Required Updates to Notice of Privacy Practices
3/1/2026
As we reported in our February 11th Healthcare Law Alert, HIPAA covered entities were required to update their Notice of Privacy Practices by February 16, 2026 to include certain protections to substance use disorder treatment information. We also reported on the OCR’s “landmark” civil enforcement program and OCR’s ability to bring enforcement actions against organizations that fail to protect SUD treatment records as required under HIPAA and 42 CFR Part 2. As with OCR’s risk analysis initiative, we expect the OCR will place a heavy emphasis on investigating complaints relating to breaches of SUD treatment information and records.
Click Here to read the entire March 2026 Healthcare Law Update now!
If you need assistance with your organization’s privacy and security program, including assistance with updating your organization’s Notice of Privacy Practices, contact:
Lani M. Dornfeld, CHPC | 973.403.3136 | ldornfeld@bracheichler.com
Lani M. Dornfeld
CHPC, Member
Healthcare Law
973.403.3136 · 973.618.5536 Fax
ldornfeld@bracheichler.com
