Part 2 allows an identification object used on premises to be required for use or possession there. The allowance in 42 CFR 2.18 does not extend the requirement beyond the premises. Programs should still limit the object's data and visibility, offer accessible use, control replacement and return, and prevent the on-site item from becoming a required off-site SUD identifier.
Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.
Current rule checkpoint
Live 42 CFR 2.18 permits a person to require patients to use or carry cards or other identification objects on the premises of a Part 2 program. The same section bars required immediate possession of an SUD-identifying object while the patient is away from those premises. The HHS fact sheet identifies February 16, 2026 as the compliance date for the amended framework.
Define the premises boundary
The identification-card rule expressly preserves on-premises requirements. Document covered sites, entrances, internal zones, adjacent shared areas, parking, transport handoffs, remote services, take-home rules, and when the patient may surrender or securely store the item.
Use the least revealing design
Consider a neutral badge, temporary token, private check-in code, wristband, access card, or device credential. Limit visible text, color coding, diagnosis, program name, photograph, barcode contents, and screen notifications to the operational need.
Make access workable
Provide communication, vision, hearing, cognitive, mobility, sensory, language, and technology accommodations. Define staff help, proxy or companion handling, lost-card response, emergency access, override, complaint routing, and disposal.
Map premises and movement before designing the object
Identify each program site, unit, entrance, shared lobby, elevator, hallway, pharmacy, laboratory, residential area, vehicle, mobile unit, parking area, outdoor space, partner location, off-site group, and transport handoff. Record when a patient enters and leaves the Part 2 premises and where the item is issued, used, stored, collected, disabled, or destroyed.
Shared buildings and co-located services need particular review. A badge that is acceptable inside a controlled program area may reveal SUD status in a public lobby, street, cafeteria, shared clinic, rideshare, or journey home.
Use the least revealing effective design
Define the operational need, such as secure entry, medication workflow, meal access, patient matching, visitor control, or emergency response. Select minimum visible information and keep sensitive meaning inside an access-controlled system. Test text, color, logo, image, code, barcode, QR code, radio-frequency tag, issuer, screen, and scanner response.
Prefer neutral health-system design, temporary credentials, private scanning, random identifiers, correct-patient verification, and automatic expiration. Prevent an ordinary observer or unauthorized scanner from learning SUD status.
Control issuance, use, access, and return
Verify patient identity privately, explain purpose and boundary, record issuance, activate only needed permissions, and show where the item can be stored before leaving. Limit staff and system access to assigned functions. Log high-risk use, overrides, replacement, loss, copying, and administrative changes.
At exit, collect, disable, or allow secure on-site storage so the patient is not required to carry the identifying object off premises. Reconcile unreturned items, expired credentials, damaged objects, shared badges, and emergency departures. Destroy or sanitize retired objects according to the information and media involved.
Design for accessibility and clinical reality
Provide alternatives for visual, hearing, cognitive, mobility, dexterity, sensory, language, literacy, technology, and memory needs. Do not deny medication, entry, treatment, or safety support because a patient cannot wear, scan, remember, or manipulate one design.
Train frontline, clinical, security, transport, facilities, vendor, and after-hours staff. Give patients a private route to question the item, request an accommodation, report loss, or leave without carrying it.
Respond to loss and boundary failure
Disable lookup or access promptly, verify the reporter without exposing status, preserve system and physical evidence, assess what the object reveals, identify who may have seen or scanned it, and evaluate disclosure and breach duties. Replace through a private process.
If patients are routinely leaving with the item, repair exit collection, storage, signage, staffing, training, and system expiration. Test the corrected workflow at every affected location and shift.
Example
Twelve on-site credential workflows are tested. Nine define site boundary, neutral design, accessibility, issuance, use, return, loss, and after-hours handling; three instruct patients to keep the badge for travel home. Readiness is 9 of 12 workflows.
On-premises object checklist
- map each premises boundary, shared area, handoff, issue point, and exit;
- define the operational need and use the least revealing effective design;
- control identity, issuance, permission, scanning, override, storage, and return;
- collect, disable, sanitize, or destroy the object before off-site possession is required;
- provide accessible alternatives and protect entry, medication, treatment, and safety; and
- investigate loss or boundary failure and verify remediation.
The allowance is location-specific. It does not make an identifying object safe, necessary, or permissible to require beyond program premises.
Recheck the boundary after every site, service, transport, or workflow change.
Related terms
Sources
Take the next step with clarity
Whether you are finding care, growing as a clinician, or building a stronger ABA practice, Finni brings the people, tools, and support together to help you move forward.
Start or grow your ABA practice with Finni