Part 2: OCR announced earlier this week that they want to revise "Part 2" to more closely align with HIPAA. For those who don't know, 42 CFR Part 2 is a federal regulation that prohibits the disclosure of information regarding patients at federally-supported substance abuse treatment facilities. It's a remnant of an era when the government was concerned that drug addicts would not seek treatment due to fear that their presence at a drug treatment facility would be used as proof of drug crimes. Part 2 serves as sort of a super-HIPAA: with few exceptions, no data can be released about a patient without the patient's consent.
I haven't yet read what OCR's proposing, but I'll let you know what I think when I do.