SUD records in court: the court-order requirement above a subpoena

Can SUD treatment records be subpoenaed?

No — a subpoena by itself cannot force the release of substance-use-disorder treatment records that fall under 42 CFR Part 2. Part 2 sets a higher bar than HIPAA: the records may be disclosed only with the patient's written consent or under a court order that satisfies Part 2's specific findings, entered after the patient has had notice and an opportunity to respond 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.That 42 CFR Part 2 permits disclosure of SUD records only with patient consent or a qualifying court order, and imposes redisclosure limits and program-scope definitions.. HIPAA alone would let a covered entity answer many subpoenas with satisfactory assurances of notice or a protective order, but for Part 2 records that ordinary HIPAA route is not enough 2Ref 2HHS Office for Civil Rights (2026).Court Orders and Subpoenas.HIPAA's distinction between a court order and a bare subpoena, and the satisfactory-assurances route that Part 2 records do not qualify for..

The practical rule: an attorney-issued or clerk-issued subpoena, standing alone, is not a court order. Confirm what you actually received and whether Part 2 covers you before producing a single page.

Why a subpoena isn't enough: Part 2's court-order requirement

Part 2 requires a court to make specific findings before it can order disclosure of these records. The court must weigh the public interest and the need for disclosure against the injury to the patient, to the treatment relationship, and to the program, and it must limit the order to the essential information while sealing or otherwise protecting the rest 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.That 42 CFR Part 2 permits disclosure of SUD records only with patient consent or a qualifying court order, and imposes redisclosure limits and program-scope definitions.. A routine subpoena skips all of that — which is exactly why Part 2 does not treat it as sufficient.

That protection follows the information even after it leaves you. Part 2 records carry redisclosure limits, so a party who lawfully receives them cannot freely pass them along; the notice against redisclosure travels with the disclosure and binds the recipient.

Subpoena, order, warrant: what each authorizes

The three instruments are not interchangeable, and matching your response to the right one is the whole task. A subpoena is a demand for documents or testimony, often issued by an attorney without a judge's review. A court order is a judge's directive, and only a Part 2-qualifying order can compel Part 2 records. A search warrant, based on probable cause, is a distinct criminal-process instrument. Reading the subpoena, order, warrant on its face — who signed it, what it commands — tells you which rulebook applies 2Ref 2HHS Office for Civil Rights (2026).Court Orders and Subpoenas.HIPAA's distinction between a court order and a bare subpoena, and the satisfactory-assurances route that Part 2 records do not qualify for..

When a bare subpoena arrives for protected records, the correct move is not to produce and not to ignore, but to respond that the records are protected and to state what authority would be required to release them. Silence risks a contempt exposure; producing risks a Part 2 violation. A written, timely objection threads both.

Does Part 2 apply to your practice?

Part 2 does not cover every clinician who ever discusses substance use. It applies to federally assisted programs and to practitioners whose primary function is providing SUD diagnosis, treatment, or referral and who hold themselves out as doing so. A general therapist who addresses substance use as part of broader mental-health care is often not a Part 2 program, while a clinician marketed specifically for addiction treatment usually is 1Ref 1Office of the Federal Register (2026).42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records.That 42 CFR Part 2 permits disclosure of SUD records only with patient consent or a qualifying court order, and imposes redisclosure limits and program-scope definitions.. The determination controls everything downstream, so make it deliberately.

If you conclude Part 2 and the private practice you run do not intersect, HIPAA's ordinary subpoena rules govern instead — still cautious, but without the court-order overlay. If they do intersect, the higher bar applies to every demand for the records, whoever sends it.

The 2024 final rule: aligned with HIPAA, but the court-order bar stayed

The 2024 Part 2 final rule, with compliance required as of February 2026, aligned much of Part 2 with HIPAA — it allows a single patient consent for future uses across treatment, payment, and operations, harmonized breach-notification and penalties, and eased some redisclosure friction 3Ref 3Substance Abuse and Mental Health Services Administration (2024).Confidentiality of Substance Use Disorder (SUD) Patient Records.The 2024 Part 2 final rule's single-consent-for-future-TPO change and its alignment of penalties and breach notification with HIPAA.. What it did not do is lower the protection against compelled legal disclosure: the court-order requirement for using these records in proceedings survived the rewrite 4Ref 4U.S. Department of Health and Human Services (2024).Fact Sheet: 42 CFR Part 2 Final Rule.HHS's summary of what the 2024 final rule changed and its February 2026 compliance date, including that court-ordered-disclosure protections remain..

So the alignment helps your day-to-day consent workflow without changing the answer to a subpoena. Part 2, aligned with HIPAA on consent, still stands above HIPAA when a court is asked to pry the records loose. Read the current regulation rather than a pre-2024 summary, because several mechanics around consent and enforcement did change.

How to respond when a subpoena lands

Work a fixed sequence so a stressful envelope does not become a disclosure error. First, do not produce anything on receipt and do not destroy anything. Second, confirm whether Part 2 covers the records. Third, if it does, respond that the records are protected and that release requires the patient's Part 2 consent — the part 2 consent form with its required elements — or a qualifying court order. Fourth, notify the patient so they can object or move to quash. Your ethics code reinforces this: you assert the client's confidentiality on their behalf and disclose only what is compelled 5Ref 5American Psychological Association (2017).Ethical Principles of Psychologists and Code of Conduct.The clinician's ethical duty to assert client confidentiality and to disclose only what is compelled by legal process..

• Distinguish the notes. Your separately kept psychotherapy notes carry their own protection and are not part of the ordinary record, so treat any demand that reaches them with added caution 6Ref 6HHS Office for Civil Rights (2026).Does HIPAA provide extra protections for mental health information compared with other health information?.That psychotherapy notes are kept separate with heightened protection distinct from the general record when a demand reaches them..
• Chart for court. Keep your response factual and dated; court-aware charting throughout the file — facts and quotes, not speculation — is what protects both you and the client if the matter is litigated.

The patient's own request is a different door

Do not confuse a third party's subpoena with the patient's own right of access. A patient can request their own records directly, and HIPAA generally requires you to provide them within 30 days (with one possible 30-day extension), in the form requested where producible, for a reasonable cost-based fee — though your separately kept psychotherapy notes are excluded from that access right 7Ref 7HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.The patient's own right to access records within 30 days for a reasonable cost-based fee, with psychotherapy notes excluded, as distinct from a third-party subpoena.. That is the patient acting on their own behalf, not a channel for an opposing party to obtain protected records.

A requesting attorney sometimes asks the patient to sign a records release rather than fight the court-order requirement. A valid patient consent can authorize disclosure — but read what it actually authorizes, confirm it meets Part 2's consent elements when Part 2 applies, and disclose only what the consent covers.