Blog

Covered entities that maintain a HIPAA Notice of Privacy Practices (NPP) face an important compliance deadline. By February 16, 2026, organizations must update their NPPs to reflect new federal requirements aligning the HIPAA Privacy Rule with enhanced confidentiality protections for substance use disorder (SUD) treatment records under 42 C.F.R. Part 2. Why the Change? In 2024, the U.S. Department of Health and Human Services (HHS) issued final rules implementing provisions of the CARES Act that …