Part 2 program-investigation court order

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

Live 42 CFR 2.66 authorizes a court-order route for an investigative agency with jurisdiction to investigate or prosecute a Part 2 program, record holder, or their employees or agents in a criminal or administrative matter. The application, findings, order, and later use must remain on that program-side purpose. Patient criminal use is expressly prohibited.

The subject is the program or holder side

42 CFR 2.66 covers a program, person holding records, or their employees or agents. Record the investigative agency, jurisdiction, subject, matter type, asserted misconduct, patient records sought as material evidence, filing, fictitious-name protection, sealing, and written consent if used.

Applications can enter through several routes

An agency may apply separately or in a pending civil or criminal action against the program or holder side. If the agency discovers Part 2 records in good faith during its work, special security, stop-use, timing, return, and destruction provisions apply.

The order requires good cause and narrow content

The court applies the minimum-scope content requirements in 42 CFR 2.64(e) and makes the 42 CFR 2.66 findings. Public documents and testimony remove patient identity. Information obtained through the order stays unavailable for patient criminal investigation or prosecution.

Classify the subject and agency

Record the investigative agency, asserted jurisdiction, criminal or administrative matter, program or holder subject, implicated employees or agents, alleged conduct, and requested evidence. Separate a program-side investigation from a patient investigation at intake. A shared case file, overlapping facts, or the presence of patient conduct does not erase that boundary.

Ask counsel to confirm the applicant can use this pathway and whether another Part 2 order provision governs any separate purpose.

Protect the application

Use a fictitious name for each patient and remove patient-identifying information unless the court has sealed the proceeding or the patient supplied qualifying written consent. Review pleadings, declarations, exhibits, file names, metadata, service records, quotations, dates, and contextual details. Preserve the exact sealing order or consent that supports an exception.

When the agency discovered records in good faith, document security, the immediate stop on use and disclosure, discovery timing, copy inventory, provenance, and the selected application, return, or destruction route.

Verify findings and order terms

Confirm the order satisfies section 2.64(e) minimum-scope requirements and the section 2.66 good-cause findings. A discovery-based application also requires the referenced section 2.3(b) conditions. Information obtained in violation of Part 2 cannot support an application for the same records.

Abstract essential records or testimony, need-based recipients, protective measures, public identity removal, permitted purpose, compulsory process, and any challenge route. Counsel should resolve missing or ambiguous terms before production.

Control production and downstream use

Map each produced field, document, attachment, and testimony topic to both the order and valid process. Apply secure delivery, access limits, disclosure logging, public-artifact review, and amendment controls. Tag records and derivatives so later teams can see the patient-use prohibition.

Monitor reports, referrals, testimony, cross-matter access, public filings, corrections, disposition, and closure. Any proposed patient-focused use requires an immediate stop and qualified Part 2 review.

Resolve mixed-purpose requests

Break a request into program-side facts, patient-identifying content, confidential communications, and material governed by another legal route. Record which authority supports each portion. If one instrument combines purposes, counsel should seek clarification, narrowing, or separate orders before production. Preserve the excluded categories and rationale so later responders do not release them through a follow-up request.

Example with order intake

Eight program-investigation orders are abstracted. Six identify agency jurisdiction, target, matter, findings, scope, identity removal, and patient-use prohibition; two omit material terms. Order completeness is 6 of 8 orders.

Owner controls

The 2024 final rule supplies current protections. Use immediate counsel intake, agency verification, legal holds, patient pseudonyms, order abstraction, scope mapping, public-document review, and access closure.

Program-investigation-order checklist

• verify agency jurisdiction, program-side subject, matter, and purpose;
• protect every patient identity in the application and related systems;
• document good-faith discovery controls and section 2.3(b) facts when applicable;
• confirm good cause, minimum scope, recipients, and protective measures;
• match production and testimony to the entered order and valid process; and
• monitor public identity removal, patient-use restrictions, amendments, and closure.

The order is a bounded program-side authority. It does not convert protected patient information into general investigative evidence.