The Part 2 consent: single-consent redisclosure explained
Summary
A 42 CFR Part 2 consent form must name the patient, the party disclosing, the party receiving, what information and how much, and the purpose. Since the 2024 rule, one consent can cover all future treatment, payment, and operations disclosures using a general designation like 'my treating providers.' It must also state that the consent is revocable, when it expires, carry the patient's signature and date, and be paired with a notice barring redisclosure.
By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.
What a Part 2 consent form must contain
A valid Part 2 consent is not a general HIPAA authorization — it has its own required content, set out in the regulation. Every consent must identify the patient, the person or program permitted to disclose, the recipient of the information, the amount and kind of information to be disclosed, and the purpose of the disclosure 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.. It must also carry the patient's signature and date, a revocation statement, and an expiration date, event, or condition 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
| Required element | What it means on the form |
|---|---|
| Patient | The patient's name |
| Who may disclose | The program or person releasing the record |
| Who receives | The recipient, by name or a permitted general designation |
| What and how much | An explicit description of the information disclosed |
| Purpose | Why the disclosure is being made |
| Revocation | A statement that the patient may revoke, and how |
| Expiration | The date, event, or condition when the consent ends |
| Signature | The patient's (or authorized signer's) signature and date |
Miss one element and the form is not valid Part 2 consent — which means the disclosure it purports to authorize is not lawful. That is why a repurposed HIPAA authorization is risky here: it can omit the exact fields Part 2 requires 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
The single-consent change: general designations
The biggest 2024 change to the consent itself is the general designation. Before, the recipient generally had to be named specifically. Now a patient can consent, in one form, to future disclosures for treatment, payment, and health care operations using a general designation such as 'my treating providers' — instead of a separate consent for each recipient 2Ref 2U.S. Department of Health and Human Services (2024).Fact Sheet: 42 CFR Part 2 Final Rule.The 2024 single-consent-for-future-TPO change and the use of a general designation for recipients, summarized as what changed for the consent form.. When a patient uses a general designation, they gain a right to request a list of the entities their records went to 3Ref 3Substance Abuse and Mental Health Services Administration (2024).Confidentiality of Substance Use Disorder (SUD) Patient Records.The operative text creating the patient's right to a list of TPO disclosures made under a general designation and the redisclosure-notice requirement as published in the final rule..
This is what people mean by 'single consent.' It is a genuine convenience for coordinated care, but the form must still spell out the TPO purpose and the general designation clearly; a blank 'anyone, for anything' is not a lawful designation. Read the 2024 changes as a set — part 2, aligned with HIPAA — so the consent, the redisclosure notice, and the new accounting right all line up on the same form and workflow 2Ref 2U.S. Department of Health and Human Services (2024).Fact Sheet: 42 CFR Part 2 Final Rule.The 2024 single-consent-for-future-TPO change and the use of a general designation for recipients, summarized as what changed for the consent form..
Revocation and expiration
Two elements do real work after signing: revocation and expiration. The consent must tell the patient they can revoke it at any time, and how; a revocation stops future disclosures, though it cannot undo disclosures already made in reliance on the consent 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.. The consent must also state when it ends — a specific date, or an event or condition, such as 'the end of treatment' or 'one year from signing' 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
For a solo practice, the practical move is to date-stamp every consent and diary the expiration, so you never disclose on a consent that has lapsed. Keep the signed consent as part of the record for your state's retention period, since you may need to show, years later, exactly what the patient authorized and when that authority ended 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
Who signs: adults, minors, representatives
Usually the patient signs, but Part 2 has a specific rule for minors. Where state law lets a minor consent to their own SUD treatment, the minor — not the parent — must sign the Part 2 consent to release those records; where state law requires parental consent for treatment, the parent's signature is required or added 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.. For an adult who lacks capacity, an authorized representative signs, again as state law and the regulation define 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
This is one place Part 2 and general HIPAA practice can diverge, so do not assume a parent can always authorize release of a teen's SUD records. Confirm your state's minor-consent-to-treatment rule first; it decides who holds the pen. Whether Part 2 even reaches your setting is a separate threshold — part 2 and the private practice covers that test before you draft a single form 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
The redisclosure notice you must attach
Every Part 2 disclosure made with consent must be accompanied by a written redisclosure notice telling the recipient the information is protected and may not be redisclosed without further authority — unless the recipient is a HIPAA covered entity or business associate receiving it for TPO under the new single-consent path 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.. That notice is a required companion to the consent, not an optional courtesy 3Ref 3Substance Abuse and Mental Health Services Administration (2024).Confidentiality of Substance Use Disorder (SUD) Patient Records.The operative text creating the patient's right to a list of TPO disclosures made under a general designation and the redisclosure-notice requirement as published in the final rule..
Build it into your release workflow: the consent authorizes the disclosure, and the redisclosure notice travels with the records out the door. The 2024 alignment softened the redisclosure limit for HIPAA-covered TPO recipients, but for everyone else the old bar still holds, so keep the notice attached by default rather than deciding it case by case at the moment of release 3Ref 3Substance Abuse and Mental Health Services Administration (2024).Confidentiality of Substance Use Disorder (SUD) Patient Records.The operative text creating the patient's right to a list of TPO disclosures made under a general designation and the redisclosure-notice requirement as published in the final rule..
The form is also an informed-consent conversation
A signed form is necessary but not sufficient. Your ethics code treats consent as a process, not a signature: professional codes require that informed consent be given knowingly, voluntarily, and in language the client understands 4Ref 4National Association of Social Workers (2021).NASW Code of Ethics.That informed consent is an ethics obligation requiring the client to understand the scope and their revocation right, so the consent form must be treated as a conversation, not just a signature.. So walk the client through what a general designation means, who might see the records, and their right to revoke — then keep the signed form 4Ref 4National Association of Social Workers (2021).NASW Code of Ethics.That informed consent is an ethics obligation requiring the client to understand the scope and their revocation right, so the consent form must be treated as a conversation, not just a signature..
Documenting that conversation protects the client and you. Note in the chart that you explained the scope and the revocation right, and store the consent for your state's retention period. Treating the Part 2 consent as informed consent, rather than paperwork, is also what a board or an auditor expects to see standing behind the signature 4Ref 4National Association of Social Workers (2021).NASW Code of Ethics.That informed consent is an ethics obligation requiring the client to understand the scope and their revocation right, so the consent form must be treated as a conversation, not just a signature..
What consent cannot do
A Part 2 consent authorizes disclosure; it does not switch off other rules. It does not, by itself, satisfy a subpoena for SUD records — those still require a Part 2-specific court order, which is why sud records in court follow a different path than an ordinary chart 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.. It also cannot waive a clinician's separate legal duties, such as mandatory reporting, which operate independently of what the patient authorized 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
So when a request arrives, ask first what authority it carries. A valid consent covers the disclosure it describes and nothing more; a court demand for SUD records needs the special order; and a mandated report proceeds under its own statute regardless of consent. Keeping those lanes separate is what keeps a well-meant release from becoming an unlawful disclosure 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish..
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.Office of the Federal Register (2026). 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records. eCFR. link ✓The required content elements of a Part 2 consent, the revocation and expiration requirements, the minor-consent rule, the redisclosure-notice requirement, and the limits on what consent can accomplish.
- 2.U.S. Department of Health and Human Services (2024). Fact Sheet: 42 CFR Part 2 Final Rule. U.S. Department of Health and Human Services. linkThe 2024 single-consent-for-future-TPO change and the use of a general designation for recipients, summarized as what changed for the consent form.
- 3.Substance Abuse and Mental Health Services Administration (2024). Confidentiality of Substance Use Disorder (SUD) Patient Records. Federal Register. link ✓The operative text creating the patient's right to a list of TPO disclosures made under a general designation and the redisclosure-notice requirement as published in the final rule.
- 4.National Association of Social Workers (2021). NASW Code of Ethics. National Association of Social Workers. link ✓That informed consent is an ethics obligation requiring the client to understand the scope and their revocation right, so the consent form must be treated as a conversation, not just a signature.
https://www.gale.care/for-providers/pr-part2-consent-forms · 4 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.