Substance use treatment privacy

Find Someone Who Checked Into a Treatment Facility

If you believe someone you love has entered addiction treatment, the honest answer is that a treatment program usually may not tell you so — not even to a parent, not even to a spouse. That silence is not a runaround. It is a federal rule written on purpose, and it is one of the reasons people walk through the door at all. This page explains the rule in the regulation’s own words, tells you exactly what the patient can authorize, and sets out what a frightened family can do tonight instead.

Regulation quoted, not paraphrased No calls under a false identity Straight answer within 24 hours
42 CFR Part 2The federal rule that governs this question
1972 & 1974The two dates Part 2 coverage runs from, drug then alcohol
TwoLawful routes to acknowledging a named patient
ZeroTreatment confirmations this firm will ever supply

The short version, before you read any further

You almost certainly cannot confirm it, and nobody lawful can do it for you. A federally assisted substance use disorder program may acknowledge that a named person is a patient only with that person’s written consent or under a qualifying court order. The facility is also required to answer in a way that does not give the game away — it may not tell you that a specific person’s records are protected, because saying so would itself reveal that the person is a patient. What the patient can do is everything. One signed release naming you, and staff may speak to you the same day; the patient may also simply pick up the phone. If you fear for their life right now, stop reading and call 911. Emergency responders and clinicians have channels that a records search never will.

Why a treatment program will not say yes or no

A short walkthrough of the confidentiality rule, the four lawful routes around it, and the calls that actually help.

Watch first

What 42 CFR Part 2 actually says

Most articles on this subject blame HIPAA. The provision that decides your question is older, narrower and considerably stricter.

Records created by a federally assisted substance use disorder program are governed by Title 42, Part 2 of the Code of Federal Regulations, written under the confidentiality statute at 42 U.S.C. 290dd-2. Part 2 does not merely restrict what a program may hand over. It restricts whether the program may admit the person exists there at all. Section 2.13(c)(1) puts it this way: the presence of an identified patient in a facility “that is publicly identified as a place where only substance use disorder diagnosis, treatment, or referral for treatment is provided may be acknowledged only if the patient’s written consent is obtained… or if an authorizing court order is entered.” Two doors. That is the entire list.

The paragraph immediately after it is the one nobody quotes, and it is the reason a phone call tells you nothing. Under section 2.13(c)(2), any answer to an impermissible request “must be made in a way that will not affirmatively reveal that an identified individual has been, or is being, diagnosed or treated for a substance use disorder.” The regulation goes further and closes the obvious loophole: staff may hand an inquirer a copy of the rules and explain that they restrict disclosure generally, but the inquirer “may not be told affirmatively that the regulations restrict the disclosure of the records of an identified patient.” A program that follows the rule therefore answers every caller the same way, about people who are there and people who never were. There is no tell to listen for, and this page will not pretend otherwise.

Section 2.13(b) removes the arguments people bring next. The restrictions apply whether or not the program believes the person asking already has the information, has other ways of getting it, is a law enforcement officer or other government official, has produced a subpoena, or offers any other justification the rules do not recognize. Being right about your suspicion, being family, and being worried are all outside that list. You can read the operative section in full at the eCFR text of section 2.13.

One consequence worth stating plainly: this is a wall built against everyone, which means it is also built against people who mean the patient harm. The same clause that frustrates a worried mother is the clause that stops a violent ex-partner, a creditor or an employer from confirming a stay. It cannot be selectively lowered for the sympathetic caller without ceasing to work for the endangered one.

Why the protection exists at all

The regulation states its own purpose in a single sentence, and that sentence is the answer to “but I am his wife.”

Section 2.2(b)(2) explains that the rules are “intended to ensure that a patient receiving treatment for a substance use disorder in a part 2 program is not made more vulnerable by reason of the availability of their record than an individual with a substance use disorder who does not seek treatment.” Read it twice. The drafters were worried about a specific, ugly outcome: that entering treatment could itself become the thing that ruins a person — that the act of asking for help would generate a record which follows them into custody hearings, job applications, criminal cases and family arguments, while the person who never sought help stays invisible. Confidentiality is the price of getting people through the door.

The rest of Part 2 follows from that purpose. Section 2.3 attaches the penalties of sections 1176 and 1177 of the Social Security Act to violations and applies the enforcement machinery of 45 CFR part 160 to noncompliance, so the receptionist who confirms a name is not risking an awkward conversation — the program is risking sanction. Section 2.4 gives patients a route to complain to the Secretary and bars a program from retaliating against a patient for filing, or from making a waiver of that right a condition of treatment. Section 2.22 requires the program to tell the patient at admission that federal law protects their records, and to hand them a plain-language notice of the program’s duties. These are the mechanics of a promise the field considers load-bearing.

Section 2.20 handles the state-law question people ask next. Part 2 does not occupy the field: if state law forbids something Part 2 would permit, the stricter state rule wins. But no state law may authorize or compel a use or disclosure that Part 2 prohibits. There is no state you can call from, and no state the facility can be in, where the acknowledgment rule quietly relaxes. Read the purpose clause yourself at the eCFR text of section 2.2.

If the person you are worried about is elderly, cognitively impaired, or in a very different kind of facility, a different set of rules may apply to them — our guides to locating an adult living with dementia and to reaching a relative in a nursing home deal with those situations, which are not governed by the provisions on this page.

What counts as a Part 2 program — and what does not

“Rehab”, “detox”, “psych ward” and “hospital” are not interchangeable here, and the difference changes the answer.

Part 2 attaches to a program, defined in section 2.11 as one of three things: a person other than a general medical facility that holds itself out as providing, and provides, substance use disorder diagnosis, treatment or referral for treatment; an identified unit inside a general medical facility that does the same; or medical staff in a general medical facility whose primary function is that work and who are identified as providing it. The residential facility with a name and a sign is squarely inside. So is the identified addiction unit on the fourth floor of a general hospital.

The rule also has a start date, and it has two of them. Section 2.12(a)(1)(ii) reaches records containing substance use disorder information obtained by a federally assisted program after March 20, 1972, or alcohol use disorder information obtained by a federally assisted alcohol or substance use disorder program after May 13, 1974 — and information obtained before the relevant date is pulled in anyway where the program still holds it after that date as part of a treatment episode extending past it. Almost nothing a family is realistically asking about falls outside those dates. The pair is worth knowing about all the same, because the 1972 date is the one usually quoted on its own, and on its own it is half the clause.

It must also be federally assisted, which sounds narrow and is not. Section 2.12(b) counts a program conducted by any federal department or agency, one operating under any federal license, certification, registration or other authorization — participating in Medicare, being authorized for maintenance treatment or withdrawal management, or holding a Controlled Substances Act registration used in treating substance use disorders — one receiving federal financial assistance of any form, one run by a state or local unit that receives federal funds, and one assisted through tax-exempt status or the deductibility of contributions. Those limbs are written broadly, and a provider sits outside Part 2 only by falling outside every one of them — section 2.12(e)(2) offers the example of a private for-profit program that takes a federal court placement, and a federal payment made on that individual’s behalf, whose records are still not covered unless the program itself receives federal assistance.

The regulation supplies its own counter-example, and it is instructive. Section 2.12(e)(1) explains that Part 2 would not apply to emergency room personnel who refer a patient to intensive care for an apparent overdose, unless those personnel primarily provide substance use disorder services and are identified as doing so, or the emergency room has promoted itself to the community as such a provider. Coverage otherwise reaches broadly: treatment and rehabilitation programs, employee assistance programs, programs inside general hospitals, school-based programs and private practitioners who hold themselves out as providing this care. Section 2.12(c)(1) carves out the Department of Veterans Affairs, whose records of care under Title 38 are governed instead by 38 U.S.C. 7332 and the Secretary of Veterans Affairs’ own regulations — a different statute, not a weaker one. The full applicability section is at the eCFR text of section 2.12.

A general psychiatric hospital is a different animal. Where a facility is not publicly identified as existing only for substance use disorder care, section 2.13(c)(1) permits acknowledging a patient’s presence provided the acknowledgment does not reveal that the patient has a substance use disorder — which is why an inpatient mental health admission is handled under ordinary HIPAA rules, including a hospital’s patient directory, while the addiction unit down the corridor is not. That does not make a psychiatric admission public. It means a different, less absolute rule governs it, and a family asking about a psychiatric hospitalization is asking a genuinely different question from the one this page answers.

Every route, and what each one can produce

Four lawful channels exist. None of them is a search you can run, and one of them is us saying no.

RouteWhat it can produceWhat it cannot do
Public-records locate through this firmA current address and contact path assembled from lawfully available recordsWhat we doConfirm or deny a treatment stay, and never a call placed under a false identity
The patient’s written consent, section 2.31Exactly what the patient names on the form: presence, updates, family sessions, discharge planningAnything at all before they sign, and it is revocable in writing at any time
A message left with the facilityYour name and number reaching them if they are there and want itProduce a reply, or tell you whether the message was ever delivered
An authorizing court order, section 2.64Narrow, judge-limited disclosure on a good-cause finding, in a sealed or protected proceedingServe as a family-curiosity route; it needs a legally recognized interest in an actual proceeding
A subpoena standing aloneNothingOverride section 2.13(b), which applies regardless of the requester’s status or justification
Bona fide medical emergency, section 2.51Patient identifying information may go to medical personnel to the extent necessary to meet a genuine emergency where prior consent cannot be obtained, and the program must document the disclosure immediately. This is a channel between clinicians. It is not a way for a family member to obtain confirmation, and asking a program to treat your worry as an emergency does not create one.

The court-order route deserves the detail people skip. Section 2.64 requires the application to use a fictitious name for the patient, requires notice to the patient and to the record holder with a chance to respond, requires any hearing to be held in chambers or otherwise shielded, and permits an order only where the court finds that other ways of getting the information are unavailable or ineffective and that the public interest and need outweigh the injury to the patient, to the physician-patient relationship and to treatment services. An order that issues must be limited to the parts of the record essential to its objective. You can read the criteria at the eCFR text of section 2.64. That is a litigation tool with a judge in the middle of it, not a shortcut, and it is not something a public-records research firm can obtain on your behalf.

What a worried family can actually do tonight

Real options, in the order a person in genuine distress should work through them.

If you believe they are in immediate danger, call 911. Not a facility, not a search firm, not a directory. Emergency dispatch can send officers or paramedics to an address, and law enforcement can perform a welfare check that no records search substitutes for. If the fear is about suicide or a mental health crisis rather than a specific address, the 988 Suicide & Crisis Lifeline is staffed around the clock. Our note on requesting a welfare check covers how those requests are usually handled once you have an address to give.

Call the facility and leave a message rather than asking a question. The distinction matters. Asking “is she there” puts staff in a position where the only compliant answer is one that tells you nothing. Saying “if you have a patient by this name, please pass on that her mother called and this is my number” asks them to do something they may lawfully do if the patient consents. You will not learn whether the message landed. Sometimes, days later, the phone rings.

Use the federal resources built for the family, not the patient. The SAMHSA National Helpline at 1-800-662-HELP (4357) is free, confidential and open every day of the year, in English and Spanish, for individuals and family members facing mental health or substance use disorders; the TTY line is 1-800-487-4889 and the text option is a zip code to 435748. SAMHSA also runs a confidential treatment locator at findtreatment.gov. Understand what the locator is: a directory of facilities, not of patients. It will help you find help. It will never tell you where someone went.

Work the person’s own network before you work the records. The people most likely to know are the ones the patient told: a sponsor, a sibling, a close friend, an employer’s employee assistance contact, a probation officer if there is one, the partner who drove them. Very often one of them was told, and is simply waiting to be asked. Keep that list short, and keep it to people the patient would have chosen.

The safety decline, stated plainly. We will not accept a request to locate a person, or to establish where they are receiving care, where the purpose or the surrounding circumstances suggest the search would put that person at risk. A person in treatment is sometimes in treatment partly to get away from someone, and a residential program is sometimes the safest address they have ever had; handing that address to the wrong caller can be lethal. So we decline these matters outright when there is a protective order, a documented history of domestic violence, stalking, or harassment, when the subject participates in a state address confidentiality program, or when the account we are given does not hold together. We do not argue the point and we do not charge for the review. If you are the person at risk here, the right first call is a victim-services advocate, or the court that issued your protective order — not a research firm, and not a treatment program’s front desk. This decline costs us work and we keep it anyway.

Six things the internet tells you to try that do not work

Each of these appears in the advice currently ranking for this question. Each fails, and two of them cause harm.

Calling and interpreting the response

The premise is that a compliant program answers differently about a real patient. It does not — section 2.13(c)(2) requires an answer that does not affirmatively reveal patient status, and forbids telling you that a named person’s records are protected. There is nothing to decode, and we will not publish a script for trying.

Asking the health insurer

A widely shared guide recommends this. Section 2.12(d)(2)(i)(A) applies the restrictions on use and disclosure to third-party payers with regard to records disclosed to them by a program, so the payer is bound by the same rule the program is. A claims department is not a back door.

Sending a subpoena

Section 2.13(b) lists a subpoena among the things that do not lift the restriction. Subpart E court orders are a separate instrument with their own notice requirements and good-cause findings; a subpoena served on a program without one puts the program in the position of having to refuse it.

Assuming the HIPAA family exception applies

HIPAA lets a provider share limited information with family involved in a patient’s care in some circumstances. Part 2 has no equivalent family channel. Advice written about hospitals generally, then applied to an addiction program, is the single most common error in the material ranking for this search.

Searching the treatment locator for a person

The federal locator indexes facilities and the services they offer. It has no patient index, by design. It is the right tool for finding a program to enter, and no tool at all for finding a person who has entered one.

Canvassing everyone they know

This one sometimes works, and that is the problem. Ringing round a person’s colleagues, neighbors and church to ask which facility they checked into discloses their treatment to people they chose not to tell. Ask the two or three they would have told. Then stop.

How we handle a request like this

Four steps, and the first one is frequently the last.

1

We tell you what the answer will be

If the question is “is my son in that program”, we say so on the first call: no lawful research produces that, and we will not take money to try. Nobody has ever been charged for hearing this. You get it within 24 hours of asking, usually within the hour.

2

We separate the two questions

“Where is he receiving care” and “where does he live and how do I reach him” are different questions with different answers. The second is often the one that actually needs solving — for service of process, an estate matter, a guardianship filing or simply a letter — and it is answerable from public records.

3

We work records, never health data

Court indexes, real property and recorder filings, licensing and registration files, verified contact data supplied under a permissible purpose. No clinical records, no pharmacy data, no insurance claims, and no call to any facility under a false identity.

4

We hand over sourced findings

Each result names where it came from and when it was current, with a plain note on anything we could not confirm. What you do next — write, file, serve, or simply wait — is yours to choose, and we will say when we think waiting is the better call.

Our role here, and the lines we hold

On this subject the boundaries are not fine print. They are most of the service.

We are a skip-tracing and public-records research firm, and We have been doing records work since 2004 and we do not hold ourselves out as something we are not. We do not conduct surveillance, we do not obtain medical or clinical records, and we hold no access to anything non-public: no live location, no cell-site data, no account contents, no confidential treatment roster. Any firm that offers you one of those on this subject is either lying or breaking the law.

We work only under a permissible purpose, and we will ask you what yours is. Records that carry statutory access rules carry them for us too — the permissible-purpose framework of the Fair Credit Reporting Act at 15 U.S.C. 1681b, the motor-vehicle record restrictions of the Driver’s Privacy Protection Act, and the financial-privacy limits under Gramm-Leach-Bliley. If the stated purpose does not support the search, the search does not happen.

We do not pretext, and on this topic we want that in writing. Nobody from this firm will telephone a treatment program posing as a family member, a referring clinician, a pharmacy, an insurer or a patient, and nobody here will coach you to do it. Beyond being dishonest, it puts a program’s staff in the position of breaching a federal confidentiality rule they are personally relied upon to hold. We have turned down work over this and will again.

We are not a consumer reporting agency and we do not furnish consumer reports. Nothing we produce may be used for any purpose covered by the Fair Credit Reporting Act — that means no tenant screening, no employment or volunteer screening, no credit or insurance underwriting, no decisions about eligibility for a license or a government benefit, and no other consumer-report use. If your matter is one of those, the work belongs with an FCRA-compliant consumer reporting agency; we will say so and decline the file. A person’s treatment history is not screening data, and nothing we produce may be turned into it.

We never obtain private financial contents. Account balances, statements, transaction histories and card records are not public, and we do not source them. We also decline requests to locate a person in order to confront, surveil, harass or intimidate them, and requests where a treatment stay itself is the target of the inquiry.

None of this is legal advice. Everything above is general information about a federal regulation, accurate to the text as published in the current eCFR. Whether a court order under subpart E is available in your situation, whether a guardianship gives you standing, and what any of it means for your family are questions for a lawyer licensed where you are. If your need is a formal one — notice to a relative, service of process, or an estate — our page on locating next of kin for notification covers the records side of that work.

Who arrives at this page

Six situations, and the honest answer differs for each of them.

Parents and spouses

The largest group, and the one the rule frustrates most. The route is a signed release, not a search.

Personal representatives

Where a court has adjudicated a patient as lacking capacity, section 2.15 lets the personal representative give a required consent.

Parents of a minor

Section 2.14 turns on state law: where a minor may consent to treatment alone, only the minor may consent to disclosure.

Attorneys and process servers

Needing an address for service, not a diagnosis. That is a records question and we can take it.

Family-program staff

Counselors who have to explain the acknowledgment rule to a distraught relative several times a week.

People reconnecting later

Contact lost during a treatment episode years ago, and the search now is an ordinary one.

That last group is the one we help most often and the one nobody writes for. Months or years after a treatment episode, a family has simply lost the thread — the phone number died, the apartment changed, the mutual friend moved. Nothing about that search touches a clinical record; it is the ordinary work described in our guide to reaching an estranged family member, and the confidentiality rules on this page do not stand in its way at all.

What we promise on a question like this one

You will get a straight answer about what is and is not possible before you are asked for anything, and if the honest answer is that no lawful search reaches what you want, we say it and the conversation is free. Where there is real records work to do we scope it in writing, cite where every finding came from, and refund in full if we come back empty. We would rather lose the engagement than sell you a search we know cannot deliver.

People Locator Skip Tracing Investigation Team — public-records researchers. Regulatory text on this page was read directly from the eCFR and is current as of 2026; it is general information, not legal advice.

Questions families ask about this rule

Can a rehab tell me whether my husband is a patient there?

Generally no. If the facility is publicly identified as a place providing only substance use disorder diagnosis, treatment or referral, section 2.13(c)(1) permits acknowledging a named patient’s presence only with that patient’s written consent or under an authorizing court order. Marriage is not one of the exceptions, and neither is being a parent, an adult child or the person paying the bill.

Why will they not even say “I cannot confirm that about this person”?

Because that sentence is itself a confirmation. Section 2.13(c)(2) requires any answer to an impermissible request to be given in a way that will not affirmatively reveal that an identified individual has been or is being treated, and it specifically allows staff to explain the rules in general while forbidding them from telling you that the regulations restrict the records of a named patient. A program that says it about the right person and not the wrong one has disclosed everything.

Does HIPAA not let providers talk to family?

HIPAA permits limited sharing with family involved in a patient’s care in defined circumstances. 42 CFR Part 2 contains no comparable family channel, and where both apply the stricter rule controls. Most guidance you will find on this question was written about hospitals in general and does not survive contact with a Part 2 program.

Is a psychiatric hospital covered by the same rule?

Not necessarily. Part 2 reaches a program that holds itself out as providing substance use disorder services, an identified unit inside a general medical facility that does so, or identified staff whose primary function is that work. A general psychiatric hospital that is not publicly identified as a substance use disorder facility may acknowledge a patient’s presence so long as doing so does not reveal a substance use disorder, which puts it under ordinary HIPAA handling instead. The distinction turns on how the facility holds itself out, not on what the patient is being treated for.

What exactly should be on a release so the program can talk to me?

Section 2.31 lists the required elements: the patient’s name; who is authorized to make the disclosure; a specific description of the information; the named recipient or class of recipients; the purpose, where “at the request of the patient” suffices if the patient initiates it; a statement of the right to revoke and how; an expiration date or event; the patient’s signature; and the date signed. The patient completes it with the program — you cannot fill one out on their behalf.

Can I get a court order?

Sometimes, and it is harder than it sounds. Under section 2.64 an applicant needs a legally recognized interest in a civil, administrative or legislative proceeding, must refer to the patient by a fictitious name, must give the patient and the record holder notice and a chance to respond, and must persuade the court that other means are unavailable or ineffective and that the public interest outweighs the injury to the patient and to the treatment relationship. Any order must be limited to the essential parts of the record. Talk to a lawyer; this is not something a research firm can pursue for you.

What if I genuinely think they could die tonight?

Call 911, and give the address you believe they are at. Section 2.51 does permit disclosure of patient identifying information to medical personnel to meet a bona fide medical emergency where prior written consent cannot be obtained, with immediate documentation in the record — but that is a clinician-to-clinician channel, not a family inquiry route. The 988 Suicide and Crisis Lifeline handles crisis calls around the clock, and the SAMHSA National Helpline on 1-800-662-HELP (4357) is open to family members every day of the year.

Will you find out for me if I pay you?

No. We do not confirm treatment status, we do not call facilities under a false identity, and we will not take a fee to attempt either. What we can do is locate a current address and contact path from public and lawfully available records where you have a permissible purpose — for service of process, a probate matter, a guardianship filing or simply a letter. We will tell you which of those you actually have within 24 hours, at no charge, before anything is billed.

Tell us what you are trying to do, and we will tell you if it is possible

Some of the calls we take on this subject end with us explaining that the door is closed and why it should be. Others turn out to be an ordinary address problem wearing a frightening coat. Either way you will know which one you have before you spend anything — send us the situation and you will have a straight answer the same day.

Start a records locate