An investigative agency under Part 2 is a federal, state, Tribal, territorial, or local administrative, regulatory, supervisory, investigative, law-enforcement, or prosecutorial agency with jurisdiction over a Part 2 program or another person holding Part 2 records. Agency type alone is insufficient. The relevant jurisdiction, target, matter, official, authority, and requested action should be verified.
Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.
Current rule checkpoint
The HHS Part 2 final-rule fact sheet describes the 2024 investigative-agency safe-harbor changes and the continuing restrictions on proceedings against patients. The Federal Register final rule supplies the adopted text. For program or record-holder investigations, the live definition should be read with 42 CFR 2.66, which sets procedures and criteria for certain orders and for records discovered during an investigation.
Jurisdiction connects the agency to the subject
42 CFR 2.11 names several levels and functions of government. Record the agency, unit, official, legal authority, geographic reach, regulated subject, matter type, alleged conduct, and dates.
Each investigative step needs its own authority
A records demand, subpoena, undercover placement, program-side order, patient-side order, compliance inquiry, or public-health contact can follow different rules. Authenticate the request and route it to qualified Part 2 counsel.
Systems should preserve agency and matter identity
Track sender verification, service, jurisdiction evidence, authority, scope, records, recipients, deadlines, court filings, holds, production, denials, appeals, return or destruction, and annual-report status.
Verify jurisdiction for the exact matter
The definition includes several levels and functions of government, but the agency must have jurisdiction over the activities of the Part 2 program or other person holding the records. Record the agency, component, official, legal authority, geographic reach, regulated person, alleged conduct, proceeding type, and relevant dates.
Authenticate the official through an independent channel. A government domain, badge, letterhead, subpoena, or deadline can support intake without proving jurisdiction or authority for the requested action. Route the matter to experienced Part 2 counsel before confirming patient status or producing records.
Classify the requested action
A compliance inquiry, licensing review, subpoena, warrant, civil discovery request, criminal investigation, undercover placement, public-health contact, and court-order application can follow different rules. Identify the target, records, purpose, patient impact, legal instrument, court, deadlines, service method, and confidentiality terms. Do not process a Part 2 demand through an ordinary records queue.
Section 2.66 addresses specified use and disclosure of records to investigate or prosecute a Part 2 program or person holding records, including employees or agents. Its requirements are distinct from patient-directed orders and from section 2.67 placement authority.
Handle unexpectedly received records
Section 2.66 provides current steps when an investigative agency discovers in good faith that it received Part 2 records during a program or holder investigation. The rule calls for securing the records and stopping use and disclosure while the agency seeks the specified order or follows the return or destruction routes within the stated time limits.
The program or holder should preserve provenance, transmission facts, notices, communications, legal instruments, and any court action. Counsel should decide what the receiving agency and sending organization must do. Avoid asking ordinary staff to negotiate return, deletion, or continued use without legal direction.
Protect patient information and track the response
Use a restricted matter file with authenticated contacts, jurisdiction evidence, records requested, patient-identifying content, holds, orders, productions, denials, return or destruction evidence, and appeal status. Minimize patient identity in filenames, tickets, and calendars. Log every recipient and disclosure.
Record the final decision, authority, scope, redactions or removals, production method, retained copies, follow-up, and owner. If the matter changes target or purpose, stop and re-review rather than extending the earlier conclusion.
Example
Seven agency requests enter intake. Five have supported agency, unit, official, jurisdiction, target, and action; two rely on a badge or letterhead alone. Intake completeness is 5 of 7.
Investigative-agency intake checklist
- authenticate agency, component, official, jurisdiction, target, and legal instrument;
- distinguish program, holder, patient, placement, public-health, and other pathways;
- secure unexpectedly received Part 2 records and route them under current section 2.66;
- protect patient identity in filings, matter systems, productions, and communications;
- document orders, deadlines, decisions, recipients, return, destruction, and appeals; and
- involve experienced Part 2 counsel before confirmation, use, or disclosure.
The definition does not validate a demand or authorize production. Jurisdiction, procedure, court authority, patient protections, state law, and current Part 2 requirements need fact-specific legal review.
Close intake with a signed or otherwise attributable decision memo naming the authenticated requester, jurisdiction, target, pathway, legal instrument, records, patient protections, deadline, response, production or refusal evidence, retained copies, and appeal or follow-up date. If records were unexpectedly received, link the security, nonuse, court-order, return, or destruction evidence and the applicable clock. Preserve superseded decisions so later reviewers can see what facts and authority existed at each stage.
Related terms
Sources
- Electronic Code of Federal Regulations, 42 CFR 2.11, Definitions
- U.S. Department of Health and Human Services, 42 CFR Part 2 Final Rule Fact Sheet
- Electronic Code of Federal Regulations, 42 CFR 2.66, Program or Record-Holder Investigation Orders
- Federal Register, Confidentiality of Substance Use Disorder Patient Records, 2024 Final Rule
Take the next step with clarity
Whether you are finding care, growing as a clinician, or building a stronger ABA practice, Finni brings the people, tools, and support together to help you move forward.
Start or grow your ABA practice with Finni