Part 2 individual federal-payment example

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

The live example in 42 CFR 2.12(e)(2) states that if a federal court places a person in a private for-profit program and pays that program on the person's behalf, the patient's record is not covered unless the program itself receives federal assistance as defined in section 2.12(b). The example separates an individual transaction from program-level assistance. eCFR displays section 2.12 as current through August 20, 2026 and last amended August 13, 2026. The HHS fact sheet confirms the February 16, 2026 compliance date for the amended framework.

The example separates payment from program status

The current regulatory example focuses on whether the program itself receives defined federal assistance. Record the payer, court, placement, contract, payment recipient, patient, dates, program, services, and any separate federal relationship.

Search for every assistance route

Review federal operation or contract, Medicare participation, DEA-related authorization for SUD treatment, grants and pass-through funds, state or local federal receipts, deductible contributions, and tax-exempt status. One unsupported route should not end the complete inventory.

Other rules continue to matter

Verify HIPAA, state SUD privacy law, court confidentiality, contracts, patient consent, subpoenas, criminal-use limits from any received Part 2 records, professional duties, and record security separately.

Reconstruct the individual transaction

Record the court or federal actor, placement authority, patient, program, service, payment instrument, recipient, amount or covered period, contract, dates, and actual flow of funds. Distinguish payment on behalf of one person from an award, contract, license, authorization, tax status, or other relationship involving the program.

Do not infer the conclusion from a payer code or a patient's benefit status. Verify who paid whom, under which authority, for which service, during which period, and whether the transaction created or reflected a separate assistance route.

Run the full program-level inquiry

Define the exact program, sites, personnel group, SUD services, holding out, and dates. Search federal operation and contracts, Medicare participation, maintenance-treatment or withdrawal-management authorization, Controlled Substances Act registration used in SUD treatment, grants, pass-through and government-unit funding, deductible contributions, and tax-exempt status.

Document each route as supported, unsupported on reviewed evidence, or unresolved. An individual payment is neither automatic coverage nor a reason to stop searching. Preserve the evidence, reviewer, reasoning, controls, and next review.

Keep other duties separate

Even when the example indicates that Part 2 program coverage is not established, assess HIPAA, state SUD and mental-health privacy, court confidentiality, contracts, professional duties, security, retention, and records received from another Part 2 source. A recipient may remain restricted in how it uses a covered record obtained elsewhere.

Reassess after repeated placements, a new federal agreement, award, authorization, tax change, ownership transfer, site move, service launch, or payer relationship. Keep historical conclusions linked to the relevant record period.

Example

Eight patient-specific federal payments are reviewed. Three also connect to supported program-level federal assistance; five show only the individual transaction. Program-assistance confirmation is 3 of 8 payments.

Record both transaction and program outcomes

For each payment, state whether the individual transaction is supported, which program and service received it, and whether any program-level assistance route is separately supported, unsupported on reviewed evidence, or unresolved. Cite the payment and program instruments, covered dates, legal entities, reviewer, and next action.

Keep the two outcomes distinct in systems and legal analysis. A verified payment does not substitute for the program inquiry, and a program-level assistance finding should not be reduced to the payer status of one patient.

For unresolved programs, use an interim privacy classification while evidence is gathered. For a supported program, implement and sample required controls. For a program not shown to be federally assisted, preserve the search record and apply every other governing confidentiality rule.

Individual-payment review checklist

• document payer or court, placement, patient, program, service, payment, and dates;
• trace the legal and financial transaction to the actual recipient;
• define the program, holding out, personnel, sites, and SUD services;
• review all federal operation, authorization, funding, and tax routes separately;
• apply HIPAA, state law, court rules, contracts, and received-record restrictions; and
• preserve historical results and recheck after new federal or organizational relationships.

This example does not establish that every patient-specific federal payment is outside Part 2 or that the record is unregulated. Program-level assistance, transaction facts, other law, source records, and the proposed action require qualified privacy and legal review.