HHS Program to Strengthen Confidentiality of SUD Patient Records
On Feb. 13, the U.S. Dept. of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a new program to implement and enforce federal requirements in statute and rule that protect the confidentiality of substance use disorder (SUD) patient records. The new program implements significant revisions to SUD confidentiality provisions under section 3221 of the Coronavirus Aid, Relief and Economic Security Act of 2020 (CARES Act) and its implementing regulations, 42 CFR Part 2 (Part 2). 

Beginning Feb. 16, civil enforcement mechanisms may be used for the first time to protect the confidentiality of SUD patient records under Part 2 programs, as OCR will begin accepting complaints alleging regulatory violations and notification of breaches of SUD patient records. Enforcement mechanisms may include OCR entering into resolution agreements, securing monetary settlements, obtaining commitments for corrective action, or imposing civil money penalties. For Part 2 programs, OCR has also developed a model patient notice and updated its model HIPAA Notices of Privacy Practices to provide notice to patients on how federal law protects the confidentiality of SUD patient records, which can be found at OCR’s Part 2 webpage. 

The strengthened protections were expected following the passage of the CARES Act and a Statement of Delegation of Authority issued Aug. 27, 2025 by HHS delegating authority to HHS OCR to administer and enforce Part 2 regulations, indicating that the federal government may more strictly enforce these requirements moving forward.

Staff contact: Lia Daniels

Early Bird Registration Ends Today for AHA Annual Membership Mtg.
Today, Feb. 23, is the last day to secure early bird registration for the American Hospital Association’s (AHA) Annual Membership Meeting in Washington, D.C., April 19-21. Registration for the AHA annual meeting may be completed here. 

Members of the IHA team will be in our nation’s capital at the same time, as we make our voices heard on Capitol Hill for IHA’s annual Federal Advocacy Day. Together, the AHA Annual Meeting and IHA Federal Advocacy Day activities provide a national forum for Illinois’ hospital and health system leaders to join their colleagues from across the state and nation to engage in policy and political discussions on the future of healthcare. We will also meet with members of the Illinois Congressional delegation to discuss key issues affecting your organizations.

IHA will host the following events for IHA members:

• Monday, April 20, 6 p.m. ET — Happy Hour and Private Dinner at Joe’s Seafood, Prime Steak & Stone Crab (750 15th Street NW)
• Tuesday, April 21, 11 a.m.-5 p.m. ET — Meetings on Capitol Hill

Please click here to complete the registration form for IHA’s events. Registration is only available online and there is no charge for IHA’s activities. 

Staff contact: Jennifer Koehler 

State Legislative Update
The Illinois General Assembly returns to session tomorrow, Feb. 24-Feb. 26. Both chambers have scheduled a number of committee hearings. The House hearing schedule can be found here and the Senate hearing schedule can be found here. March 13 is the deadline to pass substantive bills out of Senate committees, and March 27 is the House committee deadline.  

HHS Encourage Healthcare Sector to Address Online Vulnerability
The U.S. Dept. of Health and Human Services (HHS) recently issued a cybersecurity advisory bulletin alerting healthcare organizations to a serious cybersecurity issue involving certain BeyondTrust remote access software products. A newly identified vulnerability in some versions of BeyondTrust Remote Support and Privileged Remote Access tools could allow an unauthorized individual to gain control of a system if it has not been updated. Given the continued rise in cyberattacks targeting healthcare organizations, healthcare leaders are encouraged to promptly review the BeyondTrust Security Advisory and share the information with IT and cybersecurity teams to ensure appropriate review and action.