Part 2 federal-operation assistance route

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

The live 42 CFR 2.12 includes a program conducted in whole or in part, directly, by contract, or otherwise by a federal department or agency. eCFR displays the provision as current through August 20, 2026 and last amended August 13, 2026. The HHS final-rule fact sheet confirms the February 16, 2026 compliance date for the 2024 amendments. Current contracts and operational facts matter more than the label placed on an organization.

Conduct can be direct or contractual

42 CFR 2.12 names whole or partial operation and several forms of federal involvement. Review contracts, grants with operational terms, interagency agreements, facility arrangements, staffing, statements of work, oversight, and program governance.

Classify the service configuration

Federal involvement alone does not identify the precise Part 2 program. Map entity, site, unit, personnel, public holding out, actual SUD diagnosis, treatment or referral, federal actor, and dates.

Changes require reassessment

Track contract start and end, renewal, novation, scope changes, subcontracting, facility moves, ownership, service lines, staffing, federal control, and closeout. Preserve prior status for older records.

Identify the federal conduct instrument

Find the contract, interagency agreement, memorandum, task order, facility arrangement, personnel assignment, or other source that describes the federal role. Record federal department or agency, instrument number, parties, program or site, work performed, start and end dates, amendments, renewals, termination, and authoritative repository.

Then map the instrument to the exact person, unit, or personnel group that holds itself out as providing and actually provides SUD diagnosis, treatment, or referral. Federal involvement with a parent entity, landlord, unrelated service line, or shared vendor does not by itself show how the particular program is conducted.

Examine substance, not procurement vocabulary

Describe what the federal actor actually conducts or causes to be conducted. Review governance, staffing, facilities, clinical or administrative direction, performance requirements, oversight, data systems, reporting, and control. Separate an operational relationship from a purchase, reimbursement, grant, authorization, or tax route, while recording every route that may apply.

Ask counsel to resolve mixed arrangements, subcontracts, pass-through relationships, and facts that do not fit the organization's shorthand. The rule includes whole or partial conduct and is not confined to direct federal ownership.

Maintain a dated assistance record

Create a register showing the program configuration, federal actor, conduct, evidence, covered period, service locations, accountable owner, review date, and conclusion. Link amendments rather than overwriting prior entries. Historical status may control records obtained during an earlier configuration.

Trigger review when an agreement starts, renews, expires, is novated, changes scope, adds a site, changes subcontractors, or moves personnel or systems. Confirm that privacy notices, access controls, release workflows, incident plans, contracts, and training follow the current classification.

Example

Eight operating arrangements are reviewed. Six connect a current federal instrument to the exact SUD program and dates; two cite agency involvement generally. Completeness is 6 of 8.

Convert the finding into controls

For each arrangement, record one dated result: federal-operation route supported, route not supported on current evidence, or unresolved. State the evidence relied on, program and period covered, accountable reviewer, next review date, and any other assistance route that still needs evaluation. An unresolved federal-operation route should not be recorded as a conclusion that Part 2 is inapplicable.

Translate a supported result into specific work. Identify the affected record inventory, privacy notice, consent and disclosure paths, workforce access, business relationships, incident response, retention, legal-process routing, and patient-right workflows. Assign each change to an owner and verify implementation with a sample transaction.

When an instrument ends, preserve the historical classification and decide how records obtained during the covered period will be managed. Closing a contract does not erase the program's earlier status or answer how those records may now be used or disclosed.

Federal-operation review checklist

• obtain the operative agreement or other evidence of federal conduct;
• identify the federal actor, exact program, site, services, and covered dates;
• describe the operational activity instead of relying on a contract label;
• distinguish parent, affiliate, vendor, funding, authorization, and tax relationships;
• preserve amendments, closeout evidence, prior configurations, and the reviewer decision; and
• reassess controls after scope, ownership, location, staffing, or system changes.

This route does not decide whether every record belongs to the program or authorize any particular use or disclosure. Current Part 2 requirements, other assistance routes, HIPAA, state law, contracts, and the facts need experienced privacy and legal review.