Part 2 federal-authorization assistance route

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

The live 42 CFR 2.12 covers a federal license, certification, registration, or other authorization. Its examples include Medicare participation, authorization to conduct maintenance treatment or withdrawal management, and Controlled Substances Act registration to the extent the controlled substance is used in SUD treatment. eCFR displays the provision as current through August 20, 2026 and last amended August 13, 2026. The HHS fact sheet confirms the February 16, 2026 compliance date for the amended Part 2 framework.

The route includes several authorization forms

42 CFR 2.12 provides examples without limiting the category to them. Record the issuing agency, authorization type, identifier, holder, site, covered service, issue and expiration dates, status, restrictions, and source.

The authorization must connect to the program

Map the authorized entity or practitioner to the person, unit, or personnel group providing and holding itself out as providing SUD services. Avoid transferring a parent's or affiliate's authorization by assumption.

Registration scope matters

For Controlled Substances Act registration, the rule specifies the extent to which the controlled substance is used in SUD treatment. Preserve service, medication, registration, site, practitioner, and program evidence.

Build an authorization inventory

List each federal instrument with issuing department or agency, authorization type, identifier, legal holder, practitioner if applicable, site, covered service, effective and expiration dates, conditions, status, and authoritative verification source. Preserve the certificate or agency record and the date it was checked.

Include active, suspended, surrendered, expired, transferred, pending, and replaced instruments. A current credential cannot establish the configuration that existed when older information was obtained, and an old certificate cannot establish current status.

Connect the instrument to the Part 2 program

Map the authorized entity, practitioner, location, and service to the exact program or personnel group that holds itself out as providing and actually provides SUD diagnosis, treatment, or referral. Verify that an affiliate's, parent's, facility's, or individual practitioner's authorization belongs in the analysis rather than copying it across an organizational chart.

For Controlled Substances Act registration, document the controlled substance and how it is used in SUD treatment because the regulatory example is limited to that extent. For Medicare participation or a treatment authorization, preserve the supported program, service, participation period, termination history, and agency evidence.

Reconcile sources and changes

Compare internal credential files with the issuing agency's authoritative record, contracts, rosters, site information, and actual service configuration. Record discrepancies, owner, interim restriction, due date, and resolution. Do not treat a vendor credentialing screen or payer directory as the only source of federal status.

Review after renewal, lapse, change of address, ownership transition, practitioner departure, new service, change in medication, enrollment change, suspension, or surrender. Update privacy classification, record inventories, consent and release processes, vendor instructions, training, and incident escalation without erasing historical evidence.

Example

Ten authorizations are assessed. Eight connect issuer, holder, site, service, status, and program; two omit the service relationship. Completeness is 8 of 10.

Record a defensible determination

Give each instrument a dated outcome: route supported for the named program and period, route unsupported on the reviewed evidence, or further review required. Cite the authoritative record, explain the program connection, list conflicting evidence, identify other assistance routes under review, and name the person accountable for resolution. Absence of this authorization route alone does not establish that Part 2 is inapplicable.

For a supported determination, map affected records and operational controls. Confirm notices, consent and release workflows, access, vendors, payer processes, incident response, legal requests, retention, and patient rights. Test a recent disclosure or access request to ensure the configured program, site, and dates match the determination.

For a lapse or scope change, preserve the old authorization and conclusion. Decide separately how records obtained during the earlier period are handled, and prevent a credentialing update from silently changing their classification.

Federal-authorization review checklist

• inventory the federal issuer, instrument, holder, site, service, status, and dates;
• verify the authorization through an authoritative current source;
• connect it to the exact Part 2 program and actual service configuration;
• document the SUD-treatment link for relevant Controlled Substances Act registration;
• retain prior instruments, discrepancies, decisions, owners, and review dates; and
• recheck after renewal, lapse, relocation, ownership, practitioner, or service changes.

An authorization route does not classify every record or permit a disclosure. Current Part 2 provisions, HIPAA, state law, professional and licensing rules, organizational facts, and other federal-assistance routes require qualified review.