If SUD records are used for fundraising, a clear, conspicuous opportunity for individuals to opt out of communications.
A statement informing individuals they can file complaints with the entity or the Secretary of HHS without fear of retaliation.
A statement that the entity is required by law to maintain the privacy of PHI and provide notice of its legal duties. Hotas_zip
Clear information on the individual's rights, including the right to inspect, copy, amend, or request restrictions on their PHI.
As of early 2026, proper documentation must address updated compliance regulations, particularly concerning Substance Use Disorder (SUD) records and enhanced privacy rules: If SUD records are used for fundraising, a
Notice of Privacy Practices for Protected Health Information - HHS.gov
A description of how the entity may use and disclose protected health information (PHI) for treatment, payment, and health care operations. Clear information on the individual's rights, including the
Specific language clarifying that SUD records (Part 2 records) require written authorization for disclosure, even for treatment or payment purposes in many cases.