Under federal and PA practice, what must a clinician obtain before disclosing a client's treatment records to a third party?

• A. An oral consent before disclosure.
• B. A court order only.
• C. No consent needed if the third party is a healthcare provider.
• D. A signed, informed consent that meets 42 CFR Part 2 requirements (and relevant PA regulations).

Answer: (D)

Confidentiality of addiction treatment records is tightly protected, so any disclosure to a third party typically requires a signed, informed consent that meets 42 CFR Part 2 requirements (and the related Pennsylvania regulations). This consent must be written and specific: it should name who will receive what information, for what purpose, and for how long the disclosure remains in effect. It must also explain the patient’s rights, including the ability to revoke the consent, and it must be signed and dated before any disclosure occurs.

This is stronger than general medical privacy rules and is designed to give individuals control over highly sensitive information. Oral consent isn’t sufficient under 42 CFR Part 2, and a court order alone does not authorize a broad disclosure—only very narrow, specific exceptions apply. Also, simply because the third party is another healthcare provider does not remove the need for a Part 2–compliant written consent.