The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) finalized two rules to more closely align 42 CFR Part 2 (Part 2) regulations on substance use disorder (SUD) with HIPAA. Part 2 programs must revise their Part 2 Patient Notices, and HIPAA-covered entities that create, receive, or maintain Part 2 SUD records are required to update their Notice of Privacy Practices (NPP) by February 16, 2026. OCR has indicated it will share a model HIPAA NPP and additional guidance in a future announcement.