Part 2 subpoena-only request boundary

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

Live 42 CFR 2.13(b) expressly keeps Part 2 restrictions in force when a lawful holder has received a subpoena. The subpoena must be evaluated separately from a patient consent, qualifying Part 2 court order, or other permitted route. Current section 2.31(d) also keeps proceeding consent separate from consent for another purpose. eCFR displays Title 42 as current through August 20, 2026 and last amended August 13, 2026.

Subpoena and court-order status differ

Current 42 CFR 2.13 names a subpoena among justifications that leave restrictions in force. Capture issuer, jurisdiction, case, service, scope, patient, records, testimony, return date, objections, accompanying orders, and requested recipient.

Preservation can begin before disclosure authority

Apply a legal hold where appropriate, preserve audit logs and original records, identify custodians, suspend conflicting deletion, and secure the request. These steps protect evidence while counsel determines the response route.

Response ownership should be explicit

Name legal, privacy, records, clinical, security, and operational owners. Track communication with the requester, motions, objections, consent, court-order application, protective conditions, production set, testimony, delivery, and final closure.

Capture and authenticate the legal request

Record issuer, jurisdiction, court or agency, case, parties, patient target, service method and date, return date, records, testimony, custodian, recipient, purpose, and attachments. Verify authenticity through an independent channel and preserve the original envelope, electronic service, metadata, and later amendments.

Do not confirm patient or record status while asking the requester for missing process information. Calculate response and objection deadlines and assign legal, privacy, records, clinical, security, and operational owners immediately.

Separate preservation from permission

Apply a proportionate legal hold to authoritative records, messages, logs, attachments, and systems. Identify custodians, prevent routine deletion, restrict exports, preserve corrections, and protect ongoing care. A hold prevents loss; it does not authorize collection by every user or production to the requester.

Experienced Part 2 counsel should assess whether proceeding-specific patient consent, an authorizing Part 2 court order, another provision, objection, motion, narrowing, or protective condition applies. Match the authority to the patient, proceeding, target, records or testimony, purpose, recipient, dates, and scope.

Control production and testimony

For an approved response, collect from the authoritative source, limit date and document range, review metadata, exclude unrelated patients and services, redact or withhold as directed, verify the recipient, transmit securely, and keep a production index. Brief witnesses on the same supported scope.

After response, preserve receipt, transcript or testimony notes, objections, corrections, and retained copies. Remove temporary access when the matter ends and document disposition. A supplemental subpoena or new proposed use starts another review.

Example

Fourteen subpoenas reach the defined review date. Ten have complete service, scope, deadlines, hold, counsel decision, authority, and response evidence; four lack an accompanying Part 2 analysis. Readiness is 10 of 14 subpoenas.

Record a matter-specific outcome

Classify each subpoena as opposed, denied, narrowed, supported by proceeding consent, supported by an authorizing Part 2 order, resolved under another named provision, or pending. State issuer, matter, patient target, records or testimony, purpose, dates, recipient, decision-maker, restrictions, and expiration.

For pending matters, keep the hold active and set legal response milestones. Send only a safe procedural acknowledgment while authority is unresolved. Track attempts to cure service, obtain consent, seek an order, negotiate scope, or extend a deadline.

Before any response, compare the production set and witness scope with the final decision. Afterward, confirm receipt, preserve the production index, transcript or interview notes, objections, and corrections, then remove temporary access at closure.

Audit completed subpoenas for missed deadlines, overcollection, unsupported disclosure, lingering working files, and repeated requests. Record corrective owner, completion evidence, and follow-up date.

Retain the audit date, sample basis, reviewer, findings, and verified closure.

Archive securely.

Subpoena-response checklist

• preserve and authenticate issuer, service, matter, target, scope, attachments, and deadlines;
• apply a legal hold without treating preservation as disclosure authority;
• identify proceeding-specific consent, Part 2 order, objection, or other route;
• narrow records and testimony to the supported patient, purpose, dates, and recipient;
• secure and index production, receipt, objections, corrections, and testimony; and
• remove temporary access and re-review every supplement or new use.

A subpoena may impose duties under another law while remaining insufficient by itself under Part 2. Current Part 2, jurisdiction, process, record facts, patient target, and proposed response require experienced counsel.