TLDR
Nashville addiction recovery nonprofits operate under 42 CFR Part 2 confidentiality, which is stricter than HIPAA and reshapes how patient records are stored, shared, and reported. SAMHSA pass-through through TDMHSAS for SOR and SUPTRS Block Grant adds detailed reporting and the SAMHSA performance management framework. Tennessee Recovery Court funding and Davidson County contracts layer on top, and TennCare billing adds the payor of last resort discipline when Medicaid-eligible clients receive grant-funded services. The system holding patient records must enforce Part 2 protections at the access control layer.
Nashville addiction recovery and behavioral health nonprofits operate under 42 CFR Part 2 - federal confidentiality for substance use disorder patient records that is stricter than HIPAA and reshapes how patient records are stored, shared, and reported. SAMHSA funding flows through Tennessee Department of Mental Health and Substance Abuse Services for State Opioid Response and the SUPTRS Block Grant. Tennessee Recovery Court funding and Davidson County contracts layer on top. TennCare billing for behavioral health adds payor of last resort discipline.
This article walks through 42 CFR Part 2 protections, the SAMHSA pass-through framework through TDMHSAS, the Recovery Court funding overlay, and the TennCare billing environment that shapes much of the operational reality for Nashville behavioral health providers.
42 CFR Part 2: stricter than HIPAA
42 CFR Part 2 protects substance use disorder records held by federally assisted Part 2 programs from disclosure without patient consent, with limited exceptions. Part 2 programs are programs that hold themselves out as providing substance use disorder services and that receive federal assistance directly or indirectly. Most Nashville addiction recovery providers are Part 2 programs.
The regulations were substantially revised in 2024 to align more closely with HIPAA but Part 2 remains stricter than HIPAA in core respects. Required consent for disclosure under 42 CFR 2.31 must be in writing and must include specific elements: name of patient, name of program disclosing, name of recipient, purpose of disclosure, scope of information disclosed, signature, and date. The 2024 revisions allow a single consent for treatment, payment, and operations purposes that is more flexible than prior rules but still requires the specific consent elements.
Disclosure exceptions include medical emergency under 42 CFR 2.51, qualified service organization arrangements under 42 CFR 2.11, audits and evaluations under 42 CFR 2.53 (with specific procedures for audits), scientific research under 42 CFR 2.52 (with IRB and other procedures), court order with notice and procedures under 42 CFR 2.61-2.67, and crimes on program premises or against program personnel under 42 CFR 2.12(c)(5).
The penalties for violation are significant. The 2020 CARES Act amendment to Part 2 raised civil and criminal penalties to align with HIPAA penalty levels, meaning Part 2 violations now carry meaningful financial exposure. The civil penalty structure under 42 USC 1320d-5 applies to Part 2 violations.
SAMHSA State Opioid Response through TDMHSAS
SAMHSA’s State Opioid Response (SOR) program is the largest federal opioid response funding stream and flows to states by formula adjusted for opioid mortality data. In Tennessee, TDMHSAS administers SOR funding and contracts with providers for prevention, treatment, recovery support services, and harm reduction (within state-permitted scope).
SOR contracts include detailed scope of work specifying target populations (typically opioid use disorder, with specific subpopulations including pregnant and postpartum women, criminal justice-involved individuals, and rural populations in some contracts), service definitions tied to SAMHSA’s evidence-based practices, performance measures, and client-level reporting. Tennessee uses contract structures with monthly invoicing tied to deliverables and unit-of-service definitions.
Performance data flows through Tennessee’s behavioral health data systems and feeds SAMHSA’s National Outcome Measures (NOMs) framework. NOMs cover abstinence from substance use, employment and education outcomes, criminal justice involvement, family and living conditions, and access to and retention in services. Provider performance against NOMs is evaluated in TDMHSAS contract review and informs subsequent funding decisions.
The 2024 Part 2 revisions affect how client-level data is shared between providers and TDMHSAS. Coordinated care models that involve information sharing must comply with consent and qualified service organization arrangements. Aggregate non-identifying data sharing is generally permissible; client-level identifying data sharing requires consent or another Part 2 exception.
SUPTRS Block Grant
The SUPTRS Block Grant - Substance Use Prevention, Treatment, and Recovery Services Block Grant - is SAMHSA’s primary formula grant to states for SUD prevention, treatment, and recovery. SUPTRS replaced the SABG (Substance Abuse Block Grant) name in recent years; the substantive program is largely continuous.
SUPTRS requires states to direct specified percentages to primary prevention (20%), maintain capacity reporting for intravenous drug use treatment, prioritize women with dependent children including pregnant women, conduct HIV early intervention services in designated states, and meet other set-asides. Tennessee’s SUPTRS plan submitted to SAMHSA describes how the state will use the funds, and TDMHSAS contracts with providers consistent with the plan.
Provider compliance includes service-level reporting tied to SUPTRS service categories, client-level data submission to TDMHSAS using state-required formats, eligibility determination consistent with SUPTRS rules (no income test for SUPTRS but priority population requirements apply), and adherence to eligible cost rules under SAMHSA’s Block Grant Application and Report instructions. The Uniform Guidance cost principles at 2 CFR 200 Subpart E govern eligible costs, and Single Audit obligations under Subpart F cover federal expenditures when total federal awards exceed $750,000.
Tennessee Recovery Courts and Davidson County Drug Court
Tennessee Recovery Courts are problem-solving courts addressing substance use disorder among defendants. Davidson County Drug Court is one of multiple Recovery Courts in Tennessee, with provider partners delivering treatment and recovery support services to participants under court supervision. Funding combines state appropriation, federal pass-through (Bureau of Justice Assistance Drug Court Discretionary Grant Program), and local funds.
Provider compliance includes coordinated care delivery with Drug Court staff, regular reporting to the Drug Court team on participant progress, and 42 CFR Part 2-compliant information sharing. Drug Court participation typically requires a 42 CFR 2.35 consent at intake - the criminal justice referral consent - valid for the duration of the participant’s Drug Court involvement, with specific limitations on redisclosure.
Drug Court reporting flows to court coordination systems with provider input. Client outcome data feeds Drug Court evaluation. The compliance posture must support both the operational reality of court-coordinated care and the substantive Part 2 protections - a tension that requires careful protocols and documented consent throughout.
TennCare and the payor of last resort
TennCare is Tennessee Medicaid, administered through managed care organizations (BlueCare, UnitedHealthcare, Wellpoint, and others depending on year). TennCare covers behavioral health services for eligible enrollees, including SUD treatment services. TennCare expansion in recent years has increased behavioral health coverage and made more grant-funded clients TennCare-eligible.
Most SAMHSA grants and many state contracts impose payor of last resort requirements - grant funds may not pay for services covered by another payor including TennCare. Operationally this requires verification at every encounter that no other payor covers the service for the eligible client, documentation of payor enrollment efforts for clients who appear eligible for TennCare, and billing protocols that bill TennCare first and grant funds only for the residual.
Failures here produce repayment of grant expenditures. The risk grows as TennCare coverage expands - clients who were grant-eligible last year may be TennCare-eligible this year, and grant-funded services that were appropriate last year may now require TennCare billing first.
Davidson County Behavioral Health and Metro Nashville
Davidson County Behavioral Health and the Metropolitan Government of Nashville and Davidson County add county and city contracts on top of state and federal sources. Metro funding may support specific populations or service categories not fully funded by SAMHSA or TDMHSAS. Compliance follows Metro contracting rules and Tennessee state retention rules for state-source records.
What a system has to handle
For Nashville addiction recovery nonprofits, the practical software requirements are: an EHR configured for 42 CFR Part 2 with separate access controls for Part 2-protected records, consent management with Part 2-compliant consent forms, audit logging of all Part 2 record access, and disclosure tracking for accounting; restricted fund accounting separating SAMHSA SOR, SUPTRS Block Grant, CMHSBG, Drug Court funding, Metro contracts, and TennCare revenue at the GL level; payor of last resort verification workflows tied to client encounters; reporting that supports TDMHSAS contract reporting, NOMs reporting, Drug Court coordination, TennCare billing reconciliation, and Single Audit; and document management with secure destruction protocols at end of retention.
Common behavioral health EHRs (CareLogic, MyEvolv, Procentive, Streamline, others) support Part 2 configuration with implementation effort. The grants management system orchestrates contract terms, deliverable status, and the financial system trail with bridges to clinical reporting at the aggregate level.
The SAMHSA grantees software shortlist is a starting point for system selection. The SAMHSA grants application guide covers the application side of the funding cycle, and the Nashville nonprofit startup guide covers the underlying corporate compliance posture.
The single thread running through Nashville addiction recovery compliance is that 42 CFR Part 2 protections are continuous and reshape every information-sharing decision. Combined with SAMHSA’s performance management framework and TDMHSAS contract reporting requirements, the systems that hold patient records and contract data either support all of these regimes simultaneously or produce findings in monitoring across multiple oversight bodies.
Source: Substance Abuse and Mental Health Services Administration
Source: 42 CFR Part 2 - Confidentiality of Substance Use Disorder Patient Records
Source: Tennessee Department of Mental Health and Substance Abuse Services
| Obligation | Cadence | Where it lives |
|---|---|---|
| 42 CFR Part 2 consent verification | Per disclosure | EHR + consent management |
| TDMHSAS SOR contract reporting | Monthly | TDMHSAS data system + GL |
| SUPTRS Block Grant client-level data | Per state schedule | State BH data system |
| Drug Court coordination reporting | Per court schedule | Court coordination + EHR with Part 2 controls |
| TennCare billing reconciliation | Continuous | Billing system + GL |
| Single Audit (federal threshold) | Annual | Auditor + GL |
Q&A
How should an EHR be configured for 42 CFR Part 2 compliance?
Behavioral health EHRs must support Part 2 protections at the access control level. Specific configuration includes: separate access controls for Part 2-protected records distinct from general medical records, consent management with Part 2-specific consent forms (containing the elements required by 42 CFR 2.31), audit logging of all access to Part 2 records, segmentation that prevents incidental disclosure to staff without need-to-know, and disclosure tracking for accounting purposes. Common behavioral health EHR platforms (CareLogic, MyEvolv, Procentive, Streamline, others) have Part 2 configurations; the implementation effort matters more than the platform choice. Organizations using general-purpose EHRs without Part 2 configuration are typically not Part 2-compliant.
Q&A
Can a Drug Court participant's information be shared with the court without consent?
No. 42 CFR Part 2 disclosures to the criminal justice system require either patient consent under 42 CFR 2.35 (with specific provisions for criminal justice referral) or court order under 42 CFR 2.61-2.67. The 2.35 consent for criminal justice referral has specific requirements including limitations on redisclosure. Drug Court participation typically requires a 2.35 consent at intake, valid for the duration of the participant's Drug Court involvement, with provisions for withdrawal of consent that affect Drug Court status. Sharing patient information with the court without proper consent or court order is a Part 2 violation regardless of Drug Court involvement.
Q&A
What is a qualified service organization (QSO) arrangement?
A qualified service organization arrangement under 42 CFR 2.11 allows a Part 2 program to share records with a QSO without patient consent for limited purposes - services like accounting, billing, data processing, and certain coordinated care services. The QSO arrangement requires a written agreement specifying that the QSO acknowledges Part 2 protections and will resist disclosure efforts. QSO arrangements are common for behavioral health billing services, EHR vendors, accounting firms, and certain coordinated care entities. The QSO arrangement is not a substitute for consent in disclosures beyond the QSO's defined services.
Free resource
Get the Nonprofit Grant Compliance Checklist
A practical checklist for post-award grant compliance: restricted funds, reporting cadence, audit prep, and common failure points. Delivered by email.
There are approximately 70 addiction recovery and behavioral health in nashville in the United States that could benefit from unified donor and grant management.
Key Pain Points for Addiction Recovery and Behavioral Health in Nashville
- ● 42 CFR Part 2 federal confidentiality for substance use disorder records is stricter than HIPAA and requires patient consent for most disclosures with specific consent form requirements
- ● SAMHSA State Opioid Response (SOR) funding flows through Tennessee Department of Mental Health and Substance Abuse Services with stringent client-level reporting
- ● SUPTRS Block Grant (formerly SABG) compliance covers eligibility, services, and primary prevention requirements at the state level
- ● Tennessee Recovery Court funding and Davidson County Drug Court contracts add courtroom-adjacent compliance with consent and documentation overlay
- ● Medicaid (TennCare) billing for behavioral health adds payor of last resort discipline when Medicaid-eligible clients receive grant-funded services
Common Grant Types
- ✓ SAMHSA State Opioid Response (SOR) and State Targeted Response (STR) grants
- ✓ SUPTRS (Substance Use Prevention, Treatment, and Recovery Services) Block Grant
- ✓ Community Mental Health Services Block Grant
- ✓ First Responders-Comprehensive Addiction and Recovery Act (FR-CARA)
- ✓ Drug-Free Communities (DFC) Support Program
- ✓ Tennessee Department of Mental Health and Substance Abuse Services state-source funding
Compliance Notes
Nashville addiction recovery and behavioral health nonprofits operate under federal confidentiality at 42 CFR Part 2, which protects substance use disorder patient records held by Part 2 programs and is stricter than HIPAA. Disclosures generally require patient written consent meeting Part 2-specific requirements at 42 CFR 2.31, with limited exceptions for medical emergency, scientific research, audit, court order with proper procedure, and crimes on program premises. SAMHSA - the Substance Abuse and Mental Health Services Administration within HHS - administers federal funding through formula grants (SUPTRS Block Grant, formerly SABG; Community Mental Health Services Block Grant), discretionary grants (State Opioid Response, First Responders programs, others), and direct programs. Tennessee Department of Mental Health and Substance Abuse Services (TDMHSAS) is the State Single Authority for SAMHSA pass-through funding and contracts with providers. Davidson County Behavioral Health and the Metropolitan Government of Nashville and Davidson County add county and city contracts. Tennessee Recovery Courts and Davidson County Drug Court funding flow through Tennessee Department of Finance and Administration and TDMHSAS. TennCare (Tennessee Medicaid) covers behavioral health services for eligible enrollees through managed care organizations. The Uniform Guidance at 2 CFR 200 applies to federal awards with Single Audit triggering at $750,000.
GrantPipe pricing at a glance
Every plan includes a 1-month free trial, unlimited users, and access to the same source-of-truth feature catalog.
Starter
Replacing disconnected grant and donor spreadsheets
Growth
Active reporting teams with recurring deadlines
Audit-Ready
Teams preparing reviewer evidence and accounting outputs
Enterprise
Complex grant-funded teams that need custom terms
Frequently asked