News & Knowledge Update Your Notice of Privacy Practices: New Confidentiality Protection of SUD Patient Records Effective February 16, 2026, stricter federal protections for substance use disorder (SUD) records will apply. Healthcare organizations must update their Notice of Privacy Practices (NPP) to align with these changes, which include limits on use and disclosure of SUD records, more heightened confidentiality protections for SUD patients when HIPAA would otherwise allow disclosure, and restrictions on using SUD records in legal proceedings. This revised NPP template will serve as a tool to standardize how SUD confidentiality protections are communicated and applied across your organization and to inform patients and support compliance. To learn more, go to: eCFR :: 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records Curi’s risk mitigation resources and guidance are offered for educational and informational purposes only. This information is not medical or legal advice, does not replace independent professional judgment, does not constitute an endorsement of any kind, should not be deemed authoritative, and does not establish a standard of care in clinical settings or in courts of law. If you need legal advice, you should consult your independent/corporate counsel. We have found that using risk mitigation efforts can reduce malpractice risk; however, we do not make any guarantees that following these risk recommendations will prevent a complaint, claim, or suit from occurring, or mitigate the outcome(s) associated with any of them.