Part 2 knowing undercover-patient enrollment restriction

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

Live 42 CFR 2.17(a) bars a Part 2 program from knowingly enrolling an undercover agent or informant as a patient unless a court order under 42 CFR 2.67 specifically authorizes the placement. Section 2.17(b) prohibits use or disclosure of any information obtained by an undercover agent or informant to criminally investigate or prosecute a patient. The HHS fact sheet identifies February 16, 2026 as the compliance date for the amended framework.

Separate ordinary intake from known placement

The baseline restriction turns on knowing enrollment. Use normal identity, eligibility, consent, clinical, access, and safety workflows. Escalate only specific evidence of an undercover or informant placement to the authorized legal and privacy roles.

Order review protects the whole program

A qualifying § 2.67 order must specifically authorize placement and includes findings and safeguards directed to investigation of employees or agents. Record order authenticity, court, dates, scope, placement start, authorized contacts, access boundaries, patient-use limits, and end conditions.

Protect real patients and care

Limit internal awareness, preserve communication and emergency access, avoid stigmatizing checks, maintain clinical independence, monitor unusual access, secure records, document directives, and provide staff with a confidential escalation route. Counsel should direct interactions with the agency and court.

Keep ordinary intake ordinary

Use the same identity, eligibility, clinical screening, consent, payment, accessibility, and safety processes for ordinary applicants. Staff should not interrogate people about government work, reporting, advocacy, criminal history, demeanor, recording devices, or unusual questions to guess whether they are undercover.

Escalate only concrete information such as an agency disclosure, court document, authorized contact, or direct placement request. Continue urgent clinical and safety response within lawful limits while counsel determines the correct path.

Verify a placement-specific section 2.67 order

Authenticate court, case, judge, agency, program, investigation of employees or agents, patient-placement authorization, start, twelve-month maximum, authorized contacts, confidentiality safeguards, information limits, and any extension or amendment. Confirm the order specifically authorizes placement as a patient; an order for records or employee placement does not automatically do so.

Section 2.67's good-cause criteria consider alternative evidence, public interest, and potential injury to patients, relationships, and treatment. Program notice may be limited under stated conditions. Experienced counsel should handle notice, hearing, sealing, and agency communication.

Preserve clinical independence and safety

Clinical staff should make assessment, diagnosis, treatment, medication, level-of-care, discharge, and emergency decisions according to professional standards and the information legitimately available for care. Do not fabricate clinical records, provide sham treatment, divert resources, or expose real patients to facilitate the investigation.

Limit awareness to authorized roles. Use controlled scheduling, space, group, portal, communication, and record access. Avoid unnecessary contact with other patients, peer information, family sessions, or shared environments.

Enforce the patient-protection boundary

No information obtained by the undercover agent or informant may be used or disclosed to criminally investigate or prosecute any patient. Build technical, procedural, agency, testimony, and evidence-handling controls around that prohibition. Segregate real-patient information and monitor access, recording, download, messaging, and group participation.

Escalate any request to identify, question, monitor, charge, or build a case against a patient. A valid employee-investigation placement does not convert patients into investigative subjects.

End enrollment and reconcile care records

Track on-site placement date, order end, extension, clinical status, access, devices, notes, billing, agency communications, and closure plan. Counsel and clinical leadership should decide how to end the enrollment without compromising safety, patient confidentiality, or the court matter.

Remove access, recover credentials and devices, preserve required evidence, review logs, identify any contact with real patients, correct billing and operational records lawfully, document incidents, and verify that patient information did not migrate to prohibited uses.

Example

Eight escalated enrollment situations are reviewed. Six contain specific placement evidence, verified order status, approved contacts, access boundaries, confidentiality controls, and closure steps; two are rumors and return to ordinary intake. Controlled resolution is 8 of 8 situations.

Undercover-patient checklist

• use ordinary, nondiscriminatory intake and escalate only concrete placement evidence;
• authenticate patient-placement language, court, agency, scope, start, end, and safeguards;
• protect clinical independence, urgent care, shared spaces, and real patients;
• restrict scheduling, portal, records, groups, communication, devices, and internal awareness;
• block all patient criminal-investigation or prosecution use and disclosure; and
• close enrollment, access, billing, records, devices, contacts, and incidents deliberately.

Patient placement under section 2.67 is exceptional and tightly bounded. Unsupported suspicion should return to normal intake rather than becoming surveillance of a person seeking care.