
• The specialist contacts the peer directly: "Your landlord reached out regarding your housing voucher. Under federal law, I did not confirm anything. If you would like me to coordinate with your landlord to resolve your rent subsidy, we can review and sign a specific consent form together."