How PMHScribe Helps Providers Manage 42 CFR Part 2 Documentation

At PMHScribe, we support 42 CFR Part 2 workflows by helping providers control what is included in the EHR. The EHR remains the system of record, and the designated record set is where access, disclosure, and release-of-information decisions are handled. PMHScribe supports that process before the note reaches the chart.

AI-generated drafts stay separate from the EHR until the provider reviews, edits, and approves the final documentation. This gives providers more control over what becomes part of the medical record, what remains outside the chart, and how sensitive information is organized for future records requests.

That matters in behavioral health because one encounter can include medication management, psychotherapy, substance use history, disability-related discussion, payer documentation, and other sensitive clinical details. PMHScribe helps providers document with intention from the start, rather than creating an overinclusive note that may require manual redaction later.

Under HIPAA, the designated record set includes medical and billing records, certain health plan records, and records used by or for a covered entity to make decisions about individuals.¹ HHS has also explained that information imported into an electronic record system may become integrated into the designated record set.²

PMHScribe helps providers manage this upstream. By keeping draft documentation separate from the EHR and supporting separate note types, PMHScribe makes it easier to create cleaner documentation before anything is finalized into the chart.

How PMHScribe Helps With 42 CFR Part 2

PMHScribe supports 42 CFR Part 2 documentation workflows by helping providers control what enters the EHR and designated record set.

The EHR is where the official medical record is maintained. PMHScribe supports that process by keeping AI-generated drafts separate until the provider reviews and approves the final note. This helps providers decide what belongs in a general medical note, what should be documented separately, and what should be excluded from payer-facing, disability, prior authorization, or general release documentation when it is not needed.

For practices that manage substance use disorder information, this approach can reduce unnecessary disclosure, make records release easier, and lower the amount of manual redaction required later.

What 42 CFR Part 2 Means

42 CFR Part 2 is the federal confidentiality rule for certain substance use disorder (or SUD) patient records. It applies to records that identify a patient as having or having had a substance use disorder and that contain SUD information obtained by a federally assisted Part 2 program for diagnosis, treatment, or referral for treatment.³

Part 2 records can include more than progress notes. They may include diagnosis, treatment, referral, billing, email, voicemail, text, and other patient-identifying information created, received, or acquired by a Part 2 program.³

For documentation, the practical concern is not only whether SUD information exists. The concern is where it is documented, whether it is necessary for the specific note, whether it enters the EHR, and whether it may later be released.

42 CFR, Not 42 CRF

The correct term is 42 CFR Part 2, not 42 CRF. CFR stands for Code of Federal Regulations.

Some people search for “42 CRF compliant AI scribe” or “42CRF,” but the correct citation is 42 CFR Part 2.

What Changed in the 2024 42 CFR Part 2 Final Rule

HHS finalized major updates to 42 CFR Part 2 in 2024. The final rule was designed to align certain parts of Part 2 more closely with HIPAA and HITECH while preserving special protections for SUD records.⁴

One major change is consent. Part 2 now allows a single patient consent for future uses and disclosures for treatment, payment, and health care operations.⁴ HIPAA covered entities and business associates that receive Part 2 records under the appropriate consent may redisclose those records according to HIPAA rules, subject to important limitations.⁴

The rule also aligns breach notification requirements for Part 2 records with the HIPAA Breach Notification Rule.⁴ It adds patient rights related to accounting of disclosures and requesting restrictions.⁴

Another important clarification is that HHS does not require Part 2 data to be segregated or segmented.⁴ That does not mean separate documentation is unnecessary. It means the rule does not mandate segmentation. In practice, separate notes can still make release-of-information workflows cleaner and reduce unnecessary redaction.

The final rule also created a new category for SUD counseling notes. These notes are similar to HIPAA psychotherapy notes because they are maintained separately from the rest of the patient’s SUD treatment and medical record and generally require specific consent.⁴

The compliance date for the final rule is February 16, 2026.⁴

Why the Designated Record Set Matters

The designated record set is central to this issue.

The better question is not, “Is the AI scribe 42 CFR compliant?” The better question is, “How does the AI scribe help the provider control what becomes part of the EHR and designated record set?”

PMHScribe helps by keeping draft documentation outside the EHR until provider approval. The provider can then decide what should be included in the chart and what should be excluded from the finalized note.

Once information is finalized into the EHR, it may become part of the designated record set. Once it is part of the designated record set, it may be involved in access, disclosure, release, and redaction workflows.

That is why the draft stage matters. Cleaner documentation at the beginning can prevent avoidable redaction problems later.

HIPAA, Mental Health, and Psychotherapy Notes

HIPAA generally applies the Privacy Rule uniformly to protected health information. Mental health information does not automatically receive special protection simply because it is mental health information. The major exception is psychotherapy notes.⁵

Psychotherapy notes are notes recorded by a mental health professional that document or analyze the contents of a counseling conversation. To qualify as psychotherapy notes, they must be kept separate from the rest of the patient’s medical record.⁵

Psychotherapy notes do not include medication prescription and monitoring, counseling session start and stop times, treatment modality and frequency, clinical test results, diagnosis summaries, functional status, treatment plan, symptoms, prognosis, or progress to date.⁵

This distinction matters for AI scribe workflows. A medication management note is not the same thing as psychotherapy notes. A psychotherapy add-on note may need to be maintained separately to avoid it being mixed into the general medical record.

SUD Counseling Notes Under Part 2

The updated Part 2 rule created a similar concept for SUD counseling notes.

SUD counseling notes are notes recorded by a Part 2 program provider who is an SUD or mental health professional documenting or analyzing the contents of an SUD counseling session. These notes must be separated from the rest of the patient’s SUD and medical record.⁶

SUD counseling notes exclude medication prescription and monitoring, session start and stop times, treatment modality and frequency, clinical test results, diagnosis, functional status, treatment plan, symptoms, prognosis, and progress to date.⁶

Part 2 generally requires consent for use or disclosure of SUD counseling notes, with limited exceptions. A written consent for SUD counseling notes may only be combined with another written consent for SUD counseling notes.⁷

This is why separate note workflows are useful. If SUD counseling content is mixed into a general progress note, the organization may have to manually review and redact that note later. If the SUD counseling note is kept separate, the release workflow is easier to manage.

The Redaction Problem in Real Practice

The legal rule is only part of the issue. The daily operational problem is redaction.

A note that includes medication management, psychotherapy content, SUD assessment, risk history, family conflict, disability discussion, and payer-related medical necessity may be hard to release quickly. The records team has to determine what can be disclosed under the patient’s authorization and what must be withheld or redacted.

That takes time. It also creates risk. Overinclusive notes increase the chance that sensitive information will be released when it was not necessary for the request.

PMHScribe helps reduce that burden by supporting separate documentation before the note is entered into the EHR.

One Combined Note vs. Separate Notes

A combined note may feel convenient when the provider is documenting the visit. It can create problems later.

For example, a provider may document medication management, psychotherapy add-on content, and SUD assessment details in one note for the same date of service. Later, the patient authorizes the release of general medical records but does not authorize the release of psychotherapy notes or SUD counseling notes. The organization must then manually review and redact the combined note.

A cleaner approach is to create separate notes for separate purposes.

The provider may create one E/M medication management note and a separate psychotherapy add-on note for the same date of service. If the patient authorizes the release of medical records but not psychotherapy notes, the E/M note can be handled more efficiently. The psychotherapy note remains subject to its separate authorization rules.

The same concept can be used for SUD documentation. A general medication management note can be kept separate from an SUD assessment note. SUD counseling notes can be maintained separately from the broader SUD and medical record when appropriate.

That structure makes it easier to transfer authorized records while limiting unnecessary disclosure of protected SUD information.

How PMHScribe Helps With Prior Authorization and Disability Documentation

Payer and disability documentation often require clinical support. They do not always require a detailed SUD history.

PMHScribe can support purpose-specific templates for prior authorization notes, disability assessments, medication-necessity documentation, functional impairment summaries, treatment response summaries, and medical-necessity narratives.

A prior authorization note can focus on diagnosis, symptoms, functional impairment, previous treatment trials, medication response, side effects, and medical necessity without automatically including detailed SUD assessment content.

A disability assessment can focus on functional limitations, treatment history, prognosis, symptom severity, and work-related impairment without automatically including SUD details unless they are clinically necessary, authorized, and relevant to the request.

The goal is not to hide clinically necessary information. The goal is to avoid unnecessary disclosure of protected information when the recipient does not need it, and the patient has not authorized that level of disclosure.

Why Separate Notes Make Record Release Easier

Separate notes can speed up and improve the safety of release-of-information workflows.

If a patient consents to the release of general medical records, a separate E/M medication management note may be easier to send than a combined note that includes psychotherapy or SUD counseling content.

If a payer requests medical-necessity documentation, a purpose-built prior-authorization note may be easier to release than a broad clinical note that includes SUD history or psychotherapy analysis.

If a disability reviewer needs functional information, a disability assessment can be structured around function, impairment, treatment response, and prognosis without unnecessary disclosure of SUD details.

This approach reduces the need for manual redaction later.

California Authorization Forms Show the Practical Problem

Authorization forms often separate general medical records from more sensitive categories, such as mental health records, psychotherapy notes, and substance use disorder records. A California-focused sample HIPAA authorization form, for example, includes separate language for substance use disorder records and notes that these records are protected under federal confidentiality regulations.⁸

This is why documentation structure matters. If psychotherapy content, SUD assessment details, and general medication management are merged into a single note, the organization may later have to redact the record. If notes are separated by purpose from the beginning, the release process is easier to manage.

PMHScribe’s Documentation Approach

PMHScribe supports 42 CFR Part 2 documentation through a controlled workflow.

Drafts stay outside the EHR until the provider reviews and approves them. The provider controls what becomes final documentation. Separate note types can be used for E/M, psychotherapy add-on notes, SUD assessment, SUD counseling notes, prior authorization, and disability assessment.

Templates can also be built for a specific purpose. A payer note does not need to look like a therapy note. A disability assessment does not need to include every sensitive detail from the clinical encounter. A general medication management note does not need to include SUD counseling content if that content belongs elsewhere.

This structure helps reduce unnecessary disclosure. It also gives release teams cleaner records to work with when a patient, payer, attorney, disability reviewer, or outside provider requests documentation.

FAQ

How does PMHScribe help with 42 CFR Part 2?

PMHScribe helps providers manage 42 CFR Part 2 documentation by keeping AI-generated drafts separate from the EHR until the provider reviews and approves them. This gives the provider control over what enters the chart, what becomes part of the designated record set, and what may later be released with patient consent.

Is compliance with 42 CFR Part 2 handled in the EHR?

In practice, the EHR and designated record set are where compliance becomes operational for record access, disclosure, and release. PMHScribe supports that process by helping providers control what enters the EHR in the first place.

Is PMHScribe the system of record for 42 CFR Part 2 compliance?

No. The EHR, designated record set, patient consent, organizational Part 2 policies, and release-of-information workflow are where compliance is operationalized. PMHScribe supports that workflow by helping providers decide what documentation is finalized into the EHR.

Why does it matter that PMHScribe is separate from the EHR?

Keeping PMHScribe separate from the EHR prevents AI-generated drafts from automatically becoming part of the finalized chart. The provider decides what belongs in the medical record. That can reduce unnecessary disclosure and make records release easier to manage.

Does HIPAA give extra protection to all mental health information?

Generally, no. HIPAA usually applies the Privacy Rule uniformly to protected health information. The major exception is psychotherapy notes, which receive special protections when they are kept separate from the rest of the medical record.⁵

Are psychotherapy notes the same as progress notes?

No. Psychotherapy notes are separate notes documenting or analyzing the contents of a counseling conversation. They do not include medication monitoring, session times, treatment modality, test results, diagnosis, functional status, treatment plan, symptoms, prognosis, or progress to date.⁵

What are SUD counseling notes?

SUD counseling notes are separate notes by a Part 2 program provider documenting or analyzing the contents of an SUD counseling session. They are treated similarly to psychotherapy notes and generally require specific consent for use or disclosure.⁶

Why create separate notes for the same session?

Separate notes make release-of-information workflows cleaner. A provider may create one E/M medication management note and a separate psychotherapy add-on note for the same date of service. The same approach can be used to keep SUD assessment documentation separate from general medication management or payer-facing documentation.

Can PMHScribe help reduce redaction?

Yes. PMHScribe can help reduce redaction burden by supporting separate note types and purpose-specific templates. If sensitive information is not unnecessarily included in a general-purpose note, the release team has less to redact later.

Can prior authorization or disability notes exclude SUD information?

Yes, when SUD information is not necessary for the purpose of the note and is not authorized or required for disclosure. A prior authorization or disability assessment can be structured around symptoms, functional impairment, treatment response, medical necessity, and prognosis without automatically including detailed SUD information.

Bottom Line

PMHScribe supports 42 CFR Part 2 documentation by addressing the part of compliance that matters most in daily documentation: controlling what enters the EHR.

The EHR and designated record set are where records become operational for access, disclosure, and release-of-information purposes. PMHScribe supports that process by keeping drafts separate, giving providers control over final documentation, supporting separate note types, and allowing templates that limit unnecessary SUD disclosure.

For behavioral health practices, this means cleaner documentation, faster record release, less manual redaction, and lower risk of disclosing sensitive SUD, psychotherapy, or SUD counseling information beyond what is necessary.

This article is for general educational purposes and should not be treated as legal advice.