Skip to main content

Nashville Addiction Recovery: SAMHSA Compliance Software

Published: Last updated: Reviewed: Sources: samhsa.gov tn.gov ecfr.gov tn.gov samhsa.gov

TLDR

Nashville addiction recovery nonprofits operate under 42 CFR Part 2 confidentiality, which is stricter than HIPAA and reshapes how patient records are stored, shared, and reported. SAMHSA pass-through through TDMHSAS for SOR and SUPTRS Block Grant adds detailed reporting and the SAMHSA performance management framework. Tennessee Recovery Court funding and Davidson County contracts layer on top, and TennCare billing adds the payor of last resort discipline when Medicaid-eligible clients receive grant-funded services. The system holding patient records must enforce Part 2 protections at the access control layer.

Nashville addiction recovery and behavioral health nonprofits operate under 42 CFR Part 2 - federal confidentiality for substance use disorder patient records that is stricter than HIPAA and reshapes how patient records are stored, shared, and reported. SAMHSA funding flows through Tennessee Department of Mental Health and Substance Abuse Services for State Opioid Response and the SUPTRS Block Grant. Tennessee Recovery Court funding and Davidson County contracts layer on top. TennCare billing for behavioral health adds payor of last resort discipline.

This article walks through 42 CFR Part 2 protections, the SAMHSA pass-through framework through TDMHSAS, the Recovery Court funding overlay, and the TennCare billing environment that shapes much of the operational reality for Nashville behavioral health providers.

42 CFR Part 2: stricter than HIPAA

42 CFR Part 2 protects substance use disorder records held by federally assisted Part 2 programs from disclosure without patient consent, with limited exceptions. Part 2 programs are programs that hold themselves out as providing substance use disorder services and that receive federal assistance directly or indirectly. Most Nashville addiction recovery providers are Part 2 programs.

The regulations were substantially revised in 2024 to align more closely with HIPAA but Part 2 remains stricter than HIPAA in core respects. Required consent for disclosure under 42 CFR 2.31 must be in writing and must include specific elements: name of patient, name of program disclosing, name of recipient, purpose of disclosure, scope of information disclosed, signature, and date. The 2024 revisions allow a single consent for treatment, payment, and operations purposes that is more flexible than prior rules but still requires the specific consent elements.

Disclosure exceptions include medical emergency under 42 CFR 2.51, qualified service organization arrangements under 42 CFR 2.11, audits and evaluations under 42 CFR 2.53 (with specific procedures for audits), scientific research under 42 CFR 2.52 (with IRB and other procedures), court order with notice and procedures under 42 CFR 2.61-2.67, and crimes on program premises or against program personnel under 42 CFR 2.12(c)(5).

The penalties for violation are significant. The 2020 CARES Act amendment to Part 2 raised civil and criminal penalties to align with HIPAA penalty levels, meaning Part 2 violations now carry meaningful financial exposure. The civil penalty structure under 42 USC 1320d-5 applies to Part 2 violations.

SAMHSA State Opioid Response through TDMHSAS

SAMHSA’s State Opioid Response (SOR) program is the largest federal opioid response funding stream and flows to states by formula adjusted for opioid mortality data. In Tennessee, TDMHSAS administers SOR funding and contracts with providers for prevention, treatment, recovery support services, and harm reduction (within state-permitted scope).

SOR contracts include detailed scope of work specifying target populations (typically opioid use disorder, with specific subpopulations including pregnant and postpartum women, criminal justice-involved individuals, and rural populations in some contracts), service definitions tied to SAMHSA’s evidence-based practices, performance measures, and client-level reporting. Tennessee uses contract structures with monthly invoicing tied to deliverables and unit-of-service definitions.

Performance data flows through Tennessee’s behavioral health data systems and feeds SAMHSA’s National Outcome Measures (NOMs) framework. NOMs cover abstinence from substance use, employment and education outcomes, criminal justice involvement, family and living conditions, and access to and retention in services. Provider performance against NOMs is evaluated in TDMHSAS contract review and informs subsequent funding decisions.

The 2024 Part 2 revisions affect how client-level data is shared between providers and TDMHSAS. Coordinated care models that involve information sharing must comply with consent and qualified service organization arrangements. Aggregate non-identifying data sharing is generally permissible; client-level identifying data sharing requires consent or another Part 2 exception.

SUPTRS Block Grant

The SUPTRS Block Grant - Substance Use Prevention, Treatment, and Recovery Services Block Grant - is SAMHSA’s primary formula grant to states for SUD prevention, treatment, and recovery. SUPTRS replaced the SABG (Substance Abuse Block Grant) name in recent years; the substantive program is largely continuous.

SUPTRS requires states to direct specified percentages to primary prevention (20%), maintain capacity reporting for intravenous drug use treatment, prioritize women with dependent children including pregnant women, conduct HIV early intervention services in designated states, and meet other set-asides. Tennessee’s SUPTRS plan submitted to SAMHSA describes how the state will use the funds, and TDMHSAS contracts with providers consistent with the plan.

Provider compliance includes service-level reporting tied to SUPTRS service categories, client-level data submission to TDMHSAS using state-required formats, eligibility determination consistent with SUPTRS rules (no income test for SUPTRS but priority population requirements apply), and adherence to eligible cost rules under SAMHSA’s Block Grant Application and Report instructions. The Uniform Guidance cost principles at 2 CFR 200 Subpart E govern eligible costs, and Single Audit obligations under Subpart F cover federal expenditures when total federal awards exceed $750,000.

Tennessee Recovery Courts and Davidson County Drug Court

Tennessee Recovery Courts are problem-solving courts addressing substance use disorder among defendants. Davidson County Drug Court is one of multiple Recovery Courts in Tennessee, with provider partners delivering treatment and recovery support services to participants under court supervision. Funding combines state appropriation, federal pass-through (Bureau of Justice Assistance Drug Court Discretionary Grant Program), and local funds.

Provider compliance includes coordinated care delivery with Drug Court staff, regular reporting to the Drug Court team on participant progress, and 42 CFR Part 2-compliant information sharing. Drug Court participation typically requires a 42 CFR 2.35 consent at intake - the criminal justice referral consent - valid for the duration of the participant’s Drug Court involvement, with specific limitations on redisclosure.

Drug Court reporting flows to court coordination systems with provider input. Client outcome data feeds Drug Court evaluation. The compliance posture must support both the operational reality of court-coordinated care and the substantive Part 2 protections - a tension that requires careful protocols and documented consent throughout.

TennCare and the payor of last resort

TennCare is Tennessee Medicaid, administered through managed care organizations (BlueCare, UnitedHealthcare, Wellpoint, and others depending on year). TennCare covers behavioral health services for eligible enrollees, including SUD treatment services. TennCare expansion in recent years has increased behavioral health coverage and made more grant-funded clients TennCare-eligible.

Most SAMHSA grants and many state contracts impose payor of last resort requirements - grant funds may not pay for services covered by another payor including TennCare. Operationally this requires verification at every encounter that no other payor covers the service for the eligible client, documentation of payor enrollment efforts for clients who appear eligible for TennCare, and billing protocols that bill TennCare first and grant funds only for the residual.

Failures here produce repayment of grant expenditures. The risk grows as TennCare coverage expands - clients who were grant-eligible last year may be TennCare-eligible this year, and grant-funded services that were appropriate last year may now require TennCare billing first.

Davidson County Behavioral Health and Metro Nashville

Davidson County Behavioral Health and the Metropolitan Government of Nashville and Davidson County add county and city contracts on top of state and federal sources. Metro funding may support specific populations or service categories not fully funded by SAMHSA or TDMHSAS. Compliance follows Metro contracting rules and Tennessee state retention rules for state-source records.

What a system has to handle

For Nashville addiction recovery nonprofits, the practical software requirements are: an EHR configured for 42 CFR Part 2 with separate access controls for Part 2-protected records, consent management with Part 2-compliant consent forms, audit logging of all Part 2 record access, and disclosure tracking for accounting; restricted fund accounting separating SAMHSA SOR, SUPTRS Block Grant, CMHSBG, Drug Court funding, Metro contracts, and TennCare revenue at the GL level; payor of last resort verification workflows tied to client encounters; reporting that supports TDMHSAS contract reporting, NOMs reporting, Drug Court coordination, TennCare billing reconciliation, and Single Audit; and document management with secure destruction protocols at end of retention.

Common behavioral health EHRs (CareLogic, MyEvolv, Procentive, Streamline, others) support Part 2 configuration with implementation effort. The grants management system orchestrates contract terms, deliverable status, and the financial system trail with bridges to clinical reporting at the aggregate level.

The SAMHSA grantees software shortlist is a starting point for system selection. The SAMHSA grants application guide covers the application side of the funding cycle, and the Nashville nonprofit startup guide covers the underlying corporate compliance posture.

The single thread running through Nashville addiction recovery compliance is that 42 CFR Part 2 protections are continuous and reshape every information-sharing decision. Combined with SAMHSA’s performance management framework and TDMHSAS contract reporting requirements, the systems that hold patient records and contract data either support all of these regimes simultaneously or produce findings in monitoring across multiple oversight bodies.

SAMHSA administers the State Opioid Response grant program and the Substance Use Prevention, Treatment, and Recovery Services Block Grant as the primary federal funding sources for state behavioral health systems

Source: Substance Abuse and Mental Health Services Administration

42 CFR Part 2 protects substance use disorder records held by federally assisted Part 2 programs from disclosure without patient consent, with required consent elements at 42 CFR 2.31 and limited exceptions

Source: 42 CFR Part 2 - Confidentiality of Substance Use Disorder Patient Records

Tennessee Department of Mental Health and Substance Abuse Services administers SAMHSA pass-through funding for State Opioid Response, SUPTRS Block Grant, and Community Mental Health Services Block Grant for Tennessee providers

Source: Tennessee Department of Mental Health and Substance Abuse Services

Nashville Addiction Recovery Compliance Cadence
ObligationCadenceWhere it lives
42 CFR Part 2 consent verificationPer disclosureEHR + consent management
TDMHSAS SOR contract reportingMonthlyTDMHSAS data system + GL
SUPTRS Block Grant client-level dataPer state scheduleState BH data system
Drug Court coordination reportingPer court scheduleCourt coordination + EHR with Part 2 controls
TennCare billing reconciliationContinuousBilling system + GL
Single Audit (federal threshold)AnnualAuditor + GL

Q&A

How should an EHR be configured for 42 CFR Part 2 compliance?

Behavioral health EHRs must support Part 2 protections at the access control level. Specific configuration includes: separate access controls for Part 2-protected records distinct from general medical records, consent management with Part 2-specific consent forms (containing the elements required by 42 CFR 2.31), audit logging of all access to Part 2 records, segmentation that prevents incidental disclosure to staff without need-to-know, and disclosure tracking for accounting purposes. Common behavioral health EHR platforms (CareLogic, MyEvolv, Procentive, Streamline, others) have Part 2 configurations; the implementation effort matters more than the platform choice. Organizations using general-purpose EHRs without Part 2 configuration are typically not Part 2-compliant.

Q&A

Can a Drug Court participant's information be shared with the court without consent?

No. 42 CFR Part 2 disclosures to the criminal justice system require either patient consent under 42 CFR 2.35 (with specific provisions for criminal justice referral) or court order under 42 CFR 2.61-2.67. The 2.35 consent for criminal justice referral has specific requirements including limitations on redisclosure. Drug Court participation typically requires a 2.35 consent at intake, valid for the duration of the participant's Drug Court involvement, with provisions for withdrawal of consent that affect Drug Court status. Sharing patient information with the court without proper consent or court order is a Part 2 violation regardless of Drug Court involvement.

Q&A

What is a qualified service organization (QSO) arrangement?

A qualified service organization arrangement under 42 CFR 2.11 allows a Part 2 program to share records with a QSO without patient consent for limited purposes - services like accounting, billing, data processing, and certain coordinated care services. The QSO arrangement requires a written agreement specifying that the QSO acknowledges Part 2 protections and will resist disclosure efforts. QSO arrangements are common for behavioral health billing services, EHR vendors, accounting firms, and certain coordinated care entities. The QSO arrangement is not a substitute for consent in disclosures beyond the QSO's defined services.

Free resource

Get the Nonprofit Grant Compliance Checklist

A practical checklist for post-award grant compliance: restricted funds, reporting cadence, audit prep, and common failure points. Delivered by email.

We'll email the resource and a short follow-up sequence. Unsubscribe any time.

Email is required because the download link is delivered by email, not on-page.

There are approximately 70 addiction recovery and behavioral health in nashville in the United States that could benefit from unified donor and grant management.

Key Pain Points for Addiction Recovery and Behavioral Health in Nashville

  • 42 CFR Part 2 federal confidentiality for substance use disorder records is stricter than HIPAA and requires patient consent for most disclosures with specific consent form requirements
  • SAMHSA State Opioid Response (SOR) funding flows through Tennessee Department of Mental Health and Substance Abuse Services with stringent client-level reporting
  • SUPTRS Block Grant (formerly SABG) compliance covers eligibility, services, and primary prevention requirements at the state level
  • Tennessee Recovery Court funding and Davidson County Drug Court contracts add courtroom-adjacent compliance with consent and documentation overlay
  • Medicaid (TennCare) billing for behavioral health adds payor of last resort discipline when Medicaid-eligible clients receive grant-funded services

Common Grant Types

  • SAMHSA State Opioid Response (SOR) and State Targeted Response (STR) grants
  • SUPTRS (Substance Use Prevention, Treatment, and Recovery Services) Block Grant
  • Community Mental Health Services Block Grant
  • First Responders-Comprehensive Addiction and Recovery Act (FR-CARA)
  • Drug-Free Communities (DFC) Support Program
  • Tennessee Department of Mental Health and Substance Abuse Services state-source funding

Compliance Notes

Nashville addiction recovery and behavioral health nonprofits operate under federal confidentiality at 42 CFR Part 2, which protects substance use disorder patient records held by Part 2 programs and is stricter than HIPAA. Disclosures generally require patient written consent meeting Part 2-specific requirements at 42 CFR 2.31, with limited exceptions for medical emergency, scientific research, audit, court order with proper procedure, and crimes on program premises. SAMHSA - the Substance Abuse and Mental Health Services Administration within HHS - administers federal funding through formula grants (SUPTRS Block Grant, formerly SABG; Community Mental Health Services Block Grant), discretionary grants (State Opioid Response, First Responders programs, others), and direct programs. Tennessee Department of Mental Health and Substance Abuse Services (TDMHSAS) is the State Single Authority for SAMHSA pass-through funding and contracts with providers. Davidson County Behavioral Health and the Metropolitan Government of Nashville and Davidson County add county and city contracts. Tennessee Recovery Courts and Davidson County Drug Court funding flow through Tennessee Department of Finance and Administration and TDMHSAS. TennCare (Tennessee Medicaid) covers behavioral health services for eligible enrollees through managed care organizations. The Uniform Guidance at 2 CFR 200 applies to federal awards with Single Audit triggering at $750,000.

GrantPipe pricing at a glance

Every plan includes a 1-month free trial, unlimited users, and access to the same source-of-truth feature catalog.

Enterprise

Complex grant-funded teams that need custom terms

$1,329/mo $15,948/yr billed annually
Contact sales

Frequently asked

Frequently Asked Questions

What does 42 CFR Part 2 actually prohibit and what does it require?
42 CFR Part 2 protects substance use disorder records held by federally assisted Part 2 programs from disclosure without patient consent, with limited exceptions. Part 2 programs include programs that hold themselves out as providing substance use disorder services and that receive federal assistance directly or indirectly. The regulations were substantially revised in 2024 to align more closely with HIPAA but Part 2 remains stricter than HIPAA in core respects. Required consent for disclosure under 42 CFR 2.31 must be in writing and must include specific elements: name of patient, name of program disclosing, name of recipient, purpose of disclosure, scope of information disclosed, signature, and date. Disclosure exceptions include medical emergency under 42 CFR 2.51, qualified service organization arrangements under 42 CFR 2.11, audits and evaluations under 42 CFR 2.53, scientific research under 42 CFR 2.52, court order with notice procedures under 42 CFR 2.61-2.67, and crimes on program premises or against program personnel under 42 CFR 2.12(c)(5).
How does SAMHSA State Opioid Response funding flow through Tennessee?
SAMHSA State Opioid Response (SOR) funding is awarded to states by formula adjusted for opioid mortality and overdose data. In Tennessee, TDMHSAS administers SOR funding and contracts with providers for prevention, treatment, recovery support services, and harm reduction (where state-permitted). SOR contracts include detailed scope of work with target populations, service definitions, performance measures, and client-level reporting requirements. Tennessee uses a contract structure with monthly invoicing tied to deliverables and unit-of-service definitions. Performance data and client-level data flow through state behavioral health data systems and feed SAMHSA's national performance measurement framework. The 2024 Part 2 revisions affect how client-level data is shared between providers and TDMHSAS - coordinated care models that involve information sharing must comply with consent and qualified service organization arrangements.
What is the SUPTRS Block Grant and what does it require?
The Substance Use Prevention, Treatment, and Recovery Services Block Grant (SUPTRS BG, formerly the Substance Abuse Block Grant or SABG) is SAMHSA's primary formula grant to states for substance use prevention, treatment, and recovery services. SUPTRS requires states to direct specified percentages to primary prevention (20%), women with dependent children including pregnant women priority, intravenous drug use treatment with capacity reporting, HIV early intervention services in designated states, and certain other set-asides. Tennessee's SUPTRS plan submitted to SAMHSA describes how the state will use the funds, and TDMHSAS contracts with providers consistent with the plan. Provider compliance includes service-level reporting, client-level data submission to TDMHSAS, and adherence to the eligible cost rules under SAMHSA's Block Grant Application and Report instructions. The Block Grant carries the same Uniform Guidance compliance as other federal awards.
How does Tennessee Recovery Court funding work?
Tennessee Recovery Courts are problem-solving courts addressing substance use disorder among defendants in lieu of or alongside conventional criminal sentencing. Davidson County Drug Court is one of multiple Recovery Courts in Tennessee. Funding flows through Tennessee Department of Finance and Administration and TDMHSAS, often combining state appropriation, federal pass-through (Bureau of Justice Assistance Drug Court Discretionary Grant Program), and local funds. Provider compliance includes coordinated care delivery with Drug Court staff, regular reporting to the Drug Court team, and 42 CFR Part 2-compliant information sharing - Drug Court participation typically requires specific consent for disclosure to court personnel under 42 CFR 2.35 and qualified service organization arrangements where applicable. Client outcome data flows to Drug Court evaluation systems.
What is the payor of last resort discipline for grant-funded behavioral health?
Most SAMHSA grants and many state contracts impose payor of last resort requirements similar to Ryan White - grant funds may not pay for services covered by another payor (TennCare, Medicare, private insurance, or other federal sources). Operationally this requires verification at every encounter that no other payor covers the service for the eligible client, documentation of payor enrollment efforts for clients who appear eligible for coverage, and billing protocols that bill other payors first. TennCare expansion of behavioral health coverage means more grant-funded clients are TennCare-eligible than in past years, increasing the operational discipline required to maintain payor of last resort compliance. Failures here can produce repayment of grant expenditures.
What records have to be retained and how does retention interact with Part 2?
Federal record retention under 2 CFR 200.334 is generally three years after final expenditure report. Tennessee Department of Mental Health licensing rules and clinical records retention rules under Tennessee state law extend retention for clinical records, typically ten years from last patient encounter for adults. 42 CFR Part 2 protections continue throughout retention - patient records remain confidential and disclosure rules continue to apply for as long as the records exist. Records destruction at the end of retention periods must follow secure destruction protocols with no informational residue. The systems holding records must support the longest applicable retention period and enforce Part 2 throughout.

Next step

See the workflow in GrantPipe.

Start a 1-month free trial and test donor, grant, restricted-fund, and compliance work in one place.

Start your 1-month free trial